$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft File: EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft (raw, json) Hash identifier: Gwn1PXOKxr+q2j+J1aLna5zka1XdvIZA5WzZAXsSuXI= Subject key identifier: BC:E9:BE:12:6E:7E:D9:11:06:59:74:DF:C3:4A:89:54:7B:85:23:73 Authority key identifier: EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21 Certificate issuer: /CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921 Certificate serial: 3F834EC8E01DF893E4CFA0B8524083F7DD0A36D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft Manifest number: 9B Signing time: Tue 25 Aug 2026 18:55:31 +0000 Manifest this update: Tue 25 Aug 2026 18:50:31 +0000 Manifest next update: Wed 26 Aug 2026 20:56:31 +0000 Files and hashes: 1: EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl (hash: Bk/sOhuRssaJRPC+bMCzwBmtvEQ2v2MLuWEbPnIP404=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: eyEG+YKfrAxVe/iff0IfSqMexA77iMkR7c8W/AMQ12c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 20:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:83:4e:c8:e0:1d:f8:93:e4:cf:a0:b8:52:40:83:f7:dd:0a:36:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921 Validity Not Before: Aug 25 18:50:31 2026 GMT Not After : Aug 26 20:56:31 2026 GMT Subject: CN=BCE9BE126E7ED911065974DFC34A89547B852373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:6c:c0:bd:40:02:cd:d3:27:1f:9e:a1:48: 3a:8e:d7:b9:a8:79:8e:85:ce:50:74:55:9b:da:9e: 50:8c:13:ac:5b:da:64:b7:7d:da:a2:a8:43:f1:d8: b7:02:e0:7a:3a:e2:cb:12:c7:f7:51:d9:2d:a9:4e: f6:a2:5b:6f:24:e9:8d:ba:76:99:07:a6:3b:32:42: e1:7d:90:af:94:41:fc:60:d5:57:9a:62:a9:be:6f: af:e2:7e:19:73:84:59:55:26:d6:4c:f8:29:e6:8c: 87:9b:aa:23:94:9b:71:bc:c1:7a:81:e8:fb:28:69: 6e:e7:f0:f2:19:89:29:1b:ae:bd:69:ab:41:5d:6e: c6:a8:8c:be:7e:76:21:cd:58:6b:fa:3d:be:93:12: 20:50:43:bc:f8:ea:59:d6:c5:af:ef:ec:26:76:8b: 32:93:e6:73:31:fd:2a:33:5d:88:70:36:4e:a3:be: f6:94:cb:18:2f:2c:1d:14:ac:7a:04:4b:48:da:19: bf:63:dd:06:3d:37:82:b7:65:3f:16:7d:86:cc:02: 2f:dd:12:00:87:cb:4d:15:72:c8:e5:87:10:02:ec: a3:11:20:bb:10:f6:d3:6c:de:90:7e:66:c0:6f:db: 17:52:94:f9:ed:f0:49:bc:ff:0d:5b:30:41:44:57: ad:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E9:BE:12:6E:7E:D9:11:06:59:74:DF:C3:4A:89:54:7B:85:23:73 X509v3 Authority Key Identifier: keyid:EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:bd:ba:0e:79:7a:a6:ac:94:24:60:d3:68:6b:e4:5d:32:4f: cc:0a:12:b1:aa:d9:e0:3c:37:5e:52:93:d9:83:4f:50:42:72: 45:51:58:f5:65:6f:8a:f7:d8:18:cb:37:41:04:49:1b:db:40: 97:6b:d3:5f:5d:42:e8:1f:30:e7:9d:34:19:07:cb:f9:a1:e0: de:e8:49:be:17:79:fa:bc:5d:2f:06:64:74:82:8f:62:ae:d8: 84:a8:2e:7c:75:c2:a4:9c:b5:86:d8:8a:75:2b:b6:c2:ad:58: 3d:b7:f9:4a:d7:7a:a8:cd:51:2d:10:52:b1:1c:35:62:3a:43: 49:14:f3:93:fc:dc:09:77:56:f2:29:fa:37:22:d4:71:67:30: d5:40:3e:4c:b9:2a:fe:a8:a4:b9:45:00:86:80:ec:f2:42:89: b3:7a:38:9c:fd:7b:d4:4a:53:36:5d:94:f5:f0:3b:92:ea:63: b0:0a:31:6a:d2:36:b1:24:3b:d8:90:5a:63:de:fc:75:43:fe: ae:5e:a4:31:8f:ba:8f:cb:56:8d:c2:3d:3c:1f:9d:2e:26:5e: 53:7f:b1:4b:f4:c0:9e:0a:c1:4c:bb:7d:6e:5d:5c:cb:14:54: 46:72:4c:1e:dc:12:87:17:86:82:1f:d7:f8:45:06:f7:bf:9a: 2b:52:91:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4NOyOAd+JPkz6C4UkCD990KNtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQTkwQzlEMzgxMjZFNDg2MUIzMjQzQTYwRUZEMkIw OEMxOTkyMTAeFw0yNjA4MjUxODUwMzFaFw0yNjA4MjYyMDU2MzFaMDMxMTAvBgNV BAMTKEJDRTlCRTEyNkU3RUQ5MTEwNjU5NzRERkMzNEE4OTU0N0I4NTIzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaGzAvUACzdMnH56hSDqO17mo eY6FzlB0VZvanlCME6xb2mS3fdqiqEPx2LcC4Ho64ssSx/dR2S2pTvaiW28k6Y26 dpkHpjsyQuF9kK+UQfxg1VeaYqm+b6/ifhlzhFlVJtZM+CnmjIebqiOUm3G8wXqB 6PsoaW7n8PIZiSkbrr1pq0FdbsaojL5+diHNWGv6Pb6TEiBQQ7z46lnWxa/v7CZ2 izKT5nMx/SozXYhwNk6jvvaUyxgvLB0UrHoES0jaGb9j3QY9N4K3ZT8WfYbMAi/d EgCHy00VcsjlhxAC7KMRILsQ9tNs3pB+ZsBv2xdSlPnt8Em8/w1bMEFEV60hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvOm+Em5+2REGWXTfw0qJVHuFI3MwHwYDVR0j BBgwFoAU6wqQydOBJuSGGzJDpg79KwjBmSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRhY2MwZDgtYjBjNC00NzM3LTlmNDQtMjlmZjMyNDFjNzliLzAvRUIwQTkwQzlE MzgxMjZFNDg2MUIzMjQzQTYwRUZEMkIwOEMxOTkyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBBOTBDOUQzODEyNkU0ODYxQjMyNDNBNjBFRkQyQjA4QzE5 OTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvRUIwQTkwQzlEMzgxMjZFNDg2MUIzMjQzQTYwRUZE MkIwOEMxOTkyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGK9ug55eqaslCRg02hr5F0yT8wKErGq2eA8 N15Sk9mDT1BCckVRWPVlb4r32BjLN0EESRvbQJdr019dQugfMOedNBkHy/mh4N7o Sb4Xefq8XS8GZHSCj2Ku2ISoLnx1wqSctYbYinUrtsKtWD23+UrXeqjNUS0QUrEc NWI6Q0kU85P83Al3VvIp+jci1HFnMNVAPky5Kv6opLlFAIaA7PJCibN6OJz9e9RK UzZdlPXwO5LqY7AKMWrSNrEkO9iQWmPe/HVD/q5epDGPuo/LVo3CPTwfnS4mXlN/ sUv0wJ4KwUy7fW5dXMsUVEZyTB7cEocXhoIf1/hFBve/mitSkY0= -----END CERTIFICATE-----Generated at Wed Aug 26 13:08:33 2026 by rpki-client