$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft File: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft (raw, json) Hash identifier: CH6DBFwxIa/ceFfS1ZFn7XK64td0bEnwOuoPVsbOc94= Subject key identifier: 40:84:EA:BB:12:E5:D7:8A:DF:6F:FA:D0:2A:9F:FD:27:2B:D7:25:C9 Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Certificate serial: 62B584434ED00D5FDBF9DF31279F811AB195F8C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 07:26:40 +0000 Manifest this update: Sun 02 Aug 2026 07:21:40 +0000 Manifest next update: Mon 03 Aug 2026 10:11:40 +0000 Files and hashes: 1: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl (hash: HEr5n31+5KPx/ct8FXYthqHb15Vg//DYHhvSeceGeEI=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=) 3: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw=) 4: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b5:84:43:4e:d0:0d:5f:db:f9:df:31:27:9f:81:1a:b1:95:f8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Validity Not Before: Aug 2 07:21:40 2026 GMT Not After : Aug 3 10:11:40 2026 GMT Subject: CN=4084EABB12E5D78ADF6FFAD02A9FFD272BD725C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:3a:55:9d:73:32:72:72:f9:23:73:de:76: ed:a8:fe:a5:a7:a0:6b:22:ac:a8:7e:a5:5f:39:fe: c9:02:07:46:bf:3e:05:34:e4:6a:bd:02:e4:dd:8f: 1c:45:a2:5d:63:79:0b:44:88:63:0d:a1:bb:4a:12: 0c:35:0b:24:ac:ed:0e:0a:57:ee:09:c2:37:f3:27: 0b:fe:d3:11:42:15:c7:6d:cc:26:68:58:98:c6:c4: 39:bf:99:a7:c9:d6:ff:8f:31:fd:be:e3:2b:33:4f: ae:fd:5f:85:f8:82:f0:7e:f5:36:c4:17:c1:1e:b3: 16:41:a4:bf:39:82:35:6e:23:0f:e3:a8:28:55:f4: 18:b7:bf:69:19:0c:1a:cb:78:d0:c5:19:bf:f3:89: fa:e0:f0:f4:6f:b4:f3:51:3d:56:ea:d2:ce:f9:4c: c3:19:b2:b4:57:99:b7:cb:72:3e:11:e1:5e:4d:f8: 5c:0b:3c:18:5b:d5:ea:d1:28:41:de:e6:67:fe:7d: 05:82:12:d5:27:cd:c5:42:9f:2a:42:6d:64:e3:2b: 27:80:35:b7:a7:48:06:51:b6:34:2a:a4:e1:ec:b0: c1:12:5b:b9:83:34:c2:05:20:81:a2:c9:08:09:5c: 95:39:d8:1c:c7:05:35:4c:c6:f3:eb:16:54:99:a2: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:84:EA:BB:12:E5:D7:8A:DF:6F:FA:D0:2A:9F:FD:27:2B:D7:25:C9 X509v3 Authority Key Identifier: keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:b6:fe:b9:3d:6a:10:df:79:c9:1c:9d:e5:4c:c4:74:41:4e: 17:0e:89:57:7b:a0:9e:88:80:88:44:38:8a:7d:e3:6c:6b:d0: 11:a2:df:0a:66:f8:03:2c:30:4a:10:ed:ed:81:36:b3:5e:02: 18:17:0f:cc:b1:29:15:03:98:ee:f9:75:d5:82:01:65:8d:c1: 47:2d:c7:28:48:ed:79:7f:66:22:e7:90:34:8f:ec:1d:5a:46: b8:de:51:de:b0:3c:4a:57:1c:2b:7a:39:dd:cd:1f:bc:d2:48: fb:8e:62:c9:c4:0c:7d:3d:eb:24:0b:cd:9c:b0:f2:e5:28:f5: 58:02:bd:86:cd:48:db:27:36:5a:a7:5c:57:16:5c:4e:50:d9: d6:2a:68:72:4a:b4:09:2f:39:bf:b2:4f:2f:4f:1c:c5:10:69: 26:a7:71:90:ba:1f:9d:8b:03:46:f5:80:06:32:c0:a8:e9:b9: 9a:83:7c:da:a4:9e:a0:81:01:cd:2f:7c:e5:90:ff:9a:c1:a1: 17:0b:95:e5:1a:57:1a:57:c5:5f:78:6e:6e:48:c6:af:5e:5e: 40:97:70:69:72:5c:11:55:a5:99:95:4b:c5:f8:82:fe:4a:c0: cf:87:99:6d:8a:c7:77:1e:2d:47:e2:df:c4:b4:6e:de:58:e3: 2e:8d:9a:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYrWEQ07QDV/b+d8xJ5+BGrGV+MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx QTZCOEQwRTAeFw0yNjA4MDIwNzIxNDBaFw0yNjA4MDMxMDExNDBaMDMxMTAvBgNV BAMTKDQwODRFQUJCMTJFNUQ3OEFERjZGRkFEMDJBOUZGRDI3MkJENzI1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15jpVnXMycnL5I3Pedu2o/qWn oGsirKh+pV85/skCB0a/PgU05Gq9AuTdjxxFol1jeQtEiGMNobtKEgw1CySs7Q4K V+4JwjfzJwv+0xFCFcdtzCZoWJjGxDm/mafJ1v+PMf2+4yszT679X4X4gvB+9TbE F8EesxZBpL85gjVuIw/jqChV9Bi3v2kZDBrLeNDFGb/zifrg8PRvtPNRPVbq0s75 TMMZsrRXmbfLcj4R4V5N+FwLPBhb1erRKEHe5mf+fQWCEtUnzcVCnypCbWTjKyeA NbenSAZRtjQqpOHssMESW7mDNMIFIIGiyQgJXJU52BzHBTVMxvPrFlSZopoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQITquxLl14rfb/rQKp/9JyvXJckwHwYDVR0j BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0 RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4 RDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNG NkUxQTZCOEQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMG2/rk9ahDfeckcneVMxHRBThcOiVd7oJ6I gIhEOIp942xr0BGi3wpm+AMsMEoQ7e2BNrNeAhgXD8yxKRUDmO75ddWCAWWNwUct xyhI7Xl/ZiLnkDSP7B1aRrjeUd6wPEpXHCt6Od3NH7zSSPuOYsnEDH096yQLzZyw 8uUo9VgCvYbNSNsnNlqnXFcWXE5Q2dYqaHJKtAkvOb+yTy9PHMUQaSancZC6H52L A0b1gAYywKjpuZqDfNqknqCBAc0vfOWQ/5rBoRcLleUaVxpXxV94bm5Ixq9eXkCX cGlyXBFVpZmVS8X4gv5KwM+HmW2Kx3ceLUfi38S0bt5Y4y6Nmtc= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:42 2026 by rpki-client