$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft File: EECD640133988CFFC0BF1D58079BA5921C041DB9.mft (raw, json) Hash identifier: tHcqifTD0fJeAQksS09FAMHi3Pt46R3LkaqGPdzPsP0= Subject key identifier: 5D:5A:45:65:7A:2C:DC:46:52:08:47:F0:3A:8B:EC:10:E7:AC:EE:AF Authority key identifier: EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9 Certificate issuer: /CN=EECD640133988CFFC0BF1D58079BA5921C041DB9 Certificate serial: 712EBF4CAFAFC294C309D3DE635DF7883B0FEFA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:00:58 +0000 Manifest this update: Mon 20 Jul 2026 19:55:58 +0000 Manifest next update: Tue 21 Jul 2026 23:34:58 +0000 Files and hashes: 1: EECD640133988CFFC0BF1D58079BA5921C041DB9.crl (hash: neG+17uSASw7dkgkPTOD3v0/DN/X86xVcBJ/v+F5pzs=) 2: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: PWHfuvJISm/0HGRYS1rgkQyVd8LnOVyJKU3uYwSY5nY=) 3: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: eoYACoknq6vSui9USgokAQRX8xZkoLYZMEzPSOjPAZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2e:bf:4c:af:af:c2:94:c3:09:d3:de:63:5d:f7:88:3b:0f:ef:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECD640133988CFFC0BF1D58079BA5921C041DB9 Validity Not Before: Jul 20 19:55:58 2026 GMT Not After : Jul 21 23:34:58 2026 GMT Subject: CN=5D5A45657A2CDC46520847F03A8BEC10E7ACEEAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:8a:ff:56:16:f5:20:ee:eb:50:c8:c7:2a: 2d:6d:ce:ff:e5:5d:39:59:a5:c8:a1:a1:f4:63:13: f0:bd:0c:fb:2f:6f:d1:10:db:65:33:2e:a2:6a:84: ee:74:4e:a3:58:b1:65:f1:18:49:12:42:1f:e2:15: 37:97:05:b1:f3:65:59:76:ce:49:be:7c:5b:bb:f2: b4:40:33:4d:45:15:07:cf:e2:31:8d:d3:c3:37:c5: 45:f2:61:0b:b3:82:90:94:2e:39:0c:eb:a5:1e:e7: 67:2c:59:d7:fe:0a:31:7a:b1:e5:b7:07:43:82:13: f5:b0:e6:ed:35:4c:87:97:54:41:17:47:6c:bd:0b: 39:46:cd:2a:85:a8:69:f2:52:18:05:f6:cd:d2:81: 8f:13:73:f2:37:0a:9f:79:10:3a:59:80:9a:8c:87: 6c:23:ea:d1:f1:80:e2:8e:ca:70:6f:7d:19:d8:6d: fb:5f:49:d4:03:38:dd:e9:77:b3:e0:49:a8:19:1c: 56:5e:d0:64:27:29:df:6b:30:10:73:25:4f:03:3f: b1:54:0a:4d:d4:20:20:50:76:c5:3e:2f:2c:ee:b2: 34:dd:fe:73:16:eb:d8:d4:8f:5f:55:0d:88:bc:c0: 53:ee:14:63:a8:84:09:97:9c:6b:52:d9:78:c2:ea: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5A:45:65:7A:2C:DC:46:52:08:47:F0:3A:8B:EC:10:E7:AC:EE:AF X509v3 Authority Key Identifier: keyid:EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:da:a3:74:15:13:d4:e8:6a:a1:97:34:8b:c0:a3:fa:f4:3c: 19:e5:b3:35:59:c8:e8:1e:3d:76:73:75:5e:5d:4d:6e:c3:e7: 5a:d9:ae:f3:1e:6e:d9:8b:1a:f8:68:9a:50:56:60:c4:2a:9c: 9b:8e:5e:dc:55:5f:21:1d:bc:5a:ae:05:6a:29:21:35:70:d7: a3:4f:5a:cb:53:7a:78:4a:96:8f:c0:9b:d1:41:cf:8e:b1:23: b0:23:15:09:2d:08:18:62:34:a0:b9:31:cd:0f:53:c5:92:30: 6b:92:e0:5a:3b:2a:87:0a:21:13:16:6b:14:1c:38:5b:8a:90: 15:a6:d8:38:51:ac:a9:e0:d4:41:05:6d:3b:c9:8a:62:09:50: 54:51:60:90:7e:84:71:d8:ea:21:6c:08:e8:28:b2:c6:c1:e4: 57:fb:f0:68:43:9b:1a:ed:f4:bc:e7:69:2e:0d:25:3c:cb:32: 01:37:0b:44:2a:f9:c0:fc:5d:02:65:94:e6:20:60:6c:42:ef: fc:10:8b:20:f4:4f:36:e3:88:2b:58:89:56:ff:42:d8:ba:af: 54:ee:94:db:09:7b:f3:fe:35:14:10:ab:0c:e0:35:a9:00:c6: a0:a4:f4:21:b1:5b:3a:1a:e8:91:83:ad:ce:02:11:1c:24:7e: b1:a8:e1:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcS6/TK+vwpTDCdPeY133iDsP76EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1OTIx QzA0MURCOTAeFw0yNjA3MjAxOTU1NThaFw0yNjA3MjEyMzM0NThaMDMxMTAvBgNV BAMTKDVENUE0NTY1N0EyQ0RDNDY1MjA4NDdGMDNBOEJFQzEwRTdBQ0VFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vYr/Vhb1IO7rUMjHKi1tzv/l XTlZpcihofRjE/C9DPsvb9EQ22UzLqJqhO50TqNYsWXxGEkSQh/iFTeXBbHzZVl2 zkm+fFu78rRAM01FFQfP4jGN08M3xUXyYQuzgpCULjkM66Ue52csWdf+CjF6seW3 B0OCE/Ww5u01TIeXVEEXR2y9CzlGzSqFqGnyUhgF9s3SgY8Tc/I3Cp95EDpZgJqM h2wj6tHxgOKOynBvfRnYbftfSdQDON3pd7PgSagZHFZe0GQnKd9rMBBzJU8DP7FU Ck3UICBQdsU+LyzusjTd/nMW69jUj19VDYi8wFPuFGOohAmXnGtS2XjC6q3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXVpFZXos3EZSCEfwOovsEOes7q8wHwYDVR0j BBgwFoAU7s1kATOYjP/Avx1YB5ulkhwEHbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5M2MyNWMtY2U1NS00ODcwLTgxNjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEz Mzk4OENGRkMwQkYxRDU4MDc5QkE1OTIxQzA0MURCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUNENjQwMTMzOTg4Q0ZGQzBCRjFENTgwNzlCQTU5MjFDMDQx REI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1 OTIxQzA0MURCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDao3QVE9ToaqGXNIvAo/r0PBnlszVZyOge PXZzdV5dTW7D51rZrvMebtmLGvhomlBWYMQqnJuOXtxVXyEdvFquBWopITVw16NP WstTenhKlo/Am9FBz46xI7AjFQktCBhiNKC5Mc0PU8WSMGuS4Fo7KocKIRMWaxQc OFuKkBWm2DhRrKng1EEFbTvJimIJUFRRYJB+hHHY6iFsCOgossbB5Ff78GhDmxrt 9LznaS4NJTzLMgE3C0Qq+cD8XQJllOYgYGxC7/wQiyD0TzbjiCtYiVb/Qti6r1Tu lNsJe/P+NRQQqwzgNakAxqCk9CGxWzoa6JGDrc4CERwkfrGo4eI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:52 2026 by rpki-client