$ rpki-client -vvvf rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/EE80ECA632F6BC4C8D648613C84A416B8D271E30.mft File: EE80ECA632F6BC4C8D648613C84A416B8D271E30.mft (raw, json) Hash identifier: A5oXPM2r9S+kUTdX5s34Boz6+dF35osB2riaMSWcigY= Subject key identifier: 54:F3:B7:2E:D9:A0:7F:F4:A5:7A:9B:02:63:EF:A9:BE:18:FE:9C:E7 Authority key identifier: EE:80:EC:A6:32:F6:BC:4C:8D:64:86:13:C8:4A:41:6B:8D:27:1E:30 Certificate issuer: /CN=EE80ECA632F6BC4C8D648613C84A416B8D271E30 Certificate serial: 13C7FD875B758A0EAC2E56FAC57112314E592EFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE80ECA632F6BC4C8D648613C84A416B8D271E30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/EE80ECA632F6BC4C8D648613C84A416B8D271E30.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:04:41 +0000 Manifest this update: Wed 23 Sep 2026 14:59:41 +0000 Manifest next update: Thu 24 Sep 2026 16:44:41 +0000 Files and hashes: 1: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: SiUbQaI8pbOq1AudqlMo2KCebMN2+Qf2ZW+okjxynUM=) 2: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: UW6J89qBreJztmknqwK6szAuubnwvaaVYr8zKD9WkJw=) 3: EE80ECA632F6BC4C8D648613C84A416B8D271E30.crl (hash: /78aDma6eXTGwKbfv6GTQ8T63sepi+Gs6iTcFTZb7Zw=) 4: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: q1EuzR98XN8mhSM81HqoyL6JLa0cTUgwEWiE13ieceE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/EE80ECA632F6BC4C8D648613C84A416B8D271E30.crl rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/EE80ECA632F6BC4C8D648613C84A416B8D271E30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE80ECA632F6BC4C8D648613C84A416B8D271E30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c7:fd:87:5b:75:8a:0e:ac:2e:56:fa:c5:71:12:31:4e:59:2e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE80ECA632F6BC4C8D648613C84A416B8D271E30 Validity Not Before: Sep 23 14:59:41 2026 GMT Not After : Sep 24 16:44:41 2026 GMT Subject: CN=54F3B72ED9A07FF4A57A9B0263EFA9BE18FE9CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:57:d4:c0:ed:d1:99:25:c5:87:34:5e:10: 87:04:ac:29:2e:e6:4a:ce:76:59:64:5e:4c:85:5f: 42:30:36:76:77:c7:4b:66:85:82:ba:35:db:0e:af: db:6a:9f:12:ca:15:9f:10:4a:45:9a:a5:47:d7:d8: 81:ef:f7:db:f9:03:49:91:84:30:ab:2e:3d:6c:05: 61:1a:d9:d5:72:98:2a:94:97:ad:66:22:57:bb:47: 8e:c5:49:da:9f:f5:62:c4:c5:fd:7d:b9:61:85:2e: 76:38:89:2c:72:4c:bc:10:73:6d:18:49:ff:42:a3: 38:0f:d0:4c:f7:fb:48:31:c3:27:8c:b4:61:28:64: fa:46:b2:17:8a:17:15:36:c2:f6:13:7b:ba:79:5c: dc:37:e7:d9:35:fd:29:0e:cd:dd:41:60:77:83:8c: a5:3f:a6:5e:0d:b1:f1:f7:5b:5a:7b:0a:4f:ae:17: 31:1e:4a:16:fb:24:59:90:c0:7d:67:dc:11:7d:72: 40:2c:6d:cf:bb:d5:ca:2c:ae:bd:7e:92:2e:a4:18: 03:ff:e8:c6:21:72:92:b4:2f:0b:2d:f7:20:86:21: 39:c5:b0:16:4b:d5:0b:e6:1a:c2:cc:f7:a7:5d:f3: 84:66:1b:81:54:7f:cc:ac:af:fb:75:27:d9:26:4e: 7c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F3:B7:2E:D9:A0:7F:F4:A5:7A:9B:02:63:EF:A9:BE:18:FE:9C:E7 X509v3 Authority Key Identifier: keyid:EE:80:EC:A6:32:F6:BC:4C:8D:64:86:13:C8:4A:41:6B:8D:27:1E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/EE80ECA632F6BC4C8D648613C84A416B8D271E30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE80ECA632F6BC4C8D648613C84A416B8D271E30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/EE80ECA632F6BC4C8D648613C84A416B8D271E30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c4:91:60:16:1e:a1:44:5b:a5:7d:b5:c2:ee:7b:a3:d4:08: fb:75:34:e6:5d:84:18:a7:5c:e0:6e:a5:21:c7:bd:58:5d:37: 9f:bc:a4:72:3e:dd:61:32:fe:de:26:32:ef:4f:69:14:25:d6: a8:bf:9f:f4:98:b1:cd:ed:39:f8:3b:b2:04:2f:9d:d5:44:35: 96:92:65:e6:7b:00:ae:a0:92:c0:28:d5:9b:16:cf:21:66:47: 6f:29:fd:61:c8:15:ab:00:f5:53:5e:3d:69:76:1f:90:a7:79: 6c:0a:80:18:ed:4a:f6:ca:76:a4:69:9c:31:82:da:5b:d5:44: 16:e6:39:bd:d1:39:f9:3f:8a:c7:87:cb:d2:a6:a9:51:6c:41: ba:ff:05:c5:c9:a5:2b:bc:38:d6:8a:53:b0:50:7f:05:d9:85: 8a:8c:52:2c:31:13:b9:9a:45:dc:aa:34:11:cd:12:d2:4b:4e: 2a:e8:78:66:10:53:c8:60:5f:28:2a:a5:c0:1f:21:33:7c:1a: d8:b3:c6:27:d5:ca:b6:88:c6:dc:83:fc:e8:64:f7:8e:b9:6e: 3f:e8:ae:af:e1:d6:b2:39:a4:69:84:4f:06:8f:01:5d:36:74: 29:ed:88:4e:a0:6c:a9:f6:b6:cc:2b:a8:be:cb:bf:81:a6:c0: 53:85:96:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8f9h1t1ig6sLlb6xXESMU5ZLv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4MEVDQTYzMkY2QkM0QzhENjQ4NjEzQzg0QTQxNkI4 RDI3MUUzMDAeFw0yNjA5MjMxNDU5NDFaFw0yNjA5MjQxNjQ0NDFaMDMxMTAvBgNV BAMTKDU0RjNCNzJFRDlBMDdGRjRBNTdBOUIwMjYzRUZBOUJFMThGRTlDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkVfUwO3RmSXFhzReEIcErCku 5krOdllkXkyFX0IwNnZ3x0tmhYK6NdsOr9tqnxLKFZ8QSkWapUfX2IHv99v5A0mR hDCrLj1sBWEa2dVymCqUl61mIle7R47FSdqf9WLExf19uWGFLnY4iSxyTLwQc20Y Sf9CozgP0Ez3+0gxwyeMtGEoZPpGsheKFxU2wvYTe7p5XNw359k1/SkOzd1BYHeD jKU/pl4NsfH3W1p7Ck+uFzEeShb7JFmQwH1n3BF9ckAsbc+71cosrr1+ki6kGAP/ 6MYhcpK0Lwst9yCGITnFsBZL1QvmGsLM96dd84RmG4FUf8ysr/t1J9kmTnz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVPO3Ltmgf/SlepsCY++pvhj+nOcwHwYDVR0j BBgwFoAU7oDspjL2vEyNZIYTyEpBa40nHjAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzgyMjEyYzItM2Q2OC00ODY3LWI5OWMtZmM1Y2Y0ZDBkYmYxLzAvRUU4MEVDQTYz MkY2QkM0QzhENjQ4NjEzQzg0QTQxNkI4RDI3MUUzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTgwRUNBNjMyRjZCQzRDOEQ2NDg2MTNDODRBNDE2QjhEMjcx RTMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvRUU4MEVDQTYzMkY2QkM0QzhENjQ4NjEzQzg0QTQx NkI4RDI3MUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTEkWAWHqFEW6V9tcLue6PUCPt1NOZdhBin XOBupSHHvVhdN5+8pHI+3WEy/t4mMu9PaRQl1qi/n/SYsc3tOfg7sgQvndVENZaS ZeZ7AK6gksAo1ZsWzyFmR28p/WHIFasA9VNePWl2H5CneWwKgBjtSvbKdqRpnDGC 2lvVRBbmOb3ROfk/iseHy9KmqVFsQbr/BcXJpSu8ONaKU7BQfwXZhYqMUiwxE7ma RdyqNBHNEtJLTiroeGYQU8hgXygqpcAfITN8GtizxifVyraIxtyD/Ohk9465bj/o rq/h1rI5pGmETwaPAV02dCntiE6gbKn2tswrqL7Lv4GmwFOFlo8= -----END CERTIFICATE-----Generated at Thu Sep 24 09:19:17 2026 by rpki-client