$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft File: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft (raw, json) Hash identifier: sIAwOtFOxksUCmbQtkI0eRKYlJPNMI2HXOSRj/ZrPAM= Subject key identifier: 16:AE:F5:2C:D6:3E:1E:AE:B1:77:28:39:94:BC:4B:E1:69:38:1D:55 Authority key identifier: EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 Certificate issuer: /CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Certificate serial: 668C6E32C1022C6554F1B25E672358BFCDE929D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft Manifest number: BA Signing time: Thu 17 Sep 2026 05:09:51 +0000 Manifest this update: Thu 17 Sep 2026 05:04:51 +0000 Manifest next update: Fri 18 Sep 2026 08:29:51 +0000 Files and hashes: 1: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl (hash: f1N9nUjFkHoIhNkTv1LwWlCbBzaVHo1W8x6cBHz5v3Y=) 2: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: zQyUZlOFUHDGNe+npgwTsdpaoQy1XyYjr7ZYgl99pvg=) 3: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: GdDE8SC5CnBeQmp3oWwqYVk6uwDRjhVlj4+oTAdzWC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8c:6e:32:c1:02:2c:65:54:f1:b2:5e:67:23:58:bf:cd:e9:29:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Validity Not Before: Sep 17 05:04:51 2026 GMT Not After : Sep 18 08:29:51 2026 GMT Subject: CN=16AEF52CD63E1EAEB177283994BC4BE169381D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:f6:fb:41:f5:dd:be:3b:0e:e5:b7:5b:08: df:3b:18:6c:f3:5b:27:25:6d:6b:f8:e0:ca:3d:43: 7e:ee:c6:0d:b9:bd:0b:3a:55:30:7f:3c:47:20:67: 68:74:ec:9c:ed:65:e3:9e:9f:17:3d:4f:ed:e6:e1: 20:a4:e5:d2:7b:30:a9:10:d6:39:76:3a:93:7d:bb: 18:f6:81:d6:e9:45:04:d8:1e:6d:66:3b:d9:3e:f3: cb:e8:38:0d:e7:07:d6:d8:a6:96:65:2e:9e:1a:f5: ae:0f:f8:5f:de:a6:66:c6:dc:f0:8b:a0:56:67:e4: 92:23:4f:3c:5b:a2:11:1c:56:c0:69:fd:a6:74:01: cf:10:13:66:8f:8b:f0:94:04:41:97:7e:2a:4c:59: be:5d:60:a2:a2:80:98:81:0c:2f:b0:13:a7:dd:f8: f9:a8:71:a0:bb:60:79:94:42:71:64:74:d9:14:2d: 8b:b0:3f:bd:4c:7d:db:34:7a:09:6d:6f:0c:ca:a4: aa:02:6d:81:48:74:ca:2b:a2:0b:1b:58:29:4e:16: 7a:e5:37:eb:f3:9e:dd:5a:74:51:71:a8:98:a6:cd: ed:69:7f:e5:19:f3:63:21:3d:dd:62:64:f0:2f:52: 65:31:03:4c:09:14:83:56:25:47:33:a8:6b:f4:d8: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AE:F5:2C:D6:3E:1E:AE:B1:77:28:39:94:BC:4B:E1:69:38:1D:55 X509v3 Authority Key Identifier: keyid:EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f5:99:55:88:06:74:d8:ae:5a:0b:a9:39:82:0e:32:c7:1b: 76:9e:0b:76:f7:47:f9:20:42:0b:ca:f8:48:85:9e:05:0a:4d: a0:62:0b:63:be:72:dc:59:53:59:d2:15:7e:a2:e9:ba:66:4c: 1a:fd:1f:72:dd:36:a2:4b:53:c9:d4:de:c5:7f:43:f6:7e:d4: 26:a2:dc:98:62:0d:bd:d7:7f:1d:e3:a3:ac:3b:4c:a4:91:e2: b8:9f:b4:ae:b2:f7:5d:fc:b3:16:f6:d5:c5:67:89:7b:a9:ce: 25:ef:03:b1:72:12:10:73:00:4a:84:18:97:3b:e7:e5:76:4f: f1:af:b3:84:bf:b2:66:f1:16:a6:d6:83:b2:66:ef:8b:cc:55: 09:e0:46:c9:98:c4:12:23:04:98:cd:66:74:df:15:4a:50:e4: c4:d0:8a:35:bb:b5:3d:4e:8d:6d:6b:38:17:ce:23:20:b4:a3: 0b:9d:3c:8e:48:cd:bb:c3:79:00:c7:61:1a:e1:43:ec:13:4f: 24:b6:c6:dc:74:7c:5c:67:74:53:e6:d8:83:78:bb:a5:81:81: 76:a6:8c:43:d9:b7:45:f3:74:87:dd:fb:51:21:a0:56:71:52: de:23:16:d5:b7:a8:f6:84:bb:05:a7:86:41:5a:4b:f0:19:d0: e2:ef:f7:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoxuMsECLGVU8bJeZyNYv83pKdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2 MjhDNkE1NDAeFw0yNjA5MTcwNTA0NTFaFw0yNjA5MTgwODI5NTFaMDMxMTAvBgNV BAMTKDE2QUVGNTJDRDYzRTFFQUVCMTc3MjgzOTk0QkM0QkUxNjkzODFENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUfb7QfXdvjsO5bdbCN87GGzz WyclbWv44Mo9Q37uxg25vQs6VTB/PEcgZ2h07JztZeOenxc9T+3m4SCk5dJ7MKkQ 1jl2OpN9uxj2gdbpRQTYHm1mO9k+88voOA3nB9bYppZlLp4a9a4P+F/epmbG3PCL oFZn5JIjTzxbohEcVsBp/aZ0Ac8QE2aPi/CUBEGXfipMWb5dYKKigJiBDC+wE6fd +PmocaC7YHmUQnFkdNkULYuwP71Mfds0egltbwzKpKoCbYFIdMorogsbWClOFnrl N+vznt1adFFxqJimze1pf+UZ82MhPd1iZPAvUmUxA0wJFINWJUczqGv02LyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFq71LNY+Hq6xdyg5lLxL4Wk4HVUwHwYDVR0j BBgwFoAU7ovrqL5NRPQ+z9n/V4noeGKMalQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkODUwYTgtYWJiOS00NDgyLWE1YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThC RTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2MjhDNkE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRThCRUJBOEJFNEQ0NEY0M0VDRkQ5RkY1Nzg5RTg3ODYyOEM2 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4 Nzg2MjhDNkE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD1mVWIBnTYrloLqTmCDjLHG3aeC3b3R/kg QgvK+EiFngUKTaBiC2O+ctxZU1nSFX6i6bpmTBr9H3LdNqJLU8nU3sV/Q/Z+1Cai 3JhiDb3Xfx3jo6w7TKSR4riftK6y9138sxb21cVniXupziXvA7FyEhBzAEqEGJc7 5+V2T/Gvs4S/smbxFqbWg7Jm74vMVQngRsmYxBIjBJjNZnTfFUpQ5MTQijW7tT1O jW1rOBfOIyC0owudPI5IzbvDeQDHYRrhQ+wTTyS2xtx0fFxndFPm2IN4u6WBgXam jEPZt0XzdIfd+1EhoFZxUt4jFtW3qPaEuwWnhkFaS/AZ0OLv94c= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:04 2026 by rpki-client