$ rpki-client -vvvf rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft File: EAE046BFFB08A27729B8D486164C8C1E280C169E.mft (raw, json) Hash identifier: FZWAgImCyH2uG8pfRA5yVX271hQBRlRntcQXOwTQmvw= Subject key identifier: F9:A9:8B:C7:BA:91:B5:96:5B:D4:72:FE:1B:D6:31:C2:4A:F4:B3:EF Authority key identifier: EA:E0:46:BF:FB:08:A2:77:29:B8:D4:86:16:4C:8C:1E:28:0C:16:9E Certificate issuer: /CN=EAE046BFFB08A27729B8D486164C8C1E280C169E Certificate serial: 5CB39FE556702CCE28C8CC0F61BAE9292F627ECE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft Manifest number: BA Signing time: Wed 16 Sep 2026 20:34:27 +0000 Manifest this update: Wed 16 Sep 2026 20:29:27 +0000 Manifest next update: Thu 17 Sep 2026 23:18:27 +0000 Files and hashes: 1: EAE046BFFB08A27729B8D486164C8C1E280C169E.crl (hash: 1kEpCq2SZZoUvAKbX/MJO5XE6mzKN1XbZRI3UeRqnHs=) 2: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: We8sRw23ra0s7ummEVmNto7+y6Pn15K3D/+wd4Omz9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.crl rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b3:9f:e5:56:70:2c:ce:28:c8:cc:0f:61:ba:e9:29:2f:62:7e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAE046BFFB08A27729B8D486164C8C1E280C169E Validity Not Before: Sep 16 20:29:27 2026 GMT Not After : Sep 17 23:18:27 2026 GMT Subject: CN=F9A98BC7BA91B5965BD472FE1BD631C24AF4B3EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:16:fe:ff:80:af:40:f8:f1:b9:ab:50:59: 56:b9:b6:a7:c4:5c:c3:5e:1b:f0:d0:d9:6f:3c:f2: 0b:8f:bc:7d:0e:9f:3e:4f:c2:77:97:2d:d9:cb:2b: 86:a3:ca:0b:5e:b3:77:4a:13:ad:42:d4:70:af:33: 40:c7:c9:42:88:dc:a8:d8:99:2d:01:bb:33:a3:8d: 52:e2:16:f0:a8:b8:b9:e3:39:c2:a5:90:3a:18:d0: ad:36:85:94:6d:0a:1f:ec:07:65:2c:57:20:09:f0: ca:14:46:48:7e:ac:7e:8d:0a:1e:ec:ce:74:ea:a2: 3b:ac:51:31:2c:2e:e0:0b:8b:b9:46:6a:84:51:31: b0:3e:94:74:89:19:90:13:3a:31:52:09:af:45:22: a1:d8:a4:96:4c:dc:06:8e:f9:2f:bb:d5:dc:4e:7f: 83:2c:13:8a:06:21:59:ba:79:f1:81:14:c1:8b:33: 6a:c6:36:c8:71:c6:83:cf:c8:8b:06:7a:2e:81:3e: 9f:96:71:d3:79:39:ee:51:24:56:39:04:92:96:5d: 96:50:1d:e9:f5:7d:61:15:39:79:c5:b3:e5:81:47: f5:f1:84:4a:4e:bf:cc:69:59:72:a7:06:30:c4:86: dd:c2:a3:33:35:fa:59:91:36:03:f8:70:03:75:ac: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A9:8B:C7:BA:91:B5:96:5B:D4:72:FE:1B:D6:31:C2:4A:F4:B3:EF X509v3 Authority Key Identifier: keyid:EA:E0:46:BF:FB:08:A2:77:29:B8:D4:86:16:4C:8C:1E:28:0C:16:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:97:d4:fb:c0:9d:26:4f:06:e4:61:4a:d6:c7:59:b2:1a:70: f7:65:34:22:6b:3f:45:a7:af:db:1a:b9:ad:f1:ff:f0:24:27: 6a:4c:bc:36:93:41:57:50:01:30:2e:9a:1f:6a:96:6a:c6:93: b1:0a:f5:f5:2a:36:ba:ea:d9:be:b1:eb:1c:1e:a0:74:23:ec: 96:47:75:25:24:7a:37:51:45:e6:17:0c:6d:3c:cc:64:04:7a: 76:39:2f:21:dd:35:74:55:be:37:f9:56:c6:d5:44:69:f9:3a: b0:34:9c:16:dd:d7:58:5a:1c:67:9b:2b:dd:f4:1d:a9:5b:f7: d3:70:ea:fc:76:77:68:03:92:a0:3e:6f:5f:13:02:1c:20:cf: d9:07:8f:37:ee:65:d4:de:4c:11:45:7a:a0:1a:09:b1:b4:17: f6:c7:02:27:40:e4:f5:26:a8:43:a0:f2:59:e3:a0:a8:41:6d: 06:e2:6a:87:c0:09:47:0a:57:e3:21:43:03:7b:0c:10:fc:93: e1:ac:cc:ab:dc:64:7a:97:cb:56:0e:0e:ac:7e:c8:63:c3:3f: a5:29:0a:6f:6b:2c:1c:81:2b:87:e7:96:f3:da:af:ed:4e:3a: 68:3f:d4:5e:d5:5d:53:c8:fb:6f:66:e5:3d:57:3c:51:ba:37: 79:40:25:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLOf5VZwLM4oyMwPYbrpKS9ifs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFMDQ2QkZGQjA4QTI3NzI5QjhENDg2MTY0QzhDMUUy ODBDMTY5RTAeFw0yNjA5MTYyMDI5MjdaFw0yNjA5MTcyMzE4MjdaMDMxMTAvBgNV BAMTKEY5QTk4QkM3QkE5MUI1OTY1QkQ0NzJGRTFCRDYzMUMyNEFGNEIzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7Rb+/4CvQPjxuatQWVa5tqfE XMNeG/DQ2W888guPvH0Onz5PwneXLdnLK4ajygtes3dKE61C1HCvM0DHyUKI3KjY mS0BuzOjjVLiFvCouLnjOcKlkDoY0K02hZRtCh/sB2UsVyAJ8MoURkh+rH6NCh7s znTqojusUTEsLuALi7lGaoRRMbA+lHSJGZATOjFSCa9FIqHYpJZM3AaO+S+71dxO f4MsE4oGIVm6efGBFMGLM2rGNshxxoPPyIsGei6BPp+WcdN5Oe5RJFY5BJKWXZZQ Hen1fWEVOXnFs+WBR/XxhEpOv8xpWXKnBjDEht3CozM1+lmRNgP4cAN1rMg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+amLx7qRtZZb1HL+G9Yxwkr0s+8wHwYDVR0j BBgwFoAU6uBGv/sIoncpuNSGFkyMHigMFp4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzEwOTA1NzMtNmFkMy00ZTYzLThhZjQtOGEyZDU4MmFhMGNkLzAvRUFFMDQ2QkZG QjA4QTI3NzI5QjhENDg2MTY0QzhDMUUyODBDMTY5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUUwNDZCRkZCMDhBMjc3MjlCOEQ0ODYxNjRDOEMxRTI4MEMx NjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh ZjQtOGEyZDU4MmFhMGNkLzAvRUFFMDQ2QkZGQjA4QTI3NzI5QjhENDg2MTY0QzhD MUUyODBDMTY5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiX1PvAnSZPBuRhStbHWbIacPdlNCJrP0Wn r9saua3x//AkJ2pMvDaTQVdQATAumh9qlmrGk7EK9fUqNrrq2b6x6xweoHQj7JZH dSUkejdRReYXDG08zGQEenY5LyHdNXRVvjf5VsbVRGn5OrA0nBbd11haHGebK930 Halb99Nw6vx2d2gDkqA+b18TAhwgz9kHjzfuZdTeTBFFeqAaCbG0F/bHAidA5PUm qEOg8lnjoKhBbQbiaofACUcKV+MhQwN7DBD8k+GszKvcZHqXy1YODqx+yGPDP6Up Cm9rLByBK4fnlvPar+1OOmg/1F7VXVPI+29m5T1XPFG6N3lAJUU= -----END CERTIFICATE-----Generated at Thu Sep 17 14:10:40 2026 by rpki-client