$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft File: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft (raw, json) Hash identifier: /uPhBalKa9rCiF5V06ovi75lCKgxPjSTjsz5HqPrQmc= Subject key identifier: 97:4F:EC:30:B3:C1:03:D7:E0:6D:41:FE:1E:3D:12:E7:A6:85:72:DF Authority key identifier: EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB Certificate issuer: /CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Certificate serial: 55CFF1E73197F6207772B1D06130AB82FB12C6E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 06:45:24 +0000 Manifest this update: Thu 18 Jun 2026 06:40:24 +0000 Manifest next update: Fri 19 Jun 2026 07:20:24 +0000 Files and hashes: 1: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl (hash: 2Gzh6F9CsvNM1qmlH8ZILcFNtI2ntTme2sdGu0dXO94=) 2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: 4kBrY3m/YUmUepWlqfPB38SwXp7zMRirxL+70ddYk80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 07:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:cf:f1:e7:31:97:f6:20:77:72:b1:d0:61:30:ab:82:fb:12:c6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Validity Not Before: Jun 18 06:40:24 2026 GMT Not After : Jun 19 07:20:24 2026 GMT Subject: CN=974FEC30B3C103D7E06D41FE1E3D12E7A68572DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:3b:53:a7:70:c9:4c:8f:34:7a:c2:c6:ef: fc:4d:14:6c:fd:72:cd:67:5f:bf:b1:36:43:0f:08: fc:74:f9:fd:57:0d:e2:ac:0b:6d:a4:5d:c9:36:01: 65:f1:bf:28:d6:9f:bd:41:fc:ed:39:a0:62:08:b4: aa:ac:7e:eb:fc:17:38:26:aa:61:6c:6d:63:a4:6e: 9f:9c:6f:55:a6:6f:a8:2d:5a:5d:4b:9f:81:14:99: 31:94:21:64:79:0f:d3:8e:e8:a8:ca:bc:59:42:e5: 78:df:6e:be:6e:9f:a8:f6:23:ee:f6:46:96:e3:47: cb:e2:14:3b:0f:7d:b1:22:35:42:6e:36:96:3c:ca: 40:3d:f4:be:f6:b9:b6:58:82:d0:f8:39:d3:e2:32: 9c:19:ea:34:ca:e9:82:7d:c0:b3:84:9f:de:03:71: 72:fd:f2:94:97:47:c6:a4:00:a0:3f:e5:a7:ad:e6: 88:33:04:69:77:3b:32:42:5e:d6:fa:cc:ee:23:42: 10:f2:3f:bc:71:ca:88:90:2e:11:ab:d2:5b:9f:95: 5b:90:85:74:00:78:e4:79:0d:21:9b:c7:bb:1f:45: 6e:40:f3:21:17:a6:e5:8b:02:3c:a4:0e:6a:09:e1: 95:48:6b:74:4c:b8:07:55:c2:a8:01:1b:85:c1:0b: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4F:EC:30:B3:C1:03:D7:E0:6D:41:FE:1E:3D:12:E7:A6:85:72:DF X509v3 Authority Key Identifier: keyid:EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3f:8b:b8:19:b7:8a:a8:67:3c:2c:9c:07:2a:41:76:b7:f5: d1:84:7e:8a:f0:05:f5:a4:71:50:ab:97:70:76:37:33:7f:a3: 07:0a:21:d9:b5:04:32:c1:61:b6:bd:7d:3b:cb:fa:51:21:3f: 12:af:ca:7a:bd:58:ef:ba:2c:a3:f7:a1:9f:cb:32:a5:65:a1: 23:4e:70:59:fa:d9:33:92:7b:a1:e3:80:6a:20:39:c5:48:80: 33:24:34:1b:f2:34:24:fc:f8:99:1c:99:4b:fa:2a:65:c7:3e: 51:5d:b2:9f:81:2c:dc:d1:b6:bf:e9:1d:db:5e:6f:eb:2e:d4: 7e:34:9e:7b:4a:1d:eb:49:18:de:e3:d3:e2:01:00:4f:a3:26: 5f:3f:32:ab:e9:94:5c:45:9e:9f:69:af:5b:a3:4f:8b:3f:58: 30:33:6f:f0:e1:ee:a7:0a:b6:cc:b1:bb:ea:75:ab:d4:33:f1: da:5e:28:8d:30:b4:07:ed:0f:5f:34:eb:5d:0b:99:2b:9d:ac: ad:8e:33:23:b1:bd:72:c0:ea:ef:b0:d5:47:f9:42:3e:38:6e: ff:55:f2:18:34:85:42:77:c8:e5:f3:98:b5:f1:c1:71:7a:2e: a4:1f:34:8f:a8:5f:e3:a3:c1:90:16:46:ed:c1:85:d3:53:c5: d3:09:ad:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVc/x5zGX9iB3crHQYTCrgvsSxuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJC M0U2RTFFQjAeFw0yNjA2MTgwNjQwMjRaFw0yNjA2MTkwNzIwMjRaMDMxMTAvBgNV BAMTKDk3NEZFQzMwQjNDMTAzRDdFMDZENDFGRTFFM0QxMkU3QTY4NTcyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHTtTp3DJTI80esLG7/xNFGz9 cs1nX7+xNkMPCPx0+f1XDeKsC22kXck2AWXxvyjWn71B/O05oGIItKqsfuv8Fzgm qmFsbWOkbp+cb1Wmb6gtWl1Ln4EUmTGUIWR5D9OO6KjKvFlC5Xjfbr5un6j2I+72 RpbjR8viFDsPfbEiNUJuNpY8ykA99L72ubZYgtD4OdPiMpwZ6jTK6YJ9wLOEn94D cXL98pSXR8akAKA/5aet5ogzBGl3OzJCXtb6zO4jQhDyP7xxyoiQLhGr0luflVuQ hXQAeOR5DSGbx7sfRW5A8yEXpuWLAjykDmoJ4ZVIa3RMuAdVwqgBG4XBC+5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0/sMLPBA9fgbUH+Hj0S56aFct8wHwYDVR0j BBgwFoAU7vI9x7xwxI7F9Gf+RN5bsrPm4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdC QzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJCM0U2RTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUYyM0RDN0JDNzBDNDhFQzVGNDY3RkU0NERFNUJCMkIzRTZF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVC QjJCM0U2RTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU/i7gZt4qoZzwsnAcqQXa39dGEforwBfWk cVCrl3B2NzN/owcKIdm1BDLBYba9fTvL+lEhPxKvynq9WO+6LKP3oZ/LMqVloSNO cFn62TOSe6HjgGogOcVIgDMkNBvyNCT8+JkcmUv6KmXHPlFdsp+BLNzRtr/pHdte b+su1H40nntKHetJGN7j0+IBAE+jJl8/MqvplFxFnp9pr1ujT4s/WDAzb/Dh7qcK tsyxu+p1q9Qz8dpeKI0wtAftD180610LmSudrK2OMyOxvXLA6u+w1Uf5Qj44bv9V 8hg0hUJ3yOXzmLXxwXF6LqQfNI+oX+OjwZAWRu3BhdNTxdMJraU= -----END CERTIFICATE-----Generated at Thu Jun 18 21:11:12 2026 by rpki-client