$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft File: EECD640133988CFFC0BF1D58079BA5921C041DB9.mft (raw, json) Hash identifier: zv0s0bjiMVeqmd7QUlYgRjcZUgg5s7khx5lFnN+2Qrc= Subject key identifier: A2:28:3D:64:06:DF:64:A9:97:69:D1:0C:1C:9A:64:21:F2:C2:BB:FA Authority key identifier: EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9 Certificate issuer: /CN=EECD640133988CFFC0BF1D58079BA5921C041DB9 Certificate serial: 0E332F4BCBA4C80C33C7BE2451400AF1E6ED6421 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:12:37 +0000 Manifest this update: Tue 12 May 2026 12:07:37 +0000 Manifest next update: Wed 13 May 2026 12:26:37 +0000 Files and hashes: 1: EECD640133988CFFC0BF1D58079BA5921C041DB9.crl (hash: /vrRk7wDGmD27amplzshxfBy0pCdRer3uKMbDyx+V2Y=) 2: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: eoYACoknq6vSui9USgokAQRX8xZkoLYZMEzPSOjPAZU=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: PWHfuvJISm/0HGRYS1rgkQyVd8LnOVyJKU3uYwSY5nY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:33:2f:4b:cb:a4:c8:0c:33:c7:be:24:51:40:0a:f1:e6:ed:64:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECD640133988CFFC0BF1D58079BA5921C041DB9 Validity Not Before: May 12 12:07:37 2026 GMT Not After : May 13 12:26:37 2026 GMT Subject: CN=A2283D6406DF64A99769D10C1C9A6421F2C2BBFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:69:d0:f5:d0:5c:ad:53:64:63:28:b8:4d: dc:60:4f:cd:45:3c:4a:5f:2f:89:bc:2c:3a:4b:19: b0:60:13:3f:85:3b:f3:11:b6:2c:4d:15:a7:c7:b7: 7a:86:54:b0:0a:bd:11:36:ba:32:91:8f:82:1a:fe: 31:20:95:5d:40:e1:fa:55:ba:07:85:47:20:c2:a8: d2:01:d3:ef:a2:4c:a1:98:07:06:15:ee:98:99:72: 7f:57:64:39:ea:3b:e4:7c:ed:7d:bc:e0:ae:c6:5a: ce:94:33:8a:87:78:6d:7a:5a:4f:bd:f5:d1:7b:92: e4:4e:10:57:3a:b0:87:ae:f1:14:81:73:4b:d5:54: 55:70:7e:8c:18:f5:ad:f5:89:19:86:3d:b1:fa:51: 0f:20:43:be:50:fd:6e:a3:a4:76:2e:48:70:63:db: 7d:b1:f8:44:4b:d8:05:c3:04:be:74:21:92:4e:05: 63:2f:45:4a:fe:ee:a7:4c:6d:ed:8e:41:ad:c5:81: f8:bd:86:22:01:5e:a8:ab:59:26:e0:46:63:4f:e0: 52:34:cd:eb:e6:52:1d:39:f7:b4:48:3b:86:46:7e: 5f:20:4b:7e:52:14:30:a6:0c:da:bc:2e:a0:0e:cc: 41:dd:da:98:7c:b8:89:30:ba:01:62:57:a6:0d:25: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:3D:64:06:DF:64:A9:97:69:D1:0C:1C:9A:64:21:F2:C2:BB:FA X509v3 Authority Key Identifier: keyid:EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:b9:c0:d6:75:93:7e:e9:03:ea:7c:ec:cc:47:8b:db:0f:a1: a8:de:a7:d3:86:33:84:15:e3:2b:2f:fb:b3:26:1d:45:1f:95: 2a:5b:f2:6d:31:72:ad:7e:af:e7:16:c0:b2:6b:f4:6a:5d:61: f1:75:cd:a3:ef:72:53:fa:bb:ed:06:0e:fa:07:3a:87:2a:bb: d2:f2:6b:a6:0e:51:69:ac:84:0a:b5:70:bc:1e:bf:ec:33:ef: 54:c2:13:19:9a:13:07:87:44:ff:a4:c6:23:80:ed:d4:29:d1: d2:29:3b:22:97:eb:bb:9e:63:7f:22:6d:8d:d7:6d:28:be:45: 32:03:74:60:25:fe:53:04:ad:0d:63:89:ac:f1:88:4d:95:4d: 54:2e:32:a2:60:4b:74:b2:7f:db:bf:6c:b2:ed:02:dd:d4:7a: e0:a7:af:e5:86:b2:e6:b8:26:34:23:8b:d7:51:7f:76:fa:d3: 3f:84:db:92:a1:8b:c5:d0:1d:66:93:7c:7c:bb:32:bb:4a:50: ae:18:65:fd:2c:cd:07:de:44:ec:d1:c1:a0:c3:f5:39:73:6f: bd:89:f5:5c:e1:bb:35:15:98:17:28:9c:51:96:57:a9:3c:28: ed:53:d8:1a:06:bf:fa:12:ff:d5:a5:80:2e:d7:81:56:be:ed: 7b:4a:3b:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjMvS8ukyAwzx74kUUAK8ebtZCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1OTIx QzA0MURCOTAeFw0yNjA1MTIxMjA3MzdaFw0yNjA1MTMxMjI2MzdaMDMxMTAvBgNV BAMTKEEyMjgzRDY0MDZERjY0QTk5NzY5RDEwQzFDOUE2NDIxRjJDMkJCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9WnQ9dBcrVNkYyi4TdxgT81F PEpfL4m8LDpLGbBgEz+FO/MRtixNFafHt3qGVLAKvRE2ujKRj4Ia/jEglV1A4fpV ugeFRyDCqNIB0++iTKGYBwYV7piZcn9XZDnqO+R87X284K7GWs6UM4qHeG16Wk+9 9dF7kuROEFc6sIeu8RSBc0vVVFVwfowY9a31iRmGPbH6UQ8gQ75Q/W6jpHYuSHBj 232x+ERL2AXDBL50IZJOBWMvRUr+7qdMbe2OQa3Fgfi9hiIBXqirWSbgRmNP4FI0 zevmUh0597RIO4ZGfl8gS35SFDCmDNq8LqAOzEHd2ph8uIkwugFiV6YNJb07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoig9ZAbfZKmXadEMHJpkIfLCu/owHwYDVR0j BBgwFoAU7s1kATOYjP/Avx1YB5ulkhwEHbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5M2MyNWMtY2U1NS00ODcwLTgxNjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEz Mzk4OENGRkMwQkYxRDU4MDc5QkE1OTIxQzA0MURCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUNENjQwMTMzOTg4Q0ZGQzBCRjFENTgwNzlCQTU5MjFDMDQx REI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1 OTIxQzA0MURCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+5wNZ1k37pA+p87MxHi9sPoajep9OGM4QV 4ysv+7MmHUUflSpb8m0xcq1+r+cWwLJr9GpdYfF1zaPvclP6u+0GDvoHOocqu9Ly a6YOUWmshAq1cLwev+wz71TCExmaEweHRP+kxiOA7dQp0dIpOyKX67ueY38ibY3X bSi+RTIDdGAl/lMErQ1jiazxiE2VTVQuMqJgS3Syf9u/bLLtAt3UeuCnr+WGsua4 JjQji9dRf3b60z+E25Khi8XQHWaTfHy7MrtKUK4YZf0szQfeROzRwaDD9Tlzb72J 9VzhuzUVmBconFGWV6k8KO1T2BoGv/oS/9WlgC7XgVa+7XtKOwE= -----END CERTIFICATE-----Generated at Wed May 13 00:21:29 2026 by rpki-client