$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft File: EE2943438815BD3AA204737348DB6D3884516325.mft (raw, json) Hash identifier: +GP7IGq8ZG3+bDKRwtBIwdftTRJKV6SUcY2/l3lqV+k= Subject key identifier: 0C:25:5F:40:91:31:07:4E:05:BF:14:E4:73:8C:90:E5:68:46:A4:24 Authority key identifier: EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25 Certificate issuer: /CN=EE2943438815BD3AA204737348DB6D3884516325 Certificate serial: 1AE85F69605EC41F64454B5D55B8B035C1DCACE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:29:31 +0000 Manifest this update: Mon 21 Sep 2026 10:24:31 +0000 Manifest next update: Tue 22 Sep 2026 11:23:31 +0000 Files and hashes: 1: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: fq5M+dx6USCMFcMueBlB0OlQMgC40bRFl66f36qCgPM=) 2: EE2943438815BD3AA204737348DB6D3884516325.crl (hash: 5iGWZEqPudsMYA3Pzg8WswSAlgBpSfPj2nYRmhXoNa4=) 3: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: G3KzWHfdyRcChB//+h8vgfZ65TxUJCZuJOLl/yrV7ac=) 4: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: QxVgQbc9bJ28BSqw5k+C3GSuIOfZW0NlgNTshO2WruQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e8:5f:69:60:5e:c4:1f:64:45:4b:5d:55:b8:b0:35:c1:dc:ac:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2943438815BD3AA204737348DB6D3884516325 Validity Not Before: Sep 21 10:24:31 2026 GMT Not After : Sep 22 11:23:31 2026 GMT Subject: CN=0C255F409131074E05BF14E4738C90E56846A424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:25:01:5c:7e:f1:bb:14:77:02:26:d8:9e: e9:0c:f9:0a:0b:76:0b:53:69:f2:0c:fd:a2:de:ae: ea:2a:d6:82:d8:1e:21:24:cb:41:62:18:d1:4e:ff: b5:96:0d:0e:39:76:58:32:00:a4:e7:36:b8:48:50: 1d:70:a2:65:96:ad:1c:d0:d2:13:e6:f8:c5:03:c6: 18:84:10:f7:ae:df:1c:0b:f9:68:75:58:7d:22:28: 9e:fd:d7:4a:a6:be:b4:72:cd:36:99:e5:93:97:5c: 9d:e7:12:69:f4:4e:2b:88:c8:db:1e:58:71:5a:d4: a1:bf:40:b3:4f:c0:8a:e1:b5:95:18:c8:50:e5:45: a9:4d:40:45:0d:3d:85:02:21:6d:74:3b:1c:12:3e: 7d:33:82:4d:02:9a:5b:50:de:c9:3d:6c:e8:f8:26: ed:ae:f2:d9:fe:5c:37:50:96:ac:55:16:40:67:8f: 3a:ed:94:1a:51:11:d5:8f:c1:fd:d4:0c:2a:2b:81: ee:e7:33:72:77:01:9a:d4:9c:2d:86:d3:91:75:1c: 09:51:06:e9:80:b1:a0:1d:9e:f3:93:e3:9d:47:db: 4f:e3:48:bb:d3:ab:80:f3:51:69:dd:eb:1f:a4:f2: 9f:1e:2a:88:9b:7a:f4:d3:11:f6:5c:7f:39:4b:c4: 35:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:25:5F:40:91:31:07:4E:05:BF:14:E4:73:8C:90:E5:68:46:A4:24 X509v3 Authority Key Identifier: keyid:EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:08:78:a7:cc:1a:80:eb:90:52:91:c9:62:15:52:71:04:54: 5a:19:e9:5b:4f:16:b0:fd:99:5f:9b:aa:d9:97:da:6d:3a:17: e3:80:32:1c:2a:3a:e1:5b:27:b9:cd:1f:32:ac:ef:2e:57:4f: a1:a1:f9:70:6a:61:ad:67:d7:8b:55:e7:5a:eb:62:1f:ab:73: 68:4a:18:ac:9f:17:53:a8:b8:3e:d6:61:61:da:93:e5:19:38: 07:4e:81:c1:8f:86:46:d3:4a:6b:1d:98:a4:2f:88:7d:09:7a: 95:bf:43:e5:f2:c0:2b:11:e2:c6:d7:38:83:69:21:d6:7a:68: 89:9f:e0:d3:17:c3:48:8b:13:86:c8:67:f4:78:26:85:85:86: 86:8c:11:94:d6:53:2b:7c:7e:37:75:19:b1:ef:98:50:d6:ee: ec:08:6d:e5:26:a4:d1:7d:a4:6a:d4:cc:50:3a:04:91:67:83: 94:df:40:f4:58:4b:99:6f:f1:ce:39:86:73:72:b1:55:f8:52: 0d:4c:05:64:f9:86:0b:90:ec:d7:f0:b5:3d:86:22:7f:14:28: d0:8e:3c:72:c9:33:6c:e8:70:32:52:f6:3c:56:eb:9b:04:95: ef:a4:d4:87:31:89:68:9c:92:56:94:dc:62:57:4f:88:fc:3e: 64:d2:4a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuhfaWBexB9kRUtdVbiwNcHcrOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4 NDUxNjMyNTAeFw0yNjA5MjExMDI0MzFaFw0yNjA5MjIxMTIzMzFaMDMxMTAvBgNV BAMTKDBDMjU1RjQwOTEzMTA3NEUwNUJGMTRFNDczOEM5MEU1Njg0NkE0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uiUBXH7xuxR3AibYnukM+QoL dgtTafIM/aLeruoq1oLYHiEky0FiGNFO/7WWDQ45dlgyAKTnNrhIUB1womWWrRzQ 0hPm+MUDxhiEEPeu3xwL+Wh1WH0iKJ7910qmvrRyzTaZ5ZOXXJ3nEmn0TiuIyNse WHFa1KG/QLNPwIrhtZUYyFDlRalNQEUNPYUCIW10OxwSPn0zgk0CmltQ3sk9bOj4 Ju2u8tn+XDdQlqxVFkBnjzrtlBpREdWPwf3UDCorge7nM3J3AZrUnC2G05F1HAlR BumAsaAdnvOT451H20/jSLvTq4DzUWnd6x+k8p8eKoibevTTEfZcfzlLxDW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDCVfQJExB04FvxTkc4yQ5WhGpCQwHwYDVR0j BBgwFoAU7ilDQ4gVvTqiBHNzSNttOIRRYyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ3MDNiODAtMmU3OC00ZDExLWFiNzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4 ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4NDUxNjMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5NDM0Mzg4MTVCRDNBQTIwNDczNzM0OERCNkQzODg0NTE2 MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZE Mzg4NDUxNjMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQIeKfMGoDrkFKRyWIVUnEEVFoZ6VtPFrD9 mV+bqtmX2m06F+OAMhwqOuFbJ7nNHzKs7y5XT6Gh+XBqYa1n14tV51rrYh+rc2hK GKyfF1OouD7WYWHak+UZOAdOgcGPhkbTSmsdmKQviH0JepW/Q+XywCsR4sbXOINp IdZ6aImf4NMXw0iLE4bIZ/R4JoWFhoaMEZTWUyt8fjd1GbHvmFDW7uwIbeUmpNF9 pGrUzFA6BJFng5TfQPRYS5lv8c45hnNysVX4Ug1MBWT5hguQ7NfwtT2GIn8UKNCO PHLJM2zocDJS9jxW65sEle+k1IcxiWicklaU3GJXT4j8PmTSSho= -----END CERTIFICATE-----Generated at Mon Sep 21 14:54:41 2026 by rpki-client