$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft File: EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft (raw, json) Hash identifier: ZAX4Rh2WNCtu1O4rUroy4jffAW52c+fRYBTBGwroT/0= Subject key identifier: E6:C1:24:8D:8F:AC:51:60:EB:17:4F:0C:AC:B6:2A:EF:D4:53:FC:0D Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F Certificate issuer: /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Certificate serial: 6FAB94A514A56B73A89B88545E55441735DE61EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 12:17:18 +0000 Manifest this update: Sun 20 Sep 2026 12:12:18 +0000 Manifest next update: Mon 21 Sep 2026 12:20:18 +0000 Files and hashes: 1: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: CZezg3V9YTA7rAg0HQHAWG4rHwKphI57kR4SMjyKwas=) 2: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=) 3: EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl (hash: ihy9VLg46sppN9mpWD6Vj5I+sp1W1qygc8yH3vI4lPs=) 4: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: pj1vmNVgdJMcLPpwXDPbTSTqYs/nj1UjJZcEGgiuKJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ab:94:a5:14:a5:6b:73:a8:9b:88:54:5e:55:44:17:35:de:61:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Validity Not Before: Sep 20 12:12:18 2026 GMT Not After : Sep 21 12:20:18 2026 GMT Subject: CN=E6C1248D8FAC5160EB174F0CACB62AEFD453FC0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4d:cb:89:8d:da:7e:cf:8b:ee:55:c4:0e:bf: 8b:8a:e8:a3:f9:b1:9e:3f:0d:ce:ba:4a:90:03:9f: 42:38:ed:67:a3:01:87:e1:01:2d:11:f3:93:bb:86: 90:09:35:38:b4:80:00:fb:a8:4f:41:2a:a8:aa:82: 0f:0d:2d:e8:fb:71:49:a5:b8:22:d4:c2:1e:0b:d0: 5d:ed:40:64:b3:61:65:eb:e8:72:c2:22:8b:dc:b1: be:dc:4e:57:3c:5e:81:da:53:72:38:32:52:fd:7c: ed:50:62:86:14:e0:c2:93:f1:4f:f5:03:91:d5:95: 06:1c:e0:1f:d4:b5:6b:65:80:4f:76:e8:5a:77:38: f7:f9:c5:43:24:ec:21:82:dd:56:38:12:b6:08:96: f2:06:fe:e2:a8:d3:99:ee:c6:3e:af:b5:df:9e:c8: d0:4c:fd:ef:4e:15:ef:9a:25:49:6a:e8:7c:1c:ab: 95:7c:ff:1d:e4:48:48:05:3b:42:c9:22:6e:33:8c: fb:a6:aa:9c:8f:2d:b7:89:e2:48:fe:3c:9e:b8:b9: 26:02:b5:63:bf:3f:ea:7e:41:3f:8a:dd:1f:c8:d9: 5e:63:49:ae:db:3d:f2:14:f7:77:6e:91:c9:69:73: ae:15:fc:2d:05:80:dc:e7:b0:ce:01:ba:58:ff:2e: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C1:24:8D:8F:AC:51:60:EB:17:4F:0C:AC:B6:2A:EF:D4:53:FC:0D X509v3 Authority Key Identifier: keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1f:82:b5:72:b1:1c:d5:6e:52:97:bd:e7:ea:e7:be:31:04: 5c:b3:4d:00:40:69:bc:b8:7e:ed:d4:f4:25:47:5c:1d:3b:74: 87:b6:fc:b5:1d:40:78:87:7f:88:d4:f9:40:87:78:c5:7a:01: 9b:af:cd:22:c5:a8:60:61:71:fb:73:e2:b9:4a:c8:6c:af:49: f9:cc:7a:ed:89:05:68:f0:6c:d6:62:6a:00:9d:ec:1e:83:fc: 60:05:8d:4f:f6:17:5f:a9:8e:36:77:f6:90:6d:c8:88:df:a9: 86:15:a0:a0:63:e8:8e:ec:5c:39:f4:3b:2a:ed:80:47:6a:7b: d2:cd:4a:c1:ca:38:4d:0e:a0:81:cc:10:40:c7:78:1a:d1:d4: 6d:7b:6c:50:af:29:8d:ca:2c:71:5b:69:99:48:7f:1e:96:b7: 79:0d:72:52:1c:f7:65:64:4d:fb:21:7a:81:b0:da:85:44:97: fe:e3:5f:0d:9d:8c:c2:93:14:73:ed:2b:81:95:50:e1:7d:5d: a6:81:b3:54:34:24:2f:5c:3c:08:23:3e:24:2b:c9:74:20:ed: f0:1f:39:fb:df:86:35:36:34:b9:3e:91:33:02:68:0c:52:aa: b9:04:80:16:51:21:dd:a5:d3:13:70:6a:5b:c8:09:9b:fb:81: 19:2c:44:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6uUpRSla3Oom4hUXlVEFzXeYewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRG NTUxMDczRjAeFw0yNjA5MjAxMjEyMThaFw0yNjA5MjExMjIwMThaMDMxMTAvBgNV BAMTKEU2QzEyNDhEOEZBQzUxNjBFQjE3NEYwQ0FDQjYyQUVGRDQ1M0ZDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5TcuJjdp+z4vuVcQOv4uK6KP5 sZ4/Dc66SpADn0I47WejAYfhAS0R85O7hpAJNTi0gAD7qE9BKqiqgg8NLej7cUml uCLUwh4L0F3tQGSzYWXr6HLCIovcsb7cTlc8XoHaU3I4MlL9fO1QYoYU4MKT8U/1 A5HVlQYc4B/UtWtlgE926Fp3OPf5xUMk7CGC3VY4ErYIlvIG/uKo05nuxj6vtd+e yNBM/e9OFe+aJUlq6Hwcq5V8/x3kSEgFO0LJIm4zjPumqpyPLbeJ4kj+PJ64uSYC tWO/P+p+QT+K3R/I2V5jSa7bPfIU93dukclpc64V/C0FgNznsM4Bulj/LhivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5sEkjY+sUWDrF08MrLYq79RT/A0wHwYDVR0j BBgwFoAU7sgpj2NR4NHpCZ2J1SwhvfVRBz8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkOTI2OGItNWU2MS00M2IyLWE2MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2 MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRGNTUxMDczRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUM4Mjk4RjYzNTFFMEQxRTkwOTlEODlENTJDMjFCREY1NTEw NzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIx QkRGNTUxMDczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgfgrVysRzVblKXvefq574xBFyzTQBAaby4 fu3U9CVHXB07dIe2/LUdQHiHf4jU+UCHeMV6AZuvzSLFqGBhcftz4rlKyGyvSfnM eu2JBWjwbNZiagCd7B6D/GAFjU/2F1+pjjZ39pBtyIjfqYYVoKBj6I7sXDn0Oyrt gEdqe9LNSsHKOE0OoIHMEEDHeBrR1G17bFCvKY3KLHFbaZlIfx6Wt3kNclIc92Vk TfsheoGw2oVEl/7jXw2djMKTFHPtK4GVUOF9XaaBs1Q0JC9cPAgjPiQryXQg7fAf OfvfhjU2NLk+kTMCaAxSqrkEgBZRId2l0xNwalvICZv7gRksRAk= -----END CERTIFICATE-----Generated at Mon Sep 21 02:55:10 2026 by rpki-client