$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft File: EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft (raw, json) Hash identifier: nCIuvNPpU3yDeVos9BKggaOjvJvKdXR7GFinq2eh/0o= Subject key identifier: 4D:E2:3E:C0:01:C2:FD:FF:98:C2:16:4E:63:AD:CD:87:20:3F:FA:BE Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Certificate serial: 6E56C3EC47CF9629C843013C35705C5D6B19C82D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft Manifest number: EB Signing time: Sun 25 Oct 2026 21:23:28 +0000 Manifest this update: Sun 25 Oct 2026 21:18:28 +0000 Manifest next update: Tue 27 Oct 2026 00:55:28 +0000 Files and hashes: 1: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=) 2: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=) 3: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: RSC52CIB9gdiO0mwgB0RPCA6fPz9z6KlTh9C7/oKbQo=) 4: EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl (hash: yd+h1vFYzl2qr/A84li3MAR8kSfFusMwX9DM4OqUsPI=) 5: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:56:c3:ec:47:cf:96:29:c8:43:01:3c:35:70:5c:5d:6b:19:c8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Validity Not Before: Oct 25 21:18:28 2026 GMT Not After : Oct 27 00:55:28 2026 GMT Subject: CN=4DE23EC001C2FDFF98C2164E63ADCD87203FFABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:09:db:40:81:98:88:7b:23:e1:e0:1c:55: 28:bb:b4:59:39:22:75:a1:f1:04:d3:ad:d3:aa:36: 85:60:93:25:73:bb:2f:71:05:db:fd:64:6c:d4:15: 50:b9:78:ad:ea:8e:92:d9:69:19:57:bd:b8:39:89: 80:6b:db:70:62:be:ac:bf:3b:c4:94:0c:a2:ae:67: 8c:5a:ca:76:6e:b2:02:4a:05:aa:89:fb:15:34:e7: 35:99:cd:1c:85:36:8a:2a:36:82:c5:d1:31:f0:39: cd:b7:f4:dd:ee:32:4b:9b:7a:63:88:5f:4d:f8:12: 2a:af:da:ae:38:97:99:32:67:ae:40:cf:a2:71:48: 7f:16:3e:63:1f:01:eb:d8:6d:5e:65:f4:89:ce:8e: 72:fc:3a:92:34:23:60:44:07:ac:e6:27:b6:fa:8f: 0d:0c:32:64:83:c7:dc:1f:16:35:4f:f5:f9:44:e8: 9b:f8:50:a9:e5:46:41:71:66:d8:4b:3d:9b:90:a6: b9:35:3a:95:eb:bc:05:30:91:43:db:a4:c7:2d:04: 80:ce:27:11:c0:de:87:dd:33:a4:68:a5:dc:25:fa: 90:4d:00:5c:94:df:51:f5:37:f4:ee:96:19:4f:79: 85:42:03:aa:bd:ee:25:6c:db:fd:cf:2e:22:02:e5: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E2:3E:C0:01:C2:FD:FF:98:C2:16:4E:63:AD:CD:87:20:3F:FA:BE X509v3 Authority Key Identifier: keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2e:bc:b0:a1:cd:e6:6d:f1:e4:3a:04:23:e3:68:e6:33:1c: 74:96:dd:6c:90:4b:9c:1f:f1:18:00:f2:a2:e1:86:07:42:90: 68:8c:65:75:7e:99:57:08:54:f2:ac:10:4a:e6:4e:74:25:85: 69:a5:e4:87:40:20:68:b0:0f:44:30:f5:a1:c0:8b:d2:03:dd: ca:6a:7f:b0:76:d5:88:fb:22:33:51:13:fc:2c:1a:d8:ff:fe: a8:f4:5b:c2:45:df:29:66:fc:21:1f:6a:79:f4:08:22:90:7c: 39:14:a6:f2:56:4f:73:06:0f:8a:fb:f7:f4:27:18:31:4c:5f: d8:51:63:cd:eb:0d:8a:40:74:45:82:ed:27:b1:cd:55:8c:97: ca:ec:4e:4c:20:fe:d9:4e:4b:63:7d:f3:d4:f8:45:2a:46:29: 74:af:4f:a5:a4:2d:d5:5d:64:77:03:56:6c:3d:89:24:a8:f8: 9d:16:30:15:5c:7b:5f:95:6f:7e:31:5b:23:c2:a6:65:85:32: cc:0e:b7:a8:99:85:da:e0:11:99:1d:c4:80:97:53:1a:df:08: 80:e5:5e:d1:72:8e:ac:0c:4d:a2:ed:83:81:d3:29:fa:eb:7c: e3:f4:9e:86:ab:b6:63:c0:08:42:d9:a7:fe:9a:65:ee:6f:d4: 19:2f:6f:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUblbD7EfPlinIQwE8NXBcXWsZyC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy MjgzRTI2OTAeFw0yNjEwMjUyMTE4MjhaFw0yNjEwMjcwMDU1MjhaMDMxMTAvBgNV BAMTKDRERTIzRUMwMDFDMkZERkY5OEMyMTY0RTYzQURDRDg3MjAzRkZBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5wnbQIGYiHsj4eAcVSi7tFk5 InWh8QTTrdOqNoVgkyVzuy9xBdv9ZGzUFVC5eK3qjpLZaRlXvbg5iYBr23Bivqy/ O8SUDKKuZ4xaynZusgJKBaqJ+xU05zWZzRyFNooqNoLF0THwOc239N3uMkubemOI X034Eiqv2q44l5kyZ65Az6JxSH8WPmMfAevYbV5l9InOjnL8OpI0I2BEB6zmJ7b6 jw0MMmSDx9wfFjVP9flE6Jv4UKnlRkFxZthLPZuQprk1OpXrvAUwkUPbpMctBIDO JxHA3ofdM6Ropdwl+pBNAFyU31H1N/TulhlPeYVCA6q97iVs2/3PLiIC5cw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTeI+wAHC/f+YwhZOY63NhyA/+r4wHwYDVR0j BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0 QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRD QTUyMjgzRTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0uvLChzeZt8eQ6BCPjaOYzHHSW3WyQS5wf 8RgA8qLhhgdCkGiMZXV+mVcIVPKsEErmTnQlhWml5IdAIGiwD0Qw9aHAi9ID3cpq f7B21Yj7IjNRE/wsGtj//qj0W8JF3ylm/CEfann0CCKQfDkUpvJWT3MGD4r79/Qn GDFMX9hRY83rDYpAdEWC7SexzVWMl8rsTkwg/tlOS2N989T4RSpGKXSvT6WkLdVd ZHcDVmw9iSSo+J0WMBVce1+Vb34xWyPCpmWFMswOt6iZhdrgEZkdxICXUxrfCIDl XtFyjqwMTaLtg4HTKfrrfOP0noartmPACELZp/6aZe5v1Bkvb0Q= -----END CERTIFICATE-----Generated at Mon Oct 26 01:46:57 2026 by rpki-client