$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft File: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft (raw, json) Hash identifier: 4tSI2VIaFZkzPq60rz1qsM8j0lmxduPzUgRt8cIa/3o= Subject key identifier: AD:B1:74:81:D1:C6:52:54:23:A9:70:8C:2F:C7:44:E3:D5:50:6F:0F Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Certificate serial: 68F5D55C9A1C718AC242E9FC5566B65369006B7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:11:16 +0000 Manifest this update: Thu 17 Sep 2026 02:06:16 +0000 Manifest next update: Fri 18 Sep 2026 04:48:16 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=) 2: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: 2LkAU6HFzcD+uMMYceohJGiq/c/yqAWAinLHczse+RU=) 3: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl (hash: y8evm7VrGbOuYISaAj7bkoQ32WJV5NmBDfBVbTaRq5o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f5:d5:5c:9a:1c:71:8a:c2:42:e9:fc:55:66:b6:53:69:00:6b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Validity Not Before: Sep 17 02:06:16 2026 GMT Not After : Sep 18 04:48:16 2026 GMT Subject: CN=ADB17481D1C6525423A9708C2FC744E3D5506F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:cb:b9:85:28:ae:71:11:2d:c9:7a:b8:ed: 77:5f:8e:69:79:35:53:4b:16:b7:12:a6:a1:c7:fd: 83:19:df:10:72:e0:50:08:4e:2f:ae:d4:85:b6:74: 0b:1f:21:b9:01:b2:b1:b5:b3:78:13:d9:09:90:dc: d8:ea:48:41:82:bf:4e:df:5e:19:de:5a:22:5f:46: dc:9c:2a:42:0a:82:da:b6:c9:ff:a5:b1:cc:ae:67: cf:67:3c:06:1e:b7:69:59:94:62:7a:6e:5f:32:ee: 60:ed:9a:3e:c7:35:5a:f0:4c:3f:2e:0b:79:d2:0d: 5e:53:55:e3:76:15:f3:aa:96:91:f4:12:5b:4d:12: 5a:85:10:da:27:63:2c:ab:68:32:2d:44:4b:62:3b: 0a:c5:8d:27:30:33:45:20:b9:d0:3e:1f:5c:5d:61: ca:77:00:49:84:03:2b:c0:7e:d8:48:5e:87:7e:db: cf:af:22:c6:1a:23:de:59:1a:cd:f2:3b:2b:90:63: 0b:b1:c8:04:30:28:8d:03:e7:7a:64:cc:37:25:f3: bf:e6:0d:3d:8c:03:6b:a7:35:93:e2:8a:d0:cf:70: d5:7c:30:53:99:21:ac:89:ca:74:6b:86:3a:e2:7f: 4d:d8:3a:b7:5b:d9:65:e8:d6:d2:73:d6:e0:da:a5: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B1:74:81:D1:C6:52:54:23:A9:70:8C:2F:C7:44:E3:D5:50:6F:0F X509v3 Authority Key Identifier: keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b7:f1:81:e1:57:0c:bd:d6:9c:52:d5:05:f7:fa:2e:56:b0: f4:5f:e1:3c:4c:a6:d9:d0:1a:74:bb:d6:1c:33:ca:f5:64:61: 1a:41:97:b4:a0:f4:00:20:ff:4f:3d:a2:ee:1a:8f:e9:e2:66: e2:b8:0c:b3:9c:cb:f7:f3:91:5f:78:5e:a1:48:c3:80:71:6f: 74:ed:3a:c5:cc:d3:9b:2f:85:85:62:7c:8f:71:b1:41:5e:21: 5a:44:77:2c:58:44:8c:7d:ea:63:90:df:12:66:ee:73:c1:d3: 26:ab:77:c3:8a:7d:29:e4:d8:21:11:4f:9b:f5:23:34:f8:c6: 94:d7:54:ac:41:13:7e:c5:26:f2:a2:71:93:06:43:89:55:be: 31:62:b6:47:ad:2d:13:64:68:3f:58:d4:6b:8b:da:60:73:96: 30:2c:00:5f:eb:94:ec:b6:6a:cf:31:e5:d6:83:1b:08:f1:51: 0c:8d:b4:b2:bf:2a:41:ce:51:3b:c9:d0:62:25:7f:9b:55:21: df:41:cd:8e:ba:57:9e:f1:67:53:6a:8a:10:a3:2e:45:4a:ad: 4b:3c:65:82:98:a1:a5:8e:9d:88:10:88:e9:a5:b4:06:d9:6a: fd:fc:91:09:cb:76:18:56:c8:88:88:9d:cd:b5:84:d4:a5:be: 5f:1d:b6:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPXVXJoccYrCQun8VWa2U2kAa3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRC MkRBNjg3MTAeFw0yNjA5MTcwMjA2MTZaFw0yNjA5MTgwNDQ4MTZaMDMxMTAvBgNV BAMTKEFEQjE3NDgxRDFDNjUyNTQyM0E5NzA4QzJGQzc0NEUzRDU1MDZGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OMu5hSiucREtyXq47Xdfjml5 NVNLFrcSpqHH/YMZ3xBy4FAITi+u1IW2dAsfIbkBsrG1s3gT2QmQ3NjqSEGCv07f XhneWiJfRtycKkIKgtq2yf+lscyuZ89nPAYet2lZlGJ6bl8y7mDtmj7HNVrwTD8u C3nSDV5TVeN2FfOqlpH0EltNElqFENonYyyraDItREtiOwrFjScwM0UgudA+H1xd Ycp3AEmEAyvAfthIXod+28+vIsYaI95ZGs3yOyuQYwuxyAQwKI0D53pkzDcl87/m DT2MA2unNZPiitDPcNV8MFOZIayJynRrhjrif03YOrdb2WXo1tJz1uDapdvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrbF0gdHGUlQjqXCML8dE49VQbw8wHwYDVR0j BBgwFoAU6osf1UtaTpt5XN2Sm1jnvbLaaHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVmMjBiMmUtYTdhOC00MmZkLTkyZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0 QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRCMkRBNjg3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThCMUZENTRCNUE0RTlCNzk1Q0REOTI5QjU4RTdCREIyREE2 ODcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3 QkRCMkRBNjg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB638YHhVwy91pxS1QX3+i5WsPRf4TxMptnQ GnS71hwzyvVkYRpBl7Sg9AAg/089ou4aj+niZuK4DLOcy/fzkV94XqFIw4Bxb3Tt OsXM05svhYVifI9xsUFeIVpEdyxYRIx96mOQ3xJm7nPB0yard8OKfSnk2CERT5v1 IzT4xpTXVKxBE37FJvKicZMGQ4lVvjFitketLRNkaD9Y1GuL2mBzljAsAF/rlOy2 as8x5daDGwjxUQyNtLK/KkHOUTvJ0GIlf5tVId9BzY66V57xZ1NqihCjLkVKrUs8 ZYKYoaWOnYgQiOmltAbZav38kQnLdhhWyIiInc21hNSlvl8dtik= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:20 2026 by rpki-client