$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: 5WzLsBJAuhIcf0xlLxsMjwhvaplykWpRTfITPD+TyjE= Subject key identifier: 0A:64:8B:13:3F:9C:ED:1F:EA:83:CA:BF:EF:B5:6D:E6:1E:2A:D5:08 Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 5A158879639D161A5CD6C8E2423135B8FA51A6FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:00:53 +0000 Manifest this update: Thu 17 Sep 2026 05:55:53 +0000 Manifest next update: Fri 18 Sep 2026 07:53:53 +0000 Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) 2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) 3: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: vAEDTje/yWTsEDQ2PAuQNZ/1oPfoqJes2H+4H4XqWT4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:15:88:79:63:9d:16:1a:5c:d6:c8:e2:42:31:35:b8:fa:51:a6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: Sep 17 05:55:53 2026 GMT Not After : Sep 18 07:53:53 2026 GMT Subject: CN=0A648B133F9CED1FEA83CABFEFB56DE61E2AD508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:59:2c:1b:67:08:08:fa:da:11:00:77:f1: b2:9f:85:41:0a:f4:23:4e:0e:14:34:b3:77:ad:30: 78:98:e7:53:9d:ab:f0:36:8b:46:0c:7f:6d:d0:8b: 59:e8:d6:63:00:24:8c:01:9d:84:90:9a:17:d4:76: 7f:04:cb:3b:16:4c:cd:ae:8e:97:73:26:f1:15:c9: 89:0d:00:ce:7a:ff:3c:4c:cc:c1:1d:fe:39:7d:36: 99:f9:69:65:13:df:36:c8:2c:f2:5c:00:32:82:3a: 90:77:d7:4d:15:2e:26:e7:1d:f3:f6:6e:49:63:b2: 13:2f:7b:9a:d9:16:44:aa:12:b0:d3:b9:2a:8a:ab: 9a:02:4f:fc:0c:c0:af:3c:fd:3a:c6:19:33:74:61: 7d:2b:4d:a2:08:fc:e5:44:44:96:bd:4d:15:23:73: ac:56:65:30:23:f2:8f:ed:7b:d7:d2:9a:f8:e3:9d: db:61:17:ca:7f:6c:f4:b0:87:ca:69:f3:cf:83:18: 01:48:cd:51:1b:1a:2f:b7:fe:55:6d:d9:2b:49:63: c2:0d:89:ec:ff:8b:72:fd:3f:bd:e4:94:cf:34:55: 30:82:cc:86:ec:fa:07:80:4d:37:ff:45:c2:86:8a: d2:75:13:50:70:73:50:18:09:e3:60:29:8a:b2:2f: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:8B:13:3F:9C:ED:1F:EA:83:CA:BF:EF:B5:6D:E6:1E:2A:D5:08 X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8e:7b:8b:3d:18:54:67:56:2a:6c:e9:83:2e:ed:7b:4a:80: 9f:ae:36:77:98:13:f5:88:d6:52:48:23:29:a0:e9:b8:40:f2: 48:09:c8:d5:cf:08:e3:35:da:e6:bb:eb:2b:48:78:5f:fc:3e: 35:dd:bc:8c:cb:9f:22:ed:ba:e8:5b:c8:a1:0a:c3:d2:82:cc: ce:61:5b:23:88:d0:8b:fe:c0:ea:16:dc:0a:3b:40:5b:71:e2: be:55:5e:6c:45:a6:de:3d:3b:1c:8e:82:b5:74:88:b6:c2:93: ac:cd:3e:ad:c0:13:53:5c:26:ad:7c:81:bb:a5:2d:c5:61:cd: cf:7c:a5:0a:93:39:00:95:c1:0c:3a:8c:02:04:db:6b:ae:e8: 1d:f5:34:41:b8:b1:62:75:f5:33:df:33:34:15:76:0b:ca:d2: 7d:79:65:de:c4:81:5e:f8:d0:01:a4:7e:12:3a:4f:13:71:c6: 8d:71:e5:9f:6a:0f:fb:a8:87:2d:40:d7:72:c2:ca:a7:79:8d: 42:bd:2e:92:61:3c:e8:2b:76:02:c1:06:35:a8:a8:02:c3:69: 99:9c:1a:3f:15:cc:5b:d5:11:19:f5:59:84:ea:f4:6a:7b:4e: d8:00:41:2e:ff:c2:cb:e3:9b:3d:d7:8f:d8:14:68:f3:31:99: aa:df:5d:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhWIeWOdFhpc1sjiQjE1uPpRpv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjA5MTcwNTU1NTNaFw0yNjA5MTgwNzUzNTNaMDMxMTAvBgNV BAMTKDBBNjQ4QjEzM0Y5Q0VEMUZFQTgzQ0FCRkVGQjU2REU2MUUyQUQ1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUlksG2cICPraEQB38bKfhUEK 9CNODhQ0s3etMHiY51Odq/A2i0YMf23Qi1no1mMAJIwBnYSQmhfUdn8EyzsWTM2u jpdzJvEVyYkNAM56/zxMzMEd/jl9Npn5aWUT3zbILPJcADKCOpB3100VLibnHfP2 bkljshMve5rZFkSqErDTuSqKq5oCT/wMwK88/TrGGTN0YX0rTaII/OVERJa9TRUj c6xWZTAj8o/te9fSmvjjndthF8p/bPSwh8pp88+DGAFIzVEbGi+3/lVt2StJY8IN iez/i3L9P73klM80VTCCzIbs+geATTf/RcKGitJ1E1Bwc1AYCeNgKYqyL33fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCmSLEz+c7R/qg8q/77Vt5h4q1QgwHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmOe4s9GFRnVips6YMu7XtKgJ+uNneYE/WI 1lJIIymg6bhA8kgJyNXPCOM12ua76ytIeF/8PjXdvIzLnyLtuuhbyKEKw9KCzM5h WyOI0Iv+wOoW3Ao7QFtx4r5VXmxFpt49OxyOgrV0iLbCk6zNPq3AE1NcJq18gbul LcVhzc98pQqTOQCVwQw6jAIE22uu6B31NEG4sWJ19TPfMzQVdgvK0n15Zd7EgV74 0AGkfhI6TxNxxo1x5Z9qD/uohy1A13LCyqd5jUK9LpJhPOgrdgLBBjWoqALDaZmc Gj8VzFvVERn1WYTq9Gp7TtgAQS7/wsvjmz3Xj9gUaPMxmarfXQ0= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:11 2026 by rpki-client