$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft File: EB314E0C129A5CAF077447531422664A0DBA21EB.mft (raw, json) Hash identifier: 8Q8EisxKP3IJ/utI144Xt4tdcXBSGEC4OI6Ip6ILCDY= Subject key identifier: 4E:9E:17:28:76:D1:F3:7D:98:C9:9C:C3:08:D0:0A:7A:97:F9:DB:7F Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB Certificate serial: 417DDCA2190C6969C37A272A836D289A971FDB1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:42:20 +0000 Manifest this update: Wed 16 Sep 2026 18:37:20 +0000 Manifest next update: Thu 17 Sep 2026 22:20:20 +0000 Files and hashes: 1: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: A5PltxTRAuGwKx7Z5AFNGaTklePgssNYT6aD4qcBx0s=) 2: EB314E0C129A5CAF077447531422664A0DBA21EB.crl (hash: XntPHe9wfwk9e9lez4tzUqh5ATX2rJOs0KIswM9C19I=) 3: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=) 4: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=) 5: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7d:dc:a2:19:0c:69:69:c3:7a:27:2a:83:6d:28:9a:97:1f:db:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB Validity Not Before: Sep 16 18:37:20 2026 GMT Not After : Sep 17 22:20:20 2026 GMT Subject: CN=4E9E172876D1F37D98C99CC308D00A7A97F9DB7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:64:8d:52:10:d6:3f:a6:61:55:78:1d:29: 75:c6:0f:07:6b:60:25:11:1d:83:34:60:3d:72:eb: 0c:1d:9a:26:e9:20:4b:6e:86:59:fb:79:a3:2e:e3: 32:b1:4a:8e:65:3e:0d:4a:f6:a4:f0:3b:18:63:42: 17:52:69:11:78:fa:a7:66:83:50:f7:02:43:d8:1b: 1c:f0:36:dc:76:d5:86:fc:98:4a:be:fa:0b:c2:60: a9:e4:0d:a1:cb:74:65:a5:8a:04:59:a1:b4:88:2b: 20:d3:a6:b7:0f:76:3d:fd:78:9f:e1:7f:3c:ab:5b: 3c:0c:c1:8c:8a:4a:3e:38:73:ae:ba:bd:6e:38:8d: ef:91:97:d7:21:39:d3:9e:42:ef:c9:fd:61:26:7d: 82:06:f6:36:f0:c6:2f:18:66:0e:78:5b:46:12:20: 40:2e:d0:c0:b8:d6:13:47:af:a8:c3:58:b5:8d:51: 38:9d:01:dd:19:35:fd:45:60:c5:4f:c2:3c:8d:96: 6e:cd:f4:be:ca:2c:dd:94:e2:53:3a:91:dc:f0:a0: 97:aa:eb:51:c4:a4:b8:81:f0:9e:8f:d2:7a:c4:94: c4:76:1e:90:3a:34:91:28:4c:fa:6f:d0:ec:34:e7: 80:8a:9b:69:2e:b3:5d:39:cb:fd:54:58:bd:30:4f: af:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9E:17:28:76:D1:F3:7D:98:C9:9C:C3:08:D0:0A:7A:97:F9:DB:7F X509v3 Authority Key Identifier: keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d8:b4:8d:a2:7a:71:5c:d5:e4:e3:cd:93:2a:9f:b1:44:91: f2:18:f1:44:b0:ca:fe:a9:37:08:64:7d:30:52:b3:be:fa:01: 8c:8b:9a:98:9c:6c:8a:1b:be:0e:71:26:a8:8f:52:df:29:16: fe:d3:37:c1:86:86:86:d0:e0:f5:e9:0e:d4:29:a4:2c:13:92: 51:ec:c0:2a:cc:b7:0e:73:93:03:75:c7:75:0b:db:f5:5b:89: c2:4f:c7:61:95:1c:ff:be:7d:e2:f0:69:2d:5f:f8:05:99:ca: 0a:c6:d7:bc:48:61:0b:c6:c3:f8:da:fb:29:64:7b:82:58:9e: 9b:b4:40:58:f3:5e:64:1c:aa:27:37:44:9a:db:30:55:f3:89: 1d:f3:7d:80:29:3a:1b:21:fe:5b:c8:c4:4b:03:be:04:3f:90: b3:7d:8e:41:0d:b0:a6:b7:e6:29:71:d3:d6:9c:53:eb:25:6c: 94:bb:6f:7b:bf:11:d7:bf:d9:9b:94:bf:54:cf:24:78:b8:05: 23:51:a9:fe:e6:b6:9d:46:c1:8d:8e:fd:70:54:0f:42:f7:8c: 2e:41:4f:6e:92:63:fc:eb:3d:dd:52:31:f6:9c:61:5f:22:a5: 88:5a:ad:54:e4:2a:30:c6:18:dd:1f:1a:ab:ac:1e:ab:53:5e: 70:e8:c5:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX3cohkMaWnDeicqg20ompcf2x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw REJBMjFFQjAeFw0yNjA5MTYxODM3MjBaFw0yNjA5MTcyMjIwMjBaMDMxMTAvBgNV BAMTKDRFOUUxNzI4NzZEMUYzN0Q5OEM5OUNDMzA4RDAwQTdBOTdGOURCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0g2SNUhDWP6ZhVXgdKXXGDwdr YCURHYM0YD1y6wwdmibpIEtuhln7eaMu4zKxSo5lPg1K9qTwOxhjQhdSaRF4+qdm g1D3AkPYGxzwNtx21Yb8mEq++gvCYKnkDaHLdGWligRZobSIKyDTprcPdj39eJ/h fzyrWzwMwYyKSj44c666vW44je+Rl9chOdOeQu/J/WEmfYIG9jbwxi8YZg54W0YS IEAu0MC41hNHr6jDWLWNUTidAd0ZNf1FYMVPwjyNlm7N9L7KLN2U4lM6kdzwoJeq 61HEpLiB8J6P0nrElMR2HpA6NJEoTPpv0Ow054CKm2kus105y/1UWL0wT695AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTp4XKHbR832YyZzDCNAKepf5238wHwYDVR0j BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2 NEEwREJBMjFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfYtI2ienFc1eTjzZMqn7FEkfIY8USwyv6p NwhkfTBSs776AYyLmpicbIobvg5xJqiPUt8pFv7TN8GGhobQ4PXpDtQppCwTklHs wCrMtw5zkwN1x3UL2/VbicJPx2GVHP++feLwaS1f+AWZygrG17xIYQvGw/ja+ylk e4JYnpu0QFjzXmQcqic3RJrbMFXziR3zfYApOhsh/lvIxEsDvgQ/kLN9jkENsKa3 5ilx09acU+slbJS7b3u/Ede/2ZuUv1TPJHi4BSNRqf7mtp1GwY2O/XBUD0L3jC5B T26SY/zrPd1SMfacYV8ipYharVTkKjDGGN0fGqusHqtTXnDoxRI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:01 2026 by rpki-client