$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft File: EAC36BE8959CA224F62797D3331900441E4C9AA0.mft (raw, json) Hash identifier: nbcDNDIWICrx/iRe5apEs7DLsn7V/Jt9TQ8hgxJSGqw= Subject key identifier: D7:1F:34:19:97:FF:A7:4B:47:1F:AF:70:CF:E6:58:87:93:27:B2:50 Authority key identifier: EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0 Certificate issuer: /CN=EAC36BE8959CA224F62797D3331900441E4C9AA0 Certificate serial: 3038ED09376857DC64041F042E0C15F9DB6D0E9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft Manifest number: 9D Signing time: Thu 27 Aug 2026 05:32:17 +0000 Manifest this update: Thu 27 Aug 2026 05:27:17 +0000 Manifest next update: Fri 28 Aug 2026 05:59:17 +0000 Files and hashes: 1: EAC36BE8959CA224F62797D3331900441E4C9AA0.crl (hash: vy0+M/N/m5jxpelTvrdM9BofpoczMEMkdjXT75apm/4=) 2: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: m7uPNuZw3t1vASN7WpScOi7UugEIi5WgXEeUkw1LbeE=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: sNKvsJs//8pNrznC7tNde73755hYJDakfZ44J8CvOhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.crl rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:38:ed:09:37:68:57:dc:64:04:1f:04:2e:0c:15:f9:db:6d:0e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAC36BE8959CA224F62797D3331900441E4C9AA0 Validity Not Before: Aug 27 05:27:17 2026 GMT Not After : Aug 28 05:59:17 2026 GMT Subject: CN=D71F341997FFA74B471FAF70CFE658879327B250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:a7:70:50:b4:f6:7d:f4:7f:73:70:21:57: 48:1e:91:3d:94:ef:65:eb:b3:d2:23:f2:8c:a1:b0: aa:e2:43:d2:70:4d:0b:00:54:0e:3d:c6:83:d3:b6: d8:dd:f8:c3:9b:64:dc:0e:6e:e7:c7:c9:96:ba:23: ec:40:65:7f:48:7c:ac:d4:d0:61:96:6f:49:86:98: 1b:6d:4f:49:f9:a2:32:a3:41:9b:9d:c3:95:3a:10: 94:ce:87:a7:65:04:ed:e2:ba:aa:84:70:5e:2c:d0: 5c:01:f4:2f:d6:82:be:80:6d:32:2d:c8:49:8b:92: 90:85:f9:93:06:39:fd:33:bf:8d:00:86:d5:b8:b3: e4:39:1b:b2:ee:a9:ca:55:25:6a:93:50:cc:a6:25: 49:42:a2:12:40:17:e7:6b:c7:1d:2c:9c:79:19:c0: f9:94:db:18:e3:f1:35:74:14:e2:73:1b:7f:5c:10: 9b:de:25:ac:1f:01:f2:fd:06:de:2e:8c:e1:ce:0c: eb:3b:b4:f2:e5:b3:c1:48:be:0c:92:99:e4:d1:7e: 2c:9f:f2:e4:8d:b5:61:ae:3f:38:c7:2a:b8:82:2f: 9d:30:7d:c4:de:22:69:da:5e:70:65:6c:1a:23:f3: 70:ea:6a:de:0c:5c:26:f8:4c:62:99:f3:af:53:95: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1F:34:19:97:FF:A7:4B:47:1F:AF:70:CF:E6:58:87:93:27:B2:50 X509v3 Authority Key Identifier: keyid:EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0f:2d:19:18:ff:40:a8:77:f0:12:d5:1e:2f:a4:e3:1b:00: 4f:5b:a1:c0:eb:30:7f:8c:f4:fc:06:d8:2c:cb:15:7e:4c:db: 06:b2:00:db:52:f4:1b:a4:57:ad:8e:1e:85:c8:35:23:95:f4: 17:2e:05:4d:39:9a:79:eb:9f:0f:70:74:13:37:97:3b:b4:68: e1:c1:59:94:0b:c1:2d:96:7d:f6:77:9b:99:71:17:e0:84:d9: a1:7c:7f:05:1a:04:5f:72:80:3a:8a:15:1a:49:1c:c1:e3:9f: d8:eb:34:88:81:40:45:a2:42:95:f8:5e:75:a4:7f:ed:b8:79: d9:5d:0c:14:de:e0:97:4f:7c:b6:71:08:ff:68:f3:17:72:6f: 44:1f:a0:31:9b:f5:47:b7:71:59:64:44:a9:ae:ef:92:44:47: 71:5e:a7:c2:64:90:fa:6c:f0:ed:ff:37:46:41:b8:be:61:ed: 02:85:de:46:52:96:9e:19:71:08:7e:de:83:f1:03:30:56:98: 66:ae:db:df:7a:9c:00:86:3c:9c:c4:e1:c3:c1:9e:f4:b9:a7: 1e:68:a8:c4:d2:db:a4:eb:09:1b:49:9b:e6:3c:06:1e:2d:d4: 12:2b:ce:35:83:63:48:ca:0e:ac:69:a1:85:f5:f3:d7:e1:95: 01:3f:ed:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDjtCTdoV9xkBB8ELgwV+dttDpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFDMzZCRTg5NTlDQTIyNEY2Mjc5N0QzMzMxOTAwNDQx RTRDOUFBMDAeFw0yNjA4MjcwNTI3MTdaFw0yNjA4MjgwNTU5MTdaMDMxMTAvBgNV BAMTKEQ3MUYzNDE5OTdGRkE3NEI0NzFGQUY3MENGRTY1ODg3OTMyN0IyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLKdwULT2ffR/c3AhV0gekT2U 72Xrs9Ij8oyhsKriQ9JwTQsAVA49xoPTttjd+MObZNwObufHyZa6I+xAZX9IfKzU 0GGWb0mGmBttT0n5ojKjQZudw5U6EJTOh6dlBO3iuqqEcF4s0FwB9C/Wgr6AbTIt yEmLkpCF+ZMGOf0zv40AhtW4s+Q5G7LuqcpVJWqTUMymJUlCohJAF+drxx0snHkZ wPmU2xjj8TV0FOJzG39cEJveJawfAfL9Bt4ujOHODOs7tPLls8FIvgySmeTRfiyf 8uSNtWGuPzjHKriCL50wfcTeImnaXnBlbBoj83Dqat4MXCb4TGKZ869TlZI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1x80GZf/p0tHH69wz+ZYh5MnslAwHwYDVR0j BBgwFoAU6sNr6JWcoiT2J5fTMxkARB5MmqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3NzQ2MWQtZmU0Zi00OTYxLTkyZTUtOTY1NWFmMjU3NTRhLzAvRUFDMzZCRTg5 NTlDQTIyNEY2Mjc5N0QzMzMxOTAwNDQxRTRDOUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUMzNkJFODk1OUNBMjI0RjYyNzk3RDMzMzE5MDA0NDFFNEM5 QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvRUFDMzZCRTg5NTlDQTIyNEY2Mjc5N0QzMzMxOTAw NDQxRTRDOUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAPLRkY/0Cod/AS1R4vpOMbAE9bocDrMH+M 9PwG2CzLFX5M2wayANtS9BukV62OHoXINSOV9BcuBU05mnnrnw9wdBM3lzu0aOHB WZQLwS2WffZ3m5lxF+CE2aF8fwUaBF9ygDqKFRpJHMHjn9jrNIiBQEWiQpX4XnWk f+24edldDBTe4JdPfLZxCP9o8xdyb0QfoDGb9Ue3cVlkRKmu75JER3Fep8JkkPps 8O3/N0ZBuL5h7QKF3kZSlp4ZcQh+3oPxAzBWmGau2996nACGPJzE4cPBnvS5px5o qMTS26TrCRtJm+Y8Bh4t1BIrzjWDY0jKDqxpoYX189fhlQE/7aM= -----END CERTIFICATE-----Generated at Thu Aug 27 17:41:05 2026 by rpki-client