$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft File: EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft (raw, json) Hash identifier: T2hlXCU8h/Am0v42FOJP7XNXPT9eUFF31fYnSCRKWuc= Subject key identifier: 97:72:9C:64:6E:9F:FF:FF:11:30:2E:BB:67:50:E1:49:D8:87:25:F9 Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F Certificate issuer: /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Certificate serial: 1E00F60774A1837D60E6F2422889952B9E7269F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 15:45:56 +0000 Manifest this update: Tue 10 Nov 2026 15:40:56 +0000 Manifest next update: Wed 11 Nov 2026 16:46:56 +0000 Files and hashes: 1: EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl (hash: VbDaJUb1FtpDmJnKdz8S9JGRRQvetoN4LvHqgienpEU=) 2: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: pj1vmNVgdJMcLPpwXDPbTSTqYs/nj1UjJZcEGgiuKJM=) 3: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=) 4: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: CZezg3V9YTA7rAg0HQHAWG4rHwKphI57kR4SMjyKwas=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:00:f6:07:74:a1:83:7d:60:e6:f2:42:28:89:95:2b:9e:72:69:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Validity Not Before: Nov 10 15:40:56 2026 GMT Not After : Nov 11 16:46:56 2026 GMT Subject: CN=97729C646E9FFFFF11302EBB6750E149D88725F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:6a:4d:f0:78:8a:ee:14:4d:ef:ce:07:c0: 98:fc:d1:3a:38:47:69:4d:9a:60:f8:ab:25:25:4b: 5c:bc:b9:ef:cf:25:f8:35:27:0f:e7:05:63:e8:1f: ea:5b:54:d4:21:4e:a3:af:5f:f9:44:ea:25:bd:c2: 2f:7e:ed:15:12:35:fc:f6:64:c0:ed:12:ef:9e:c8: 2c:5c:ad:22:e1:52:58:ed:5d:89:97:3c:f0:53:9d: 1d:eb:41:90:07:c4:87:62:3d:3b:d1:a0:4e:b4:98: 39:7c:12:a2:ff:82:31:dc:e1:d0:43:cf:39:51:ed: 78:f4:f1:54:bd:b8:25:57:be:fb:ba:07:01:26:18: 9e:2a:2b:5e:0c:9a:fb:0c:0e:d0:d8:b6:3e:ed:9d: 1d:6d:5a:45:af:2b:62:11:58:19:b0:d5:9b:d3:28: 67:81:1a:ac:25:18:42:41:d3:24:72:bd:a7:71:1f: ed:87:b1:c1:b3:64:4c:4f:6c:02:c3:23:bd:4e:d3: 23:f4:b2:42:1c:86:fd:19:1b:ee:50:0a:21:08:c0: 1d:a9:22:2e:ac:cf:45:bd:05:e3:97:99:1d:dc:9b: 23:7d:c2:7b:40:62:fd:cf:79:99:ad:33:c9:a7:0d: e4:1b:6a:c7:e8:5d:b6:45:b6:a6:97:80:23:fc:64: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:72:9C:64:6E:9F:FF:FF:11:30:2E:BB:67:50:E1:49:D8:87:25:F9 X509v3 Authority Key Identifier: keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d8:86:c9:a3:e4:fc:de:7a:03:7f:a7:cf:77:22:6d:19:89: 02:ef:8d:c0:88:a4:35:74:fd:a8:fa:9e:65:1d:27:89:1e:a2: 26:43:87:3f:71:2d:74:ea:a8:95:17:be:44:a3:25:f7:03:0b: ee:ff:77:e7:b2:82:d4:b1:6c:99:33:58:7e:f6:b6:cf:65:65: 2d:7f:d8:02:59:8b:65:b6:04:e6:d1:af:a0:d7:cc:a4:75:25: e4:cd:36:78:a1:e2:eb:f0:f5:06:7a:dd:e1:15:0d:a5:ce:88: b9:86:f4:07:10:91:6e:63:c3:47:a4:d5:91:61:64:de:a0:f7: bf:91:3e:00:90:7a:dd:c2:f1:e9:19:ed:55:e1:a3:8d:b2:a5: 09:a5:1a:f6:09:53:98:e0:7e:3c:e4:b7:56:de:6d:77:58:51: 03:fb:3c:22:e0:d5:d2:ef:c8:73:35:57:a8:9e:b1:74:a1:e5: 4d:96:92:d5:c0:97:83:a5:51:85:e2:41:38:a9:8b:dd:07:4f: 77:c1:1d:8b:0f:c5:e2:a9:7d:d3:ec:28:8a:a4:0f:26:c1:cf: e9:6a:b7:14:bb:59:8b:2b:fd:af:ef:5f:82:de:9e:bd:bc:e4: 75:e0:63:57:c8:ff:4b:75:b6:fe:f5:9b:17:e8:6f:d7:94:01: 9d:9f:8d:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgD2B3Shg31g5vJCKImVK55yafgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRG NTUxMDczRjAeFw0yNjExMTAxNTQwNTZaFw0yNjExMTExNjQ2NTZaMDMxMTAvBgNV BAMTKDk3NzI5QzY0NkU5RkZGRkYxMTMwMkVCQjY3NTBFMTQ5RDg4NzI1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+GpN8HiK7hRN784HwJj80To4 R2lNmmD4qyUlS1y8ue/PJfg1Jw/nBWPoH+pbVNQhTqOvX/lE6iW9wi9+7RUSNfz2 ZMDtEu+eyCxcrSLhUljtXYmXPPBTnR3rQZAHxIdiPTvRoE60mDl8EqL/gjHc4dBD zzlR7Xj08VS9uCVXvvu6BwEmGJ4qK14MmvsMDtDYtj7tnR1tWkWvK2IRWBmw1ZvT KGeBGqwlGEJB0yRyvadxH+2HscGzZExPbALDI71O0yP0skIchv0ZG+5QCiEIwB2p Ii6sz0W9BeOXmR3cmyN9wntAYv3PeZmtM8mnDeQbasfoXbZFtqaXgCP8ZMevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl3KcZG6f//8RMC67Z1DhSdiHJfkwHwYDVR0j BBgwFoAU7sgpj2NR4NHpCZ2J1SwhvfVRBz8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkOTI2OGItNWU2MS00M2IyLWE2MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2 MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRGNTUxMDczRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUM4Mjk4RjYzNTFFMEQxRTkwOTlEODlENTJDMjFCREY1NTEw NzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIx QkRGNTUxMDczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzYhsmj5PzeegN/p893Im0ZiQLvjcCIpDV0 /aj6nmUdJ4keoiZDhz9xLXTqqJUXvkSjJfcDC+7/d+eygtSxbJkzWH72ts9lZS1/ 2AJZi2W2BObRr6DXzKR1JeTNNnih4uvw9QZ63eEVDaXOiLmG9AcQkW5jw0ek1ZFh ZN6g97+RPgCQet3C8ekZ7VXho42ypQmlGvYJU5jgfjzkt1bebXdYUQP7PCLg1dLv yHM1V6iesXSh5U2WktXAl4OlUYXiQTipi90HT3fBHYsPxeKpfdPsKIqkDybBz+lq txS7WYsr/a/vX4Lenr285HXgY1fI/0t1tv71mxfob9eUAZ2fjVg= -----END CERTIFICATE-----Generated at Tue Nov 10 20:48:50 2026 by rpki-client