$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: 2fDb8SzG97QNrJNVokrvXzb1G+srYi9j8Nn0KJqEdVA= Subject key identifier: 32:4E:98:41:9A:AC:6F:81:73:73:6B:A6:47:E3:58:90:FD:A1:0C:E0 Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 6BC470FC2D0C3BA61B1516AC1C8251FDF557653C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 05:45:34 +0000 Manifest this update: Thu 17 Sep 2026 05:40:34 +0000 Manifest next update: Fri 18 Sep 2026 07:03:34 +0000 Files and hashes: 1: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) 2: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) 3: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 4: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 5: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) 6: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 7: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: +CJYVjKejzKjunPOOOLJrbfr0WezKjCwoSot4YybmIY=) 8: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 9: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c4:70:fc:2d:0c:3b:a6:1b:15:16:ac:1c:82:51:fd:f5:57:65:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: Sep 17 05:40:34 2026 GMT Not After : Sep 18 07:03:34 2026 GMT Subject: CN=324E98419AAC6F8173736BA647E35890FDA10CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:f9:8d:6c:e5:23:2b:01:27:fe:e4:2c:6e: df:50:7b:d2:db:c2:88:00:a9:a6:f6:cb:f6:89:d8: 63:c7:c0:1f:a6:89:37:d5:ce:0c:04:09:b4:db:ab: 07:27:8a:1f:1f:38:33:a0:20:d4:96:88:c7:e4:76: 5e:0e:75:49:bf:c4:4e:58:10:85:fb:a7:d6:4f:25: 62:e7:06:0a:6a:86:dd:97:69:3f:37:55:a0:43:07: d6:72:c6:cd:bb:a4:80:d0:82:77:e9:a5:b6:9b:ca: ab:f4:22:21:3a:19:26:38:d7:e5:9d:1e:d5:02:e8: f5:17:4d:ec:95:70:32:52:f4:6c:3f:ef:ec:78:a1: 7d:ee:74:ac:c4:d8:80:82:d9:f7:e4:8c:dc:b7:4b: bb:ca:02:62:24:3e:b0:48:6f:0b:39:1d:f3:f8:ec: df:1f:bf:c9:a0:9d:de:5b:d7:19:f6:d7:24:67:ac: 62:26:7a:c1:48:9f:a7:83:9d:78:30:1f:f3:2a:0b: 21:0b:03:40:95:a5:a6:84:55:18:24:3e:27:39:9c: 5e:ce:2a:6b:dd:25:c7:f2:40:ad:04:89:90:4c:d6: ea:d7:26:47:69:d8:e1:a6:08:7a:53:47:29:b8:e8: 97:24:77:19:0a:32:13:36:a5:f3:12:7e:ca:4e:51: 86:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:98:41:9A:AC:6F:81:73:73:6B:A6:47:E3:58:90:FD:A1:0C:E0 X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:27:25:ac:4e:88:41:a3:6f:4a:12:a9:03:a1:29:de:88:d8: 29:13:c5:c0:7a:7f:d5:70:fd:f8:40:5d:85:ce:0d:b9:35:af: d8:67:f2:28:38:79:85:b5:27:34:db:86:a1:35:be:f4:3b:1d: ef:b5:e6:62:41:20:c4:03:a2:03:ac:4a:7f:e6:f8:99:4d:8a: 99:05:82:ca:55:28:c3:92:33:2a:b5:95:8f:22:49:26:b1:fb: e0:2d:2d:5d:59:8a:fd:70:98:cd:ec:4b:af:8e:07:40:34:8d: 1a:90:7c:e0:86:29:9d:9b:f6:d6:52:be:ed:af:97:1e:8d:43: ee:61:77:93:98:ad:65:08:7e:a9:2e:60:ce:90:f4:13:65:24: cc:7a:1d:11:f5:cb:07:25:9f:54:8a:1c:ab:cc:e7:b4:27:08: b5:ab:e6:f8:53:f2:09:a1:9b:bb:53:3e:02:a2:75:ef:b5:8f: 06:3d:88:87:d1:6c:5f:a6:a2:55:86:c5:bb:16:c8:30:74:52: 49:e6:10:99:84:30:e0:d5:f6:a9:87:52:d5:14:ab:5e:dd:0b: e6:bd:52:a0:f5:19:ca:e8:69:bc:86:a6:59:02:e6:4f:e4:2c: 19:b1:c7:5c:e8:db:6f:29:35:b3:5a:cb:4b:4b:7b:07:da:dc: f3:aa:45:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa8Rw/C0MO6YbFRasHIJR/fVXZTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA5MTcwNTQwMzRaFw0yNjA5MTgwNzAzMzRaMDMxMTAvBgNV BAMTKDMyNEU5ODQxOUFBQzZGODE3MzczNkJBNjQ3RTM1ODkwRkRBMTBDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWvmNbOUjKwEn/uQsbt9Qe9Lb wogAqab2y/aJ2GPHwB+miTfVzgwECbTbqwcnih8fODOgINSWiMfkdl4OdUm/xE5Y EIX7p9ZPJWLnBgpqht2XaT83VaBDB9Zyxs27pIDQgnfppbabyqv0IiE6GSY41+Wd HtUC6PUXTeyVcDJS9Gw/7+x4oX3udKzE2ICC2ffkjNy3S7vKAmIkPrBIbws5HfP4 7N8fv8mgnd5b1xn21yRnrGImesFIn6eDnXgwH/MqCyELA0CVpaaEVRgkPic5nF7O KmvdJcfyQK0EiZBM1urXJkdp2OGmCHpTRym46JckdxkKMhM2pfMSfspOUYa/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMk6YQZqsb4Fzc2umR+NYkP2hDOAwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEnJaxOiEGjb0oSqQOhKd6I2CkTxcB6f9Vw /fhAXYXODbk1r9hn8ig4eYW1JzTbhqE1vvQ7He+15mJBIMQDogOsSn/m+JlNipkF gspVKMOSMyq1lY8iSSax++AtLV1Ziv1wmM3sS6+OB0A0jRqQfOCGKZ2b9tZSvu2v lx6NQ+5hd5OYrWUIfqkuYM6Q9BNlJMx6HRH1ywcln1SKHKvM57QnCLWr5vhT8gmh m7tTPgKide+1jwY9iIfRbF+molWGxbsWyDB0UknmEJmEMODV9qmHUtUUq17dC+a9 UqD1GcroabyGplkC5k/kLBmxx1zo228pNbNay0tLewfa3POqRRg= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:33 2026 by rpki-client