$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft File: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft (raw, json) Hash identifier: QwhIMxLIqtTrPvzm/+vJ1jm7y75PhKQhdSVjT98G1iw= Subject key identifier: 01:99:EA:39:DD:6D:F1:10:A0:06:EB:A0:43:0C:56:66:2C:1C:AF:79 Authority key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 Certificate issuer: /CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Certificate serial: 7CBC452D3F5C42F028E6B5D560D7C255501E042A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft Manifest number: EA Signing time: Sat 24 Oct 2026 22:52:39 +0000 Manifest this update: Sat 24 Oct 2026 22:47:39 +0000 Manifest next update: Mon 26 Oct 2026 01:56:39 +0000 Files and hashes: 1: 3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa (hash: lD4ekQjYWJEX/+XteQDNEzLVrijnUKOpZR8eykHExcM=) 2: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: BsPXa+UOut2Mbb+7M0ct2qI2C2+ME889eZGuggOi820=) 3: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl (hash: S7XRZI/rYCelxt/voCx3KXVxobZE0rPKTvPfdtt6/es=) 4: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: ePjyykmLAPcuoIW4PxvnsIf6Mnk1VG8I5wQF6R8ChtM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 01:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bc:45:2d:3f:5c:42:f0:28:e6:b5:d5:60:d7:c2:55:50:1e:04:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Validity Not Before: Oct 24 22:47:39 2026 GMT Not After : Oct 26 01:56:39 2026 GMT Subject: CN=0199EA39DD6DF110A006EBA0430C56662C1CAF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:6e:93:58:b3:ca:d1:c8:bc:bb:2b:34:b0: ee:85:f7:d7:dd:d6:1e:f2:bb:00:3b:5a:94:a9:54: eb:3e:05:83:d4:8d:4e:89:41:93:be:9f:e1:68:36: 3e:73:6c:4b:05:2b:a8:cf:70:8c:b0:fb:36:fc:22: 50:ca:88:0e:91:10:9d:2b:ac:10:f8:68:a5:f7:78: 53:21:db:0b:bc:09:39:48:f9:2e:3c:a0:f5:ab:20: 5b:0e:12:9d:16:5e:5b:ec:9d:ba:e3:c1:68:c9:d2: 12:4c:de:f7:06:d8:67:3d:f1:2e:15:0a:e6:c1:b9: 40:45:c0:c3:a7:a3:04:33:8e:d6:5e:b1:ec:50:b0: f0:00:76:98:a4:7e:0d:be:b5:00:6a:f3:57:41:d7: c2:49:51:0d:cf:1d:f6:ae:d0:ab:46:ae:61:3f:2f: 1f:25:17:3f:86:f9:8f:1c:19:77:85:44:9c:77:16: 37:27:a4:50:12:80:b7:e5:33:4d:5d:4c:13:aa:ba: 76:e1:85:c2:5e:7d:4b:fb:d9:a6:fe:4a:4a:ce:b9: c9:97:10:6a:c9:99:e9:73:44:53:31:0d:5e:0c:07: b8:7c:7d:59:09:3a:fb:d2:76:6c:78:ad:98:ae:fc: a5:52:9c:6f:ce:d6:4e:68:4a:b7:85:99:09:cd:0f: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:99:EA:39:DD:6D:F1:10:A0:06:EB:A0:43:0C:56:66:2C:1C:AF:79 X509v3 Authority Key Identifier: keyid:EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:37:dc:c6:5a:bf:5a:a8:23:b3:03:58:0f:1c:7f:c2:64:14: 96:73:18:31:1f:0c:6e:36:de:54:18:9c:fb:2e:0d:c5:f3:7f: 98:f8:a1:2f:58:db:ae:9a:57:56:ae:6c:30:ee:05:87:7e:5e: c0:f2:24:8d:ec:7a:e5:83:06:2a:d6:cf:d9:52:fa:3a:c9:6b: 69:d8:ac:ff:e0:b0:d0:28:90:b4:1f:4f:a0:f4:0e:e8:2a:29: ac:81:f1:94:a3:75:96:e0:9a:c9:5e:92:cc:6c:8a:76:37:e3: a3:ee:a0:fa:d8:2f:01:28:75:43:34:a5:e0:fa:08:d3:8a:da: 67:59:3f:87:5c:62:c8:63:4a:ac:1e:ca:4a:e7:e8:c3:e0:e7: 44:59:19:09:c1:88:89:c7:63:f6:c3:7f:64:9a:b1:43:d9:86: 31:d9:74:d3:27:33:51:60:50:94:72:7e:ff:7d:a3:d0:a6:43: 05:9d:9b:13:e4:e2:7b:84:e3:dd:47:41:d9:18:83:33:dd:3f: 2c:2a:d1:e5:c7:3e:c4:c2:a4:52:04:55:3f:3b:82:e9:4d:74: e8:da:28:78:c4:4d:74:8e:7e:4f:1b:8f:79:36:15:9d:10:1d: 0f:94:a9:a2:46:31:b3:c1:89:68:bf:be:34:7b:30:28:db:d9: a4:83:4f:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLxFLT9cQvAo5rXVYNfCVVAeBCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxQTdFRTUzOUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVC RjMwQjUzNzAeFw0yNjEwMjQyMjQ3MzlaFw0yNjEwMjYwMTU2MzlaMDMxMTAvBgNV BAMTKDAxOTlFQTM5REQ2REYxMTBBMDA2RUJBMDQzMEM1NjY2MkMxQ0FGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXt26TWLPK0ci8uys0sO6F99fd 1h7yuwA7WpSpVOs+BYPUjU6JQZO+n+FoNj5zbEsFK6jPcIyw+zb8IlDKiA6REJ0r rBD4aKX3eFMh2wu8CTlI+S48oPWrIFsOEp0WXlvsnbrjwWjJ0hJM3vcG2Gc98S4V CubBuUBFwMOnowQzjtZesexQsPAAdpikfg2+tQBq81dB18JJUQ3PHfau0KtGrmE/ Lx8lFz+G+Y8cGXeFRJx3FjcnpFASgLflM01dTBOqunbhhcJefUv72ab+SkrOucmX EGrJmelzRFMxDV4MB7h8fVkJOvvSdmx4rZiu/KVSnG/O1k5oSreFmQnND0RxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZnqOd1t8RCgBuugQwxWZiwcr3kwHwYDVR0j BBgwFoAU6xp+5Tnm8e+j0wxiFJwmXr8wtTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWExMWU2ZDctNTdhMS00OTM2LWI3YTctZGUwOTM1MjVjYjI3LzAvRUIxQTdFRTUz OUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVCRjMwQjUzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjFBN0VFNTM5RTZGMUVGQTNEMzBDNjIxNDlDMjY1RUJGMzBC NTM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWExMWU2ZDctNTdhMS00OTM2LWI3 YTctZGUwOTM1MjVjYjI3LzAvRUIxQTdFRTUzOUU2RjFFRkEzRDMwQzYyMTQ5QzI2 NUVCRjMwQjUzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMw33MZav1qoI7MDWA8cf8JkFJZzGDEfDG42 3lQYnPsuDcXzf5j4oS9Y266aV1aubDDuBYd+XsDyJI3seuWDBirWz9lS+jrJa2nY rP/gsNAokLQfT6D0DugqKayB8ZSjdZbgmsleksxsinY346PuoPrYLwEodUM0peD6 CNOK2mdZP4dcYshjSqweykrn6MPg50RZGQnBiInHY/bDf2SasUPZhjHZdNMnM1Fg UJRyfv99o9CmQwWdmxPk4nuE491HQdkYgzPdPywq0eXHPsTCpFIEVT87gulNdOja KHjETXSOfk8bj3k2FZ0QHQ+UqaJGMbPBiWi/vjR7MCjb2aSDTxI= -----END CERTIFICATE-----Generated at Sun Oct 25 14:33:52 2026 by rpki-client