$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft File: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft (raw, json) Hash identifier: eFr+FDDhGvmVvQtekcjFbrfhiiq0bVmAMgkv6C+hPd4= Subject key identifier: B3:33:DD:94:0E:F8:D5:37:EF:55:AC:31:48:B3:76:8D:BD:88:BB:B4 Authority key identifier: EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB Certificate issuer: /CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Certificate serial: 733C811F70DF64909813CBA57E159B4FF48CBDB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:29:09 +0000 Manifest this update: Tue 16 Jun 2026 16:24:09 +0000 Manifest next update: Wed 17 Jun 2026 19:52:09 +0000 Files and hashes: 1: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl (hash: rnROGxLns8AiAyTl2elQhxLVovHaudpiohmZS09bo/o=) 2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: 4kBrY3m/YUmUepWlqfPB38SwXp7zMRirxL+70ddYk80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3c:81:1f:70:df:64:90:98:13:cb:a5:7e:15:9b:4f:f4:8c:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Validity Not Before: Jun 16 16:24:09 2026 GMT Not After : Jun 17 19:52:09 2026 GMT Subject: CN=B333DD940EF8D537EF55AC3148B3768DBD88BBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:91:1d:ff:2f:5b:ad:5b:0c:84:c5:c0:aa:3d: 84:b1:cb:60:0b:ea:7b:53:c5:fc:c5:7b:0d:96:3a: f7:72:d5:9f:1e:fa:bc:f6:ad:97:5c:c2:82:0b:89: 37:9b:bf:cd:b0:28:07:94:9f:7d:2c:9f:c6:4e:fd: 19:26:b3:f3:72:15:ed:59:52:76:64:e6:42:aa:1d: 77:b4:5e:48:90:fe:78:54:2f:e8:d0:f6:6a:d8:87: 65:2d:c3:dd:dd:c2:90:74:a6:11:f2:85:3c:50:19: 2d:6c:7e:60:06:9a:d7:4b:d5:25:e0:1b:6b:24:a1: 85:df:14:a5:12:e0:ac:22:fd:5f:bd:b0:84:db:a4: b3:84:e4:5e:1b:6d:a2:0b:cc:73:a0:e3:b9:9c:d8: da:dc:43:05:9a:72:8f:b7:87:6b:af:0a:4e:fb:48: 9f:92:c6:31:60:38:1b:32:5a:2c:3d:fe:4d:46:52: 13:f2:e2:14:73:f3:f9:83:b3:4d:60:c5:7d:1b:27: 78:51:8e:03:1d:58:e6:d8:bc:66:9f:c6:b0:12:9f: b4:92:20:92:fa:40:e5:0e:1c:a6:97:3e:26:b3:b8: 71:01:a8:17:15:28:26:19:67:4b:0f:74:83:44:47: 96:cf:00:7e:51:5a:08:e6:43:61:1a:28:c7:b8:9d: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:33:DD:94:0E:F8:D5:37:EF:55:AC:31:48:B3:76:8D:BD:88:BB:B4 X509v3 Authority Key Identifier: keyid:EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e2:06:ae:35:da:32:2d:36:8a:1d:d1:5d:39:dc:83:77:0b: 53:29:c5:e5:71:5f:d7:5e:6a:e3:a8:4f:76:9c:66:6f:fe:7c: c5:32:50:b6:ec:d7:4b:0b:28:7d:26:64:98:fe:8f:9e:36:d2: c7:83:89:fe:ef:aa:26:76:90:57:ee:37:5c:bb:3a:ee:ef:f0: 07:91:36:a7:58:a9:bf:c8:cd:09:92:65:d5:cb:87:c6:42:5c: 03:31:35:6e:3b:09:6a:40:ee:f6:5a:77:b6:ec:f6:b6:0f:45: c1:f0:58:42:9a:5f:a3:71:5e:7a:7e:f1:a0:5e:3a:2b:58:d7: d8:81:9d:3e:2c:86:3b:d3:b8:df:50:14:67:6e:e0:b5:b8:d3: cc:72:cf:64:3e:87:2d:5a:bb:3f:12:c4:93:48:08:77:a2:60: d4:fc:46:c1:eb:d9:6a:1e:c9:17:52:ea:1c:03:f0:ed:9c:63: 72:06:7d:a7:cb:41:63:04:ca:81:ef:ca:d6:45:d8:bf:01:62: aa:ae:0e:b4:ff:f8:3d:55:48:75:8b:d1:c4:7e:e6:e9:2f:64: 19:de:37:97:1c:47:ec:ca:35:24:09:f3:d7:ca:ba:e5:54:9c: 8c:40:85:a3:12:56:8f:5b:66:ff:ed:20:b8:35:4d:c2:f0:7b: 45:5b:13:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczyBH3DfZJCYE8ulfhWbT/SMvbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJC M0U2RTFFQjAeFw0yNjA2MTYxNjI0MDlaFw0yNjA2MTcxOTUyMDlaMDMxMTAvBgNV BAMTKEIzMzNERDk0MEVGOEQ1MzdFRjU1QUMzMTQ4QjM3NjhEQkQ4OEJCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1kR3/L1utWwyExcCqPYSxy2AL 6ntTxfzFew2WOvdy1Z8e+rz2rZdcwoILiTebv82wKAeUn30sn8ZO/Rkms/NyFe1Z UnZk5kKqHXe0XkiQ/nhUL+jQ9mrYh2Utw93dwpB0phHyhTxQGS1sfmAGmtdL1SXg G2skoYXfFKUS4Kwi/V+9sITbpLOE5F4bbaILzHOg47mc2NrcQwWaco+3h2uvCk77 SJ+SxjFgOBsyWiw9/k1GUhPy4hRz8/mDs01gxX0bJ3hRjgMdWObYvGafxrASn7SS IJL6QOUOHKaXPiazuHEBqBcVKCYZZ0sPdINER5bPAH5RWgjmQ2EaKMe4nSM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUszPdlA741TfvVawxSLN2jb2Iu7QwHwYDVR0j BBgwFoAU7vI9x7xwxI7F9Gf+RN5bsrPm4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdC QzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJCM0U2RTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUYyM0RDN0JDNzBDNDhFQzVGNDY3RkU0NERFNUJCMkIzRTZF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVC QjJCM0U2RTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/iBq412jItNood0V053IN3C1MpxeVxX9de auOoT3acZm/+fMUyULbs10sLKH0mZJj+j5420seDif7vqiZ2kFfuN1y7Ou7v8AeR NqdYqb/IzQmSZdXLh8ZCXAMxNW47CWpA7vZad7bs9rYPRcHwWEKaX6NxXnp+8aBe OitY19iBnT4shjvTuN9QFGdu4LW408xyz2Q+hy1auz8SxJNICHeiYNT8RsHr2Woe yRdS6hwD8O2cY3IGfafLQWMEyoHvytZF2L8BYqquDrT/+D1VSHWL0cR+5ukvZBne N5ccR+zKNSQJ89fKuuVUnIxAhaMSVo9bZv/tILg1TcLwe0VbE1Q= -----END CERTIFICATE-----Generated at Wed Jun 17 12:38:49 2026 by rpki-client