$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft File: EBF23572810F8726C4B72E50589964A910C50B4B.mft (raw, json) Hash identifier: QtmNxw9yFeWpNH+PVQpevB0Peoz65TZO00Yv7FlAY+s= Subject key identifier: 44:8F:68:B9:53:47:9E:57:90:CB:07:68:12:51:06:C9:61:6A:62:01 Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B Certificate issuer: /CN=EBF23572810F8726C4B72E50589964A910C50B4B Certificate serial: 77C96EE46EE5B96F3EF0514E26D5452F3ABFE0EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 22:57:43 +0000 Manifest this update: Fri 23 Oct 2026 22:52:43 +0000 Manifest next update: Sun 25 Oct 2026 01:20:43 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: pwFWQeeNE8aLdvpKEf3Cftf5A02g3uDsYu8O+3yCUbE=) 2: EBF23572810F8726C4B72E50589964A910C50B4B.crl (hash: /paMKSMCdELQZubXrppw7A53kNXkERuYtYk640IPvQ4=) 3: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=) 4: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 01:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c9:6e:e4:6e:e5:b9:6f:3e:f0:51:4e:26:d5:45:2f:3a:bf:e0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B Validity Not Before: Oct 23 22:52:43 2026 GMT Not After : Oct 25 01:20:43 2026 GMT Subject: CN=448F68B953479E5790CB0768125106C9616A6201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:72:2b:d9:db:35:78:13:e4:56:b7:2d:00: 35:a0:85:4d:14:dd:5a:37:0e:71:bc:58:dd:2e:16: 59:9a:c5:7d:80:2c:45:b1:ec:01:2a:12:8c:49:4a: 11:a8:33:80:4e:38:7e:17:32:79:01:ac:83:96:c8: 90:35:1a:06:b5:7c:d3:6d:fa:b3:39:c3:3e:cb:84: 21:aa:a2:a0:11:9c:85:2c:4b:32:0f:d4:7c:e8:5e: db:7a:ed:48:15:d2:1b:01:49:06:9a:e0:bd:76:c6: b3:57:7f:c4:8c:4d:45:3f:82:a8:92:57:6b:9c:57: 29:05:02:d6:39:bb:46:9f:51:d1:2f:91:18:11:fe: 78:fb:96:98:24:4b:bb:63:ab:f1:8b:b2:d7:a5:b7: f1:7a:21:b3:cb:f9:c6:42:50:86:69:2d:98:be:ce: f0:15:4b:5b:b1:b1:78:ca:8f:0e:7a:fb:32:c3:65: 30:85:d2:ea:eb:95:4d:a5:5e:ee:3a:9a:61:0c:78: 6d:9d:3a:e9:08:c4:f6:c6:df:93:73:6b:e7:be:be: db:a2:42:3b:4b:13:90:dd:d1:ed:5e:08:9c:23:ca: 8c:cb:16:36:2b:83:e2:35:cd:0c:60:b9:c0:d2:0c: 2a:ea:9d:47:66:c4:c7:e7:b8:f3:ab:1f:e0:f8:1f: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8F:68:B9:53:47:9E:57:90:CB:07:68:12:51:06:C9:61:6A:62:01 X509v3 Authority Key Identifier: keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:49:33:ad:b6:5a:f8:77:26:f6:a1:c6:05:e2:a5:71:da:a3: e8:35:0e:ec:ea:cf:0b:81:06:15:d5:48:ba:33:56:20:d4:ca: 46:88:e4:77:74:1b:ea:3f:ba:87:1f:5e:81:49:5b:12:31:bf: a1:fb:27:eb:d0:59:3f:01:23:0b:da:8f:35:1c:27:cf:26:24: 47:2c:d8:e0:13:5b:4d:95:8a:c9:b6:f6:5a:03:c5:03:da:10: 59:7a:40:0d:65:f9:06:a1:f3:44:0f:a4:db:eb:07:36:8b:47: 14:e5:12:60:0e:a7:13:a0:2a:74:b7:39:a0:a1:7b:8f:98:b8: 85:3f:c1:1e:37:af:a0:d8:fe:2c:e5:42:8e:ce:8d:3f:66:c9: ae:1d:6a:3d:f0:2b:11:3f:9d:33:cc:8b:c8:88:12:43:68:b3: 8f:bd:96:6d:ea:97:75:f3:ca:55:08:bc:08:7d:d3:38:5d:56: 80:08:6e:89:aa:71:e2:39:80:92:d7:fd:54:d0:36:53:8b:39: 18:f3:0b:70:77:7e:3c:82:8b:c6:b7:17:d0:e3:3f:47:40:9c: aa:3b:38:54:60:bc:7c:2b:4e:2d:52:ff:65:c5:83:8e:a7:c1: 01:ef:dd:60:29:9c:74:14:e5:d5:46:94:42:4b:1d:bf:27:46: 45:a3:7d:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8lu5G7luW8+8FFOJtVFLzq/4OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkx MEM1MEI0QjAeFw0yNjEwMjMyMjUyNDNaFw0yNjEwMjUwMTIwNDNaMDMxMTAvBgNV BAMTKDQ0OEY2OEI5NTM0NzlFNTc5MENCMDc2ODEyNTEwNkM5NjE2QTYyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgHIr2ds1eBPkVrctADWghU0U 3Vo3DnG8WN0uFlmaxX2ALEWx7AEqEoxJShGoM4BOOH4XMnkBrIOWyJA1Gga1fNNt +rM5wz7LhCGqoqARnIUsSzIP1HzoXtt67UgV0hsBSQaa4L12xrNXf8SMTUU/gqiS V2ucVykFAtY5u0afUdEvkRgR/nj7lpgkS7tjq/GLstelt/F6IbPL+cZCUIZpLZi+ zvAVS1uxsXjKjw56+zLDZTCF0urrlU2lXu46mmEMeG2dOukIxPbG35Nza+e+vtui QjtLE5Dd0e1eCJwjyozLFjYrg+I1zQxgucDSDCrqnUdmxMfnuPOrH+D4H6VdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURI9ouVNHnleQywdoElEGyWFqYgEwHwYDVR0j BBgwFoAU6/I1coEPhybEty5QWJlkqRDFC0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNDhhODktOTBjNS00ZjVhLTgwMTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4 MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkxMEM1MEI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkYyMzU3MjgxMEY4NzI2QzRCNzJFNTA1ODk5NjRBOTEwQzUw QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0 QTkxMEM1MEI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItJM622Wvh3JvahxgXipXHao+g1DuzqzwuB BhXVSLozViDUykaI5Hd0G+o/uocfXoFJWxIxv6H7J+vQWT8BIwvajzUcJ88mJEcs 2OATW02Vism29loDxQPaEFl6QA1l+Qah80QPpNvrBzaLRxTlEmAOpxOgKnS3OaCh e4+YuIU/wR43r6DY/izlQo7OjT9mya4daj3wKxE/nTPMi8iIEkNos4+9lm3ql3Xz ylUIvAh90zhdVoAIbomqceI5gJLX/VTQNlOLORjzC3B3fjyCi8a3F9DjP0dAnKo7 OFRgvHwrTi1S/2XFg46nwQHv3WApnHQU5dVGlEJLHb8nRkWjfU0= -----END CERTIFICATE-----Generated at Sat Oct 24 10:19:24 2026 by rpki-client