$ rpki-client -vvf rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft File: EE8460B7474632B852DBA37769D3FACD4E5171BB.mft (raw, json) Hash identifier: YDgGGNYKihVlBJWvDA/lh2y1tUpcDTEy48QlJURaAU8= Subject key identifier: E7:AD:0A:7F:FB:77:68:53:BC:CE:F6:6A:7F:54:AB:D4:29:F4:FF:F1 Authority key identifier: EE:84:60:B7:47:46:32:B8:52:DB:A3:77:69:D3:FA:CD:4E:51:71:BB Certificate issuer: /CN=EE8460B7474632B852DBA37769D3FACD4E5171BB Certificate serial: 4E8D571D44D86DC04C23A81C272EB1EB2D34F1EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:48:57 +0000 Manifest this update: Wed 17 Jun 2026 00:43:57 +0000 Manifest next update: Thu 18 Jun 2026 04:00:57 +0000 Files and hashes: 1: EE8460B7474632B852DBA37769D3FACD4E5171BB.crl (hash: PoPyqSoKWkq1aO2J9ba2SArtjXLl+UMWsdnyDInZyhg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.crl rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8d:57:1d:44:d8:6d:c0:4c:23:a8:1c:27:2e:b1:eb:2d:34:f1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8460B7474632B852DBA37769D3FACD4E5171BB Validity Not Before: Jun 17 00:43:57 2026 GMT Not After : Jun 18 04:00:57 2026 GMT Subject: CN=E7AD0A7FFB776853BCCEF66A7F54ABD429F4FFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:36:d6:fb:7b:0c:49:ab:cb:be:39:41:c3: dd:fc:64:03:32:d1:20:ea:4a:be:65:05:d1:83:f5: a3:b3:b4:6e:a6:7d:75:40:85:67:2c:61:b2:24:03: ce:b7:82:d9:fb:5d:6e:eb:cf:8a:ec:f7:96:bf:8e: 59:0e:33:2e:9a:c4:04:18:c7:77:6a:b2:fd:87:1c: 3d:e4:d0:82:12:d1:94:51:32:a6:02:b2:81:8b:92: 0e:41:ba:65:70:7e:51:0f:b2:e6:79:a9:4a:2d:c5: 75:bb:0b:d1:24:7a:56:30:7d:61:e2:c6:4e:01:5c: 66:92:dc:89:3a:5f:1c:cd:d3:58:fe:40:b0:08:26: 61:32:9a:87:bf:eb:7e:e1:27:ce:0e:2a:95:04:2c: d4:a3:32:99:0c:2e:de:bb:ab:50:5c:ad:6d:b3:fa: 27:cb:fb:6d:14:3c:f5:3e:e5:47:c0:a9:bb:6e:85: 27:11:86:89:90:df:2e:e1:69:2e:15:c1:72:19:81: 84:21:85:a0:dd:82:f0:5d:80:27:f4:56:85:c7:3e: 34:c8:9f:a6:ed:4c:cd:0c:72:d7:95:7a:44:61:8a: 87:ce:91:7d:e6:6b:41:51:e1:50:1a:7d:65:69:a0: ec:07:89:ce:7c:2a:90:20:68:15:c6:8b:aa:39:81: 0e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AD:0A:7F:FB:77:68:53:BC:CE:F6:6A:7F:54:AB:D4:29:F4:FF:F1 X509v3 Authority Key Identifier: keyid:EE:84:60:B7:47:46:32:B8:52:DB:A3:77:69:D3:FA:CD:4E:51:71:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9c:bb:15:db:e8:fc:10:10:26:ce:e8:82:89:d1:01:04:1e: 03:9f:d9:1e:78:ba:e7:59:77:c1:91:54:c8:bc:a5:04:7a:7a: 9b:94:e0:35:da:91:65:65:40:fb:01:72:9d:b6:32:a4:89:29: f0:5c:bd:a0:97:58:03:05:53:1c:f4:43:53:be:73:20:53:ea: 69:79:c6:d8:7a:27:59:ba:b0:47:e8:7b:1f:04:f4:9e:00:8a: 87:d7:69:1d:b7:07:a1:d5:63:76:66:34:dd:01:ba:ee:9d:3f: ec:87:cf:7b:67:11:cc:06:7d:46:53:27:2b:af:0e:bc:70:fe: 93:98:0b:05:66:32:77:87:b3:16:de:f6:b5:b8:2d:60:85:76: 9b:27:ac:95:1e:2a:5c:69:75:42:33:c9:cb:36:29:72:8b:6d: 27:8f:69:9f:a1:ef:8c:fa:03:20:90:aa:e2:44:27:bb:1b:d9: 00:20:17:08:0e:e0:5c:18:3f:13:c7:2e:33:8a:fe:ed:0a:16: 97:2f:a0:ca:f7:c1:b8:a7:26:3f:d1:9c:c5:f1:de:9d:68:77: 9a:9f:a0:81:97:95:16:3c:db:f0:1b:e5:ee:ae:c4:77:7e:4b: a9:d1:74:0c:50:bd:3e:98:41:cb:b0:3f:b1:7e:bf:61:e0:5d: b6:46:e4:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTo1XHUTYbcBMI6gcJy6x6y008eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4NDYwQjc0NzQ2MzJCODUyREJBMzc3NjlEM0ZBQ0Q0 RTUxNzFCQjAeFw0yNjA2MTcwMDQzNTdaFw0yNjA2MTgwNDAwNTdaMDMxMTAvBgNV BAMTKEU3QUQwQTdGRkI3NzY4NTNCQ0NFRjY2QTdGNTRBQkQ0MjlGNEZGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69jbW+3sMSavLvjlBw938ZAMy 0SDqSr5lBdGD9aOztG6mfXVAhWcsYbIkA863gtn7XW7rz4rs95a/jlkOMy6axAQY x3dqsv2HHD3k0IIS0ZRRMqYCsoGLkg5BumVwflEPsuZ5qUotxXW7C9EkelYwfWHi xk4BXGaS3Ik6XxzN01j+QLAIJmEymoe/637hJ84OKpUELNSjMpkMLt67q1BcrW2z +ifL+20UPPU+5UfAqbtuhScRhomQ3y7haS4VwXIZgYQhhaDdgvBdgCf0VoXHPjTI n6btTM0McteVekRhiofOkX3ma0FR4VAafWVpoOwHic58KpAgaBXGi6o5gQ4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU560Kf/t3aFO8zvZqf1Sr1Cn0//EwHwYDVR0j BBgwFoAU7oRgt0dGMrhS26N3adP6zU5RcbswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZkNmVhY2EtZjVmZC00YWNiLTg1YTUtZWI4ZDM3MDgyM2FmLzAvRUU4NDYwQjc0 NzQ2MzJCODUyREJBMzc3NjlEM0ZBQ0Q0RTUxNzFCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTg0NjBCNzQ3NDYzMkI4NTJEQkEzNzc2OUQzRkFDRDRFNTE3 MUJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvRUU4NDYwQjc0NzQ2MzJCODUyREJBMzc3NjlEM0ZB Q0Q0RTUxNzFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABacuxXb6PwQECbO6IKJ0QEEHgOf2R54uudZ d8GRVMi8pQR6epuU4DXakWVlQPsBcp22MqSJKfBcvaCXWAMFUxz0Q1O+cyBT6ml5 xth6J1m6sEfoex8E9J4AiofXaR23B6HVY3ZmNN0Buu6dP+yHz3tnEcwGfUZTJyuv Drxw/pOYCwVmMneHsxbe9rW4LWCFdpsnrJUeKlxpdUIzycs2KXKLbSePaZ+h74z6 AyCQquJEJ7sb2QAgFwgO4FwYPxPHLjOK/u0KFpcvoMr3wbinJj/RnMXx3p1od5qf oIGXlRY82/Ab5e6uxHd+S6nRdAxQvT6YQcuwP7F+v2HgXbZG5EM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:00 2026 by rpki-client