$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft File: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft (raw, json) Hash identifier: PiPysULsdhHUMcOVevE8OW5nxHDYx1bmxD7DDzR3Exo= Subject key identifier: 5B:7D:37:4F:6A:FD:38:09:8C:A8:FC:E7:A1:BB:23:17:1B:B4:D6:4F Authority key identifier: EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 Certificate issuer: /CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Certificate serial: 4B07149344B2C3FDF5D7C6F55C50FF8CF14C641B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 01:28:03 +0000 Manifest this update: Wed 23 Sep 2026 01:23:02 +0000 Manifest next update: Thu 24 Sep 2026 02:54:02 +0000 Files and hashes: 1: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl (hash: WKqZpGpr7yMZ/gF0E5jyo7OSdrR0YOs5UNaLd57aIyo=) 2: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: GdDE8SC5CnBeQmp3oWwqYVk6uwDRjhVlj4+oTAdzWC4=) 3: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: zQyUZlOFUHDGNe+npgwTsdpaoQy1XyYjr7ZYgl99pvg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:07:14:93:44:b2:c3:fd:f5:d7:c6:f5:5c:50:ff:8c:f1:4c:64:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Validity Not Before: Sep 23 01:23:02 2026 GMT Not After : Sep 24 02:54:02 2026 GMT Subject: CN=5B7D374F6AFD38098CA8FCE7A1BB23171BB4D64F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:68:f0:e8:c1:e7:af:7a:62:5a:5b:83:75:14: 98:21:9b:52:d4:0f:30:2b:5d:7c:17:4f:e7:08:c9: 62:91:1e:e1:eb:6a:11:c2:77:9d:4f:ca:71:2c:ca: 03:ae:38:0a:1f:ac:a7:0e:e0:96:6a:60:7c:97:7e: 68:2e:1f:24:6b:38:15:2a:31:b4:58:9a:1c:3f:fb: f1:68:1e:49:55:55:56:9d:d4:3c:aa:c4:8c:11:7d: af:6a:76:c0:40:30:d7:da:7a:41:ac:bf:cc:39:74: d9:0a:22:0f:0a:19:cc:f6:aa:79:ca:e6:3f:9d:02: 5f:b3:2d:f3:04:74:91:4c:a9:ef:da:50:bb:73:4e: 01:99:e4:09:f1:37:47:91:41:92:4c:a7:29:3b:3c: 27:a7:d9:80:95:89:ce:fa:e9:3a:ca:0e:e6:5a:7b: 0b:ad:ff:c0:e7:1a:63:53:57:b7:37:67:3f:49:9e: ce:52:bf:c0:12:39:80:9c:37:a5:d9:1f:01:4a:4a: 51:b8:93:a0:b1:31:60:b9:d1:6b:a2:da:22:97:e1: 84:67:c2:a2:aa:ea:cb:0d:2c:e5:d4:42:fd:cf:5b: fd:c4:32:a5:84:75:34:c6:73:5d:73:a6:1c:2f:21: cb:00:f1:c3:18:1a:cb:e1:a6:7e:f8:4c:c1:13:d2: 8a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:37:4F:6A:FD:38:09:8C:A8:FC:E7:A1:BB:23:17:1B:B4:D6:4F X509v3 Authority Key Identifier: keyid:EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f6:0b:61:8d:48:ab:e1:93:13:50:fb:49:d2:45:89:20:27: 35:fd:a1:ea:d6:c2:d1:fa:61:dc:00:9e:5b:e8:d0:6d:58:89: a6:7c:93:0c:36:8e:4a:ef:8d:3a:d0:ea:81:56:7a:28:56:77: 42:5c:9c:b2:ae:72:34:47:fa:2d:7c:75:8e:9f:ee:59:ba:fc: a0:2f:a9:9b:6b:98:e8:dd:75:ea:bd:f7:77:41:ab:92:43:ea: c8:b5:b8:33:23:97:eb:96:85:b7:bb:f4:7c:5e:81:1b:11:0c: 93:2a:43:27:51:f2:de:22:df:61:69:ab:d8:f5:49:6c:fd:1d: 0a:29:c8:62:f4:23:15:b8:c5:d1:91:40:43:f5:86:ab:75:73: 7e:cd:4c:61:17:f1:d0:99:a2:bf:da:7b:ef:09:af:12:f0:2a: 26:23:a3:06:87:7c:32:6f:ab:98:04:0c:07:3e:ca:cb:59:d7: d6:95:a3:b7:f7:50:d6:e8:a7:77:19:1c:69:8b:a4:6f:45:30: 64:56:fb:d8:27:0e:df:0b:17:15:04:77:e6:5d:00:c2:d2:82: 80:92:3a:ff:b6:11:09:20:a1:84:cf:a2:d2:0b:0d:3e:21:7d: e0:fb:e7:6d:52:d3:f4:38:5f:ce:cd:82:e8:50:87:5d:e1:d1: 36:db:c5:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwcUk0Syw/3118b1XFD/jPFMZBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2 MjhDNkE1NDAeFw0yNjA5MjMwMTIzMDJaFw0yNjA5MjQwMjU0MDJaMDMxMTAvBgNV BAMTKDVCN0QzNzRGNkFGRDM4MDk4Q0E4RkNFN0ExQkIyMzE3MUJCNEQ2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtaPDoweevemJaW4N1FJghm1LU DzArXXwXT+cIyWKRHuHrahHCd51PynEsygOuOAofrKcO4JZqYHyXfmguHyRrOBUq MbRYmhw/+/FoHklVVVad1DyqxIwRfa9qdsBAMNfaekGsv8w5dNkKIg8KGcz2qnnK 5j+dAl+zLfMEdJFMqe/aULtzTgGZ5AnxN0eRQZJMpyk7PCen2YCVic766TrKDuZa ewut/8DnGmNTV7c3Zz9Jns5Sv8ASOYCcN6XZHwFKSlG4k6CxMWC50Wui2iKX4YRn wqKq6ssNLOXUQv3PW/3EMqWEdTTGc11zphwvIcsA8cMYGsvhpn74TMET0oq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW303T2r9OAmMqPznobsjFxu01k8wHwYDVR0j BBgwFoAU7ovrqL5NRPQ+z9n/V4noeGKMalQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkODUwYTgtYWJiOS00NDgyLWE1YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThC RTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2MjhDNkE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRThCRUJBOEJFNEQ0NEY0M0VDRkQ5RkY1Nzg5RTg3ODYyOEM2 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4 Nzg2MjhDNkE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFr2C2GNSKvhkxNQ+0nSRYkgJzX9oerWwtH6 YdwAnlvo0G1YiaZ8kww2jkrvjTrQ6oFWeihWd0JcnLKucjRH+i18dY6f7lm6/KAv qZtrmOjddeq993dBq5JD6si1uDMjl+uWhbe79HxegRsRDJMqQydR8t4i32Fpq9j1 SWz9HQopyGL0IxW4xdGRQEP1hqt1c37NTGEX8dCZor/ae+8JrxLwKiYjowaHfDJv q5gEDAc+ystZ19aVo7f3UNbop3cZHGmLpG9FMGRW+9gnDt8LFxUEd+ZdAMLSgoCS Ov+2EQkgoYTPotILDT4hfeD7521S0/Q4X87NguhQh13h0TbbxVA= -----END CERTIFICATE-----Generated at Wed Sep 23 15:19:24 2026 by rpki-client