$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft File: EECD640133988CFFC0BF1D58079BA5921C041DB9.mft (raw, json) Hash identifier: j9gzc8HV0e16Xk3s9FyGbXJHbm958m2DmW+8dVzXVoA= Subject key identifier: 32:10:B1:7A:44:1D:7A:38:BB:B6:E9:B9:10:6A:FE:E8:84:A5:D9:E0 Authority key identifier: EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9 Certificate issuer: /CN=EECD640133988CFFC0BF1D58079BA5921C041DB9 Certificate serial: 46B631EF24C2E5868216A4351F42EBA6CA90B053 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:21:00 +0000 Manifest this update: Thu 24 Sep 2026 12:16:00 +0000 Manifest next update: Fri 25 Sep 2026 12:35:00 +0000 Files and hashes: 1: EECD640133988CFFC0BF1D58079BA5921C041DB9.crl (hash: hM0Q0EjgrFarjGgz9vzHEH7unQwBiL1S+C8Tn0HySM8=) 2: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: PWHfuvJISm/0HGRYS1rgkQyVd8LnOVyJKU3uYwSY5nY=) 3: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: eoYACoknq6vSui9USgokAQRX8xZkoLYZMEzPSOjPAZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b6:31:ef:24:c2:e5:86:82:16:a4:35:1f:42:eb:a6:ca:90:b0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECD640133988CFFC0BF1D58079BA5921C041DB9 Validity Not Before: Sep 24 12:16:00 2026 GMT Not After : Sep 25 12:35:00 2026 GMT Subject: CN=3210B17A441D7A38BBB6E9B9106AFEE884A5D9E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:0d:d9:16:b5:26:fa:63:b9:d8:89:01:83: 23:1b:30:0e:25:a7:45:76:66:6c:89:d4:ac:6a:39: 4a:d4:15:46:23:0b:e0:37:58:eb:c4:fd:c4:ce:f4: a4:f1:d9:0d:5f:09:fa:c0:93:c2:99:1f:6d:83:0c: bb:98:ad:44:bf:b8:22:d2:e5:4c:45:89:15:9b:6c: c6:a8:cf:3f:41:11:54:a9:e9:07:a8:1e:3f:7d:f5: cf:15:7b:d1:89:83:b0:fb:43:68:db:2e:ab:a3:4b: f3:84:18:c8:d5:78:01:57:38:ed:50:3c:30:6a:27: 39:02:aa:71:dc:11:98:0c:24:5d:4e:6c:d1:51:17: 34:cc:c4:8e:4c:55:10:e6:62:f1:df:cc:e2:c1:64: 4d:ca:d4:ff:19:b8:24:65:dc:e3:ac:fc:ca:af:6a: 62:07:c9:d8:df:5b:99:4a:af:ea:3b:f0:7f:67:09: 84:12:80:fb:eb:22:b0:55:06:ac:55:c7:bc:6e:6a: 50:3c:32:94:56:1d:37:40:22:5e:ee:68:5d:32:7c: fa:b7:4e:0c:96:a9:01:37:2e:86:3f:e5:9f:32:08: cb:c8:5b:fc:30:7a:95:55:8d:3a:21:8a:5c:df:d1: f6:61:96:53:bf:45:11:6d:be:ff:82:8b:c1:61:98: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:10:B1:7A:44:1D:7A:38:BB:B6:E9:B9:10:6A:FE:E8:84:A5:D9:E0 X509v3 Authority Key Identifier: keyid:EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:14:b3:61:2f:9d:a4:c4:0b:0f:73:83:fe:42:e0:b5:72:1a: f2:c9:1b:4d:d0:ec:a9:d1:e9:e9:eb:7d:c6:67:fd:86:f5:b0: d5:ff:a6:34:41:9a:5c:96:8a:70:3c:83:72:24:1b:16:11:45: 7a:1f:97:c4:48:7d:3c:dd:58:95:d2:97:da:c4:1c:fb:14:de: cd:aa:8e:88:58:5b:9c:84:a3:d6:c2:64:aa:47:70:c0:f0:92: c1:ae:19:c1:f1:11:2b:86:18:69:fb:29:4a:ab:14:34:fa:74: 6b:a0:cf:55:a9:f3:4f:64:02:1d:e4:63:ad:ad:1b:86:2e:77: 0a:20:19:84:5f:a7:15:61:8e:ef:f4:5b:dc:11:c6:7e:97:bd: fc:6e:94:8a:d4:3b:06:83:bd:84:8e:f5:66:9c:aa:47:09:7a: 2a:5a:8f:3e:92:8f:5e:4b:07:29:b6:bb:a3:a6:cd:ff:af:dc: 04:59:1b:7c:c3:5b:1b:ad:81:31:a8:60:16:3e:26:ef:01:62: 86:c5:50:00:c7:b2:b8:f2:3d:7f:a0:0a:52:a6:48:f1:5c:9e: 5c:00:15:e4:b8:19:bf:08:9f:43:18:2d:27:dc:ea:a0:f8:b9: 0a:ae:2e:d8:76:37:2f:22:13:b2:38:45:9d:9d:a4:52:f2:c6: a4:48:b9:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrYx7yTC5YaCFqQ1H0LrpsqQsFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1OTIx QzA0MURCOTAeFw0yNjA5MjQxMjE2MDBaFw0yNjA5MjUxMjM1MDBaMDMxMTAvBgNV BAMTKDMyMTBCMTdBNDQxRDdBMzhCQkI2RTlCOTEwNkFGRUU4ODRBNUQ5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwQ3ZFrUm+mO52IkBgyMbMA4l p0V2ZmyJ1KxqOUrUFUYjC+A3WOvE/cTO9KTx2Q1fCfrAk8KZH22DDLuYrUS/uCLS 5UxFiRWbbMaozz9BEVSp6QeoHj999c8Ve9GJg7D7Q2jbLqujS/OEGMjVeAFXOO1Q PDBqJzkCqnHcEZgMJF1ObNFRFzTMxI5MVRDmYvHfzOLBZE3K1P8ZuCRl3OOs/Mqv amIHydjfW5lKr+o78H9nCYQSgPvrIrBVBqxVx7xualA8MpRWHTdAIl7uaF0yfPq3 TgyWqQE3LoY/5Z8yCMvIW/wwepVVjTohilzf0fZhllO/RRFtvv+Ci8FhmIYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhCxekQdeji7tum5EGr+6ISl2eAwHwYDVR0j BBgwFoAU7s1kATOYjP/Avx1YB5ulkhwEHbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5M2MyNWMtY2U1NS00ODcwLTgxNjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEz Mzk4OENGRkMwQkYxRDU4MDc5QkE1OTIxQzA0MURCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUNENjQwMTMzOTg4Q0ZGQzBCRjFENTgwNzlCQTU5MjFDMDQx REI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvRUVDRDY0MDEzMzk4OENGRkMwQkYxRDU4MDc5QkE1 OTIxQzA0MURCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMUs2EvnaTECw9zg/5C4LVyGvLJG03Q7KnR 6enrfcZn/Yb1sNX/pjRBmlyWinA8g3IkGxYRRXofl8RIfTzdWJXSl9rEHPsU3s2q johYW5yEo9bCZKpHcMDwksGuGcHxESuGGGn7KUqrFDT6dGugz1Wp809kAh3kY62t G4YudwogGYRfpxVhju/0W9wRxn6XvfxulIrUOwaDvYSO9WacqkcJeipajz6Sj15L Bym2u6Omzf+v3ARZG3zDWxutgTGoYBY+Ju8BYobFUADHsrjyPX+gClKmSPFcnlwA FeS4Gb8In0MYLSfc6qD4uQquLth2Ny8iE7I4RZ2dpFLyxqRIuXk= -----END CERTIFICATE-----Generated at Fri Sep 25 02:39:02 2026 by rpki-client