$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft File: EE2943438815BD3AA204737348DB6D3884516325.mft (raw, json) Hash identifier: jOFKpFZg2Dds+GFxfna+mMNT3v8U1WxXiPdiALZl3HI= Subject key identifier: EF:79:F2:FE:26:9E:BB:80:6E:E3:A5:13:B0:C9:74:3B:8B:A5:FB:47 Authority key identifier: EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25 Certificate issuer: /CN=EE2943438815BD3AA204737348DB6D3884516325 Certificate serial: 5496A60A6A6291758C5B34583595DEDCFCA512E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft Manifest number: EB Signing time: Sun 25 Oct 2026 06:54:58 +0000 Manifest this update: Sun 25 Oct 2026 06:49:58 +0000 Manifest next update: Mon 26 Oct 2026 08:08:58 +0000 Files and hashes: 1: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: G3KzWHfdyRcChB//+h8vgfZ65TxUJCZuJOLl/yrV7ac=) 2: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: fq5M+dx6USCMFcMueBlB0OlQMgC40bRFl66f36qCgPM=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: QxVgQbc9bJ28BSqw5k+C3GSuIOfZW0NlgNTshO2WruQ=) 4: EE2943438815BD3AA204737348DB6D3884516325.crl (hash: kCuvoBueOnILdXCmSvsqvmsMo0xK4bpDJMx4Qb9wAmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:96:a6:0a:6a:62:91:75:8c:5b:34:58:35:95:de:dc:fc:a5:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2943438815BD3AA204737348DB6D3884516325 Validity Not Before: Oct 25 06:49:58 2026 GMT Not After : Oct 26 08:08:58 2026 GMT Subject: CN=EF79F2FE269EBB806EE3A513B0C9743B8BA5FB47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:03:03:17:6f:70:8f:10:d2:f6:42:94:9e: 52:35:4a:5e:2d:75:98:23:86:52:77:bd:32:cd:97: a8:14:4c:cf:99:98:7e:91:cf:1f:3e:2b:1f:dd:93: bd:79:13:e8:80:d7:0b:62:00:38:68:3f:b7:7a:9a: 45:e8:f7:a7:b2:87:90:00:ac:ff:f5:14:35:7c:77: f3:c1:6b:61:78:81:63:53:0a:1c:02:c7:f6:1e:81: e1:99:41:fa:74:91:74:ad:e5:ee:d2:3b:19:fb:d9: 97:70:af:d7:3d:d2:23:94:72:95:e4:c8:70:b4:5f: 6d:2c:13:d5:b6:9b:79:a8:0a:05:51:59:6a:61:e6: 92:8b:9c:e1:ac:c1:d7:66:95:67:ac:0a:bd:5c:fa: 93:4b:47:c1:58:58:01:ec:a5:ac:a6:fa:dc:ff:d5: b7:f3:65:d7:64:d2:4e:87:c2:5c:ea:b6:e9:68:39: a9:a9:6c:e4:69:b8:43:7f:3f:4c:09:75:63:1e:ee: 45:87:b5:01:b1:35:c6:79:f0:cd:ee:d4:65:06:42: 7a:c0:a0:00:9c:5f:50:ee:55:cd:10:a2:08:bf:78: 47:66:d0:2f:29:00:4f:a7:4f:cc:eb:14:5b:52:8d: a1:ee:37:f3:a5:45:e0:d6:b6:db:60:ed:c6:fb:7b: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:79:F2:FE:26:9E:BB:80:6E:E3:A5:13:B0:C9:74:3B:8B:A5:FB:47 X509v3 Authority Key Identifier: keyid:EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e5:9e:cc:6a:9c:36:f8:f7:03:35:9d:8c:bd:67:8d:65:e8: e4:e6:b6:f8:c1:91:ff:09:bc:d4:8d:e0:14:a1:72:a7:55:87: bc:55:d8:8a:ed:25:bb:5b:0a:57:a5:3b:51:8e:49:0b:81:b0: 25:74:9b:56:84:60:b9:35:39:df:82:b4:a2:3a:97:52:4f:c8: 65:cd:ac:e0:7e:7b:ae:fd:53:45:db:c9:9d:2d:09:8b:cf:af: 44:82:f1:b9:78:d9:38:ce:32:50:0b:aa:4b:7c:23:0d:e0:3e: 35:6c:23:1d:09:cf:f9:85:6a:09:67:6d:56:59:8d:5f:06:9e: 31:a5:3d:91:8d:f6:c8:6b:c0:c5:ed:e9:20:65:0d:b5:0f:7b: 16:ea:e1:ae:64:28:64:c1:25:37:d4:5b:b3:70:ca:96:47:8b: 3d:74:50:b9:8a:4b:81:71:16:7f:10:dd:54:25:55:86:01:da: 5e:b7:c3:2f:34:07:06:1f:79:11:4f:6a:f4:c7:5d:76:57:fb: 85:28:78:4e:72:5e:29:b4:e5:a5:f0:87:1d:72:80:eb:0e:21: b7:cc:7a:a7:dc:1e:67:f5:f4:c0:16:24:2d:02:a1:0e:4e:e2: 2b:4f:fd:58:15:a4:bd:ee:d5:a4:4c:30:93:63:0e:6b:b2:66: 80:1e:ff:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJamCmpikXWMWzRYNZXe3PylEuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4 NDUxNjMyNTAeFw0yNjEwMjUwNjQ5NThaFw0yNjEwMjYwODA4NThaMDMxMTAvBgNV BAMTKEVGNzlGMkZFMjY5RUJCODA2RUUzQTUxM0IwQzk3NDNCOEJBNUZCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47wMDF29wjxDS9kKUnlI1Sl4t dZgjhlJ3vTLNl6gUTM+ZmH6Rzx8+Kx/dk715E+iA1wtiADhoP7d6mkXo96eyh5AA rP/1FDV8d/PBa2F4gWNTChwCx/YegeGZQfp0kXSt5e7SOxn72Zdwr9c90iOUcpXk yHC0X20sE9W2m3moCgVRWWph5pKLnOGswddmlWesCr1c+pNLR8FYWAHspaym+tz/ 1bfzZddk0k6HwlzqtuloOampbORpuEN/P0wJdWMe7kWHtQGxNcZ58M3u1GUGQnrA oACcX1DuVc0Qogi/eEdm0C8pAE+nT8zrFFtSjaHuN/OlReDWtttg7cb7eyqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU73ny/iaeu4Bu46UTsMl0O4ul+0cwHwYDVR0j BBgwFoAU7ilDQ4gVvTqiBHNzSNttOIRRYyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ3MDNiODAtMmU3OC00ZDExLWFiNzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4 ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4NDUxNjMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5NDM0Mzg4MTVCRDNBQTIwNDczNzM0OERCNkQzODg0NTE2 MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZE Mzg4NDUxNjMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3lnsxqnDb49wM1nYy9Z41l6OTmtvjBkf8J vNSN4BShcqdVh7xV2IrtJbtbClelO1GOSQuBsCV0m1aEYLk1Od+CtKI6l1JPyGXN rOB+e679U0XbyZ0tCYvPr0SC8bl42TjOMlALqkt8Iw3gPjVsIx0Jz/mFaglnbVZZ jV8GnjGlPZGN9shrwMXt6SBlDbUPexbq4a5kKGTBJTfUW7NwypZHiz10ULmKS4Fx Fn8Q3VQlVYYB2l63wy80BwYfeRFPavTHXXZX+4UoeE5yXim05aXwhx1ygOsOIbfM eqfcHmf19MAWJC0CoQ5O4itP/VgVpL3u1aRMMJNjDmuyZoAe/yw= -----END CERTIFICATE-----Generated at Sun Oct 25 14:35:03 2026 by rpki-client