$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft File: EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft (raw, json) Hash identifier: CX5uDfcfyjVbm911Iag9JdjtmQPLUr705251c372QrI= Subject key identifier: CC:10:D3:DC:81:0B:20:3B:C0:D7:90:DD:0E:C4:71:80:D8:7D:CF:C9 Authority key identifier: EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21 Certificate issuer: /CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921 Certificate serial: 514B5951A89D5B5284132EBF1E31F0A318284820 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft Manifest number: EA Signing time: Sat 24 Oct 2026 12:14:08 +0000 Manifest this update: Sat 24 Oct 2026 12:09:08 +0000 Manifest next update: Sun 25 Oct 2026 13:48:08 +0000 Files and hashes: 1: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: eyEG+YKfrAxVe/iff0IfSqMexA77iMkR7c8W/AMQ12c=) 2: EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl (hash: rHQT/ik26t8eVZj8M/rrEAA4Onhv0PHL9Ff7HjlHwsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4b:59:51:a8:9d:5b:52:84:13:2e:bf:1e:31:f0:a3:18:28:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921 Validity Not Before: Oct 24 12:09:08 2026 GMT Not After : Oct 25 13:48:08 2026 GMT Subject: CN=CC10D3DC810B203BC0D790DD0EC47180D87DCFC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:7f:f1:63:08:c8:7a:57:ca:a3:2e:c9:1e: 6e:e9:0d:fb:42:98:98:9b:a8:14:ff:6d:c1:e6:c6: 88:7f:3f:8d:a7:93:0c:aa:a7:77:10:66:c7:03:dc: 17:4e:aa:53:35:60:7a:ac:98:ff:8f:ad:a7:ad:d5: fa:4f:89:f6:4a:b2:5a:2a:99:1d:41:cd:bd:f3:90: 50:83:46:d7:9c:6a:8a:a7:dd:7c:4d:54:6a:a5:88: 65:85:7e:ab:be:15:16:2e:2e:85:ab:97:a3:31:a0: a4:54:f9:6a:48:6c:0d:07:e0:85:02:72:c3:9a:aa: 26:f1:34:cb:71:24:e2:66:d2:ec:5d:f3:92:42:90: eb:57:b5:3d:89:04:c6:32:7d:15:ae:17:31:cc:e0: 8d:61:d7:df:72:05:cb:05:d4:f4:fa:7e:41:a3:e9: 30:85:24:36:c5:77:02:79:e5:92:37:2b:84:27:8f: 93:05:3f:fd:72:59:5e:dc:4b:6f:99:82:39:b1:1d: c2:e2:6c:a0:c5:68:19:7d:b6:37:71:fd:d3:e1:27: b3:43:10:9a:2f:bd:60:c6:f6:23:71:b0:26:02:b5: 21:de:e7:2b:65:72:0a:84:4f:91:68:15:4b:a9:5b: fc:19:21:6d:c1:5b:0a:75:5c:ce:31:56:16:27:88: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:10:D3:DC:81:0B:20:3B:C0:D7:90:DD:0E:C4:71:80:D8:7D:CF:C9 X509v3 Authority Key Identifier: keyid:EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:74:3e:89:3f:19:63:7e:c9:54:c3:6a:15:8c:01:31:06:b6: 85:7b:60:d9:33:88:9a:46:b6:c3:21:4a:bf:cc:5d:73:36:c7: 45:bd:e2:b7:50:1e:ed:34:43:b7:3c:69:84:d9:a6:32:78:7e: a0:71:07:12:26:80:81:7f:ff:cf:1e:8c:49:0f:0d:73:5c:d4: 24:67:77:ee:eb:dc:9e:a6:57:2e:69:48:3c:34:fd:e1:ad:53: be:10:9a:8e:5d:b6:a1:34:5f:d8:df:d4:e9:ce:96:07:99:5d: 1f:55:d0:23:ea:44:8e:e0:41:69:ae:6b:e9:53:01:ca:83:23: a3:5d:6d:9e:4d:f0:e3:f3:38:fc:69:b8:39:6d:31:f0:5e:5b: 44:7c:cb:d8:69:23:de:0d:c6:b8:6d:86:fe:f2:95:13:d6:7f: 6d:45:81:dd:9b:dc:a2:46:9f:bf:fd:db:36:74:2c:a7:09:cb: f7:3a:a3:cc:45:db:ab:86:4f:b2:30:9b:5d:80:c3:d7:ae:bb: 58:46:36:b1:a2:7b:b4:ef:da:ee:2a:33:b0:5a:da:23:42:27: 0b:e6:99:e7:bb:b3:ee:11:ed:1f:30:2c:be:d2:2b:04:0c:17: 91:99:07:d4:3c:66:88:55:9a:ee:08:04:50:c2:b4:fa:42:94: 4f:1d:1d:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUtZUaidW1KEEy6/HjHwoxgoSCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQTkwQzlEMzgxMjZFNDg2MUIzMjQzQTYwRUZEMkIw OEMxOTkyMTAeFw0yNjEwMjQxMjA5MDhaFw0yNjEwMjUxMzQ4MDhaMDMxMTAvBgNV BAMTKENDMTBEM0RDODEwQjIwM0JDMEQ3OTBERDBFQzQ3MTgwRDg3RENGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsX3/xYwjIelfKoy7JHm7pDftC mJibqBT/bcHmxoh/P42nkwyqp3cQZscD3BdOqlM1YHqsmP+Praet1fpPifZKsloq mR1Bzb3zkFCDRtecaoqn3XxNVGqliGWFfqu+FRYuLoWrl6MxoKRU+WpIbA0H4IUC csOaqibxNMtxJOJm0uxd85JCkOtXtT2JBMYyfRWuFzHM4I1h199yBcsF1PT6fkGj 6TCFJDbFdwJ55ZI3K4Qnj5MFP/1yWV7cS2+ZgjmxHcLibKDFaBl9tjdx/dPhJ7ND EJovvWDG9iNxsCYCtSHe5ytlcgqET5FoFUupW/wZIW3BWwp1XM4xVhYniN1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzBDT3IELIDvA15DdDsRxgNh9z8kwHwYDVR0j BBgwFoAU6wqQydOBJuSGGzJDpg79KwjBmSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRhY2MwZDgtYjBjNC00NzM3LTlmNDQtMjlmZjMyNDFjNzliLzAvRUIwQTkwQzlE MzgxMjZFNDg2MUIzMjQzQTYwRUZEMkIwOEMxOTkyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBBOTBDOUQzODEyNkU0ODYxQjMyNDNBNjBFRkQyQjA4QzE5 OTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvRUIwQTkwQzlEMzgxMjZFNDg2MUIzMjQzQTYwRUZE MkIwOEMxOTkyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC10Pok/GWN+yVTDahWMATEGtoV7YNkziJpG tsMhSr/MXXM2x0W94rdQHu00Q7c8aYTZpjJ4fqBxBxImgIF//88ejEkPDXNc1CRn d+7r3J6mVy5pSDw0/eGtU74Qmo5dtqE0X9jf1OnOlgeZXR9V0CPqRI7gQWmua+lT AcqDI6NdbZ5N8OPzOPxpuDltMfBeW0R8y9hpI94Nxrhthv7ylRPWf21Fgd2b3KJG n7/92zZ0LKcJy/c6o8xF26uGT7Iwm12Aw9euu1hGNrGie7Tv2u4qM7Ba2iNCJwvm mee7s+4R7R8wLL7SKwQMF5GZB9Q8ZohVmu4IBFDCtPpClE8dHSg= -----END CERTIFICATE-----Generated at Sat Oct 24 20:55:01 2026 by rpki-client