$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft File: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft (raw, json) Hash identifier: rQUJmtaXs8TolMsD7tQdUloYbVc2TfT9jBPOnTK4aVE= Subject key identifier: AB:3F:2B:E2:23:C2:2F:A6:9E:3F:C4:3F:DE:8A:6B:4B:28:E2:F4:F5 Authority key identifier: EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 Certificate issuer: /CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Certificate serial: 55F65988CAA3A4A8ADE7E7BF0B4264D927299319 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 18:54:23 +0000 Manifest this update: Wed 23 Sep 2026 18:49:23 +0000 Manifest next update: Thu 24 Sep 2026 21:24:23 +0000 Files and hashes: 1: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: GdDE8SC5CnBeQmp3oWwqYVk6uwDRjhVlj4+oTAdzWC4=) 2: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: zQyUZlOFUHDGNe+npgwTsdpaoQy1XyYjr7ZYgl99pvg=) 3: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl (hash: sMyvLMxyt4udrpFAtZRoEi72pZhHKdq+Lx+5fnQQRsc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f6:59:88:ca:a3:a4:a8:ad:e7:e7:bf:0b:42:64:d9:27:29:93:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Validity Not Before: Sep 23 18:49:23 2026 GMT Not After : Sep 24 21:24:23 2026 GMT Subject: CN=AB3F2BE223C22FA69E3FC43FDE8A6B4B28E2F4F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bd:88:09:da:e0:e4:35:bb:9f:2c:73:87:42: d2:fe:7a:b0:64:a6:86:14:50:e1:d7:85:0d:50:66: a8:d0:69:e1:0b:9a:98:7e:6a:0e:d7:4b:51:d8:01: 8c:fe:3d:8b:29:49:54:5e:6f:9b:b3:77:c5:ae:de: 56:c7:82:50:b8:0b:b7:8f:81:ef:f5:30:a7:64:c4: 7f:9d:7d:74:e6:82:1f:f7:4e:68:ae:3e:c4:92:c3: 79:0e:22:d1:7a:56:3f:64:18:42:79:b8:b5:92:d0: 1b:9d:10:95:3e:04:9e:a5:f0:3d:4a:7d:25:6e:22: 64:f9:25:1f:ae:db:fe:c4:9d:c7:bd:13:9f:3c:30: ca:9e:50:20:0a:cf:36:b6:de:9b:a7:12:cd:36:02: 18:d2:02:09:84:ca:17:3a:7b:90:50:fc:0b:89:ea: aa:14:3e:89:ec:e2:1e:3d:6a:32:cd:85:ae:9e:ad: 2d:b8:f3:42:57:d6:94:01:ba:3f:d7:00:6c:da:58: 5c:b2:1f:aa:fc:32:d9:d8:7e:ef:ed:41:f0:fb:a2: 51:90:c9:4b:17:7c:37:a0:3c:3c:3f:cb:0b:15:8f: d0:ff:c5:60:90:1a:d3:72:46:ff:2b:4b:3d:ec:6a: 9c:0f:84:e2:b0:e5:71:6b:22:98:e4:99:9e:91:df: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3F:2B:E2:23:C2:2F:A6:9E:3F:C4:3F:DE:8A:6B:4B:28:E2:F4:F5 X509v3 Authority Key Identifier: keyid:EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:96:5d:cc:fa:c3:64:44:3f:b8:f8:55:b1:88:71:b3:c2:32: 67:de:19:5b:37:31:bd:2b:fe:79:f9:bb:e4:74:f8:48:11:ec: d6:5f:5f:5e:43:59:e9:b0:76:63:99:ec:78:33:3d:9c:61:7d: 03:6b:69:83:2a:17:43:4a:73:97:54:9b:17:9c:70:15:18:2c: ca:82:c9:2e:d5:cb:1c:b4:aa:52:91:73:69:35:87:89:01:6e: 05:fb:a0:90:2f:ca:c1:e4:e9:14:3d:32:b7:82:27:00:9a:2c: e6:1d:0e:4d:e8:1c:58:8d:b7:03:3b:bd:02:62:8e:bd:7e:95: b4:46:d7:fb:b7:ed:89:10:0b:4b:e5:9e:90:4b:d7:c6:e9:a8: 46:e8:c6:ea:a8:a6:9a:7d:0b:f3:9e:25:09:23:1a:e1:b1:8c: b9:3a:40:65:51:b6:99:12:37:39:31:da:a8:77:85:ba:2f:8e: 58:c6:ab:b6:bd:24:4f:f4:f3:3f:db:53:ed:0b:38:1f:14:b2: 9d:ec:8a:1c:33:22:d7:29:40:c8:23:4c:7a:31:87:1a:0c:55: 49:af:bf:05:5c:a3:02:ad:e8:38:f2:ed:bb:af:47:62:2c:2f: 71:a9:0e:b4:48:61:32:e8:c3:fb:d3:7c:a0:88:08:cd:4f:0f: ef:98:e9:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfZZiMqjpKit5+e/C0Jk2ScpkxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2 MjhDNkE1NDAeFw0yNjA5MjMxODQ5MjNaFw0yNjA5MjQyMTI0MjNaMDMxMTAvBgNV BAMTKEFCM0YyQkUyMjNDMjJGQTY5RTNGQzQzRkRFOEE2QjRCMjhFMkY0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpvYgJ2uDkNbufLHOHQtL+erBk poYUUOHXhQ1QZqjQaeELmph+ag7XS1HYAYz+PYspSVReb5uzd8Wu3lbHglC4C7eP ge/1MKdkxH+dfXTmgh/3TmiuPsSSw3kOItF6Vj9kGEJ5uLWS0BudEJU+BJ6l8D1K fSVuImT5JR+u2/7Ence9E588MMqeUCAKzza23punEs02AhjSAgmEyhc6e5BQ/AuJ 6qoUPons4h49ajLNha6erS2480JX1pQBuj/XAGzaWFyyH6r8MtnYfu/tQfD7olGQ yUsXfDegPDw/ywsVj9D/xWCQGtNyRv8rSz3sapwPhOKw5XFrIpjkmZ6R37GFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqz8r4iPCL6aeP8Q/3oprSyji9PUwHwYDVR0j BBgwFoAU7ovrqL5NRPQ+z9n/V4noeGKMalQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkODUwYTgtYWJiOS00NDgyLWE1YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThC RTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2MjhDNkE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRThCRUJBOEJFNEQ0NEY0M0VDRkQ5RkY1Nzg5RTg3ODYyOEM2 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4 Nzg2MjhDNkE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOWXcz6w2REP7j4VbGIcbPCMmfeGVs3Mb0r /nn5u+R0+EgR7NZfX15DWemwdmOZ7HgzPZxhfQNraYMqF0NKc5dUmxeccBUYLMqC yS7Vyxy0qlKRc2k1h4kBbgX7oJAvysHk6RQ9MreCJwCaLOYdDk3oHFiNtwM7vQJi jr1+lbRG1/u37YkQC0vlnpBL18bpqEboxuqoppp9C/OeJQkjGuGxjLk6QGVRtpkS Nzkx2qh3hbovjljGq7a9JE/08z/bU+0LOB8Usp3sihwzItcpQMgjTHoxhxoMVUmv vwVcowKt6Djy7buvR2IsL3GpDrRIYTLow/vTfKCICM1PD++Y6VE= -----END CERTIFICATE-----Generated at Thu Sep 24 12:03:04 2026 by rpki-client