$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft File: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft (raw, json) Hash identifier: zpxszvdHh1BWzYdy+67SJslkB6HBp61InmF/WGuFN2I= Subject key identifier: 70:FC:EE:3D:28:3B:E9:FB:ED:4D:1B:A7:67:66:C3:DC:F8:99:98:62 Authority key identifier: EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 Certificate issuer: /CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Certificate serial: 5E6ABB0B152F0AB573637C7C9D26E31385A16F7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft Manifest number: EB Signing time: Sat 24 Oct 2026 11:38:25 +0000 Manifest this update: Sat 24 Oct 2026 11:33:25 +0000 Manifest next update: Sun 25 Oct 2026 15:00:25 +0000 Files and hashes: 1: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl (hash: YsAiLI2zl2WUex8dQj+JkzDIcfB67Zeela8ITBeJ7V4=) 2: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: yCX5+Dxju6djsJMnbOlkqP9bGOuuQKBHDP9eW/sQSSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6a:bb:0b:15:2f:0a:b5:73:63:7c:7c:9d:26:e3:13:85:a1:6f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Validity Not Before: Oct 24 11:33:25 2026 GMT Not After : Oct 25 15:00:25 2026 GMT Subject: CN=70FCEE3D283BE9FBED4D1BA76766C3DCF8999862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:75:ce:6a:47:07:44:83:5d:db:10:80:c9: 91:a0:a4:c3:86:c7:7d:38:bd:b7:a7:d6:11:41:fe: 85:57:04:82:44:57:38:81:b6:a6:e9:94:81:81:67: 39:db:66:5e:a1:70:87:95:cc:18:be:34:ab:36:97: da:fd:ee:f2:12:37:0a:7e:8b:88:60:9f:26:44:3a: ee:33:98:8c:32:80:5e:cd:f7:78:81:30:77:96:05: fe:3e:97:e3:ae:cf:b2:ee:fb:d1:31:fb:e0:3c:58: f4:c6:5c:77:3a:cd:0e:5a:a0:a6:d3:43:e3:fa:4a: 4f:ae:5a:61:de:39:30:be:c0:15:3c:aa:0c:f1:71: ae:6f:d5:cf:20:53:bb:56:83:3d:cb:a9:4a:45:41: 3f:c7:a2:30:72:31:46:78:4c:c4:c6:31:0a:89:db: 93:aa:b3:33:ca:ac:a7:30:2e:1c:fc:e6:af:db:0f: 46:2f:04:a6:99:da:67:c3:9f:07:9c:df:78:6b:55: 67:29:95:d2:c3:2a:60:bc:a1:89:2b:94:65:09:48: bf:8b:ed:b9:45:22:8c:2f:66:3e:8a:85:53:0c:8c: 57:08:24:e9:6e:fd:8c:9e:e9:87:b8:07:be:06:7b: 11:e7:17:42:ea:b5:8f:74:e2:72:c7:6f:38:29:5e: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:EE:3D:28:3B:E9:FB:ED:4D:1B:A7:67:66:C3:DC:F8:99:98:62 X509v3 Authority Key Identifier: keyid:EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:48:11:bf:39:38:21:0a:79:fe:2b:1f:09:48:e5:b8:d7:26: 0e:44:1c:3a:4b:b0:ff:7b:06:f6:9f:89:25:5e:ed:24:83:71: fe:d7:70:22:3c:43:c4:21:ee:fd:bf:56:c8:b4:ae:e8:d9:70: a8:39:69:26:47:69:fb:e7:18:50:f9:72:d7:0b:eb:e7:66:46: 75:44:d2:29:14:47:65:93:e2:c7:d6:81:a6:65:22:eb:03:4d: 2e:ca:2d:8a:4a:2e:15:89:04:3c:31:ad:b9:df:78:4a:92:a2: bd:8d:3d:12:27:ef:cc:55:9a:c4:23:26:ee:7a:4b:48:e7:54: 1c:7c:41:e7:5d:bc:28:09:99:38:d4:a6:c9:c3:3f:1c:c1:b0: 2a:17:0d:70:ff:79:63:81:b7:b5:7a:00:03:b4:56:86:91:e2: b7:31:08:ce:12:6c:10:20:69:df:84:19:da:60:40:b9:41:ca: f2:5a:ba:ef:9e:8e:00:a8:eb:9f:99:20:60:31:69:00:d4:e7: f9:8f:0d:1b:15:44:73:f7:74:68:da:c2:3d:52:1b:ea:c5:3d: eb:57:6a:14:4e:4d:83:b1:6e:c1:e8:10:cb:b7:5c:e3:71:46: a1:14:62:72:35:7c:88:77:2a:1d:69:bd:88:b8:1d:0a:f4:bf: d5:24:f2:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmq7CxUvCrVzY3x8nSbjE4Whb30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNC RDVFRjU3OTAeFw0yNjEwMjQxMTMzMjVaFw0yNjEwMjUxNTAwMjVaMDMxMTAvBgNV BAMTKDcwRkNFRTNEMjgzQkU5RkJFRDREMUJBNzY3NjZDM0RDRjg5OTk4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgHXOakcHRINd2xCAyZGgpMOG x304vben1hFB/oVXBIJEVziBtqbplIGBZznbZl6hcIeVzBi+NKs2l9r97vISNwp+ i4hgnyZEOu4zmIwygF7N93iBMHeWBf4+l+Ouz7Lu+9Ex++A8WPTGXHc6zQ5aoKbT Q+P6Sk+uWmHeOTC+wBU8qgzxca5v1c8gU7tWgz3LqUpFQT/HojByMUZ4TMTGMQqJ 25OqszPKrKcwLhz85q/bD0YvBKaZ2mfDnwec33hrVWcpldLDKmC8oYkrlGUJSL+L 7blFIowvZj6KhVMMjFcIJOlu/Yye6Ye4B74GexHnF0LqtY904nLHbzgpXoUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPzuPSg76fvtTRunZ2bD3PiZmGIwHwYDVR0j BBgwFoAU6o9WmnQFvquiP5sgzxrNLL1e9XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA0NTdkMjAtMDIzYS00NTA5LWJiNGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3 NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNCRDVFRjU3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThGNTY5QTc0MDVCRUFCQTIzRjlCMjBDRjFBQ0QyQ0JENUVG NTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNE MkNCRDVFRjU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5IEb85OCEKef4rHwlI5bjXJg5EHDpLsP97 BvafiSVe7SSDcf7XcCI8Q8Qh7v2/Vsi0rujZcKg5aSZHafvnGFD5ctcL6+dmRnVE 0ikUR2WT4sfWgaZlIusDTS7KLYpKLhWJBDwxrbnfeEqSor2NPRIn78xVmsQjJu56 S0jnVBx8QeddvCgJmTjUpsnDPxzBsCoXDXD/eWOBt7V6AAO0VoaR4rcxCM4SbBAg ad+EGdpgQLlByvJauu+ejgCo65+ZIGAxaQDU5/mPDRsVRHP3dGjawj1SG+rFPetX ahROTYOxbsHoEMu3XONxRqEUYnI1fIh3Kh1pvYi4HQr0v9Uk8tE= -----END CERTIFICATE-----Generated at Sat Oct 24 20:54:54 2026 by rpki-client