$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft File: EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft (raw, json) Hash identifier: VNHuMv+I5mbudVQv5jOHGeTTcyg68XPzyUBrM3C+1fw= Subject key identifier: 21:A5:2C:3C:F2:F6:49:B8:95:92:58:2F:55:A5:39:72:CF:96:4C:A8 Authority key identifier: EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC Certificate issuer: /CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC Certificate serial: 7C3C6ED81269D9506B934B5D6F0F9EC7CB8EBFDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 13:38:22 +0000 Manifest this update: Tue 10 Nov 2026 13:33:22 +0000 Manifest next update: Wed 11 Nov 2026 16:29:22 +0000 Files and hashes: 1: EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl (hash: cAnTnWfXAFcB4vyk5EKVPJg7iYbiXUSyl1WU54At1rA=) 2: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: M8k9bViShtt4AmWU/AyDsamC5/RbL8EE0iMthIH76R4=) 3: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: 1kRWH/01ZY8vcD8ZJ7NSjogRu3r8TcailYL1T9WDQmE=) 4: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: oAmiFNqM3oX4aTDAmFzq05nIHAcLXlnLDdNWSaF00HQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3c:6e:d8:12:69:d9:50:6b:93:4b:5d:6f:0f:9e:c7:cb:8e:bf:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC Validity Not Before: Nov 10 13:33:22 2026 GMT Not After : Nov 11 16:29:22 2026 GMT Subject: CN=21A52C3CF2F649B89592582F55A53972CF964CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:26:02:e5:41:cd:36:2c:f3:71:56:6a:05: 03:d7:04:f2:d9:8f:16:8f:e6:48:ef:48:b3:fa:e8: 44:c5:4f:55:53:aa:f2:0f:bc:00:d8:57:f2:b1:a1: 6d:31:7b:5c:ff:da:53:8b:d0:7c:98:13:0b:bd:7e: 60:3f:6a:06:fc:f5:ea:7a:a8:7c:19:5a:c4:20:58: 07:a4:fb:9d:aa:28:e4:eb:23:67:cb:04:ed:7d:9a: 43:13:19:dd:16:3b:61:0c:1b:54:30:f7:79:bd:15: 36:c0:c9:06:6a:e9:51:46:a0:ac:ca:c8:af:07:84: b4:59:de:15:7b:66:38:e0:47:b7:bc:c9:a2:d3:17: 2b:34:24:53:4b:2d:f1:49:66:7b:f0:c4:e5:c6:10: 6a:33:5d:8a:14:a3:01:89:8e:36:a2:54:09:23:2d: 5d:4f:fe:d9:eb:6b:a3:4d:09:82:77:dd:d5:64:c8: 4c:0c:a9:8e:57:5a:99:f2:0a:d6:15:ab:f9:db:18: 17:1a:35:88:d8:6a:6f:6b:83:d7:35:3c:6e:cd:27: 30:62:9d:b2:98:90:60:ab:b9:7a:76:8b:88:b3:19: 33:1d:8a:01:8c:03:8f:50:a6:df:80:86:58:6b:b9: 1e:bf:ec:e2:aa:b7:a1:6f:f4:2e:94:75:42:e3:92: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A5:2C:3C:F2:F6:49:B8:95:92:58:2F:55:A5:39:72:CF:96:4C:A8 X509v3 Authority Key Identifier: keyid:EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d7:09:5e:37:4c:76:5c:0e:ab:64:52:dd:cb:88:11:bb:42: 8d:3c:39:68:a6:4f:44:96:b0:0f:c3:f4:a9:b0:0d:23:fc:4f: 5f:fd:df:b5:1b:88:7b:67:a2:cd:bd:04:fd:f8:a6:f7:55:11: 40:25:55:e1:3f:ae:ed:c2:5c:da:85:20:37:84:a9:70:0f:6f: e7:5b:32:ab:20:1e:9b:3b:f2:f9:57:89:f3:40:ed:a4:d6:e6: da:50:c7:89:4d:2f:f3:02:07:32:55:8f:82:46:5a:a2:0d:35: 32:5f:f9:cc:43:f3:97:4e:b6:9e:aa:9f:7e:21:66:98:ca:e7: bb:a7:cf:0e:23:ed:cc:0c:b6:f0:96:94:73:70:a1:09:7c:a9: b9:6b:5d:33:07:09:15:de:b9:38:78:cc:da:1a:d4:9d:d7:7a: b7:3a:70:e7:29:15:3a:2c:57:d4:2e:34:8e:6a:a6:96:3c:40: 0a:1e:5f:50:08:cc:f0:b6:7c:be:54:a7:d2:7f:f9:37:17:7b: a7:8a:ab:c3:06:7d:7f:47:a5:5b:c5:5d:46:ac:10:a8:07:d5: b5:73:e4:27:3d:81:fe:db:bc:f7:c6:fa:a8:18:7e:8e:83:3b: 8a:e4:ec:3d:a3:aa:ff:74:50:5a:96:be:eb:a5:9c:95:f8:4f: 4c:2a:80:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDxu2BJp2VBrk0tdbw+ex8uOv9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVFRUREQ0RBNDRCMDcxM0IzOTdEMjcwNDA3MjFFRUM0 ODQ4RTVEQzAeFw0yNjExMTAxMzMzMjJaFw0yNjExMTExNjI5MjJaMDMxMTAvBgNV BAMTKDIxQTUyQzNDRjJGNjQ5Qjg5NTkyNTgyRjU1QTUzOTcyQ0Y5NjRDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOoyYC5UHNNizzcVZqBQPXBPLZ jxaP5kjvSLP66ETFT1VTqvIPvADYV/KxoW0xe1z/2lOL0HyYEwu9fmA/agb89ep6 qHwZWsQgWAek+52qKOTrI2fLBO19mkMTGd0WO2EMG1Qw93m9FTbAyQZq6VFGoKzK yK8HhLRZ3hV7ZjjgR7e8yaLTFys0JFNLLfFJZnvwxOXGEGozXYoUowGJjjaiVAkj LV1P/tnra6NNCYJ33dVkyEwMqY5XWpnyCtYVq/nbGBcaNYjYam9rg9c1PG7NJzBi nbKYkGCruXp2i4izGTMdigGMA49Qpt+AhlhruR6/7OKqt6Fv9C6UdULjkq6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIaUsPPL2SbiVklgvVaU5cs+WTKgwHwYDVR0j BBgwFoAU7u7dzaRLBxOzl9JwQHIe7EhI5dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM2ZjgzMmItNWE5ZS00Y2FhLWJkZDQtMjYzNDcyN2E5ZWQ0LzAvRUVFRUREQ0RB NDRCMDcxM0IzOTdEMjcwNDA3MjFFRUM0ODQ4RTVEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUVFRERDREE0NEIwNzEzQjM5N0QyNzA0MDcyMUVFQzQ4NDhF NURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvRUVFRUREQ0RBNDRCMDcxM0IzOTdEMjcwNDA3MjFF RUM0ODQ4RTVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDXCV43THZcDqtkUt3LiBG7Qo08OWimT0SW sA/D9KmwDSP8T1/937UbiHtnos29BP34pvdVEUAlVeE/ru3CXNqFIDeEqXAPb+db MqsgHps78vlXifNA7aTW5tpQx4lNL/MCBzJVj4JGWqINNTJf+cxD85dOtp6qn34h ZpjK57unzw4j7cwMtvCWlHNwoQl8qblrXTMHCRXeuTh4zNoa1J3Xerc6cOcpFTos V9QuNI5qppY8QAoeX1AIzPC2fL5Up9J/+TcXe6eKq8MGfX9HpVvFXUasEKgH1bVz 5Cc9gf7bvPfG+qgYfo6DO4rk7D2jqv90UFqWvuulnJX4T0wqgO0= -----END CERTIFICATE-----Generated at Tue Nov 10 20:56:38 2026 by rpki-client