$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json) Hash identifier: ZGmkmHbbx0rjK5lzW2OtLhH42idJtn26KeraBlSx7G4= Subject key identifier: 89:32:57:83:67:4A:66:D8:AD:67:16:ED:AA:08:2E:B4:AF:55:B2:56 Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Certificate serial: 3488F259A5A987A78ACD2CE51F6B504F54B7EE0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft Manifest number: D4 Signing time: Wed 07 Oct 2026 10:36:19 +0000 Manifest this update: Wed 07 Oct 2026 10:31:19 +0000 Manifest next update: Thu 08 Oct 2026 12:58:19 +0000 Files and hashes: 1: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: VhxrifITpaVWSt0GSVy5zgCpaHXbS8kL1sEVPhDvsD8=) 2: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 12:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:88:f2:59:a5:a9:87:a7:8a:cd:2c:e5:1f:6b:50:4f:54:b7:ee:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Validity Not Before: Oct 7 10:31:19 2026 GMT Not After : Oct 8 12:58:19 2026 GMT Subject: CN=89325783674A66D8AD6716EDAA082EB4AF55B256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:5e:8e:a0:db:45:1e:0e:b0:f4:58:96:f5: d8:a2:7d:7a:02:72:93:08:5c:ca:8e:dc:29:4c:8f: bd:17:97:d3:95:68:59:e8:28:cc:7c:72:4d:38:4a: fc:fe:67:41:01:ed:92:61:f5:0c:77:87:1e:20:47: e8:59:95:ab:9c:70:cd:3f:84:48:79:d8:6a:29:99: 45:1a:ff:b4:a9:cf:34:a3:43:2d:1c:87:68:a2:25: 30:02:75:36:c8:5d:7d:5c:5d:6f:f7:99:b2:fb:00: d0:76:19:bf:02:46:49:8e:34:76:50:6f:a6:ea:49: 7e:94:69:54:37:5c:85:ae:c3:91:61:a8:b8:41:0d: 36:72:28:9d:bb:52:9a:30:1b:b4:a6:72:ec:8f:6d: d1:67:98:43:6b:1f:91:ed:e7:6a:38:27:85:96:c0: 48:47:e3:68:77:db:68:9b:c5:10:e1:b0:f6:e8:e2: 24:f1:cb:fa:bf:bd:22:f7:f7:4d:2f:df:22:21:55: 18:09:1f:5f:de:d6:c5:5e:64:03:d6:11:8c:1b:2c: 7f:bb:58:13:36:9b:0d:51:ae:bb:36:95:8d:72:17: af:0b:fb:86:77:77:b3:0d:e0:37:ac:7d:6a:c8:3c: 9e:61:6f:cb:5a:cd:04:31:9b:aa:fe:6e:f9:50:59: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:32:57:83:67:4A:66:D8:AD:67:16:ED:AA:08:2E:B4:AF:55:B2:56 X509v3 Authority Key Identifier: keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ba:19:17:79:66:9f:55:13:83:64:45:6f:48:ae:b8:14:83: 2e:c2:ca:f7:77:99:67:f6:b5:98:c0:4e:5c:76:74:48:1a:f5: b3:10:fa:b7:7f:af:07:2d:0c:6c:f7:01:df:25:7e:72:e6:9c: 2c:37:6a:fc:7c:5d:2d:3d:cc:c5:af:bd:7e:f9:90:e1:a1:09: b6:9b:f1:b3:63:2f:28:97:fe:da:c9:46:59:98:63:a4:cf:ee: e3:84:7d:6d:92:4e:c0:74:0f:2e:bc:10:f9:e9:35:36:8e:ba: 43:bf:1d:b1:bb:4d:a8:0c:09:26:cc:34:01:db:3e:0a:76:03: c5:c8:b6:12:9e:d9:b7:68:e1:1b:1f:d5:0f:39:bd:19:ca:7a: 7f:b6:f2:94:5f:46:29:e3:a8:d4:c9:b9:c4:24:ad:0c:cc:86: 40:f3:71:66:7d:93:5a:4b:17:b7:00:62:5f:71:0b:21:16:46: 78:94:02:5e:04:58:6c:0f:dc:32:d0:a5:fc:e7:e2:bd:50:c1: db:90:64:af:fa:bf:af:29:e1:f0:97:29:7b:62:a5:6d:25:8f: 84:9b:1d:f1:32:df:c0:05:a7:1e:90:3a:ea:86:3f:8c:46:9f: 2b:80:c3:97:b5:4d:40:02:b3:49:ae:f0:95:8d:43:37:50:c1: 49:3d:e6:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIjyWaWph6eKzSzlH2tQT1S37gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNC RTM4REQ4ODAeFw0yNjEwMDcxMDMxMTlaFw0yNjEwMDgxMjU4MTlaMDMxMTAvBgNV BAMTKDg5MzI1NzgzNjc0QTY2RDhBRDY3MTZFREFBMDgyRUI0QUY1NUIyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvl6OoNtFHg6w9FiW9diifXoC cpMIXMqO3ClMj70Xl9OVaFnoKMx8ck04Svz+Z0EB7ZJh9Qx3hx4gR+hZlauccM0/ hEh52GopmUUa/7SpzzSjQy0ch2iiJTACdTbIXX1cXW/3mbL7ANB2Gb8CRkmONHZQ b6bqSX6UaVQ3XIWuw5FhqLhBDTZyKJ27UpowG7SmcuyPbdFnmENrH5Ht52o4J4WW wEhH42h322ibxRDhsPbo4iTxy/q/vSL3900v3yIhVRgJH1/e1sVeZAPWEYwbLH+7 WBM2mw1Rrrs2lY1yF68L+4Z3d7MN4DesfWrIPJ5hb8tazQQxm6r+bvlQWW27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTJXg2dKZtitZxbtqggutK9VslYwHwYDVR0j BBgwFoAULrjL56R5J3rAPugPNl3Yg7443YgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOTJlODktOTJkNS00MDY0LTk1MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdB NDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNCRTM4REQ4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRUI4Q0JFN0E0NzkyNzdBQzAzRUU4MEYzNjVERDg4M0JFMzhE RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4 ODNCRTM4REQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS6GRd5Zp9VE4NkRW9IrrgUgy7Cyvd3mWf2 tZjATlx2dEga9bMQ+rd/rwctDGz3Ad8lfnLmnCw3avx8XS09zMWvvX75kOGhCbab 8bNjLyiX/trJRlmYY6TP7uOEfW2STsB0Dy68EPnpNTaOukO/HbG7TagMCSbMNAHb Pgp2A8XIthKe2bdo4Rsf1Q85vRnKen+28pRfRinjqNTJucQkrQzMhkDzcWZ9k1pL F7cAYl9xCyEWRniUAl4EWGwP3DLQpfzn4r1QwduQZK/6v68p4fCXKXtipW0lj4Sb HfEy38AFpx6QOuqGP4xGnyuAw5e1TUACs0mu8JWNQzdQwUk95g0= -----END CERTIFICATE-----Generated at Thu Oct 8 00:47:49 2026 by rpki-client