$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft File: EEB70538199D447E9C92F6547EB45B40E5762DCF.mft (raw, json) Hash identifier: pMX3pBqaWlBxahu8EOXuHQ5LKXXp3C1qzIFKFLEeQKg= Subject key identifier: 95:AF:4F:57:FD:E3:4A:7E:9F:79:A7:5E:D7:93:90:79:B6:9C:41:A4 Authority key identifier: EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF Certificate issuer: /CN=EEB70538199D447E9C92F6547EB45B40E5762DCF Certificate serial: 604E2A89EFDC0C4206834A23731F32C3341156DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 22:56:26 +0000 Manifest this update: Sun 01 Nov 2026 22:51:26 +0000 Manifest next update: Tue 03 Nov 2026 01:50:26 +0000 Files and hashes: 1: EEB70538199D447E9C92F6547EB45B40E5762DCF.crl (hash: WOtFHEPfEwudvBCEAr9sR2pKDXM+xtbVdDAZpI7QAO4=) 2: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: B00llEOl+Xcrvf7jG7vXFkd1/vFdQcRM2H7X7JWrIjI=) 3: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: dmYYEZ8QZwPKYE6vCrbxSUxZzCU8Re2LNJQ4nrlJQ94=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.crl rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4e:2a:89:ef:dc:0c:42:06:83:4a:23:73:1f:32:c3:34:11:56:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB70538199D447E9C92F6547EB45B40E5762DCF Validity Not Before: Nov 1 22:51:26 2026 GMT Not After : Nov 3 01:50:26 2026 GMT Subject: CN=95AF4F57FDE34A7E9F79A75ED7939079B69C41A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:75:d3:d7:d5:c5:bd:dd:cd:46:8c:4a:28: 8e:48:11:38:da:37:cf:85:4b:2c:92:3c:27:88:4f: f0:30:ed:13:69:7b:02:6a:b2:ed:4a:be:fc:08:ff: 6d:2e:e9:e2:d7:63:76:b5:8c:78:e1:06:e7:37:cd: 4b:ed:f9:75:70:87:97:be:ef:70:53:33:8e:1c:44: 4d:dc:e3:e9:3c:f8:7c:f7:09:34:2c:ee:8a:75:e9: 47:f3:f9:f9:3b:d9:52:46:19:14:74:c8:72:eb:0f: 75:fc:48:20:6d:b2:62:73:b8:04:f2:cd:f6:76:f0: 79:b8:83:48:de:80:e7:71:e2:4c:1c:df:81:5c:65: 11:16:06:3d:dd:aa:10:d5:bf:60:15:de:16:9a:43: 73:14:fc:03:2f:4e:3c:86:2c:8c:d2:c8:66:0d:c2: 14:25:3c:8b:3c:95:59:d8:0c:9e:25:7b:af:d9:21: ad:ef:8b:b4:74:e1:fa:1f:97:f1:35:3e:34:48:66: ae:c3:86:f2:4a:18:93:73:9c:29:00:df:a8:7b:4c: fd:3f:61:10:ba:9d:4f:16:42:12:12:f4:bc:d4:ab: cc:62:43:41:bf:ed:82:b9:51:f2:7f:92:36:c2:7f: 8a:39:38:fd:a2:67:4a:e9:db:16:39:54:ab:c5:2b: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:4F:57:FD:E3:4A:7E:9F:79:A7:5E:D7:93:90:79:B6:9C:41:A4 X509v3 Authority Key Identifier: keyid:EE:B7:05:38:19:9D:44:7E:9C:92:F6:54:7E:B4:5B:40:E5:76:2D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEB70538199D447E9C92F6547EB45B40E5762DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/EEB70538199D447E9C92F6547EB45B40E5762DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:43:7c:b9:a8:ca:07:97:a6:4f:72:83:96:5b:93:b7:02:7b: 93:b8:70:9d:2c:1f:9a:8a:f9:c3:5d:26:ac:86:0d:bf:65:71: 3a:0a:e7:32:89:8e:38:ec:ca:71:0b:c4:da:cc:b6:68:ef:e3: ce:02:a4:87:56:d3:1d:6d:5f:c2:fe:27:da:b1:fe:1d:15:7f: 3d:b0:4f:81:d7:79:5a:65:06:1f:6c:e5:ed:ca:36:de:dc:7f: 79:92:49:4c:a4:51:2a:c7:6e:29:0d:b5:f8:7a:a6:6b:cb:0f: f3:4c:c0:fb:a7:32:8a:28:89:89:b4:81:ad:69:ce:26:54:50: af:3e:f4:68:cf:79:b1:16:79:bd:5f:12:d4:f6:24:65:03:58: 5e:f0:7e:25:f0:ce:41:03:7d:06:fb:74:43:30:02:ce:ac:ff: 9d:dc:0f:63:90:ef:07:bb:08:45:20:2f:11:fa:cf:e2:f2:25: 2a:15:f3:30:c9:5a:76:56:e6:cb:b3:d3:be:ad:8f:32:23:48: a6:67:bc:96:e5:63:15:34:93:63:2f:49:eb:77:11:ed:d7:f2: 7f:cf:2f:cf:86:0b:d3:8a:ff:05:b8:a3:83:e7:fb:e9:34:da: 63:e3:77:f3:c1:20:53:60:37:cc:45:79:bd:97:02:38:5a:52: 90:35:29:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYE4qie/cDEIGg0ojcx8ywzQRVt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCNzA1MzgxOTlENDQ3RTlDOTJGNjU0N0VCNDVCNDBF NTc2MkRDRjAeFw0yNjExMDEyMjUxMjZaFw0yNjExMDMwMTUwMjZaMDMxMTAvBgNV BAMTKDk1QUY0RjU3RkRFMzRBN0U5Rjc5QTc1RUQ3OTM5MDc5QjY5QzQxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8P3XT19XFvd3NRoxKKI5IETja N8+FSyySPCeIT/Aw7RNpewJqsu1KvvwI/20u6eLXY3a1jHjhBuc3zUvt+XVwh5e+ 73BTM44cRE3c4+k8+Hz3CTQs7op16Ufz+fk72VJGGRR0yHLrD3X8SCBtsmJzuATy zfZ28Hm4g0jegOdx4kwc34FcZREWBj3dqhDVv2AV3haaQ3MU/AMvTjyGLIzSyGYN whQlPIs8lVnYDJ4le6/ZIa3vi7R04fofl/E1PjRIZq7DhvJKGJNznCkA36h7TP0/ YRC6nU8WQhIS9LzUq8xiQ0G/7YK5UfJ/kjbCf4o5OP2iZ0rp2xY5VKvFK4hLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUla9PV/3jSn6feade15OQebacQaQwHwYDVR0j BBgwFoAU7rcFOBmdRH6ckvZUfrRbQOV2Lc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc2Yzc4MjUtOGIzZC00NjZjLWJhMGMtOTk1NTNjMWQ3M2VhLzAvRUVCNzA1Mzgx OTlENDQ3RTlDOTJGNjU0N0VCNDVCNDBFNTc2MkRDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUI3MDUzODE5OUQ0NDdFOUM5MkY2NTQ3RUI0NUI0MEU1NzYy RENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc2Yzc4MjUtOGIzZC00NjZjLWJh MGMtOTk1NTNjMWQ3M2VhLzAvRUVCNzA1MzgxOTlENDQ3RTlDOTJGNjU0N0VCNDVC NDBFNTc2MkRDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhDfLmoygeXpk9yg5Zbk7cCe5O4cJ0sH5qK +cNdJqyGDb9lcToK5zKJjjjsynELxNrMtmjv484CpIdW0x1tX8L+J9qx/h0Vfz2w T4HXeVplBh9s5e3KNt7cf3mSSUykUSrHbikNtfh6pmvLD/NMwPunMoooiYm0ga1p ziZUUK8+9GjPebEWeb1fEtT2JGUDWF7wfiXwzkEDfQb7dEMwAs6s/53cD2OQ7we7 CEUgLxH6z+LyJSoV8zDJWnZW5suz076tjzIjSKZnvJblYxU0k2MvSet3Ee3X8n/P L8+GC9OK/wW4o4Pn++k02mPjd/PBIFNgN8xFeb2XAjhaUpA1KZU= -----END CERTIFICATE-----Generated at Mon Nov 2 14:17:37 2026 by rpki-client