$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft File: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft (raw, json) Hash identifier: F2dBp5xLpdeAlcnJ58rM8pyySPpZ54A/FfSEVC5ju5o= Subject key identifier: BC:FE:50:BF:10:09:68:72:D5:F9:15:A6:2B:CE:8A:80:DB:F8:91:2B Authority key identifier: EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB Certificate issuer: /CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Certificate serial: 1BD7BE995B130A078CB26406BDB865CA6E97C88A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft Manifest number: BD Signing time: Sun 20 Sep 2026 15:15:56 +0000 Manifest this update: Sun 20 Sep 2026 15:10:56 +0000 Manifest next update: Mon 21 Sep 2026 17:40:56 +0000 Files and hashes: 1: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl (hash: P8BjYe/RfhqQ56SV4DOWnhoMbK1pYTnXw4F/F2j5U6Y=) 2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: 4kBrY3m/YUmUepWlqfPB38SwXp7zMRirxL+70ddYk80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d7:be:99:5b:13:0a:07:8c:b2:64:06:bd:b8:65:ca:6e:97:c8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Validity Not Before: Sep 20 15:10:56 2026 GMT Not After : Sep 21 17:40:56 2026 GMT Subject: CN=BCFE50BF10096872D5F915A62BCE8A80DBF8912B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:25:76:62:a3:b6:7b:b4:bd:01:2a:f0:44: cc:6c:b7:6e:e1:4d:02:62:c0:0b:76:17:7d:aa:82: 88:a0:e1:30:36:10:4b:38:52:22:24:f5:e8:bb:b4: 5a:69:92:88:89:b0:2a:aa:77:72:69:dd:30:b6:69: 4a:d7:d3:bd:93:9e:d9:f7:19:12:b1:ed:2e:28:57: 9a:0b:f1:60:83:f0:95:f8:e9:a0:a3:a4:aa:e7:5e: 00:1b:e2:66:3d:fe:e5:24:6c:0c:d6:06:43:32:59: 1c:45:82:cf:56:69:f1:ee:2f:f9:de:f3:96:bf:73: 37:d2:15:4c:d3:72:ae:92:31:8f:4a:ac:49:8e:de: 53:7f:4e:50:0f:38:44:71:c6:0e:b4:13:b0:84:6a: 4c:8e:1d:ba:1c:05:e6:38:9e:45:f7:2f:a7:0c:aa: 57:73:ed:25:39:d3:df:43:fd:36:48:40:c0:62:eb: 6d:0d:16:2c:28:ce:a3:ff:34:62:1e:24:77:21:e8: 12:fb:b7:96:94:ed:25:07:4c:9c:af:c0:1d:36:24: 0f:36:e7:1f:9a:fd:d0:63:78:fe:4b:2a:9d:06:b1: 98:e9:07:3e:2f:95:52:5f:6f:37:81:fc:00:d2:b3: 02:5a:63:d4:89:3a:fd:a3:f4:1b:50:1c:f2:97:ae: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FE:50:BF:10:09:68:72:D5:F9:15:A6:2B:CE:8A:80:DB:F8:91:2B X509v3 Authority Key Identifier: keyid:EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:78:df:d9:66:e8:37:28:29:8c:c1:1c:c6:8b:95:60:cc:e3: a9:93:50:be:a5:64:16:e2:09:c3:6e:67:38:09:1b:74:4c:51: 30:cf:66:10:52:32:67:7c:b8:e4:b2:d5:8d:1e:e5:24:df:e0: 78:0c:a4:1a:c8:26:87:0a:0f:54:31:2b:b9:b4:3d:db:be:3c: 64:0c:8c:9d:40:a4:18:d0:ef:54:08:de:72:db:bd:09:3c:47: 39:75:c5:78:25:0c:b0:5c:05:24:09:92:18:95:e9:c2:0a:55: c3:cb:10:3a:48:2b:6f:1b:47:ca:06:76:e2:3e:16:38:4b:28: 97:f9:22:a5:b5:20:29:47:74:8e:2f:9e:d9:fa:07:e1:24:d4: 13:6e:ba:03:ad:82:17:28:46:b9:cd:ba:fc:60:77:f7:4a:2f: 16:d0:91:71:0d:2d:48:58:c3:18:66:eb:c9:bb:ae:85:c5:a8: 9b:62:d4:8f:ef:9a:72:4e:51:3f:35:a9:c9:26:fd:3f:9c:13: 61:9f:bd:17:b1:09:86:36:8c:e5:66:77:f1:bb:92:5f:4b:46: ab:92:03:58:37:b0:ed:1b:6b:cd:3e:d2:e8:92:2b:30:e6:af: 60:e1:31:50:63:c7:41:3d:b0:27:e5:2b:84:19:2c:4a:c4:ec: c0:7c:ba:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9e+mVsTCgeMsmQGvbhlym6XyIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJC M0U2RTFFQjAeFw0yNjA5MjAxNTEwNTZaFw0yNjA5MjExNzQwNTZaMDMxMTAvBgNV BAMTKEJDRkU1MEJGMTAwOTY4NzJENUY5MTVBNjJCQ0U4QTgwREJGODkxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iCV2YqO2e7S9ASrwRMxst27h TQJiwAt2F32qgoig4TA2EEs4UiIk9ei7tFppkoiJsCqqd3Jp3TC2aUrX072Tntn3 GRKx7S4oV5oL8WCD8JX46aCjpKrnXgAb4mY9/uUkbAzWBkMyWRxFgs9WafHuL/ne 85a/czfSFUzTcq6SMY9KrEmO3lN/TlAPOERxxg60E7CEakyOHbocBeY4nkX3L6cM qldz7SU5099D/TZIQMBi620NFiwozqP/NGIeJHch6BL7t5aU7SUHTJyvwB02JA82 5x+a/dBjeP5LKp0GsZjpBz4vlVJfbzeB/ADSswJaY9SJOv2j9BtQHPKXrmWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvP5QvxAJaHLV+RWmK86KgNv4kSswHwYDVR0j BBgwFoAU7vI9x7xwxI7F9Gf+RN5bsrPm4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdC QzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJCM0U2RTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUYyM0RDN0JDNzBDNDhFQzVGNDY3RkU0NERFNUJCMkIzRTZF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVC QjJCM0U2RTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5439lm6DcoKYzBHMaLlWDM46mTUL6lZBbi CcNuZzgJG3RMUTDPZhBSMmd8uOSy1Y0e5STf4HgMpBrIJocKD1QxK7m0Pdu+PGQM jJ1ApBjQ71QI3nLbvQk8Rzl1xXglDLBcBSQJkhiV6cIKVcPLEDpIK28bR8oGduI+ FjhLKJf5IqW1IClHdI4vntn6B+Ek1BNuugOtghcoRrnNuvxgd/dKLxbQkXENLUhY wxhm68m7roXFqJti1I/vmnJOUT81qckm/T+cE2GfvRexCYY2jOVmd/G7kl9LRquS A1g3sO0ba80+0uiSKzDmr2DhMVBjx0E9sCflK4QZLErE7MB8uso= -----END CERTIFICATE-----Generated at Mon Sep 21 02:14:52 2026 by rpki-client