$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft File: EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft (raw, json) Hash identifier: x1IO1Zpmwxjkk1Qm3Qw7SqQS5/l5B9gIHdq1L24wKHQ= Subject key identifier: CD:80:DE:58:85:08:99:DC:90:EC:8C:84:48:48:23:3C:1E:A4:97:5E Authority key identifier: EE:6D:4D:4B:3B:79:AA:5A:B8:BE:ED:98:3C:15:50:3C:9A:34:36:63 Certificate issuer: /CN=EE6D4D4B3B79AA5AB8BEED983C15503C9A343663 Certificate serial: 118735B6D297824A6D7753DC294ACEAD873509FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:22:45 +0000 Manifest this update: Tue 12 May 2026 12:17:45 +0000 Manifest next update: Wed 13 May 2026 12:37:45 +0000 Files and hashes: 1: EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.crl (hash: WklO/75u3sraddBAicyi28tIktkL8ForsuALV2mMPfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.crl rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:87:35:b6:d2:97:82:4a:6d:77:53:dc:29:4a:ce:ad:87:35:09:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE6D4D4B3B79AA5AB8BEED983C15503C9A343663 Validity Not Before: May 12 12:17:45 2026 GMT Not After : May 13 12:37:45 2026 GMT Subject: CN=CD80DE58850899DC90EC8C844848233C1EA4975E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:71:ea:48:36:68:d7:6c:9a:6a:19:8b:d1:bb: ef:fc:15:61:db:6b:e0:4c:5e:92:49:64:37:50:d4: 5e:5d:14:e1:7d:46:29:26:48:f3:2e:86:e5:b9:ba: 1c:db:40:90:08:fd:4f:3d:75:f7:9e:44:42:c4:85: 67:8b:25:26:76:ef:7c:23:b4:c3:86:f1:df:83:24: 84:53:45:7c:26:7d:38:1b:40:14:46:70:2f:44:53: dd:c0:9c:c3:c2:ac:2a:73:c5:cd:ff:ea:e4:b1:7f: a1:67:8e:06:d2:43:a4:ad:6d:71:59:33:80:fc:b0: 90:fc:9e:1f:8f:29:c0:f0:dd:79:5c:8a:42:9f:7c: 55:82:cf:39:62:36:ad:e0:a5:e9:1e:15:75:11:81: 01:e5:24:e0:ec:38:ca:e1:a0:fe:b7:34:86:9c:ad: 83:18:f8:61:3c:83:0b:e2:16:bf:12:41:fa:46:cd: cb:4d:98:50:ae:8e:38:e6:06:d8:70:e2:23:bf:98: 64:6b:8d:d1:b3:4f:f0:f1:0b:dc:18:9e:15:ad:1d: 76:9d:83:6f:64:75:5c:aa:2a:05:e7:1b:e9:83:34: 92:06:ce:f8:90:0d:c0:80:c5:46:d4:c9:cd:f4:39: 87:a0:85:3e:f4:f6:46:6c:67:61:62:b1:c2:e6:11: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:80:DE:58:85:08:99:DC:90:EC:8C:84:48:48:23:3C:1E:A4:97:5E X509v3 Authority Key Identifier: keyid:EE:6D:4D:4B:3B:79:AA:5A:B8:BE:ED:98:3C:15:50:3C:9A:34:36:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c8:b0:9a:fd:95:34:b8:e2:21:ed:32:35:ba:6a:d1:cb:40: 6f:42:a8:7a:68:6b:5f:fc:20:a5:5d:d0:9b:92:40:8c:31:2a: 9d:90:ea:0f:5a:f0:c8:73:b1:46:e7:63:06:5b:64:14:10:4e: 42:7f:f3:95:34:e2:9a:86:0b:fb:bf:2e:cf:78:5d:8e:b2:9a: 9d:11:1c:f9:7b:40:e0:19:54:cc:3d:d5:96:6f:d4:bd:6c:da: 92:86:46:93:0a:70:f9:42:e6:e5:d6:e3:0e:9c:47:59:1f:9b: 46:77:12:62:76:70:62:41:cd:e0:d1:43:96:e8:df:a6:89:b9: 9c:fc:cf:22:3e:74:00:ac:a5:ae:ca:39:22:ba:da:9b:a4:e3: 14:3c:bb:75:5c:62:24:31:fc:71:57:c6:83:30:1d:82:84:3b: d6:56:77:ed:f4:f0:6b:a9:6f:97:f0:69:55:44:e3:75:b9:c0: 70:fb:84:4e:38:c3:2a:7c:3d:64:92:11:54:81:5e:a5:d9:64: 5e:41:20:e3:0d:50:93:22:d3:6d:25:9d:cb:67:e7:78:c0:4f: 26:2b:2a:f6:60:e0:e5:71:8f:a8:78:54:6d:8d:64:37:08:2b: fe:f0:23:45:f9:50:05:b0:8f:32:ec:4d:a4:5b:0a:99:5e:e3: 7e:f2:54:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYc1ttKXgkptd1PcKUrOrYc1CfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2RDRENEIzQjc5QUE1QUI4QkVFRDk4M0MxNTUwM0M5 QTM0MzY2MzAeFw0yNjA1MTIxMjE3NDVaFw0yNjA1MTMxMjM3NDVaMDMxMTAvBgNV BAMTKENEODBERTU4ODUwODk5REM5MEVDOEM4NDQ4NDgyMzNDMUVBNDk3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQcepINmjXbJpqGYvRu+/8FWHb a+BMXpJJZDdQ1F5dFOF9RikmSPMuhuW5uhzbQJAI/U89dfeeRELEhWeLJSZ273wj tMOG8d+DJIRTRXwmfTgbQBRGcC9EU93AnMPCrCpzxc3/6uSxf6FnjgbSQ6StbXFZ M4D8sJD8nh+PKcDw3XlcikKffFWCzzliNq3gpekeFXURgQHlJODsOMrhoP63NIac rYMY+GE8gwviFr8SQfpGzctNmFCujjjmBthw4iO/mGRrjdGzT/DxC9wYnhWtHXad g29kdVyqKgXnG+mDNJIGzviQDcCAxUbUyc30OYeghT709kZsZ2FiscLmEdZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYDeWIUImdyQ7IyESEgjPB6kl14wHwYDVR0j BBgwFoAU7m1NSzt5qlq4vu2YPBVQPJo0NmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWEzY2MyYzEtMTQ2Yy00OGE5LWIwMDMtN2JkODM4MjIwODRkLzAvRUU2RDRENEIz Qjc5QUE1QUI4QkVFRDk4M0MxNTUwM0M5QTM0MzY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTZENEQ0QjNCNzlBQTVBQjhCRUVEOTgzQzE1NTAzQzlBMzQz NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRUU2RDRENEIzQjc5QUE1QUI4QkVFRDk4M0MxNTUw M0M5QTM0MzY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbIsJr9lTS44iHtMjW6atHLQG9CqHpoa1/8 IKVd0JuSQIwxKp2Q6g9a8MhzsUbnYwZbZBQQTkJ/85U04pqGC/u/Ls94XY6ymp0R HPl7QOAZVMw91ZZv1L1s2pKGRpMKcPlC5uXW4w6cR1kfm0Z3EmJ2cGJBzeDRQ5bo 36aJuZz8zyI+dACspa7KOSK62puk4xQ8u3VcYiQx/HFXxoMwHYKEO9ZWd+308Gup b5fwaVVE43W5wHD7hE44wyp8PWSSEVSBXqXZZF5BIOMNUJMi020lnctn53jATyYr KvZg4OVxj6h4VG2NZDcIK/7wI0X5UAWwjzLsTaRbCple437yVOY= -----END CERTIFICATE-----Generated at Tue May 12 22:46:55 2026 by rpki-client