$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json) Hash identifier: 49R6XLyvGnOrv+eeaLH/soUUuPRvzm1VfLArVez+BI0= Subject key identifier: FD:FD:D5:C3:19:99:54:62:3C:AA:77:85:F4:E3:2C:6C:88:2E:04:79 Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Certificate serial: 6BA04762DEEA02E06F923D4FEE9C0D34370446B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 19:12:13 +0000 Manifest this update: Thu 17 Sep 2026 19:07:13 +0000 Manifest next update: Fri 18 Sep 2026 23:10:13 +0000 Files and hashes: 1: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: joRvWEEN/iSoaa4lyWCZqpY9A4w7JCUMOx+q+bwdWvo=) 2: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=) 3: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=) 4: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=) 5: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 23:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a0:47:62:de:ea:02:e0:6f:92:3d:4f:ee:9c:0d:34:37:04:46:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Validity Not Before: Sep 17 19:07:13 2026 GMT Not After : Sep 18 23:10:13 2026 GMT Subject: CN=FDFDD5C3199954623CAA7785F4E32C6C882E0479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:94:e3:d9:70:ef:f8:73:44:43:65:ac:40: 04:b3:31:4c:fc:a7:76:8d:84:32:66:6c:2a:e2:a6: bf:30:d0:c1:06:08:5e:f6:a1:ff:4a:8d:e7:36:b6: 59:b3:a0:5c:f3:08:4c:5d:65:e3:90:b3:0a:f6:48: 27:62:2e:12:f7:86:73:66:3f:d8:19:62:3e:da:1e: 1b:6b:19:7d:d7:c9:06:b6:04:54:8a:bc:6e:bb:be: 55:2f:88:4e:f9:aa:19:a5:49:07:5c:34:eb:30:2c: 49:d4:66:48:8c:51:93:93:d2:6e:5b:07:f3:85:b9: e1:38:25:f0:12:f9:11:95:0f:11:59:7e:d0:8f:2f: 31:b6:2b:ab:e6:43:06:66:6d:16:03:2c:16:12:d7: cf:17:aa:6d:dc:04:90:66:d6:61:12:e4:62:91:53: ca:16:2c:35:77:f5:5a:b0:45:dc:7f:11:31:5e:7e: 7a:47:b7:86:de:f8:b1:4b:87:c9:58:76:32:f2:ab: 8e:33:82:9a:97:bc:d1:10:f1:92:c8:38:4e:99:47: c0:90:8a:1f:9d:41:aa:29:04:91:d4:3b:61:57:06: ee:2e:a2:64:bb:e2:03:b2:c5:33:dd:7a:a9:5c:28: 2e:09:37:23:46:08:7c:a6:18:d3:c2:18:6b:d8:7b: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FD:D5:C3:19:99:54:62:3C:AA:77:85:F4:E3:2C:6C:88:2E:04:79 X509v3 Authority Key Identifier: keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:2a:71:92:8a:36:1a:1e:77:43:55:cf:12:d5:45:6a:9e:b0: db:99:ed:84:f0:4c:77:6a:47:e5:26:c7:44:cd:a6:cc:ce:2a: d2:14:18:c7:4e:40:9e:95:05:5f:e9:cc:72:76:a3:78:78:ee: ee:10:74:e6:5d:ac:85:1d:47:fe:50:59:20:68:30:61:41:fc: 4b:a2:87:6c:39:47:19:5f:dc:7d:c4:d4:94:cc:e3:0e:bf:bd: 05:8d:8c:8c:f1:8d:e0:f6:c3:a4:9c:41:66:9b:1a:c2:d7:ce: 32:ed:22:5b:be:92:de:c9:58:03:18:79:27:f8:4f:80:45:0f: 2c:d8:34:40:9d:46:f4:ca:8c:b8:99:48:bd:20:65:ea:97:e0: de:33:6f:be:60:21:9d:96:4c:71:7c:a2:11:44:dd:fe:4f:86: 2f:73:c7:94:b7:d5:9f:64:8f:0c:56:b7:84:6c:d9:96:75:f2: 14:6e:61:04:62:d4:08:7d:0c:9d:76:ca:7d:e4:ba:c7:b7:db: e7:80:be:71:4f:17:54:54:58:05:0b:f2:0c:b3:f5:b7:02:49: 74:d6:20:80:99:50:f8:0f:be:0b:c3:61:f0:1f:9e:6b:da:6f: 69:8b:fd:62:ec:d8:2c:ea:49:c2:48:0e:f3:a9:b9:ac:e5:9c: a1:c4:ee:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6BHYt7qAuBvkj1P7pwNNDcERrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNFMzNF OTMzMEQwRjAeFw0yNjA5MTcxOTA3MTNaFw0yNjA5MTgyMzEwMTNaMDMxMTAvBgNV BAMTKEZERkRENUMzMTk5OTU0NjIzQ0FBNzc4NUY0RTMyQzZDODgyRTA0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBpTj2XDv+HNEQ2WsQASzMUz8 p3aNhDJmbCripr8w0MEGCF72of9Kjec2tlmzoFzzCExdZeOQswr2SCdiLhL3hnNm P9gZYj7aHhtrGX3XyQa2BFSKvG67vlUviE75qhmlSQdcNOswLEnUZkiMUZOT0m5b B/OFueE4JfAS+RGVDxFZftCPLzG2K6vmQwZmbRYDLBYS188Xqm3cBJBm1mES5GKR U8oWLDV39VqwRdx/ETFefnpHt4be+LFLh8lYdjLyq44zgpqXvNEQ8ZLIOE6ZR8CQ ih+dQaopBJHUO2FXBu4uomS74gOyxTPdeqlcKC4JNyNGCHymGNPCGGvYeyB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/f3VwxmZVGI8qneF9OMsbIguBHkwHwYDVR0j BBgwFoAU6kE/vL4r9zZS2FECSV7OM+kzDQ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmU5MDUtZjI5Ni00NWQxLWE4NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNC RTJCRjczNjUyRDg1MTAyNDk1RUNFMzNFOTMzMEQwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTQxM0ZCQ0JFMkJGNzM2NTJEODUxMDI0OTVFQ0UzM0U5MzMw RDBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNF MzNFOTMzMEQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcqcZKKNhoed0NVzxLVRWqesNuZ7YTwTHdq R+Umx0TNpszOKtIUGMdOQJ6VBV/pzHJ2o3h47u4QdOZdrIUdR/5QWSBoMGFB/Eui h2w5Rxlf3H3E1JTM4w6/vQWNjIzxjeD2w6ScQWabGsLXzjLtIlu+kt7JWAMYeSf4 T4BFDyzYNECdRvTKjLiZSL0gZeqX4N4zb75gIZ2WTHF8ohFE3f5Phi9zx5S31Z9k jwxWt4Rs2ZZ18hRuYQRi1Ah9DJ12yn3kuse32+eAvnFPF1RUWAUL8gyz9bcCSXTW IICZUPgPvgvDYfAfnmvab2mL/WLs2CzqScJIDvOpuazlnKHE7p0= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:55 2026 by rpki-client