$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: Lv1siteLUoCi664LEbJI6Pd8LEU6v6C2WYOqOHMnaJE= Subject key identifier: 82:62:FA:44:EC:62:03:CA:D7:4E:46:14:65:1C:62:04:5C:20:39:91 Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 0BBA862588B9C8CBB112D691E87BE8AF3175E720 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:49:28 +0000 Manifest this update: Thu 17 Sep 2026 08:44:28 +0000 Manifest next update: Fri 18 Sep 2026 12:32:28 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) 2: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: /wtSBrmLXbTIevAkB5/WHiR0DgL0CCZlj5m/BNfbkvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ba:86:25:88:b9:c8:cb:b1:12:d6:91:e8:7b:e8:af:31:75:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: Sep 17 08:44:28 2026 GMT Not After : Sep 18 12:32:28 2026 GMT Subject: CN=8262FA44EC6203CAD74E4614651C62045C203991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:30:f0:7b:42:df:04:3d:7b:6f:c9:49:11: ba:f3:8a:d2:45:3e:b4:42:30:02:54:0c:33:f3:47: ad:1c:4b:40:0b:d5:0f:fa:2d:98:79:7a:1c:8c:76: 4e:0e:ca:56:3e:e4:fb:4b:5e:c5:89:fd:3c:a3:96: cb:e8:92:27:20:84:ec:a5:bd:ef:3e:49:d1:0f:c3: 8e:34:b8:f7:77:fd:da:f3:44:f1:a4:c3:f9:9b:ce: cb:ff:33:e8:57:67:53:51:d2:ed:0f:6c:0e:d7:f5: a0:95:14:db:fd:39:5d:33:5c:42:3c:d2:04:de:67: 46:dd:cd:26:e5:4f:bb:91:c1:2e:12:19:0c:7e:69: 94:64:88:05:62:05:da:32:c1:ca:b6:77:bd:42:ff: 5d:78:05:3a:62:71:3a:a9:a6:3f:ae:98:90:a2:58: 79:1a:b1:77:df:50:08:54:da:02:6c:df:ef:fd:50: 70:27:a4:9b:00:d9:63:9d:33:98:51:37:f5:84:db: 60:5a:f7:a3:81:78:1a:6b:15:95:00:95:f9:78:f8: 5d:98:da:5b:9b:52:7a:c0:34:26:2c:61:12:c9:46: 8c:df:da:d1:be:b6:78:1c:9c:d1:ea:b3:e9:7e:55: f2:a9:e6:48:d7:f7:a5:0d:77:eb:87:f6:ac:17:67: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:62:FA:44:EC:62:03:CA:D7:4E:46:14:65:1C:62:04:5C:20:39:91 X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ac:2c:a9:d9:57:6f:b0:2b:80:93:35:43:19:78:cb:ba:b9: b1:7f:10:4e:39:49:ab:d8:22:33:75:1d:87:89:37:b6:27:6c: f9:78:1f:c7:ab:02:1c:58:63:81:5a:2f:69:48:99:39:6f:3a: a4:85:67:48:aa:19:8e:bf:a2:27:cc:c6:f7:7b:4b:fc:c9:cb: 85:75:a4:a4:bc:cd:ea:b7:00:b2:09:3e:54:f7:bd:61:d1:17: 94:84:5b:72:60:fb:70:a0:42:e5:32:1b:ba:51:d6:3b:b6:38: cf:bc:0f:f9:9b:ac:65:4d:0f:4f:81:55:69:94:d8:84:08:91: d5:e8:28:07:92:61:07:c2:8c:44:1d:76:df:6d:3d:3f:94:cf: 3f:a7:46:d1:f0:7d:06:2e:5c:4e:d3:f7:2c:ac:9a:77:cd:dd: 7c:1f:80:af:51:04:75:a9:01:0d:00:70:28:c8:66:91:ca:f1: c4:6d:4a:e5:f5:11:8e:88:87:3f:91:3d:77:d9:6a:a3:71:42: 39:30:c3:17:26:20:a9:c6:df:80:b2:7e:03:36:4e:7f:86:b6: b7:a1:e0:69:24:e8:08:e8:24:bf:22:a3:08:2e:2c:a8:19:d3: 7f:b2:81:2d:e4:f9:a2:40:c9:c6:55:4d:d9:4e:41:24:07:df: 58:8e:28:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7qGJYi5yMuxEtaR6HvorzF15yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjA5MTcwODQ0MjhaFw0yNjA5MTgxMjMyMjhaMDMxMTAvBgNV BAMTKDgyNjJGQTQ0RUM2MjAzQ0FENzRFNDYxNDY1MUM2MjA0NUMyMDM5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSqjDwe0LfBD17b8lJEbrzitJF PrRCMAJUDDPzR60cS0AL1Q/6LZh5ehyMdk4OylY+5PtLXsWJ/TyjlsvokicghOyl ve8+SdEPw440uPd3/drzRPGkw/mbzsv/M+hXZ1NR0u0PbA7X9aCVFNv9OV0zXEI8 0gTeZ0bdzSblT7uRwS4SGQx+aZRkiAViBdoywcq2d71C/114BTpicTqppj+umJCi WHkasXffUAhU2gJs3+/9UHAnpJsA2WOdM5hRN/WE22Ba96OBeBprFZUAlfl4+F2Y 2lubUnrANCYsYRLJRozf2tG+tngcnNHqs+l+VfKp5kjX96UNd+uH9qwXZ4ORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgmL6ROxiA8rXTkYUZRxiBFwgOZEwHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWsLKnZV2+wK4CTNUMZeMu6ubF/EE45SavY IjN1HYeJN7YnbPl4H8erAhxYY4FaL2lImTlvOqSFZ0iqGY6/oifMxvd7S/zJy4V1 pKS8zeq3ALIJPlT3vWHRF5SEW3Jg+3CgQuUyG7pR1ju2OM+8D/mbrGVND0+BVWmU 2IQIkdXoKAeSYQfCjEQddt9tPT+Uzz+nRtHwfQYuXE7T9yysmnfN3XwfgK9RBHWp AQ0AcCjIZpHK8cRtSuX1EY6Ihz+RPXfZaqNxQjkwwxcmIKnG34CyfgM2Tn+Gtreh 4Gkk6AjoJL8iowguLKgZ03+ygS3k+aJAycZVTdlOQSQH31iOKEQ= -----END CERTIFICATE-----Generated at Thu Sep 17 13:05:59 2026 by rpki-client