$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft File: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft (raw, json) Hash identifier: TEPtzAVDUBguzhjyJ2aVelyeJUZeyZAiCaQghzT5++c= Subject key identifier: BF:71:9B:46:3B:87:03:9B:4B:F6:1D:27:97:BE:B8:46:B3:8A:14:F8 Authority key identifier: EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42 Certificate issuer: /CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142 Certificate serial: 43455D44115DADF1E487604FE54E9A133FB78AE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft Manifest number: EA Signing time: Sat 24 Oct 2026 07:58:56 +0000 Manifest this update: Sat 24 Oct 2026 07:53:56 +0000 Manifest next update: Sun 25 Oct 2026 11:34:56 +0000 Files and hashes: 1: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: hTFuMvwmOj1lUIuO6NPn3OHHpBVIbvNuSActpFl0hWE=) 2: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl (hash: 9XGrtpR5Su1BtM/RxbiC3fqYWMYfGX1d6FCceeL99eg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:45:5d:44:11:5d:ad:f1:e4:87:60:4f:e5:4e:9a:13:3f:b7:8a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142 Validity Not Before: Oct 24 07:53:56 2026 GMT Not After : Oct 25 11:34:56 2026 GMT Subject: CN=BF719B463B87039B4BF61D2797BEB846B38A14F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:01:8c:01:df:12:93:85:3c:da:b1:36:3f: f2:2f:e9:f9:73:70:d4:d8:c7:46:be:be:56:41:41: 36:56:5f:f2:dc:56:f7:62:1c:f5:f2:20:67:e6:14: e6:c9:fb:fe:36:29:a3:2c:b8:fb:e2:aa:08:01:53: dc:fe:f7:ea:26:cc:79:6e:7a:56:91:20:f5:58:03: f4:9a:8e:33:60:b3:9c:bf:b2:73:77:f4:fe:a9:29: 81:37:6b:de:da:32:92:2c:19:df:94:a2:70:89:08: 88:05:d1:0e:dd:be:fb:95:62:83:56:0f:6b:d4:e1: 6f:c1:73:26:25:92:18:54:26:d0:0c:82:a4:76:8a: 7f:f9:78:9f:81:0d:c0:18:b3:ed:5c:4e:61:c3:22: 93:2f:bd:ef:9d:2e:ec:e4:e7:80:e2:c3:ce:68:f0: 73:01:da:88:1f:82:af:ad:93:f4:63:96:88:aa:1a: f8:51:c5:90:af:88:72:f9:4a:44:1e:d1:bb:b3:d4: 0b:28:ca:86:64:be:7b:70:4d:33:51:23:e1:11:74: c4:81:ae:1c:b6:79:2f:e7:34:fb:a9:4b:51:10:45: df:e2:35:7f:48:a7:7a:8e:71:26:b9:11:78:38:1d: 47:79:7a:a2:b1:be:27:75:fa:41:2f:fa:6c:51:ba: 5f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:71:9B:46:3B:87:03:9B:4B:F6:1D:27:97:BE:B8:46:B3:8A:14:F8 X509v3 Authority Key Identifier: keyid:EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ce:4d:0a:f8:be:ce:24:2c:f5:d9:30:c1:f1:2d:f8:ca:ca: 84:ef:42:b2:11:74:42:ca:43:ed:2b:ac:c5:2a:08:88:d5:66: 1d:b8:1f:64:8d:33:bc:f4:c4:50:6a:e0:ec:18:a4:7c:91:59: 23:62:2a:cb:5d:fb:15:71:1f:55:85:2f:f0:c2:68:ee:a6:4b: b8:b2:e3:f0:c6:8f:c1:7d:cc:b3:a7:c6:be:1b:17:87:7e:10: 90:9e:0a:e0:c8:ee:e7:16:a1:ed:d1:72:a2:a5:3a:bb:6a:97: c7:c0:d2:56:22:7a:de:09:b8:74:31:4d:55:ad:7e:bc:67:2e: d3:31:3c:10:d6:2c:11:ef:16:f8:23:d3:ff:a7:a7:e9:08:3e: 51:30:2a:c0:9f:6c:b6:b1:65:fe:20:75:5a:ad:46:51:13:71: 3a:93:00:d8:25:7c:a7:e7:6f:e5:17:e9:4a:3d:67:9b:ed:0c: 90:2e:a8:d9:5c:4d:d9:04:95:49:c8:0a:d1:9e:48:ac:c8:2f: 21:6b:af:d8:61:3d:ba:6d:0a:27:b2:96:85:cd:03:f2:4b:d9: ea:81:b3:ab:e0:92:e8:fe:1b:4b:22:85:b9:d2:d9:c2:be:7d: 34:a5:be:fa:0a:8c:16:ce:66:a2:6a:00:22:f9:f6:21:29:05: 08:19:1f:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0VdRBFdrfHkh2BP5U6aEz+3iuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGRTRDQTkxNTE0Q0FDNjFGMUI4MzUzNEJCMTU4RDkw QkRENDE0MjAeFw0yNjEwMjQwNzUzNTZaFw0yNjEwMjUxMTM0NTZaMDMxMTAvBgNV BAMTKEJGNzE5QjQ2M0I4NzAzOUI0QkY2MUQyNzk3QkVCODQ2QjM4QTE0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwgGMAd8Sk4U82rE2P/Iv6flz cNTYx0a+vlZBQTZWX/LcVvdiHPXyIGfmFObJ+/42KaMsuPviqggBU9z+9+omzHlu elaRIPVYA/SajjNgs5y/snN39P6pKYE3a97aMpIsGd+UonCJCIgF0Q7dvvuVYoNW D2vU4W/BcyYlkhhUJtAMgqR2in/5eJ+BDcAYs+1cTmHDIpMvve+dLuzk54Diw85o 8HMB2ogfgq+tk/RjloiqGvhRxZCviHL5SkQe0buz1AsoyoZkvntwTTNRI+ERdMSB rhy2eS/nNPupS1EQRd/iNX9Ip3qOcSa5EXg4HUd5eqKxvid1+kEv+mxRul93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3GbRjuHA5tL9h0nl764RrOKFPgwHwYDVR0j BBgwFoAU6/5MqRUUysYfG4NTS7FY2QvdQUIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUwY2I2MzAtNjM2YS00YjZhLTkzZGYtYjVkOTA4ZmU2ZWU3LzAvRUJGRTRDQTkx NTE0Q0FDNjFGMUI4MzUzNEJCMTU4RDkwQkRENDE0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkZFNENBOTE1MTRDQUM2MUYxQjgzNTM0QkIxNThEOTBCREQ0 MTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvRUJGRTRDQTkxNTE0Q0FDNjFGMUI4MzUzNEJCMTU4 RDkwQkRENDE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDOTQr4vs4kLPXZMMHxLfjKyoTvQrIRdELK Q+0rrMUqCIjVZh24H2SNM7z0xFBq4OwYpHyRWSNiKstd+xVxH1WFL/DCaO6mS7iy 4/DGj8F9zLOnxr4bF4d+EJCeCuDI7ucWoe3RcqKlOrtql8fA0lYiet4JuHQxTVWt frxnLtMxPBDWLBHvFvgj0/+np+kIPlEwKsCfbLaxZf4gdVqtRlETcTqTANglfKfn b+UX6Uo9Z5vtDJAuqNlcTdkElUnICtGeSKzILyFrr9hhPbptCieyloXNA/JL2eqB s6vgkuj+G0sihbnS2cK+fTSlvvoKjBbOZqJqACL59iEpBQgZHxg= -----END CERTIFICATE-----Generated at Sat Oct 24 18:46:31 2026 by rpki-client