$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft File: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft (raw, json) Hash identifier: 1nsXtRP50Bdn0V1Z6E0+s2PMuyrz/xOKZp3Q7mvriFU= Subject key identifier: 90:67:E4:DB:4B:73:D6:DA:3E:11:E9:E3:94:00:69:E7:E4:F1:4B:C5 Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Certificate serial: 0B817B7D664ECBBA5C31082C961FCEF7B66B9887 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:40:27 +0000 Manifest this update: Wed 23 Sep 2026 15:35:27 +0000 Manifest next update: Thu 24 Sep 2026 18:54:27 +0000 Files and hashes: 1: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl (hash: OPWfOyCoCJIWAQi/iVTi/kUIs+sfjVVM5CeEBmxW3d0=) 2: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=) 3: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw=) 4: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:81:7b:7d:66:4e:cb:ba:5c:31:08:2c:96:1f:ce:f7:b6:6b:98:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Validity Not Before: Sep 23 15:35:27 2026 GMT Not After : Sep 24 18:54:27 2026 GMT Subject: CN=9067E4DB4B73D6DA3E11E9E3940069E7E4F14BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:90:d4:88:12:9c:ab:fe:74:c0:11:d0:42: 00:cc:7b:ba:b4:fc:90:6c:06:dc:72:76:65:ba:af: 12:58:3e:0d:f1:59:a1:e5:50:8e:00:cb:4f:91:61: fb:c4:91:03:57:85:da:27:eb:6a:f4:c8:3b:1a:98: 86:3a:2a:43:31:80:d8:8c:64:4a:e6:a3:28:a3:3e: 35:2e:4a:7d:70:ef:0b:9f:cb:8c:aa:56:4e:30:fb: 2b:f4:ca:6c:4e:d2:ed:f8:e4:80:b8:b8:d2:a5:91: 43:ad:5b:8a:63:58:14:16:27:bf:37:9b:28:bf:e9: 44:7a:a4:49:90:02:e3:7a:67:86:0a:d7:5e:b2:62: c8:10:8a:8e:4a:2e:2f:e2:7a:9c:bc:de:97:83:98: 94:62:cc:35:2d:9d:50:73:74:44:d0:8d:d7:80:99: 88:5c:92:55:a0:60:4c:02:b3:df:35:b2:44:e9:57: 88:f3:b2:9f:da:33:b7:68:bc:75:df:b6:d5:4b:d8: 8f:a4:d1:76:79:ab:bf:41:56:7a:04:a5:28:a3:4f: 5d:14:07:e8:03:7c:72:a4:7d:63:6a:05:2a:d6:20: fe:17:43:04:57:6a:8d:75:07:52:2b:f8:f9:dc:cd: c1:86:5d:43:9d:bb:39:45:90:6c:0f:f1:48:01:b0: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:67:E4:DB:4B:73:D6:DA:3E:11:E9:E3:94:00:69:E7:E4:F1:4B:C5 X509v3 Authority Key Identifier: keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:5a:73:8d:d9:98:76:2e:4c:bb:63:2e:e5:32:0b:17:0f:21: 67:eb:29:bb:75:da:1b:8b:b9:45:a5:68:5e:5f:66:38:6a:c7: 12:dd:1f:3e:fb:59:b0:98:3d:84:f8:3a:ae:44:f1:2a:1a:21: 6b:98:4b:e2:37:8d:a6:81:1e:3f:4b:0f:e0:13:a9:13:e8:de: 2a:f6:e4:38:8e:58:cb:43:56:69:03:02:6d:c0:4f:ef:ba:d4: 8f:4d:db:99:46:cc:10:16:12:d5:fe:6f:da:ff:3e:f1:3d:ec: 03:af:67:81:69:c4:c4:2b:15:ff:6f:28:8d:f4:ef:3c:86:3e: fb:cd:b3:63:59:28:be:4a:fb:9a:f3:df:94:12:f6:94:a3:31: 90:11:80:95:fc:3d:73:0c:e9:3e:65:c7:79:47:47:6a:dc:ea: 0a:5d:01:b4:64:fa:34:d2:03:4a:88:2f:9d:eb:0a:18:52:52: c6:d8:89:bd:7c:01:ff:f9:f3:f1:0d:1a:dc:98:a6:8e:c3:3a: 7e:f4:d7:b7:a5:a1:34:23:97:3d:53:0e:00:a9:20:c1:3d:60: 06:31:60:d3:d7:26:ef:08:73:4e:b0:f4:2e:2c:ce:8e:48:51: 0e:e3:3f:84:99:8f:62:61:c2:af:61:21:df:50:f8:fe:d9:23: ed:e2:71:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4F7fWZOy7pcMQgslh/O97ZrmIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx QTZCOEQwRTAeFw0yNjA5MjMxNTM1MjdaFw0yNjA5MjQxODU0MjdaMDMxMTAvBgNV BAMTKDkwNjdFNERCNEI3M0Q2REEzRTExRTlFMzk0MDA2OUU3RTRGMTRCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVpDUiBKcq/50wBHQQgDMe7q0 /JBsBtxydmW6rxJYPg3xWaHlUI4Ay0+RYfvEkQNXhdon62r0yDsamIY6KkMxgNiM ZErmoyijPjUuSn1w7wufy4yqVk4w+yv0ymxO0u345IC4uNKlkUOtW4pjWBQWJ783 myi/6UR6pEmQAuN6Z4YK116yYsgQio5KLi/iepy83peDmJRizDUtnVBzdETQjdeA mYhcklWgYEwCs981skTpV4jzsp/aM7dovHXfttVL2I+k0XZ5q79BVnoEpSijT10U B+gDfHKkfWNqBSrWIP4XQwRXao11B1Ir+PnczcGGXUOduzlFkGwP8UgBsAubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkGfk20tz1to+EenjlABp5+TxS8UwHwYDVR0j BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0 RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4 RDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNG NkUxQTZCOEQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlac43ZmHYuTLtjLuUyCxcPIWfrKbt12huL uUWlaF5fZjhqxxLdHz77WbCYPYT4Oq5E8SoaIWuYS+I3jaaBHj9LD+ATqRPo3ir2 5DiOWMtDVmkDAm3AT++61I9N25lGzBAWEtX+b9r/PvE97AOvZ4FpxMQrFf9vKI30 7zyGPvvNs2NZKL5K+5rz35QS9pSjMZARgJX8PXMM6T5lx3lHR2rc6gpdAbRk+jTS A0qIL53rChhSUsbYib18Af/58/ENGtyYpo7DOn7017eloTQjlz1TDgCpIME9YAYx YNPXJu8Ic06w9C4szo5IUQ7jP4SZj2Jhwq9hId9Q+P7ZI+3icdE= -----END CERTIFICATE-----Generated at Thu Sep 24 10:13:46 2026 by rpki-client