$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft File: EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft (raw, json) Hash identifier: LLWtrtwFu6G9vM+s4kODvf6nu4mJt8aCnaPfyfF84FM= Subject key identifier: 33:D8:09:D3:8A:65:1A:5F:8B:72:F7:AD:06:7F:3C:EF:8A:1B:37:2B Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Certificate serial: 4272520DEFE45CD4420BDDD8E92808E9E4EACF99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft Manifest number: 68 Signing time: Sun 19 Jul 2026 04:22:42 +0000 Manifest this update: Sun 19 Jul 2026 04:17:42 +0000 Manifest next update: Mon 20 Jul 2026 08:21:42 +0000 Files and hashes: 1: EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl (hash: NCD3kZtnt1fOIVWaMQXEVBOYAAcPF2wKGPfE3sYWx6I=) 2: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=) 3: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=) 4: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=) 5: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: RSC52CIB9gdiO0mwgB0RPCA6fPz9z6KlTh9C7/oKbQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 08:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:72:52:0d:ef:e4:5c:d4:42:0b:dd:d8:e9:28:08:e9:e4:ea:cf:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Validity Not Before: Jul 19 04:17:42 2026 GMT Not After : Jul 20 08:21:42 2026 GMT Subject: CN=33D809D38A651A5F8B72F7AD067F3CEF8A1B372B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:b0:b3:bc:13:cf:4d:6e:47:b3:c1:03:2c: ca:c2:ec:03:60:60:e9:a3:48:2c:5b:8a:1d:21:1f: 19:d4:3d:91:1a:8d:96:fe:09:a8:7b:e9:7c:21:c2: fa:3c:96:99:24:b9:41:ee:eb:c3:14:dc:9e:93:83: 53:82:dd:b7:fa:4f:5a:94:c2:e5:92:60:e2:7a:05: 18:68:2c:5c:03:e0:bb:ef:83:11:ca:9a:e8:18:08: 3b:b7:86:53:81:ee:bd:93:b3:29:5e:9d:95:6d:70: 50:f4:81:a2:ab:18:50:b4:e0:6b:2b:5a:4d:95:13: 1b:86:2d:d6:ff:24:93:8a:9a:fe:67:2d:6a:4d:9b: 6a:de:a6:6e:a6:84:b6:73:a5:05:3a:40:a8:c9:40: 28:91:49:b5:bd:fb:a5:b1:e9:20:c3:96:71:42:e0: 3e:01:e7:fb:8e:05:aa:c7:b0:27:db:fb:97:bf:25: 3d:5d:57:42:9d:48:3a:f0:65:56:2e:23:a9:7d:2e: 02:7d:b4:e1:7f:c5:a3:08:d3:89:b2:1a:0c:9e:8e: d2:2d:3e:02:58:cb:db:70:96:6b:f6:05:3b:13:39: 1b:13:e0:7c:74:11:79:55:00:32:e7:25:73:68:74: 7d:13:6c:67:b7:9a:3f:fb:40:2b:27:94:15:3d:f3: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D8:09:D3:8A:65:1A:5F:8B:72:F7:AD:06:7F:3C:EF:8A:1B:37:2B X509v3 Authority Key Identifier: keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:12:4a:aa:13:0d:4d:94:53:aa:11:07:27:a4:46:e0:67:02: d1:c0:e7:53:fc:39:0f:9b:dc:ab:08:f5:bd:22:ec:f0:0b:f5: ad:64:07:15:b5:4d:78:b1:03:37:3a:73:ef:29:0c:a4:b3:f7: de:97:cf:e7:7e:c9:6b:be:42:de:8b:17:cd:21:59:76:bb:72: 56:e8:73:65:53:dd:21:7e:8a:fb:e3:b1:3a:17:2c:ca:79:84: 92:66:90:cb:d2:1e:53:69:fa:c6:ef:2b:7e:7b:ab:7f:b7:13: 47:2e:f0:c2:5b:ee:ed:d3:9f:ef:31:57:ca:53:6e:da:04:89: dd:dc:09:0e:18:ea:01:86:2b:17:7d:0f:a9:22:b3:69:42:6d: b0:49:08:2b:1e:ba:ee:67:bf:43:3a:3e:8c:70:42:56:27:f8: 9d:ee:e6:69:0a:0c:5c:9d:03:fa:5b:4f:49:45:40:7d:65:93: c2:d9:db:89:d3:1b:99:03:27:06:f0:9d:21:8e:0f:57:35:15: d1:fe:c6:a9:d8:fe:66:6c:d3:8c:6c:61:8a:96:7a:e6:86:55: 3c:89:15:5e:50:7b:fc:8f:ed:b3:17:ac:d7:0a:a2:58:ff:bf: ce:d1:30:63:73:76:ab:84:25:ae:be:49:3f:d9:02:50:10:09: 01:9f:28:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnJSDe/kXNRCC93Y6SgI6eTqz5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy MjgzRTI2OTAeFw0yNjA3MTkwNDE3NDJaFw0yNjA3MjAwODIxNDJaMDMxMTAvBgNV BAMTKDMzRDgwOUQzOEE2NTFBNUY4QjcyRjdBRDA2N0YzQ0VGOEExQjM3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+a7CzvBPPTW5Hs8EDLMrC7ANg YOmjSCxbih0hHxnUPZEajZb+Cah76Xwhwvo8lpkkuUHu68MU3J6Tg1OC3bf6T1qU wuWSYOJ6BRhoLFwD4LvvgxHKmugYCDu3hlOB7r2TsylenZVtcFD0gaKrGFC04Gsr Wk2VExuGLdb/JJOKmv5nLWpNm2repm6mhLZzpQU6QKjJQCiRSbW9+6Wx6SDDlnFC 4D4B5/uOBarHsCfb+5e/JT1dV0KdSDrwZVYuI6l9LgJ9tOF/xaMI04myGgyejtIt PgJYy9twlmv2BTsTORsT4Hx0EXlVADLnJXNodH0TbGe3mj/7QCsnlBU980dBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM9gJ04plGl+LcvetBn8874obNyswHwYDVR0j BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0 QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRD QTUyMjgzRTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8SSqoTDU2UU6oRByekRuBnAtHA51P8OQ+b 3KsI9b0i7PAL9a1kBxW1TXixAzc6c+8pDKSz996Xz+d+yWu+Qt6LF80hWXa7clbo c2VT3SF+ivvjsToXLMp5hJJmkMvSHlNp+sbvK357q3+3E0cu8MJb7u3Tn+8xV8pT btoEid3cCQ4Y6gGGKxd9D6kis2lCbbBJCCseuu5nv0M6PoxwQlYn+J3u5mkKDFyd A/pbT0lFQH1lk8LZ24nTG5kDJwbwnSGOD1c1FdH+xqnY/mZs04xsYYqWeuaGVTyJ FV5Qe/yP7bMXrNcKolj/v87RMGNzdquEJa6+ST/ZAlAQCQGfKD8= -----END CERTIFICATE-----Generated at Sun Jul 19 23:58:06 2026 by rpki-client