$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft File: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft (raw, json) Hash identifier: EsCqhv4yULa89lOa6/7mf/uVh+cQKqrxOcy2RohVVF8= Subject key identifier: B7:14:7C:CF:FA:25:1F:57:36:34:44:86:49:03:38:EE:50:A2:A0:E3 Authority key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 Certificate issuer: /CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Certificate serial: 43D4B1DAFFEEAB55EF7446F7DAF6EE89336D0068 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft Manifest number: EA Signing time: Sun 25 Oct 2026 14:09:19 +0000 Manifest this update: Sun 25 Oct 2026 14:04:19 +0000 Manifest next update: Mon 26 Oct 2026 16:07:19 +0000 Files and hashes: 1: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: zvVBOICq5pKD2ig8o0wI4pJml9B5+zqomhS6S0vqWcI=) 2: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: 3fZAI9UVM7/UZBavMAQaA62u0fyHX83Z/pKamnkzV24=) 3: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl (hash: WU0HkLLjc1jFWU1GMo7Ib5MMgEX9puLVFQWMKmVytgY=) 4: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: h7oJXK+AgIlPZVwTrPckQLETitJhhEg1pMAjxm6/Vyw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d4:b1:da:ff:ee:ab:55:ef:74:46:f7:da:f6:ee:89:33:6d:00:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Validity Not Before: Oct 25 14:04:19 2026 GMT Not After : Oct 26 16:07:19 2026 GMT Subject: CN=B7147CCFFA251F5736344486490338EE50A2A0E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:da:a1:4b:b1:06:6f:4d:83:96:fd:01:89: 19:4d:6f:d0:42:a1:d5:33:6b:d4:81:0c:34:b3:94: 29:7f:5f:39:28:2d:a4:5e:d8:34:23:0b:1f:b5:01: 54:8d:6c:98:6b:3f:d8:21:56:c5:53:4b:bb:64:ec: c7:80:fc:a1:7d:32:56:75:45:ea:ba:7a:2f:b6:5e: 68:c2:7d:1c:a6:d3:e7:2b:f2:c3:26:7b:dc:ef:c5: 88:58:04:ec:9a:ff:05:8d:03:7e:15:a5:e4:40:df: b1:36:8d:7c:d7:80:27:93:ea:51:d7:ed:a6:5b:f2: d8:b6:76:d6:80:48:71:f8:8e:27:59:c2:b5:48:dd: b6:ad:d4:d8:28:0f:6a:06:46:c6:5e:24:01:82:9b: fe:05:c0:5a:1f:27:bc:a6:20:59:fb:56:6b:79:61: 60:4c:fa:d6:5f:9a:eb:af:03:b0:d5:33:c1:1e:7e: db:e7:dc:b2:7a:6f:9c:04:a6:b0:9a:8d:76:f2:ee: 2d:9d:a2:31:ab:a4:38:fa:f6:27:48:44:2b:1e:b8: 86:9c:c7:dd:af:57:1c:94:43:46:d9:eb:fc:e7:b8: 98:5b:be:b5:fd:69:57:cf:85:c1:52:71:73:c8:98: 57:04:53:72:00:1d:dc:ad:45:7b:ad:e1:cd:79:b5: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:7C:CF:FA:25:1F:57:36:34:44:86:49:03:38:EE:50:A2:A0:E3 X509v3 Authority Key Identifier: keyid:E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fc:2e:f8:45:9e:bf:71:4a:3b:32:dd:a8:e7:1b:d1:62:b8: 51:29:da:3e:5c:f9:44:6c:88:b9:77:e5:2f:b4:11:8c:42:e5: 4c:81:78:6b:cb:b8:d4:68:4a:82:56:3b:4d:e2:f6:6a:f3:00: 00:31:49:54:cb:d1:fd:c3:9b:97:4a:29:e5:6e:f5:71:c7:ac: cc:92:6c:5f:11:a5:54:71:09:72:75:55:b1:ff:48:09:78:1d: 62:cc:f4:a4:33:0a:00:32:fb:82:71:0c:85:3d:aa:e2:1d:5b: 7a:ec:1e:98:a3:88:f7:93:cf:ba:9c:da:16:88:b5:05:d9:61: 8f:80:6c:35:84:63:09:56:1b:5d:b4:d3:71:7e:e2:69:d8:2c: 82:97:12:ef:11:9e:0a:33:e4:62:0a:7b:d1:25:55:25:e5:1e: 82:07:24:a0:70:ba:8d:f5:f2:f1:6c:c4:1e:98:8e:56:57:b2: f4:e7:f9:23:4d:0a:15:27:90:94:66:e4:3f:5b:9b:f8:7b:fa: a6:8d:ce:bf:ad:de:8f:10:f9:9d:b9:8a:b2:49:3b:86:77:f4: 44:2e:6b:3e:35:fd:ca:97:7d:57:64:9f:19:b1:dd:60:42:ec: ab:d4:b4:83:f8:93:df:d5:61:93:9f:0c:33:c4:84:b1:81:ad: 46:30:f4:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9Sx2v/uq1XvdEb32vbuiTNtAGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFE N0RBODAwNzAeFw0yNjEwMjUxNDA0MTlaFw0yNjEwMjYxNjA3MTlaMDMxMTAvBgNV BAMTKEI3MTQ3Q0NGRkEyNTFGNTczNjM0NDQ4NjQ5MDMzOEVFNTBBMkEwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO09qhS7EGb02Dlv0BiRlNb9BC odUza9SBDDSzlCl/XzkoLaRe2DQjCx+1AVSNbJhrP9ghVsVTS7tk7MeA/KF9MlZ1 Req6ei+2XmjCfRym0+cr8sMme9zvxYhYBOya/wWNA34VpeRA37E2jXzXgCeT6lHX 7aZb8ti2dtaASHH4jidZwrVI3bat1NgoD2oGRsZeJAGCm/4FwFofJ7ymIFn7Vmt5 YWBM+tZfmuuvA7DVM8Eeftvn3LJ6b5wEprCajXby7i2dojGrpDj69idIRCseuIac x92vVxyUQ0bZ6/znuJhbvrX9aVfPhcFScXPImFcEU3IAHdytRXut4c15tTePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtxR8z/olH1c2NESGSQM47lCioOMwHwYDVR0j BBgwFoAU4N4i9Xe0JE7LMyuHtYMdStfagAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJjMWFiNzEtOTFkMC00ZjBiLWJiMjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3 N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFEN0RBODAwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMERFMjJGNTc3QjQyNDRFQ0IzMzJCODdCNTgzMUQ0QUQ3REE4 MDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFE NEFEN0RBODAwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADj8LvhFnr9xSjsy3ajnG9FiuFEp2j5c+URs iLl35S+0EYxC5UyBeGvLuNRoSoJWO03i9mrzAAAxSVTL0f3Dm5dKKeVu9XHHrMyS bF8RpVRxCXJ1VbH/SAl4HWLM9KQzCgAy+4JxDIU9quIdW3rsHpijiPeTz7qc2haI tQXZYY+AbDWEYwlWG12003F+4mnYLIKXEu8Rngoz5GIKe9ElVSXlHoIHJKBwuo31 8vFsxB6YjlZXsvTn+SNNChUnkJRm5D9bm/h7+qaNzr+t3o8Q+Z25irJJO4Z39EQu az41/cqXfVdknxmx3WBC7KvUtIP4k9/VYZOfDDPEhLGBrUYw9DI= -----END CERTIFICATE-----Generated at Mon Oct 26 05:49:56 2026 by rpki-client