$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft File: EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft (raw, json) Hash identifier: EkwGDCHiXqJ8SnuMTkzibCNhCoL0oMQPqiY0XMFySbI= Subject key identifier: 94:18:98:DC:D8:6B:DF:07:B8:74:59:CF:C9:FA:0F:21:F7:DB:DF:15 Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F Certificate issuer: /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Certificate serial: 35155A6F22BA46B4DA77B004E1A82A2EA48998F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 13:34:23 +0000 Manifest this update: Sun 01 Nov 2026 13:29:23 +0000 Manifest next update: Mon 02 Nov 2026 15:46:23 +0000 Files and hashes: 1: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: pj1vmNVgdJMcLPpwXDPbTSTqYs/nj1UjJZcEGgiuKJM=) 2: EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl (hash: qzUL5eCbfUWqwwIoublpNnAIY1VQeRaEn2DbsjVcl9M=) 3: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: CZezg3V9YTA7rAg0HQHAWG4rHwKphI57kR4SMjyKwas=) 4: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:15:5a:6f:22:ba:46:b4:da:77:b0:04:e1:a8:2a:2e:a4:89:98:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Validity Not Before: Nov 1 13:29:23 2026 GMT Not After : Nov 2 15:46:23 2026 GMT Subject: CN=941898DCD86BDF07B87459CFC9FA0F21F7DBDF15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:8b:8d:d8:19:ae:de:f7:b1:a4:89:f8:86: a6:87:aa:8f:41:1c:7c:5e:4f:49:1c:04:65:f5:4a: db:7a:06:99:4b:b9:9c:60:30:7e:89:17:46:94:4f: c0:51:c9:6b:a2:76:78:ff:8d:7c:24:a1:46:00:37: f9:af:dc:2d:da:f5:25:a2:b3:19:e2:aa:0b:30:9d: 6f:ab:f1:b4:86:db:f3:9f:1a:e2:d7:27:e1:73:3a: 84:a5:1a:13:02:3b:fd:0e:46:6a:81:08:4e:96:6d: b4:57:ef:66:22:e0:42:09:0d:6e:26:de:1b:c5:92: ec:10:35:3f:92:75:db:ca:56:c9:79:91:56:48:43: 93:6b:05:50:5d:db:23:a2:2c:51:04:87:35:b8:3b: 66:6a:5a:51:7a:95:83:f3:53:9d:a1:a5:40:eb:68: 9d:62:be:4b:dd:03:a3:c3:f4:3a:b3:68:2e:9d:c1: e0:e5:15:23:00:59:17:e7:d0:e1:b7:18:85:19:2e: bd:31:a5:89:e9:6d:11:a7:2a:23:6e:eb:bb:8d:87: 45:9d:6a:b0:c5:55:40:6f:5e:3a:f3:a4:bf:a8:01: dc:89:af:58:1c:8d:7a:42:c6:fe:f4:9a:46:12:74: fd:87:3c:b6:f1:81:3f:13:f0:70:fc:c4:8f:d4:eb: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:98:DC:D8:6B:DF:07:B8:74:59:CF:C9:FA:0F:21:F7:DB:DF:15 X509v3 Authority Key Identifier: keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7d:23:d8:ff:0e:b5:22:cf:0e:11:dc:79:ea:f2:41:1f:a5: 60:73:9d:a3:32:57:31:d9:0d:4d:83:41:f4:e5:e9:e7:33:5d: 7b:81:fe:68:55:9c:7d:55:2c:82:18:ac:43:03:31:09:2c:bb: 45:aa:c6:e6:53:5e:ba:5b:eb:ee:d9:09:67:ec:50:fc:8a:bc: 64:4e:76:64:67:ad:42:f0:81:fc:c2:1e:a6:2b:9e:e2:d8:2b: 0a:db:21:44:4f:a4:e3:a1:9f:b6:2c:45:cd:6e:b8:5b:53:a3: ff:4c:2c:ed:21:7e:4a:98:80:1b:b3:bc:ea:65:49:d4:5d:dd: 16:b5:64:69:41:cd:31:d3:c2:b8:aa:38:b8:af:a3:96:81:c6: 40:a0:c0:f7:b2:b6:c0:cb:c9:fe:3a:42:45:e7:da:7f:3f:ba: 2d:6a:38:fc:d4:b2:2f:04:c1:20:11:d6:41:48:f3:45:91:8d: 6d:22:f7:9a:a9:df:41:dd:df:3a:f2:db:e0:f7:9d:a8:ef:0d: 31:78:b1:f2:b1:b4:72:10:f5:d6:63:7f:e0:60:c7:41:a9:c3: 6e:7c:da:d8:8d:c1:28:2f:10:3c:7a:75:20:d3:ab:7f:f0:98: e3:e9:6a:6a:a7:46:db:a5:2f:c8:27:5c:dc:1b:80:73:60:82: 17:53:b6:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRVabyK6RrTad7AE4agqLqSJmPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRG NTUxMDczRjAeFw0yNjExMDExMzI5MjNaFw0yNjExMDIxNTQ2MjNaMDMxMTAvBgNV BAMTKDk0MTg5OERDRDg2QkRGMDdCODc0NTlDRkM5RkEwRjIxRjdEQkRGMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9IuN2Bmu3vexpIn4hqaHqo9B HHxeT0kcBGX1Stt6BplLuZxgMH6JF0aUT8BRyWuidnj/jXwkoUYAN/mv3C3a9SWi sxniqgswnW+r8bSG2/OfGuLXJ+FzOoSlGhMCO/0ORmqBCE6WbbRX72Yi4EIJDW4m 3hvFkuwQNT+SddvKVsl5kVZIQ5NrBVBd2yOiLFEEhzW4O2ZqWlF6lYPzU52hpUDr aJ1ivkvdA6PD9DqzaC6dweDlFSMAWRfn0OG3GIUZLr0xpYnpbRGnKiNu67uNh0Wd arDFVUBvXjrzpL+oAdyJr1gcjXpCxv70mkYSdP2HPLbxgT8T8HD8xI/U68mhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlBiY3Nhr3we4dFnPyfoPIffb3xUwHwYDVR0j BBgwFoAU7sgpj2NR4NHpCZ2J1SwhvfVRBz8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkOTI2OGItNWU2MS00M2IyLWE2MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2 MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRGNTUxMDczRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUM4Mjk4RjYzNTFFMEQxRTkwOTlEODlENTJDMjFCREY1NTEw NzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIx QkRGNTUxMDczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHx9I9j/DrUizw4R3Hnq8kEfpWBznaMyVzHZ DU2DQfTl6eczXXuB/mhVnH1VLIIYrEMDMQksu0WqxuZTXrpb6+7ZCWfsUPyKvGRO dmRnrULwgfzCHqYrnuLYKwrbIURPpOOhn7YsRc1uuFtTo/9MLO0hfkqYgBuzvOpl SdRd3Ra1ZGlBzTHTwriqOLivo5aBxkCgwPeytsDLyf46QkXn2n8/ui1qOPzUsi8E wSAR1kFI80WRjW0i95qp30Hd3zry2+D3najvDTF4sfKxtHIQ9dZjf+Bgx0Gpw258 2tiNwSgvEDx6dSDTq3/wmOPpamqnRtulL8gnXNwbgHNgghdTtq8= -----END CERTIFICATE-----Generated at Sun Nov 1 21:05:52 2026 by rpki-client