$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft File: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft (raw, json) Hash identifier: +cfcOe78MnGgSwzrmhiRTLT6eHcMEGid1deI7X0Rf0M= Subject key identifier: D3:D4:96:10:04:25:C0:FE:71:63:6A:77:9A:14:71:75:7D:77:A9:C7 Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Certificate serial: 024E9D9DC45B0E3E5D21885F453DF2DF3206DBF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 21:17:50 +0000 Manifest this update: Tue 28 Jul 2026 21:12:50 +0000 Manifest next update: Wed 29 Jul 2026 21:49:50 +0000 Files and hashes: 1: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl (hash: UltDa2N4u56T29Y7fV0ei822xrSaEK+vLAtd49voTmw=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=) 3: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw=) 4: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4e:9d:9d:c4:5b:0e:3e:5d:21:88:5f:45:3d:f2:df:32:06:db:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Validity Not Before: Jul 28 21:12:50 2026 GMT Not After : Jul 29 21:49:50 2026 GMT Subject: CN=D3D496100425C0FE71636A779A1471757D77A9C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e2:16:e1:8f:58:07:58:ce:cf:15:58:0d:cf: 4b:fe:6c:0b:55:57:dd:37:58:42:36:6e:8f:33:0b: 18:2a:cc:1e:3d:ca:16:91:51:44:1c:2e:07:5e:70: e8:28:94:59:8b:66:64:c3:76:82:e2:c4:28:55:0f: 8d:fd:38:e9:2e:ca:59:a8:16:ef:5a:20:29:8d:23: 2e:3a:ad:8e:ba:0f:da:f2:e6:92:c0:51:d9:f8:b9: 0b:6f:e3:4f:61:72:3e:ce:4e:f9:bb:42:3b:c6:bf: 58:77:ae:99:12:58:bd:05:82:e2:ee:01:2d:77:a7: 5b:80:e3:2f:8c:55:b1:ec:80:d5:a1:e5:c3:91:f5: b3:80:53:4e:78:c3:30:87:e9:06:d2:8e:10:3a:69: 10:40:a7:a1:67:7a:9e:e4:12:c0:b2:56:8c:cf:f7: bf:1d:20:3d:c7:c6:7e:1c:b4:6a:a0:63:c8:c8:f4: 9d:ec:ec:64:fd:18:ec:11:6f:34:44:98:09:ea:d1: fd:17:9a:d5:ab:d9:f2:01:d8:8f:25:cf:ae:0e:c5: e5:d2:74:c0:d5:e4:16:25:bc:70:6f:c0:17:86:3f: 9b:d3:aa:0c:c2:3e:23:3b:b0:c4:de:ac:0b:68:48: 0e:29:1c:c6:95:dd:7b:0d:1c:8a:b0:95:ef:e4:15: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D4:96:10:04:25:C0:FE:71:63:6A:77:9A:14:71:75:7D:77:A9:C7 X509v3 Authority Key Identifier: keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:55:b4:c2:72:78:10:03:dd:3d:b3:4a:f6:e2:99:d0:f0:22: a1:14:d0:c6:3d:52:43:22:d7:4f:84:92:70:13:55:08:ca:85: 32:7c:92:02:b8:45:90:f1:a8:fc:cb:3f:5f:dd:85:12:8d:23: d7:d4:0c:23:e3:51:4e:8a:92:d9:14:3f:b7:a8:ef:a1:4f:54: a2:9a:15:94:b7:96:9c:77:1c:ea:c4:c4:96:83:a1:87:77:db: e5:ff:18:69:49:0e:b5:14:b7:47:5c:e4:8d:bc:09:ff:d4:7d: 24:f7:83:62:9f:58:ca:9c:4e:8e:49:12:56:d7:d4:c5:10:26: 55:cc:87:99:da:34:b8:4c:a2:51:01:08:1b:b3:ff:08:ec:3f: 81:69:8a:58:91:04:21:b7:2f:d7:93:f4:00:75:ad:46:9a:51: 35:12:f6:97:b0:5b:25:61:90:dd:61:68:96:a7:f0:9d:20:09: 52:a8:cb:f4:3a:b1:d7:16:7d:89:9d:37:93:77:da:0e:3e:c3: 69:77:63:85:25:3b:bf:74:a6:96:22:b0:14:41:11:93:17:9d: 6d:86:d9:65:40:ba:4c:ab:33:2c:ea:30:5f:c1:fc:98:06:6b: dc:c2:11:87:4d:4c:6c:2a:c5:be:4c:a0:64:66:08:5b:5c:0e: 14:b7:26:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAk6dncRbDj5dIYhfRT3y3zIG2/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx QTZCOEQwRTAeFw0yNjA3MjgyMTEyNTBaFw0yNjA3MjkyMTQ5NTBaMDMxMTAvBgNV BAMTKEQzRDQ5NjEwMDQyNUMwRkU3MTYzNkE3NzlBMTQ3MTc1N0Q3N0E5QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv4hbhj1gHWM7PFVgNz0v+bAtV V903WEI2bo8zCxgqzB49yhaRUUQcLgdecOgolFmLZmTDdoLixChVD439OOkuylmo Fu9aICmNIy46rY66D9ry5pLAUdn4uQtv409hcj7OTvm7QjvGv1h3rpkSWL0FguLu AS13p1uA4y+MVbHsgNWh5cOR9bOAU054wzCH6QbSjhA6aRBAp6Fnep7kEsCyVozP 978dID3Hxn4ctGqgY8jI9J3s7GT9GOwRbzREmAnq0f0XmtWr2fIB2I8lz64OxeXS dMDV5BYlvHBvwBeGP5vTqgzCPiM7sMTerAtoSA4pHMaV3XsNHIqwle/kFRD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU09SWEAQlwP5xY2p3mhRxdX13qccwHwYDVR0j BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0 RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4 RDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNG NkUxQTZCOEQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5VtMJyeBAD3T2zSvbimdDwIqEU0MY9UkMi 10+EknATVQjKhTJ8kgK4RZDxqPzLP1/dhRKNI9fUDCPjUU6KktkUP7eo76FPVKKa FZS3lpx3HOrExJaDoYd32+X/GGlJDrUUt0dc5I28Cf/UfST3g2KfWMqcTo5JElbX 1MUQJlXMh5naNLhMolEBCBuz/wjsP4FpiliRBCG3L9eT9AB1rUaaUTUS9pewWyVh kN1haJan8J0gCVKoy/Q6sdcWfYmdN5N32g4+w2l3Y4UlO790ppYisBRBEZMXnW2G 2WVAukyrMyzqMF/B/JgGa9zCEYdNTGwqxb5MoGRmCFtcDhS3JhU= -----END CERTIFICATE-----Generated at Wed Jul 29 00:54:35 2026 by rpki-client