$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft File: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft (raw, json) Hash identifier: cqdJ2p05w0B6STDEjXTb2V7nxc15t1HzkLJVTHEsX6Y= Subject key identifier: 49:92:99:35:0D:09:B8:B8:CD:A5:82:C2:C2:71:D7:3C:B0:8E:AE:72 Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Certificate serial: 31302FC64D4A24116E2126B7299E045C671B73A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:31:45 +0000 Manifest this update: Wed 16 Sep 2026 22:26:45 +0000 Manifest next update: Thu 17 Sep 2026 23:07:45 +0000 Files and hashes: 1: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl (hash: yB9BKpC8EFouz+MH/T07faziaUXK9aQh3ihKhjLW9v0=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=) 3: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=) 4: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:30:2f:c6:4d:4a:24:11:6e:21:26:b7:29:9e:04:5c:67:1b:73:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Validity Not Before: Sep 16 22:26:45 2026 GMT Not After : Sep 17 23:07:45 2026 GMT Subject: CN=499299350D09B8B8CDA582C2C271D73CB08EAE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:da:86:5f:bb:ea:52:33:7c:e4:e0:9c:37: d9:62:e3:ad:e7:75:68:e9:d3:27:61:fb:dc:33:c1: 0f:5e:7d:d0:6a:95:b7:f2:7b:34:8e:ca:54:9b:4b: b6:c4:36:e0:37:2d:ae:84:db:a7:8f:6e:db:df:d9: 12:dd:67:3f:74:7e:e4:59:c5:4e:8e:da:df:fb:3f: 2f:c4:f9:dc:38:77:01:b8:9b:49:78:25:3b:79:ef: db:cd:3e:b9:18:c1:99:f4:0f:98:20:9a:74:25:cb: de:2f:88:7b:41:53:8d:a3:37:79:95:a5:a3:b1:0d: 4a:6c:4a:b1:b7:47:e5:30:5b:d3:4c:aa:09:c2:85: a0:92:d2:d2:1b:bf:f8:33:3b:a1:56:cf:70:5d:7d: e6:4f:ad:10:5d:ab:02:13:db:5c:18:93:a7:41:07: 09:ca:0e:5f:a7:b6:b2:6c:30:74:66:5c:9a:d4:72: d8:f7:0a:5c:c3:85:bf:9f:4f:3d:ff:91:19:36:b5: a7:7f:5f:aa:73:68:b5:14:ec:bc:f0:51:30:7a:18: 25:8b:ce:9b:85:12:ee:a4:54:08:f3:33:09:7b:da: 72:37:4c:a6:19:d8:12:1c:19:d7:4f:fe:c3:43:59: b4:be:e1:9c:03:49:63:76:bd:4d:7a:c0:c7:b6:ce: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:99:35:0D:09:B8:B8:CD:A5:82:C2:C2:71:D7:3C:B0:8E:AE:72 X509v3 Authority Key Identifier: keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d2:be:aa:66:55:82:98:5c:33:24:b2:d1:c4:95:c4:5c:f3: 4f:ab:56:42:f7:0f:eb:31:2e:2d:6b:ba:c4:22:dd:1c:ba:08: cb:a7:07:9e:37:a3:7c:9c:a9:00:4e:13:76:19:bf:65:33:d8: bc:e6:24:86:88:f9:1e:dc:c1:05:d3:2f:02:d4:96:23:7f:85: 87:72:31:95:01:ac:8c:92:40:a5:9f:fe:76:29:5b:5d:4a:e5: 51:35:c1:50:54:e9:04:12:ac:e1:e4:30:e3:b0:62:82:06:5c: c5:0c:48:2e:92:30:49:57:22:d6:be:aa:bb:d9:8b:6f:dd:f9: a9:c7:9f:7d:9c:99:e0:30:13:8f:06:ed:ac:f1:ed:29:bd:a0: 01:48:21:fd:eb:b5:fb:12:f6:59:76:3d:6c:a3:1d:c7:fd:3c: 5c:24:00:2e:ae:83:a4:67:e1:64:33:7d:a7:e5:5c:d6:66:2b: 4b:8b:1d:7d:85:2e:b3:1c:db:c8:53:ef:29:61:59:68:d3:ea: 89:f8:8f:cc:1e:a5:c7:93:b1:d9:7e:02:fc:ab:61:2d:95:ab: a7:4b:42:4f:18:97:72:c3:8a:70:99:d4:a4:1a:83:7c:7c:9c: 79:08:de:31:dc:0c:35:e3:57:2b:63:0a:64:ba:8e:30:6e:89: c5:40:d3:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTAvxk1KJBFuISa3KZ4EXGcbc6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx QTZCOEQwRTAeFw0yNjA5MTYyMjI2NDVaFw0yNjA5MTcyMzA3NDVaMDMxMTAvBgNV BAMTKDQ5OTI5OTM1MEQwOUI4QjhDREE1ODJDMkMyNzFENzNDQjA4RUFFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRidqGX7vqUjN85OCcN9li463n dWjp0ydh+9wzwQ9efdBqlbfyezSOylSbS7bENuA3La6E26ePbtvf2RLdZz90fuRZ xU6O2t/7Py/E+dw4dwG4m0l4JTt579vNPrkYwZn0D5ggmnQly94viHtBU42jN3mV paOxDUpsSrG3R+UwW9NMqgnChaCS0tIbv/gzO6FWz3BdfeZPrRBdqwIT21wYk6dB BwnKDl+ntrJsMHRmXJrUctj3ClzDhb+fTz3/kRk2tad/X6pzaLUU7LzwUTB6GCWL zpuFEu6kVAjzMwl72nI3TKYZ2BIcGddP/sNDWbS+4ZwDSWN2vU16wMe2znbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSZKZNQ0JuLjNpYLCwnHXPLCOrnIwHwYDVR0j BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0 RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4 RDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNG NkUxQTZCOEQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/SvqpmVYKYXDMkstHElcRc80+rVkL3D+sx Li1rusQi3Ry6CMunB543o3ycqQBOE3YZv2Uz2LzmJIaI+R7cwQXTLwLUliN/hYdy MZUBrIySQKWf/nYpW11K5VE1wVBU6QQSrOHkMOOwYoIGXMUMSC6SMElXIta+qrvZ i2/d+anHn32cmeAwE48G7azx7Sm9oAFIIf3rtfsS9ll2PWyjHcf9PFwkAC6ug6Rn 4WQzfaflXNZmK0uLHX2FLrMc28hT7ylhWWjT6on4j8wepceTsdl+AvyrYS2Vq6dL Qk8Yl3LDinCZ1KQag3x8nHkI3jHcDDXjVytjCmS6jjBuicVA09o= -----END CERTIFICATE-----Generated at Thu Sep 17 15:22:30 2026 by rpki-client