$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft File: EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft (raw, json) Hash identifier: Pho6QJDg7VKNIDAv2pQvEfVTHjBta98+4RLYV+iLEc4= Subject key identifier: E9:E4:06:3B:7E:A0:A7:C6:6C:42:E8:7A:E4:1A:6D:A3:75:24:DA:B2 Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Certificate serial: 3E5799BB5755C882A3FF4CD1BEF691AEB0752A2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 09:08:31 +0000 Manifest this update: Thu 03 Sep 2026 09:03:31 +0000 Manifest next update: Fri 04 Sep 2026 09:50:31 +0000 Files and hashes: 1: EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl (hash: 8Oita+zzTtDIcElTW4R6y1a4weWXg4E+ko53Iugqd4E=) 2: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=) 3: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: RSC52CIB9gdiO0mwgB0RPCA6fPz9z6KlTh9C7/oKbQo=) 4: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=) 5: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:57:99:bb:57:55:c8:82:a3:ff:4c:d1:be:f6:91:ae:b0:75:2a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Validity Not Before: Sep 3 09:03:31 2026 GMT Not After : Sep 4 09:50:31 2026 GMT Subject: CN=E9E4063B7EA0A7C66C42E87AE41A6DA37524DAB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:12:28:70:da:a3:68:7e:b1:2c:9f:9b:a3:6e: 96:f5:44:c3:d9:f5:9f:2b:08:ae:d5:9b:b3:4b:14: 23:80:47:1b:92:6b:41:c2:bf:c2:7f:6d:dc:66:cf: 73:5b:6a:c2:31:11:48:eb:a9:dc:f6:a2:cc:2d:99: ad:c0:4d:99:6c:4b:31:0c:e5:53:ed:7f:b5:3f:e3: 3b:34:a4:2a:91:45:e8:f0:b4:7b:25:cf:3e:be:37: d9:cf:92:fc:59:b7:04:d5:8a:2b:06:cf:0f:2b:30: ad:7d:d7:8a:5a:e1:92:60:bd:77:35:51:76:c2:ff: d4:8d:58:75:e9:8d:53:1f:50:b1:d0:0a:36:11:29: 81:f7:b0:6d:8c:ab:1a:71:04:e4:1e:09:02:5e:68: e7:35:80:e8:cc:5b:f7:85:e5:4d:8e:00:7f:77:30: be:f8:d7:be:89:05:53:aa:b2:9c:fc:b5:4a:6f:c8: 72:dd:4f:0d:16:e4:e9:58:80:e1:b0:0c:a8:ad:85: 21:64:00:80:1e:1b:9a:07:2b:9d:02:ad:34:3b:55: eb:34:ff:33:c6:07:f2:b1:16:fa:77:46:41:a3:92: a1:18:51:79:18:b2:61:e4:75:4f:4b:73:c4:0f:34: 70:71:44:52:49:7a:f7:d4:d2:4a:7d:61:f7:c5:d8: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E4:06:3B:7E:A0:A7:C6:6C:42:E8:7A:E4:1A:6D:A3:75:24:DA:B2 X509v3 Authority Key Identifier: keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f9:13:60:0b:2e:7b:84:c3:c5:c6:fb:ec:1a:dc:3f:3a:bc: df:23:31:e3:81:39:f2:53:f6:57:52:f5:41:04:8b:64:80:a7: 72:dd:e7:51:1b:0b:43:dd:48:ab:78:40:da:7d:34:69:1d:a2: bc:36:83:76:82:28:74:0c:fb:1b:83:a7:4b:2f:dd:a4:5c:e2: d9:18:64:3f:fc:11:a9:89:f1:44:76:7a:40:ea:7c:a0:30:b8: 58:0e:e4:39:ea:36:a7:f7:60:02:0f:82:73:80:fe:8d:b1:8e: 8d:b6:3a:3d:7c:0f:ec:17:73:92:8a:ab:36:70:2b:f1:a4:7f: 1d:5c:68:bf:bd:fe:5d:e9:ec:c5:28:83:c9:87:d3:e6:c0:6a: c2:3a:a0:48:92:61:ca:4b:e3:e5:0f:5e:3b:bc:03:6c:d1:68: 51:b9:b6:73:95:f4:38:f3:4c:d7:ac:cf:ac:55:de:76:b4:a3: e2:ac:fc:30:9e:38:3a:9c:dc:52:e5:e7:c8:7c:92:d1:0b:78: ea:8e:25:36:a1:c5:39:35:9e:b2:7b:b6:56:18:57:52:38:15: 96:5a:c1:70:b8:a6:0f:4d:35:9b:6d:26:3c:6a:6d:b5:b6:5f: 67:89:85:f4:5d:9f:7c:da:f1:ff:64:84:e6:4f:53:2e:ef:5e: d1:7b:73:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPleZu1dVyIKj/0zRvvaRrrB1KiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy MjgzRTI2OTAeFw0yNjA5MDMwOTAzMzFaFw0yNjA5MDQwOTUwMzFaMDMxMTAvBgNV BAMTKEU5RTQwNjNCN0VBMEE3QzY2QzQyRTg3QUU0MUE2REEzNzUyNERBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEihw2qNofrEsn5ujbpb1RMPZ 9Z8rCK7Vm7NLFCOARxuSa0HCv8J/bdxmz3NbasIxEUjrqdz2oswtma3ATZlsSzEM 5VPtf7U/4zs0pCqRRejwtHslzz6+N9nPkvxZtwTViisGzw8rMK1914pa4ZJgvXc1 UXbC/9SNWHXpjVMfULHQCjYRKYH3sG2MqxpxBOQeCQJeaOc1gOjMW/eF5U2OAH93 ML74176JBVOqspz8tUpvyHLdTw0W5OlYgOGwDKithSFkAIAeG5oHK50CrTQ7Ves0 /zPGB/KxFvp3RkGjkqEYUXkYsmHkdU9Lc8QPNHBxRFJJevfU0kp9YffF2EU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6eQGO36gp8ZsQuh65Bpto3Uk2rIwHwYDVR0j BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0 QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRD QTUyMjgzRTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/5E2ALLnuEw8XG++wa3D86vN8jMeOBOfJT 9ldS9UEEi2SAp3Ld51EbC0PdSKt4QNp9NGkdorw2g3aCKHQM+xuDp0sv3aRc4tkY ZD/8EamJ8UR2ekDqfKAwuFgO5DnqNqf3YAIPgnOA/o2xjo22Oj18D+wXc5KKqzZw K/Gkfx1caL+9/l3p7MUog8mH0+bAasI6oEiSYcpL4+UPXju8A2zRaFG5tnOV9Djz TNesz6xV3na0o+Ks/DCeODqc3FLl58h8ktELeOqOJTahxTk1nrJ7tlYYV1I4FZZa wXC4pg9NNZttJjxqbbW2X2eJhfRdn3za8f9khOZPUy7vXtF7c7Y= -----END CERTIFICATE-----Generated at Thu Sep 3 12:37:56 2026 by rpki-client