$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft File: EECD640133988CFFC0BF1D58079BA5921C041DB9.mft (raw, json) Hash identifier: WOuBbYPp18J0WU304xY1tQmqx5YE9nXxMgl7+NSgAx4= Subject key identifier: A7:06:C8:6B:EE:E2:6C:B7:CA:78:CE:1A:FD:9B:B6:47:19:21:E2:C1 Authority key identifier: EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9 Certificate issuer: /CN=EECD640133988CFFC0BF1D58079BA5921C041DB9 Certificate serial: 2020B56316676DB6B7D6A3BEBC20DEE608E8BF72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:41:59 +0000 Manifest this update: Mon 21 Sep 2026 12:36:59 +0000 Manifest next update: Tue 22 Sep 2026 13:03:59 +0000 Files and hashes: 1: EECD640133988CFFC0BF1D58079BA5921C041DB9.crl (hash: Ecy+vnLRhp6OxsxEpekE1WXuObH8sxOra11WfQXC+wk=) 2: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: eoYACoknq6vSui9USgokAQRX8xZkoLYZMEzPSOjPAZU=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: PWHfuvJISm/0HGRYS1rgkQyVd8LnOVyJKU3uYwSY5nY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:20:b5:63:16:67:6d:b6:b7:d6:a3:be:bc:20:de:e6:08:e8:bf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECD640133988CFFC0BF1D58079BA5921C041DB9 Validity Not Before: Sep 21 12:36:59 2026 GMT Not After : Sep 22 13:03:59 2026 GMT Subject: CN=A706C86BEEE26CB7CA78CE1AFD9BB6471921E2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:ac:d7:97:e0:aa:57:81:fc:06:e8:66:a3: f3:4c:4b:35:a7:b1:02:00:06:73:df:21:df:c8:b1: 88:a7:7c:28:11:72:48:4e:c5:f7:f6:55:d6:14:3f: 1f:13:67:21:13:13:3d:9a:05:57:45:33:b8:bf:fa: 24:0c:64:6b:da:60:ea:b7:f3:84:fc:b8:a7:8d:51: df:8c:4a:76:65:55:34:bc:c5:c0:5e:57:8a:2d:61: 85:b0:0b:cb:62:d0:86:e6:00:77:1f:82:3b:d5:3d: 22:f3:8f:f0:2e:d0:dd:36:5a:c0:79:8e:c9:21:da: 51:f2:9b:b1:33:e5:e6:70:7f:35:4a:7c:61:37:43: d0:cc:7a:c0:7b:ac:62:20:a5:03:a3:a0:19:f4:e7: c8:2e:0b:ab:2b:f7:18:c2:8a:a1:44:96:5d:ad:6a: 7c:ac:22:e4:c8:63:e2:1a:03:48:32:62:13:63:e1: 96:8d:0a:a6:82:92:5c:ca:ba:b3:56:20:5b:df:64: 67:c7:fc:96:9d:48:e4:d7:5a:13:10:ed:52:79:b3: a1:f6:ad:e7:da:49:0b:fd:7a:f4:5a:dc:f6:c2:cc: 89:ae:9f:e1:d8:99:4b:cd:e5:bc:17:da:c1:f8:a4: 68:95:79:97:c3:e6:8c:4e:03:17:e7:c3:7b:f8:bc: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:06:C8:6B:EE:E2:6C:B7:CA:78:CE:1A:FD:9B:B6:47:19:21:E2:C1 X509v3 Authority Key Identifier: keyid:EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:06:8f:c4:23:e6:c6:76:4d:11:d7:eb:ef:8a:56:51:46:a2: d7:ba:06:8b:64:2e:c1:4a:77:7d:de:ae:1c:e0:b6:17:46:a6: a7:d3:1b:01:c7:18:cd:e9:46:c6:12:fe:cc:f9:14:ad:44:95: be:1a:12:07:df:9e:18:d2:24:21:f5:39:f4:39:17:54:29:fc: d7:96:75:5e:9d:f2:c3:ff:f5:08:88:11:65:24:d5:20:64:d9: dc:f2:77:0d:04:d8:07:40:e0:09:51:21:a5:18:38:73:17:ce: ec:88:f2:0a:69:18:9b:4f:0c:79:3c:f9:53:d4:a2:8d:de:88: f7:6b:bd:85:09:b2:cd:68:0d:dd:8a:0e:06:fb:5d:97:e2:5e: a5:7c:0e:96:aa:38:2b:cd:dc:5c:2e:d5:6a:70:8c:c9:ce:00: 30:9c:a6:4b:4d:6a:66:95:2f:35:18:cf:f1:a0:a8:3d:ee:c9: 6d:47:d7:13:29:51:3b:46:40:da:7b:62:80:c1:cf:88:b0:ad: ed:b6:b9:16:6d:61:eb:f6:9c:cc:87:ce:cc:b5:38:48:c5:44: 18:4a:8d:63:e4:1f:a5:0f:50:58:a0:d7:be:2e:09:6d:f8:70: 22:63:7b:a5:26:dd:da:34:66:eb:20:bb:38:03:1d:9b:91:07: 6c:e8:c2:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICC1YxZnbba31qO+vCDe5gjov3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1OTIx QzA0MURCOTAeFw0yNjA5MjExMjM2NTlaFw0yNjA5MjIxMzAzNTlaMDMxMTAvBgNV BAMTKEE3MDZDODZCRUVFMjZDQjdDQTc4Q0UxQUZEOUJCNjQ3MTkyMUUyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+azXl+CqV4H8Buhmo/NMSzWn sQIABnPfId/IsYinfCgRckhOxff2VdYUPx8TZyETEz2aBVdFM7i/+iQMZGvaYOq3 84T8uKeNUd+MSnZlVTS8xcBeV4otYYWwC8ti0IbmAHcfgjvVPSLzj/Au0N02WsB5 jskh2lHym7Ez5eZwfzVKfGE3Q9DMesB7rGIgpQOjoBn058guC6sr9xjCiqFEll2t anysIuTIY+IaA0gyYhNj4ZaNCqaCklzKurNWIFvfZGfH/JadSOTXWhMQ7VJ5s6H2 refaSQv9evRa3PbCzImun+HYmUvN5bwX2sH4pGiVeZfD5oxOAxfnw3v4vOGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpwbIa+7ibLfKeM4a/Zu2Rxkh4sEwHwYDVR0j BBgwFoAU7s1kATOYjP/Avx1YB5ulkhwEHbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5M2MyNWMtY2U1NS00ODcwLTgxNjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEz Mzk4OENGRkMwQkYxRDU4MDc5QkE1OTIxQzA0MURCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUNENjQwMTMzOTg4Q0ZGQzBCRjFENTgwNzlCQTU5MjFDMDQx REI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1 OTIxQzA0MURCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAGj8Qj5sZ2TRHX6++KVlFGote6BotkLsFK d33erhzgthdGpqfTGwHHGM3pRsYS/sz5FK1Elb4aEgffnhjSJCH1OfQ5F1Qp/NeW dV6d8sP/9QiIEWUk1SBk2dzydw0E2AdA4AlRIaUYOHMXzuyI8gppGJtPDHk8+VPU oo3eiPdrvYUJss1oDd2KDgb7XZfiXqV8DpaqOCvN3Fwu1WpwjMnOADCcpktNamaV LzUYz/GgqD3uyW1H1xMpUTtGQNp7YoDBz4iwre22uRZtYev2nMyHzsy1OEjFRBhK jWPkH6UPUFig174uCW34cCJje6Um3do0ZusguzgDHZuRB2zowpM= -----END CERTIFICATE-----Generated at Mon Sep 21 21:29:34 2026 by rpki-client