$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft File: EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft (raw, json) Hash identifier: UeWC+BxopNWYqPtQyknZJgnUDhdxmkmdvMYhmEHeM4A= Subject key identifier: 24:04:A1:3C:C2:BE:0F:5C:54:37:A1:39:C3:F2:14:34:CB:1F:FE:97 Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Certificate serial: 315D2100FAF0736264A56BBFA2647E49C3C4AC73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 16:09:07 +0000 Manifest this update: Sat 13 Jun 2026 16:04:07 +0000 Manifest next update: Sun 14 Jun 2026 19:00:07 +0000 Files and hashes: 1: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=) 2: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: RSC52CIB9gdiO0mwgB0RPCA6fPz9z6KlTh9C7/oKbQo=) 3: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=) 4: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=) 5: EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl (hash: kaDmGXWatO3CjHFEiAwRjoWReNcQwHsNW6EiXmrkh34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5d:21:00:fa:f0:73:62:64:a5:6b:bf:a2:64:7e:49:c3:c4:ac:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Validity Not Before: Jun 13 16:04:07 2026 GMT Not After : Jun 14 19:00:07 2026 GMT Subject: CN=2404A13CC2BE0F5C5437A139C3F21434CB1FFE97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:c4:77:82:07:0d:7c:8b:48:fa:20:01:96: 56:66:9b:d2:bb:32:e5:70:85:ce:35:41:88:12:4e: a8:c6:54:5b:9d:24:19:63:56:3f:d1:01:50:63:b1: 2f:32:f6:bc:21:e7:fb:ec:9c:3e:59:aa:0b:0c:c2: 3e:a2:52:e1:1b:cf:dc:1c:4c:df:73:4c:e0:3b:b8: 8b:01:aa:38:76:48:54:34:1f:80:d9:fa:3c:f5:7a: 54:0f:19:7b:0b:1a:79:ff:c0:b9:ca:67:52:a2:83: 1c:a9:5e:d8:b9:4d:13:b0:0f:b3:5c:45:4b:2c:5d: 81:f9:a8:1e:e0:a5:30:22:e9:05:6e:ba:4f:0c:91: 8a:6b:5f:87:8b:d2:36:90:e8:09:da:f1:a9:e7:3c: 93:07:08:cc:3f:76:dd:f6:20:0b:53:1b:0d:70:57: de:e2:69:fd:38:75:ad:b0:83:1e:9b:f3:5a:5f:74: 41:45:88:ea:e7:59:23:29:c5:5d:ae:f5:78:1c:94: 91:8d:4b:fe:be:a3:53:a0:b5:5e:ed:62:48:4b:6f: ea:a7:4b:19:3a:52:c7:fe:9e:11:b1:6e:a6:0a:4c: 3e:9b:31:e6:b4:0c:09:ef:75:ef:67:6b:89:27:65: 30:98:3b:87:e1:28:d9:71:b4:96:90:48:54:5d:b4: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:04:A1:3C:C2:BE:0F:5C:54:37:A1:39:C3:F2:14:34:CB:1F:FE:97 X509v3 Authority Key Identifier: keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4f:a6:f3:30:b9:ff:68:03:ec:39:f6:88:e3:96:93:24:e6: a6:dd:a5:0e:44:54:c0:be:d1:8e:5c:97:cd:db:68:e6:08:29: ae:21:81:da:5f:e4:32:86:db:bc:16:5f:55:37:b4:b6:0b:12: 1b:c2:6d:db:d6:b6:e2:0b:58:04:20:ef:47:ea:61:25:1b:16: 3c:35:5f:ba:33:46:44:00:56:ed:39:72:14:47:6f:25:7b:0a: c9:d7:a0:17:d8:75:2b:40:7b:75:f3:02:e7:f0:db:52:88:9e: 60:de:1d:12:30:68:f7:e2:a3:27:92:bb:01:39:84:c9:ef:7f: 19:66:2e:e5:0a:38:58:97:5c:ec:51:a2:da:f4:f6:84:92:c3: c9:37:99:16:f7:7d:88:c5:4c:b2:50:6c:6e:ec:23:96:c4:26: 8c:ac:29:02:50:3e:8c:21:b0:b5:80:3a:2f:a3:f0:e0:49:e2: 22:a2:8b:36:93:91:77:87:15:bc:f6:f6:a1:19:16:25:f7:29: d1:6f:e7:5b:d4:9e:94:95:e6:e8:5d:ed:7c:c3:8e:af:5f:c4: 35:42:24:dd:8c:36:fb:a7:fc:6a:42:57:e9:fd:15:81:67:00: 7d:7b:ff:84:a4:f2:5f:de:c8:3e:9b:7d:d1:03:44:95:21:72: d4:ef:09:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMV0hAPrwc2JkpWu/omR+ScPErHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy MjgzRTI2OTAeFw0yNjA2MTMxNjA0MDdaFw0yNjA2MTQxOTAwMDdaMDMxMTAvBgNV BAMTKDI0MDRBMTNDQzJCRTBGNUM1NDM3QTEzOUMzRjIxNDM0Q0IxRkZFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9K8R3ggcNfItI+iABllZmm9K7 MuVwhc41QYgSTqjGVFudJBljVj/RAVBjsS8y9rwh5/vsnD5ZqgsMwj6iUuEbz9wc TN9zTOA7uIsBqjh2SFQ0H4DZ+jz1elQPGXsLGnn/wLnKZ1KigxypXti5TROwD7Nc RUssXYH5qB7gpTAi6QVuuk8MkYprX4eL0jaQ6Ana8annPJMHCMw/dt32IAtTGw1w V97iaf04da2wgx6b81pfdEFFiOrnWSMpxV2u9XgclJGNS/6+o1OgtV7tYkhLb+qn Sxk6Usf+nhGxbqYKTD6bMea0DAnvde9na4knZTCYO4fhKNlxtJaQSFRdtI2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJAShPMK+D1xUN6E5w/IUNMsf/pcwHwYDVR0j BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0 QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRD QTUyMjgzRTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhPpvMwuf9oA+w59ojjlpMk5qbdpQ5EVMC+ 0Y5cl83baOYIKa4hgdpf5DKG27wWX1U3tLYLEhvCbdvWtuILWAQg70fqYSUbFjw1 X7ozRkQAVu05chRHbyV7CsnXoBfYdStAe3XzAufw21KInmDeHRIwaPfioyeSuwE5 hMnvfxlmLuUKOFiXXOxRotr09oSSw8k3mRb3fYjFTLJQbG7sI5bEJoysKQJQPowh sLWAOi+j8OBJ4iKiizaTkXeHFbz29qEZFiX3KdFv51vUnpSV5uhd7XzDjq9fxDVC JN2MNvun/GpCV+n9FYFnAH17/4Sk8l/eyD6bfdEDRJUhctTvCQs= -----END CERTIFICATE-----Generated at Sun Jun 14 03:23:48 2026 by rpki-client