$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft File: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft (raw, json) Hash identifier: nUvEN/bUJYShclRQVTl7UFchZvfZZveH5YQCp7LToGE= Subject key identifier: 8F:D3:7E:92:E5:FD:B4:2B:C6:B1:20:0E:C2:CD:6C:6D:85:F5:5F:3B Authority key identifier: EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB Certificate issuer: /CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Certificate serial: 1356CE39EB10A295FDF63751F154D3D48EC730D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:49:43 +0000 Manifest this update: Wed 16 Sep 2026 20:44:43 +0000 Manifest next update: Fri 18 Sep 2026 00:21:43 +0000 Files and hashes: 1: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl (hash: QVdof7DFDNjwONx10q2K7ugdsTabfFjFcLGeKrITpzU=) 2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: 4kBrY3m/YUmUepWlqfPB38SwXp7zMRirxL+70ddYk80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:56:ce:39:eb:10:a2:95:fd:f6:37:51:f1:54:d3:d4:8e:c7:30:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Validity Not Before: Sep 16 20:44:43 2026 GMT Not After : Sep 18 00:21:43 2026 GMT Subject: CN=8FD37E92E5FDB42BC6B1200EC2CD6C6D85F55F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:48:59:f4:77:18:0b:23:22:bd:87:07:89: bb:80:7d:cb:92:90:57:d5:54:02:ed:ab:b9:2e:11: f9:73:ff:2c:44:07:2f:df:19:fc:f7:96:67:7b:83: 9f:47:8f:7c:ec:b0:75:72:7f:b0:e3:e6:1f:b5:91: 14:5b:00:1c:a7:cf:d5:a1:1b:3c:c8:01:98:69:8e: 26:c1:b8:06:2b:8c:3b:b4:23:02:61:7a:5d:13:24: 3d:92:76:6c:d0:d0:bb:e7:1f:46:53:00:94:b0:ee: 2c:18:b1:e4:af:77:11:cf:ff:f5:fe:c7:18:52:ed: 60:41:00:e2:13:51:d5:1b:ae:2f:80:37:9a:5c:27: b3:4b:a1:54:01:d9:03:01:b2:ae:15:56:27:69:35: b0:02:f8:cf:e1:e5:92:a0:f8:c7:8e:49:e8:25:44: 11:f2:9f:9c:2a:27:c6:82:2d:f3:b9:6a:47:27:c6: da:53:b5:12:de:7d:ce:91:95:ec:be:7a:98:0a:97: 5e:13:e8:b3:c4:95:d0:e9:05:e8:85:a6:a0:08:64: 45:5d:04:07:35:d2:ad:76:d9:7f:15:d2:fa:89:9f: 9b:61:4c:5d:ce:50:9e:aa:16:d0:49:74:30:10:63: 77:36:a9:41:07:98:83:7b:75:58:2d:c7:be:39:80: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D3:7E:92:E5:FD:B4:2B:C6:B1:20:0E:C2:CD:6C:6D:85:F5:5F:3B X509v3 Authority Key Identifier: keyid:EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:71:12:f8:0f:76:4a:a2:00:18:b8:74:c7:a2:68:31:56:87: 10:d3:35:3c:62:ae:ba:92:a5:df:76:05:7b:e7:5a:95:d2:ed: 2e:cc:9f:79:ca:2b:6a:4a:cb:b3:15:f9:1e:1f:d3:63:a7:ae: f5:44:34:03:d8:ec:a4:1f:89:e6:9a:b1:4c:4a:af:32:f6:c0: ff:8e:c3:85:2e:07:e5:3b:2d:85:dd:2b:5c:cc:2f:94:87:fe: 49:fd:d3:d0:d7:20:9f:9e:bd:c1:58:d3:a7:ef:a8:ed:7b:b5: e0:b3:d9:41:9a:f6:bf:ba:6e:39:3e:40:9b:e2:7b:ac:1f:d8: b9:a1:7c:35:b9:af:59:23:11:79:53:ba:21:2c:db:84:eb:70: 0a:46:86:97:cf:9f:cb:cc:9e:7f:5d:86:ff:9b:de:e8:71:7d: 16:9e:c8:09:e0:f6:3e:21:e5:af:c0:a1:0f:5f:5c:f2:c1:51: a9:a9:98:75:ae:6b:c3:e3:34:bd:25:20:ea:e3:2e:00:65:4e: 75:c8:7b:9e:05:e7:c6:7e:c4:b1:67:e3:54:66:15:58:49:fb: 50:e2:50:36:29:2b:55:f4:e3:33:6a:9d:4e:ce:bc:73:c0:99: e7:90:27:69:e7:c7:90:9e:b5:32:18:95:a2:dd:15:f2:d1:6d: f5:f1:e2:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1bOOesQopX99jdR8VTT1I7HMNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJC M0U2RTFFQjAeFw0yNjA5MTYyMDQ0NDNaFw0yNjA5MTgwMDIxNDNaMDMxMTAvBgNV BAMTKDhGRDM3RTkyRTVGREI0MkJDNkIxMjAwRUMyQ0Q2QzZEODVGNTVGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86EhZ9HcYCyMivYcHibuAfcuS kFfVVALtq7kuEflz/yxEBy/fGfz3lmd7g59Hj3zssHVyf7Dj5h+1kRRbABynz9Wh GzzIAZhpjibBuAYrjDu0IwJhel0TJD2SdmzQ0LvnH0ZTAJSw7iwYseSvdxHP//X+ xxhS7WBBAOITUdUbri+AN5pcJ7NLoVQB2QMBsq4VVidpNbAC+M/h5ZKg+MeOSegl RBHyn5wqJ8aCLfO5akcnxtpTtRLefc6Rley+epgKl14T6LPEldDpBeiFpqAIZEVd BAc10q122X8V0vqJn5thTF3OUJ6qFtBJdDAQY3c2qUEHmIN7dVgtx745gEr/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9N+kuX9tCvGsSAOws1sbYX1XzswHwYDVR0j BBgwFoAU7vI9x7xwxI7F9Gf+RN5bsrPm4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdC QzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJCM0U2RTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUYyM0RDN0JDNzBDNDhFQzVGNDY3RkU0NERFNUJCMkIzRTZF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVC QjJCM0U2RTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlxEvgPdkqiABi4dMeiaDFWhxDTNTxirrqS pd92BXvnWpXS7S7Mn3nKK2pKy7MV+R4f02OnrvVENAPY7KQfieaasUxKrzL2wP+O w4UuB+U7LYXdK1zML5SH/kn909DXIJ+evcFY06fvqO17teCz2UGa9r+6bjk+QJvi e6wf2LmhfDW5r1kjEXlTuiEs24TrcApGhpfPn8vMnn9dhv+b3uhxfRaeyAng9j4h 5a/AoQ9fXPLBUampmHWua8PjNL0lIOrjLgBlTnXIe54F58Z+xLFn41RmFVhJ+1Di UDYpK1X04zNqnU7OvHPAmeeQJ2nnx5CetTIYlaLdFfLRbfXx4l4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:56:53 2026 by rpki-client