$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft File: EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft (raw, json) Hash identifier: yydp4HZpVb8IpEOaj53nXlapOS/7o72BxLYm8ReX64E= Subject key identifier: AD:8C:CF:C2:AC:54:F8:F1:24:5E:E8:65:97:29:BC:7E:BE:A7:CC:78 Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Certificate serial: 632A301EB748C6EE232D302D763DA7D6BF2261D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:11:20 +0000 Manifest this update: Mon 21 Sep 2026 12:06:20 +0000 Manifest next update: Tue 22 Sep 2026 16:04:20 +0000 Files and hashes: 1: EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl (hash: Ipf0bPGZMJEW7iIw+J0ihs+xUcoI9mAHWCZGUr35+8g=) 2: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=) 3: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: RSC52CIB9gdiO0mwgB0RPCA6fPz9z6KlTh9C7/oKbQo=) 4: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=) 5: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2a:30:1e:b7:48:c6:ee:23:2d:30:2d:76:3d:a7:d6:bf:22:61:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Validity Not Before: Sep 21 12:06:20 2026 GMT Not After : Sep 22 16:04:20 2026 GMT Subject: CN=AD8CCFC2AC54F8F1245EE8659729BC7EBEA7CC78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:9a:dd:e5:22:d3:e0:6f:e5:a0:10:b2:d0: 66:af:2e:f2:b1:e5:fc:f2:26:3a:29:23:3b:fe:87: c2:f8:c8:32:62:69:21:95:9a:1f:03:36:27:74:51: 3a:7c:e5:3b:f9:55:1e:c2:54:39:b1:60:b4:9a:cf: c3:94:0c:db:8a:96:4f:54:0f:a1:e3:15:40:7f:ba: 4a:12:ef:11:ea:88:e5:97:de:b9:50:42:4d:ba:cc: 66:dc:e1:55:c5:56:1c:d9:2d:47:d8:6a:9b:4a:88: b3:ea:f8:f3:d9:74:90:df:b3:bb:dc:72:db:21:6c: 6d:e0:49:5d:f7:36:8d:b9:9b:05:0e:1b:6c:79:b5: 3c:b7:1a:9c:40:b3:56:95:cd:2a:1e:76:ec:90:5b: cf:b3:12:c1:1a:6e:12:c5:cd:da:42:be:00:a6:3e: 5f:d4:a8:82:a9:9c:45:26:91:91:b9:97:e7:ad:d6: ea:a5:5d:77:16:bc:92:29:54:a9:d8:16:ca:ea:f2: 7c:14:26:21:bb:b9:05:72:cd:3e:7c:8e:95:9d:8f: 94:e4:30:88:dc:23:17:9a:77:cc:a3:a2:9f:38:67: 76:36:68:0a:c9:f0:3a:99:6c:11:82:14:43:ea:fc: 50:30:a6:83:65:03:dd:b1:35:5b:e3:71:f6:71:8e: 11:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8C:CF:C2:AC:54:F8:F1:24:5E:E8:65:97:29:BC:7E:BE:A7:CC:78 X509v3 Authority Key Identifier: keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:54:b9:c9:aa:47:6f:fc:50:fc:fd:c3:1d:07:e3:12:7c:e4: 55:16:51:20:56:46:d0:5e:de:1a:dc:b6:84:ca:1d:35:89:05: a7:17:99:b3:e7:0e:82:5c:0f:c6:f6:72:1a:47:fd:3e:c5:61: 47:6d:ef:0b:c2:d0:af:23:8c:46:0c:c5:e8:ce:81:55:4d:86: 22:f1:85:fb:dc:a0:64:94:b1:e5:5f:86:9c:0c:07:fe:78:69: f9:77:51:73:8d:52:68:d3:f0:bc:88:e7:60:48:59:d5:5d:e0: a2:24:c7:1a:ef:3e:a6:b7:af:a5:37:d6:aa:9c:23:57:b9:48: e6:07:4b:c1:6e:c5:de:00:a1:96:f7:6f:8c:c2:05:46:3d:d8: c8:8c:92:90:d7:ae:29:d1:0a:b3:8d:d6:b9:ec:1a:68:0f:32: 76:2f:e5:9b:2f:de:86:e4:a7:c7:0d:06:31:7e:70:e3:d0:7a: be:74:6b:26:25:c4:a4:e0:fe:dc:f2:17:69:3a:0f:65:41:36: ac:21:92:9a:f8:db:c0:aa:09:a1:16:22:79:32:cf:35:e0:c0: b0:c4:cb:ad:62:77:5c:a2:38:5f:fc:fb:5a:70:31:96:3b:3b: 3b:b3:59:68:98:7c:67:44:c1:3b:07:25:83:35:f3:51:f5:6c: c7:43:c2:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYyowHrdIxu4jLTAtdj2n1r8iYdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy MjgzRTI2OTAeFw0yNjA5MjExMjA2MjBaFw0yNjA5MjIxNjA0MjBaMDMxMTAvBgNV BAMTKEFEOENDRkMyQUM1NEY4RjEyNDVFRTg2NTk3MjlCQzdFQkVBN0NDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LJrd5SLT4G/loBCy0GavLvKx 5fzyJjopIzv+h8L4yDJiaSGVmh8DNid0UTp85Tv5VR7CVDmxYLSaz8OUDNuKlk9U D6HjFUB/ukoS7xHqiOWX3rlQQk26zGbc4VXFVhzZLUfYaptKiLPq+PPZdJDfs7vc ctshbG3gSV33No25mwUOG2x5tTy3GpxAs1aVzSoeduyQW8+zEsEabhLFzdpCvgCm Pl/UqIKpnEUmkZG5l+et1uqlXXcWvJIpVKnYFsrq8nwUJiG7uQVyzT58jpWdj5Tk MIjcIxead8yjop84Z3Y2aArJ8DqZbBGCFEPq/FAwpoNlA92xNVvjcfZxjhGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrYzPwqxU+PEkXuhllym8fr6nzHgwHwYDVR0j BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0 QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRD QTUyMjgzRTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRUucmqR2/8UPz9wx0H4xJ85FUWUSBWRtBe 3hrctoTKHTWJBacXmbPnDoJcD8b2chpH/T7FYUdt7wvC0K8jjEYMxejOgVVNhiLx hfvcoGSUseVfhpwMB/54afl3UXONUmjT8LyI52BIWdVd4KIkxxrvPqa3r6U31qqc I1e5SOYHS8Fuxd4AoZb3b4zCBUY92MiMkpDXrinRCrON1rnsGmgPMnYv5Zsv3obk p8cNBjF+cOPQer50ayYlxKTg/tzyF2k6D2VBNqwhkpr428CqCaEWInkyzzXgwLDE y61id1yiOF/8+1pwMZY7OzuzWWiYfGdEwTsHJYM181H1bMdDwp0= -----END CERTIFICATE-----Generated at Tue Sep 22 03:07:28 2026 by rpki-client