$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: QNnh/dFXtkuV82vzV4DuzkC352CacpA2wKrhIii1aQY= Subject key identifier: F2:C4:E2:FE:E4:71:A4:03:3A:CB:E0:7F:70:08:8F:A4:15:5E:D2:CF Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 735909F692C133CAB9D4C80C94430977964B2221 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:29:02 +0000 Manifest this update: Thu 17 Sep 2026 08:24:02 +0000 Manifest next update: Fri 18 Sep 2026 12:09:02 +0000 Files and hashes: 1: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) 2: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) 3: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) 4: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: 89+uf49AOsWj0C28YHrclBdH3UJCCH/9JV7/Cnm15UE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:59:09:f6:92:c1:33:ca:b9:d4:c8:0c:94:43:09:77:96:4b:22:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: Sep 17 08:24:02 2026 GMT Not After : Sep 18 12:09:02 2026 GMT Subject: CN=F2C4E2FEE471A4033ACBE07F70088FA4155ED2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:ba:07:d6:59:13:ee:87:9b:6a:ea:95:d6: b4:8b:20:5c:69:31:b7:2b:d0:cc:73:1e:dc:be:cc: fa:df:e5:03:40:bb:44:cd:b9:a9:2f:e4:28:79:e4: 9e:5c:60:a5:17:a8:30:43:03:66:93:1d:46:29:91: 59:d2:5f:b1:95:e8:69:52:06:a8:de:46:3e:f8:ef: f6:bb:a5:e0:e8:85:f5:95:b2:2d:3e:0c:99:9a:15: f1:a9:49:53:9d:f0:1c:4b:e6:f4:c2:31:d5:a5:08: dc:fb:fe:c3:fe:26:0a:0d:dd:b4:3d:63:e4:31:a0: fc:10:1b:34:b9:5a:14:99:e2:a7:ba:82:ee:7a:2b: f7:c7:a0:b5:75:9c:dc:9c:dc:65:cb:bd:3b:0d:5c: ed:04:30:51:18:56:13:f3:57:99:2b:58:c0:6a:5c: 19:1b:5f:b7:48:82:a9:d1:14:28:2f:8e:13:45:5b: 12:80:9d:08:84:ac:c3:1c:24:23:d9:34:20:8a:ae: 3a:1b:c7:fa:5b:42:d3:f0:86:78:34:b4:95:5e:5d: 34:fd:54:3a:b4:24:fa:0d:de:52:1d:b6:ea:e1:01: 25:53:75:03:05:f7:ac:99:38:b4:cb:eb:39:15:8d: ab:e0:90:29:76:ac:18:66:03:ff:31:4d:53:39:71: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C4:E2:FE:E4:71:A4:03:3A:CB:E0:7F:70:08:8F:A4:15:5E:D2:CF X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:34:d5:d9:84:34:d3:26:7c:6e:83:ed:04:7f:a9:7f:5f:45: 27:10:b9:51:3f:23:9b:06:aa:45:5c:42:54:04:11:11:f5:10: 0b:b2:6a:da:05:bd:10:f5:7f:51:7c:34:04:6e:36:02:ab:a5: 77:23:9a:fc:35:98:0c:2c:9f:84:50:6a:a4:54:a2:f0:8f:b4: 3f:af:ce:ab:60:e8:e2:de:57:bc:17:3b:9c:0b:24:56:bb:1f: 63:8f:6b:b8:0c:14:b7:b9:5a:04:28:f8:e9:1b:39:49:7d:c5: 64:0f:5d:3c:ec:ca:16:31:b1:70:83:31:b4:4b:6b:60:1f:1b: b4:72:5c:4f:55:3c:d0:ac:2d:e5:81:f0:e6:ef:fa:0d:c4:b8: ea:87:bf:de:c4:87:5f:1e:f0:4a:dc:c1:0e:36:ce:0f:2f:97: a2:46:cb:ef:ca:88:7c:79:7f:d4:d1:86:ee:d8:17:53:b3:53: df:a6:a6:3a:61:74:b0:1b:da:cc:12:e4:65:e8:5d:37:34:79: d2:3a:e2:34:ad:f0:ba:8a:e7:e6:9c:87:70:0f:70:94:8c:c2: 85:ef:5b:f2:2a:17:2d:de:f7:22:7a:84:58:4d:10:b4:4d:9f: f3:0e:1b:63:ff:ec:66:e8:29:1c:92:14:8d:78:d0:2e:fd:47: 70:c8:79:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1kJ9pLBM8q51MgMlEMJd5ZLIiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjA5MTcwODI0MDJaFw0yNjA5MTgxMjA5MDJaMDMxMTAvBgNV BAMTKEYyQzRFMkZFRTQ3MUE0MDMzQUNCRTA3RjcwMDg4RkE0MTU1RUQyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlroH1lkT7oebauqV1rSLIFxp Mbcr0MxzHty+zPrf5QNAu0TNuakv5Ch55J5cYKUXqDBDA2aTHUYpkVnSX7GV6GlS BqjeRj747/a7peDohfWVsi0+DJmaFfGpSVOd8BxL5vTCMdWlCNz7/sP+JgoN3bQ9 Y+QxoPwQGzS5WhSZ4qe6gu56K/fHoLV1nNyc3GXLvTsNXO0EMFEYVhPzV5krWMBq XBkbX7dIgqnRFCgvjhNFWxKAnQiErMMcJCPZNCCKrjobx/pbQtPwhng0tJVeXTT9 VDq0JPoN3lIdturhASVTdQMF96yZOLTL6zkVjavgkCl2rBhmA/8xTVM5cXTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8sTi/uRxpAM6y+B/cAiPpBVe0s8wHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY01dmENNMmfG6D7QR/qX9fRScQuVE/I5sG qkVcQlQEERH1EAuyatoFvRD1f1F8NARuNgKrpXcjmvw1mAwsn4RQaqRUovCPtD+v zqtg6OLeV7wXO5wLJFa7H2OPa7gMFLe5WgQo+OkbOUl9xWQPXTzsyhYxsXCDMbRL a2AfG7RyXE9VPNCsLeWB8Obv+g3EuOqHv97Eh18e8ErcwQ42zg8vl6JGy+/KiHx5 f9TRhu7YF1OzU9+mpjphdLAb2swS5GXoXTc0edI64jSt8LqK5+ach3APcJSMwoXv W/IqFy3e9yJ6hFhNELRNn/MOG2P/7GboKRySFI140C79R3DIedg= -----END CERTIFICATE-----Generated at Thu Sep 17 13:20:25 2026 by rpki-client