$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft File: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft (raw, json) Hash identifier: 68iPE9OOYwaI1fU/XwftJBaKlo8/6/x9IJfQE+UIjpc= Subject key identifier: 2E:9E:6A:1A:0F:25:CB:90:28:2C:D2:56:96:0C:F6:8D:EE:9C:1D:27 Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Certificate serial: 040AE06FC733A7271448A376DC67708BE921CDC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 21:13:12 +0000 Manifest this update: Wed 17 Jun 2026 21:08:12 +0000 Manifest next update: Thu 18 Jun 2026 23:35:12 +0000 Files and hashes: 1: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw=) 2: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl (hash: peVxnpd4+rPOT0TSE40NBwPO+ftSHFFGvbnYm8IGduI=) 3: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=) 4: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 23:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0a:e0:6f:c7:33:a7:27:14:48:a3:76:dc:67:70:8b:e9:21:cd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Validity Not Before: Jun 17 21:08:12 2026 GMT Not After : Jun 18 23:35:12 2026 GMT Subject: CN=2E9E6A1A0F25CB90282CD256960CF68DEE9C1D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:b0:02:f9:2e:66:9e:74:72:dc:c0:82:f4: 24:e4:de:31:0c:89:b0:9a:98:af:17:6d:ef:c9:20: 8e:59:1d:04:06:e2:1c:d1:08:ec:51:8f:bf:33:38: 7c:0c:40:05:e0:f0:58:12:18:82:b5:6f:e0:16:71: 2f:e3:0b:de:11:50:41:ee:b1:f8:c8:27:6e:7e:eb: 6d:42:e0:e4:c3:63:88:84:3c:78:32:5a:ba:97:f2: 47:54:6f:77:2c:24:63:f9:45:a1:0d:38:e9:af:3c: c8:7b:01:0d:ae:47:26:6d:1a:12:9c:00:e5:f1:b0: a2:bc:c0:a9:29:19:d6:89:8b:f6:27:7e:f5:c5:6c: 48:6c:3d:3c:88:25:71:b2:d0:f3:f1:59:ef:f9:62: 89:5f:db:3a:69:dd:ca:58:fe:41:b1:9b:60:12:c0: 08:34:6b:14:b2:c8:63:11:1a:e7:ed:19:b2:c7:99: 25:31:6a:08:a8:65:27:79:20:28:38:74:f2:e7:68: d3:24:c6:d8:ed:df:e1:b2:b3:4f:fc:cd:4d:ac:e3: 32:a3:c8:76:08:cb:bb:3f:0e:5e:c6:2b:1f:3c:74: 1b:9a:f6:13:ba:92:9f:fd:91:b0:26:6b:31:8a:24: 89:44:ca:19:5b:ed:07:ec:ce:a4:ba:a0:3f:64:f9: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9E:6A:1A:0F:25:CB:90:28:2C:D2:56:96:0C:F6:8D:EE:9C:1D:27 X509v3 Authority Key Identifier: keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:80:a1:59:7e:3c:d5:d6:5f:ac:ad:99:44:fd:46:92:a8:7c: 24:b1:91:0e:a4:21:6d:c0:6d:0a:c6:f6:39:f5:8a:37:4b:85: 80:fe:57:5b:7b:2d:f4:0c:6b:0f:b5:c9:fe:cc:86:ef:c2:48: 51:02:52:d2:ad:f5:4d:e5:ad:b3:a7:fe:f0:45:5a:ef:b2:15: 6b:0c:7b:ca:56:1c:1b:e0:b8:61:7d:71:4a:a6:4b:4c:6c:87: 4c:cd:26:87:a1:6f:05:e1:38:6e:e4:1d:28:51:32:2b:05:35: 88:ee:b3:b5:e2:bf:76:dd:c9:65:51:c9:59:fc:66:12:c1:f0: 24:b0:25:18:6e:28:47:b8:8b:89:29:17:9e:c6:8f:ea:6f:b8: a8:59:08:b3:54:b5:9e:30:5e:1a:0e:21:c4:32:f8:38:75:16: ef:25:07:a2:88:f8:ad:4d:31:70:de:bc:a1:66:8b:47:f2:9f: 22:08:74:bd:b0:04:3a:98:ff:95:26:57:c4:49:ca:1f:16:18: 12:34:3c:44:f9:e6:10:b1:fe:4e:84:f6:aa:b7:00:eb:a2:df: b3:9e:e3:fc:d1:03:fc:09:f6:ea:d4:a9:68:03:13:d9:2e:29: 04:ec:7e:a2:a8:0c:99:05:8e:96:46:09:c7:09:25:3b:d3:65: dc:ab:54:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBArgb8czpycUSKN23Gdwi+khzckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx QTZCOEQwRTAeFw0yNjA2MTcyMTA4MTJaFw0yNjA2MTgyMzM1MTJaMDMxMTAvBgNV BAMTKDJFOUU2QTFBMEYyNUNCOTAyODJDRDI1Njk2MENGNjhERUU5QzFEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOLAC+S5mnnRy3MCC9CTk3jEM ibCamK8Xbe/JII5ZHQQG4hzRCOxRj78zOHwMQAXg8FgSGIK1b+AWcS/jC94RUEHu sfjIJ25+621C4OTDY4iEPHgyWrqX8kdUb3csJGP5RaENOOmvPMh7AQ2uRyZtGhKc AOXxsKK8wKkpGdaJi/YnfvXFbEhsPTyIJXGy0PPxWe/5Yolf2zpp3cpY/kGxm2AS wAg0axSyyGMRGuftGbLHmSUxagioZSd5ICg4dPLnaNMkxtjt3+Gys0/8zU2s4zKj yHYIy7s/Dl7GKx88dBua9hO6kp/9kbAmazGKJIlEyhlb7QfszqS6oD9k+Q8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULp5qGg8ly5AoLNJWlgz2je6cHScwHwYDVR0j BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0 RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4 RDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNG NkUxQTZCOEQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+AoVl+PNXWX6ytmUT9RpKofCSxkQ6kIW3A bQrG9jn1ijdLhYD+V1t7LfQMaw+1yf7Mhu/CSFECUtKt9U3lrbOn/vBFWu+yFWsM e8pWHBvguGF9cUqmS0xsh0zNJoehbwXhOG7kHShRMisFNYjus7Xiv3bdyWVRyVn8 ZhLB8CSwJRhuKEe4i4kpF57Gj+pvuKhZCLNUtZ4wXhoOIcQy+Dh1Fu8lB6KI+K1N MXDevKFmi0fynyIIdL2wBDqY/5UmV8RJyh8WGBI0PET55hCx/k6E9qq3AOui37Oe 4/zRA/wJ9urUqWgDE9kuKQTsfqKoDJkFjpZGCccJJTvTZdyrVOw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:14 2026 by rpki-client