$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft File: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft (raw, json) Hash identifier: p8kNLYJ47PBxBVnHJP16lrRlq5wI0V0AunvVKIJ8aQs= Subject key identifier: A3:27:F0:50:B0:F1:BB:E7:AF:AF:55:53:63:27:15:D2:13:99:68:6A Authority key identifier: EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 Certificate issuer: /CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Certificate serial: 7E8BE863E5F7E7AEEE752CB9CDFC54DED55C11BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:36:14 +0000 Manifest this update: Fri 24 Jul 2026 01:31:14 +0000 Manifest next update: Sat 25 Jul 2026 04:40:14 +0000 Files and hashes: 1: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl (hash: DLpSLrOEwRxHj1nTUxznBssiZBWvxOydoNEtBp1/GKo=) 2: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: zQyUZlOFUHDGNe+npgwTsdpaoQy1XyYjr7ZYgl99pvg=) 3: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: GdDE8SC5CnBeQmp3oWwqYVk6uwDRjhVlj4+oTAdzWC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8b:e8:63:e5:f7:e7:ae:ee:75:2c:b9:cd:fc:54:de:d5:5c:11:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Validity Not Before: Jul 24 01:31:14 2026 GMT Not After : Jul 25 04:40:14 2026 GMT Subject: CN=A327F050B0F1BBE7AFAF5553632715D21399686A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:79:e3:89:cb:b5:ff:28:f1:9d:13:f7:6a: 1b:f9:23:cb:85:91:f2:06:12:0a:07:ad:11:d1:d1: 9c:19:e5:a9:50:cb:c9:11:7f:13:43:df:8b:03:48: c9:b6:38:b6:88:5a:e7:a6:6b:ea:dc:d2:72:54:2c: 6b:ef:2d:a3:30:33:79:a8:06:9d:0c:5b:97:e8:8d: 83:70:37:99:a4:25:7b:96:15:9e:74:60:be:b4:a5: 25:de:82:3c:af:7d:1c:45:fe:08:73:68:04:a9:91: 55:30:9c:1f:d1:f5:2e:10:ea:0b:04:72:a2:a0:63: e5:eb:0b:76:68:1d:be:1b:0d:3d:26:fd:47:f2:d7: 69:90:e8:2e:74:50:51:19:65:d4:b3:a7:fc:73:05: 9d:11:64:f0:9c:29:ea:d1:d2:31:a4:41:01:6e:54: 40:82:e9:ec:22:7b:6d:e1:53:1a:48:d4:62:f7:56: 45:91:95:d1:9a:99:d4:e2:c3:46:15:da:bc:8f:24: 67:9e:c6:9c:b0:db:08:54:d3:b6:8a:5e:5a:41:3c: 8d:69:e8:89:07:3b:fc:8f:16:0b:53:18:74:26:35: 4a:1a:fa:39:ec:88:ea:74:d8:a3:fd:c4:b3:bf:8f: f1:7d:7e:23:4e:18:da:ba:d0:e0:52:c4:2b:8d:76: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:27:F0:50:B0:F1:BB:E7:AF:AF:55:53:63:27:15:D2:13:99:68:6A X509v3 Authority Key Identifier: keyid:EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d1:c0:a8:b1:cf:82:79:9e:31:1b:44:ea:eb:3f:f1:15:81: fe:7b:b9:1a:d4:87:62:7f:1c:3a:6f:15:7e:35:71:b0:b9:6a: 31:e8:0d:c7:ae:5d:6f:13:84:a8:86:2b:18:28:bc:28:ef:3b: 24:b7:63:d6:5d:8c:a9:56:03:ea:13:36:0e:a3:a8:bb:56:02: ad:99:b3:04:b2:ac:d1:87:71:a8:ac:32:60:d1:d2:28:f4:93: 8c:de:76:cd:78:5a:57:21:91:c4:bc:23:b2:8b:96:d4:0f:91: 8b:e5:11:73:11:12:ab:cb:bc:eb:46:ed:79:42:6a:8b:93:52: 2f:b5:9b:c3:ab:fd:a3:5a:16:3a:0a:4e:bf:12:49:1e:02:2c: f9:ad:55:aa:6d:41:b4:76:9d:d6:b3:b3:df:05:a2:68:d5:4b: 28:e9:4e:3d:a2:f0:84:12:11:ee:bd:fb:af:24:aa:be:ad:5f: 48:5c:cd:03:9f:8d:c4:e9:68:7e:70:02:41:da:00:68:59:c1: ce:e7:a2:a9:9e:d5:3e:ab:d2:40:a0:f6:f0:4c:b6:53:15:42: 78:7d:97:0a:67:63:f3:d3:14:7d:55:13:9a:2b:35:10:db:cd: 44:ad:51:7a:c1:74:44:4e:79:fb:52:0d:66:18:25:79:3d:fe: 49:05:e1:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfovoY+X3567udSy5zfxU3tVcEbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2 MjhDNkE1NDAeFw0yNjA3MjQwMTMxMTRaFw0yNjA3MjUwNDQwMTRaMDMxMTAvBgNV BAMTKEEzMjdGMDUwQjBGMUJCRTdBRkFGNTU1MzYzMjcxNUQyMTM5OTY4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJXnjicu1/yjxnRP3ahv5I8uF kfIGEgoHrRHR0ZwZ5alQy8kRfxND34sDSMm2OLaIWuema+rc0nJULGvvLaMwM3mo Bp0MW5fojYNwN5mkJXuWFZ50YL60pSXegjyvfRxF/ghzaASpkVUwnB/R9S4Q6gsE cqKgY+XrC3ZoHb4bDT0m/Ufy12mQ6C50UFEZZdSzp/xzBZ0RZPCcKerR0jGkQQFu VECC6ewie23hUxpI1GL3VkWRldGamdTiw0YV2ryPJGeexpyw2whU07aKXlpBPI1p 6IkHO/yPFgtTGHQmNUoa+jnsiOp02KP9xLO/j/F9fiNOGNq60OBSxCuNdsIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoyfwULDxu+evr1VTYycV0hOZaGowHwYDVR0j BBgwFoAU7ovrqL5NRPQ+z9n/V4noeGKMalQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkODUwYTgtYWJiOS00NDgyLWE1YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThC RTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2MjhDNkE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRThCRUJBOEJFNEQ0NEY0M0VDRkQ5RkY1Nzg5RTg3ODYyOEM2 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4 Nzg2MjhDNkE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfRwKixz4J5njEbROrrP/EVgf57uRrUh2J/ HDpvFX41cbC5ajHoDceuXW8ThKiGKxgovCjvOyS3Y9ZdjKlWA+oTNg6jqLtWAq2Z swSyrNGHcaisMmDR0ij0k4zeds14WlchkcS8I7KLltQPkYvlEXMREqvLvOtG7XlC aouTUi+1m8Or/aNaFjoKTr8SSR4CLPmtVaptQbR2ndazs98FomjVSyjpTj2i8IQS Ee69+68kqr6tX0hczQOfjcTpaH5wAkHaAGhZwc7noqme1T6r0kCg9vBMtlMVQnh9 lwpnY/PTFH1VE5orNRDbzUStUXrBdEROeftSDWYYJXk9/kkF4Ug= -----END CERTIFICATE-----Generated at Fri Jul 24 08:52:37 2026 by rpki-client