$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft File: EE8460B7474632B852DBA37769D3FACD4E5171BB.mft (raw, json) Hash identifier: olJRpwi3EwW9qchFqRVryYzZzBARHRjTe1bGXJdQhLA= Subject key identifier: 4C:53:6B:90:91:40:8F:D3:B0:6A:7C:D6:7A:8D:A5:72:5B:C6:6E:09 Authority key identifier: EE:84:60:B7:47:46:32:B8:52:DB:A3:77:69:D3:FA:CD:4E:51:71:BB Certificate issuer: /CN=EE8460B7474632B852DBA37769D3FACD4E5171BB Certificate serial: 70ABEB63ADE0B8864EAD505682C5841C0000C202 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft Manifest number: BB Signing time: Sun 20 Sep 2026 08:37:45 +0000 Manifest this update: Sun 20 Sep 2026 08:32:45 +0000 Manifest next update: Mon 21 Sep 2026 10:19:45 +0000 Files and hashes: 1: EE8460B7474632B852DBA37769D3FACD4E5171BB.crl (hash: awyF57v3nwP0i7sdQnQzSPZ/rGIUdp0bfD682Pe+kL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.crl rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ab:eb:63:ad:e0:b8:86:4e:ad:50:56:82:c5:84:1c:00:00:c2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8460B7474632B852DBA37769D3FACD4E5171BB Validity Not Before: Sep 20 08:32:45 2026 GMT Not After : Sep 21 10:19:45 2026 GMT Subject: CN=4C536B9091408FD3B06A7CD67A8DA5725BC66E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:fc:22:ff:4e:eb:39:dc:92:1d:f4:47:c4: 7d:03:36:bf:a8:44:b9:65:79:01:45:c0:eb:bc:ce: 89:46:f9:1c:42:7f:d5:d8:0c:c5:ea:e4:9b:69:a4: 79:90:42:37:9f:d1:97:ee:a1:ec:59:b8:d7:75:1d: 95:2c:a2:65:8b:9d:b8:ba:76:bb:9d:97:70:fb:31: 2c:98:93:f0:4f:8c:9c:d8:ca:3b:95:7c:a3:1c:e4: fd:ee:7e:79:a3:31:8b:7d:fa:55:62:0e:94:19:a2: 44:2d:7d:8b:39:01:dd:9c:96:02:81:c3:e6:fe:e8: bb:8c:3d:55:82:87:b9:7a:73:cb:60:54:d7:70:87: f0:2b:99:3f:63:ee:fd:7a:a5:ee:ce:28:3f:2d:15: 13:ed:5b:ac:6c:e7:54:5d:ad:25:5b:fa:4f:2f:f8: 92:d7:bc:5a:08:62:6f:71:3d:31:ed:4e:4d:ca:aa: 0f:00:6d:b2:e1:ec:cd:8c:45:f4:a0:3d:ba:0c:c6: 4a:62:19:b4:53:d3:88:4f:d0:a7:47:38:2a:03:d0: 56:93:ba:de:fb:87:e5:70:b5:02:f5:3b:90:d4:4b: cf:18:01:3a:70:e4:f7:66:9a:fc:76:c8:12:79:bb: b7:7b:ec:cd:a2:4e:53:44:3b:4a:c5:8a:d8:c0:64: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:6B:90:91:40:8F:D3:B0:6A:7C:D6:7A:8D:A5:72:5B:C6:6E:09 X509v3 Authority Key Identifier: keyid:EE:84:60:B7:47:46:32:B8:52:DB:A3:77:69:D3:FA:CD:4E:51:71:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:54:80:9e:0b:68:37:9f:f8:3b:3f:72:97:ac:65:8c:70:73: 3d:a7:0b:8f:7d:04:cd:7c:44:25:21:de:3d:34:1b:af:ef:bb: cc:ba:4a:4d:2a:c5:62:d3:ad:d9:af:2f:2e:a9:02:93:4e:ca: f4:27:61:92:b0:18:58:9a:ed:44:2d:6f:31:59:59:88:a4:4a: 14:aa:11:6a:61:cc:fe:41:45:53:e2:8f:bb:ae:da:f0:47:ee: 7f:92:9f:47:7e:52:e7:f8:be:37:04:cb:e1:c3:09:65:39:57: 0e:3c:54:26:e8:da:a7:e3:2a:b5:ba:5b:39:0c:66:ca:88:6b: 51:70:5c:5b:40:fa:b6:0f:69:4c:93:c5:f7:1e:2f:e9:0c:d0: e9:e0:81:87:36:3d:30:4e:69:c5:ef:60:f8:ba:a7:66:e8:a6: f0:0d:60:4e:48:76:d1:f7:2e:45:99:fb:34:6d:39:de:22:4d: 7c:ca:69:1e:68:65:f1:1d:88:2a:14:7f:6a:9e:e7:21:48:4f: c1:1a:f1:ad:e2:09:bf:72:75:76:33:4b:41:db:00:a3:54:6b: 25:7a:a0:5d:20:aa:7d:f5:b9:14:1a:39:af:f8:84:25:c5:8f: 38:ea:b0:e4:9d:cc:d8:11:c8:7d:fb:b7:70:cc:04:c0:3a:82: a9:e4:60:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKvrY63guIZOrVBWgsWEHAAAwgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4NDYwQjc0NzQ2MzJCODUyREJBMzc3NjlEM0ZBQ0Q0 RTUxNzFCQjAeFw0yNjA5MjAwODMyNDVaFw0yNjA5MjExMDE5NDVaMDMxMTAvBgNV BAMTKDRDNTM2QjkwOTE0MDhGRDNCMDZBN0NENjdBOERBNTcyNUJDNjZFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgp/wi/07rOdySHfRHxH0DNr+o RLlleQFFwOu8zolG+RxCf9XYDMXq5JtppHmQQjef0ZfuoexZuNd1HZUsomWLnbi6 drudl3D7MSyYk/BPjJzYyjuVfKMc5P3ufnmjMYt9+lViDpQZokQtfYs5Ad2clgKB w+b+6LuMPVWCh7l6c8tgVNdwh/ArmT9j7v16pe7OKD8tFRPtW6xs51RdrSVb+k8v +JLXvFoIYm9xPTHtTk3Kqg8AbbLh7M2MRfSgPboMxkpiGbRT04hP0KdHOCoD0FaT ut77h+VwtQL1O5DUS88YATpw5Pdmmvx2yBJ5u7d77M2iTlNEO0rFitjAZMrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTFNrkJFAj9OwanzWeo2lclvGbgkwHwYDVR0j BBgwFoAU7oRgt0dGMrhS26N3adP6zU5RcbswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZkNmVhY2EtZjVmZC00YWNiLTg1YTUtZWI4ZDM3MDgyM2FmLzAvRUU4NDYwQjc0 NzQ2MzJCODUyREJBMzc3NjlEM0ZBQ0Q0RTUxNzFCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTg0NjBCNzQ3NDYzMkI4NTJEQkEzNzc2OUQzRkFDRDRFNTE3 MUJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvRUU4NDYwQjc0NzQ2MzJCODUyREJBMzc3NjlEM0ZB Q0Q0RTUxNzFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJUgJ4LaDef+Ds/cpesZYxwcz2nC499BM18 RCUh3j00G6/vu8y6Sk0qxWLTrdmvLy6pApNOyvQnYZKwGFia7UQtbzFZWYikShSq EWphzP5BRVPij7uu2vBH7n+Sn0d+Uuf4vjcEy+HDCWU5Vw48VCbo2qfjKrW6WzkM ZsqIa1FwXFtA+rYPaUyTxfceL+kM0OnggYc2PTBOacXvYPi6p2bopvANYE5IdtH3 LkWZ+zRtOd4iTXzKaR5oZfEdiCoUf2qe5yFIT8Ea8a3iCb9ydXYzS0HbAKNUayV6 oF0gqn31uRQaOa/4hCXFjzjqsOSdzNgRyH37t3DMBMA6gqnkYGA= -----END CERTIFICATE-----Generated at Mon Sep 21 00:42:07 2026 by rpki-client