$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft File: EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft (raw, json) Hash identifier: KIf8PmUS9TFQEoSZJobIqAlxmUwHxiCcPwA8cMxN57A= Subject key identifier: 63:BF:15:FE:BD:49:85:A4:FE:E9:40:C4:A0:3E:15:8C:A5:67:92:6F Authority key identifier: EE:D7:3C:93:9D:79:79:D0:2D:1E:99:83:FE:62:CF:B7:4B:68:D8:5A Certificate issuer: /CN=EED73C939D7979D02D1E9983FE62CFB74B68D85A Certificate serial: 7ED3071FE73FD1EEDBCB5553D7823E5904D3AD7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EED73C939D7979D02D1E9983FE62CFB74B68D85A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 06:31:37 +0000 Manifest this update: Thu 17 Sep 2026 06:26:37 +0000 Manifest next update: Fri 18 Sep 2026 09:49:37 +0000 Files and hashes: 1: EED73C939D7979D02D1E9983FE62CFB74B68D85A.crl (hash: n/Me5lBn49bUHKJl+R7YjDqZitqDT6f4RPO18X8boNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.crl rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EED73C939D7979D02D1E9983FE62CFB74B68D85A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d3:07:1f:e7:3f:d1:ee:db:cb:55:53:d7:82:3e:59:04:d3:ad:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EED73C939D7979D02D1E9983FE62CFB74B68D85A Validity Not Before: Sep 17 06:26:37 2026 GMT Not After : Sep 18 09:49:37 2026 GMT Subject: CN=63BF15FEBD4985A4FEE940C4A03E158CA567926F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:15:f1:9b:66:38:44:71:f1:37:36:0d:57: 32:ad:dc:f4:eb:21:59:d3:65:8f:66:a6:fb:96:7d: 3f:7d:1f:c6:cc:9b:85:84:95:6a:b4:c1:87:14:9a: 6b:28:62:bc:c8:2f:d6:d3:fb:b6:24:fd:48:59:58: 93:e1:9e:73:07:0a:f9:3d:e8:ca:b0:07:03:03:f8: 03:3c:24:bd:14:db:38:13:00:b4:14:ec:5e:98:dc: 4e:9e:91:9b:0e:34:89:cf:ca:4b:2a:c9:16:cc:67: 4d:85:46:de:12:5c:86:ae:9a:22:be:97:79:45:73: bc:9c:66:8d:49:5f:12:98:b0:44:c7:31:ce:26:40: 63:77:c4:02:bb:2d:25:b8:71:92:10:3b:dc:9f:36: 3f:30:92:38:22:0f:00:16:95:c3:c7:6d:42:5c:32: c8:f4:cf:c5:37:8a:d1:d9:bd:48:9d:44:1e:09:33: 86:04:81:16:57:cb:c8:c1:b2:ad:79:c9:32:4b:47: f6:82:04:16:53:8c:3e:d3:50:e9:51:d4:61:1f:8e: f1:44:49:0f:5c:cc:93:6b:79:49:6f:96:af:88:ac: 1f:a9:f2:94:1a:d1:2a:b7:5a:bc:19:9d:16:0c:57: e8:2f:c6:55:66:bc:e6:cf:30:54:5e:17:c7:cf:1e: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:15:FE:BD:49:85:A4:FE:E9:40:C4:A0:3E:15:8C:A5:67:92:6F X509v3 Authority Key Identifier: keyid:EE:D7:3C:93:9D:79:79:D0:2D:1E:99:83:FE:62:CF:B7:4B:68:D8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EED73C939D7979D02D1E9983FE62CFB74B68D85A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/EED73C939D7979D02D1E9983FE62CFB74B68D85A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2d:55:24:bf:5b:d0:0e:03:ac:db:e5:4d:c0:82:63:0e:73: 78:b3:52:5f:89:02:6a:c4:3b:16:52:85:8a:14:7a:71:4b:54: f3:80:53:4e:56:23:e0:a0:d6:73:65:94:26:a1:54:9f:df:53: d3:2e:03:28:c5:ef:55:ee:ca:14:6c:d8:03:a4:f5:8a:14:60: 18:ea:49:48:2e:64:57:3a:13:0c:ef:10:b3:f2:2f:d8:67:48: 83:e1:ae:f9:bb:de:dd:b6:61:60:0f:f2:b2:91:ee:0c:bb:d5: f4:16:19:c6:50:72:99:2a:15:40:60:91:f1:52:d0:87:9e:e0: 48:73:83:ca:be:ca:3b:c9:9c:58:18:b1:52:69:0b:9b:4f:4e: 45:09:4b:8c:15:37:9e:32:c7:93:e9:9c:73:45:bb:83:03:0f: 84:18:2f:07:26:30:f3:32:1d:7a:98:38:9d:80:f8:13:d8:55: 0a:ea:9a:22:d9:eb:81:5b:c9:0f:d4:05:2f:3e:f7:9b:49:41: 93:19:44:ce:3d:9b:53:dc:54:6b:b6:ba:19:86:89:e4:99:8c: 33:cd:01:79:77:22:85:46:e4:0c:2c:81:fe:3c:70:cd:0c:f5: 9d:63:10:34:44:13:3e:07:f3:da:60:6d:de:d3:ad:da:1d:dd: 66:e9:c7:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftMHH+c/0e7by1VT14I+WQTTrX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVENzNDOTM5RDc5NzlEMDJEMUU5OTgzRkU2MkNGQjc0 QjY4RDg1QTAeFw0yNjA5MTcwNjI2MzdaFw0yNjA5MTgwOTQ5MzdaMDMxMTAvBgNV BAMTKDYzQkYxNUZFQkQ0OTg1QTRGRUU5NDBDNEEwM0UxNThDQTU2NzkyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOxhXxm2Y4RHHxNzYNVzKt3PTr IVnTZY9mpvuWfT99H8bMm4WElWq0wYcUmmsoYrzIL9bT+7Yk/UhZWJPhnnMHCvk9 6MqwBwMD+AM8JL0U2zgTALQU7F6Y3E6ekZsONInPyksqyRbMZ02FRt4SXIaumiK+ l3lFc7ycZo1JXxKYsETHMc4mQGN3xAK7LSW4cZIQO9yfNj8wkjgiDwAWlcPHbUJc Msj0z8U3itHZvUidRB4JM4YEgRZXy8jBsq15yTJLR/aCBBZTjD7TUOlR1GEfjvFE SQ9czJNreUlvlq+IrB+p8pQa0Sq3WrwZnRYMV+gvxlVmvObPMFReF8fPHoH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY78V/r1JhaT+6UDEoD4VjKVnkm8wHwYDVR0j BBgwFoAU7tc8k515edAtHpmD/mLPt0to2FowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmYxMjc0YzYtNzgzYy00ZjNkLWE5YjYtNzViM2I0NmY4NTRjLzAvRUVENzNDOTM5 RDc5NzlEMDJEMUU5OTgzRkU2MkNGQjc0QjY4RDg1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUQ3M0M5MzlENzk3OUQwMkQxRTk5ODNGRTYyQ0ZCNzRCNjhE ODVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvRUVENzNDOTM5RDc5NzlEMDJEMUU5OTgzRkU2MkNG Qjc0QjY4RDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUtVSS/W9AOA6zb5U3AgmMOc3izUl+JAmrE OxZShYoUenFLVPOAU05WI+Cg1nNllCahVJ/fU9MuAyjF71XuyhRs2AOk9YoUYBjq SUguZFc6EwzvELPyL9hnSIPhrvm73t22YWAP8rKR7gy71fQWGcZQcpkqFUBgkfFS 0Iee4Ehzg8q+yjvJnFgYsVJpC5tPTkUJS4wVN54yx5PpnHNFu4MDD4QYLwcmMPMy HXqYOJ2A+BPYVQrqmiLZ64FbyQ/UBS8+95tJQZMZRM49m1PcVGu2uhmGieSZjDPN AXl3IoVG5Awsgf48cM0M9Z1jEDREEz4H89pgbd7Trdod3Wbpx5A= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:32 2026 by rpki-client