$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: 4W003wLjeHHqBU1+K8fu4oCqU5KEG+nwWWrRcNt8Lpo= Subject key identifier: 98:BA:3E:4E:9F:5D:40:F6:47:DF:87:EA:C0:7E:70:BC:99:3E:F9:52 Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 10FBF46140E7D6E36B6D2E2DED88D4E5081FEF48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:02:16 +0000 Manifest this update: Wed 23 Sep 2026 08:57:16 +0000 Manifest next update: Thu 24 Sep 2026 10:48:16 +0000 Files and hashes: 1: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) 2: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) 3: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: J4Gh97XtUZ1uEylARxb+5YOe8ryTab8+cCyqi5YIicc=) 4: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fb:f4:61:40:e7:d6:e3:6b:6d:2e:2d:ed:88:d4:e5:08:1f:ef:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: Sep 23 08:57:16 2026 GMT Not After : Sep 24 10:48:16 2026 GMT Subject: CN=98BA3E4E9F5D40F647DF87EAC07E70BC993EF952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:3b:9c:c8:9b:1d:21:14:bc:8c:12:3f:78: a2:74:9b:97:67:e9:af:4a:0a:fd:a2:59:06:c0:fa: c0:ab:4c:41:4d:cf:1e:78:c7:48:3d:5d:6d:1e:9c: d0:0a:d0:1c:41:b1:7a:73:f8:fd:92:d1:ce:08:15: 5a:7b:39:86:59:54:8b:d8:e7:af:66:1e:44:3a:2c: a4:18:55:ba:58:ec:0d:d4:d9:99:38:a5:9b:58:4d: d5:72:05:82:04:d2:2d:3a:34:ff:1a:4b:69:e1:3b: 77:6d:23:b9:09:4f:1b:5f:3c:49:b1:93:c2:b1:0d: 97:88:bf:a2:65:88:ba:03:48:a2:3f:8f:47:79:d2: 78:51:43:b2:48:4b:fc:0d:1d:d3:61:d7:bc:8b:82: f9:af:81:b2:97:ad:87:8b:6e:b1:96:89:b3:bf:41: 08:e9:b9:2b:77:95:e0:be:19:8b:b8:46:89:ef:e6: 15:39:22:94:02:1d:44:45:44:bb:8d:45:3a:f8:3a: 3f:bf:88:28:47:55:96:c9:df:05:fd:33:39:27:b6: d2:5f:ab:4b:74:2d:94:17:ae:44:d0:c8:cc:6e:5c: 56:b3:de:60:ed:76:15:6d:34:58:64:45:9d:e7:4c: 71:14:ac:73:a3:a8:dd:b1:01:54:c4:d9:19:02:21: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:3E:4E:9F:5D:40:F6:47:DF:87:EA:C0:7E:70:BC:99:3E:F9:52 X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:81:de:96:a7:43:4c:11:1d:2c:bb:da:07:d4:b4:63:91:e7: 68:62:42:4b:cc:db:e9:15:34:79:42:45:44:ed:fa:d5:4c:50: 25:88:2f:c2:65:b4:f3:f9:39:15:59:bd:a4:95:d4:32:cf:a1: 57:4d:ae:0f:00:8c:81:ef:2e:77:a0:d6:0c:75:d5:ba:09:6d: 04:6b:a3:6d:0d:fc:48:aa:1d:9d:e6:00:34:cc:ee:45:26:79: 37:85:bb:b1:57:16:1f:99:96:90:d3:fe:67:03:a9:88:97:49: 1d:dd:6c:2f:54:ab:1a:1f:ca:36:f2:e5:d3:02:01:37:36:f3: 2c:d9:49:e8:ca:7f:ba:16:fa:2e:e6:b9:cb:9b:b0:b5:98:19: 10:73:2e:f2:31:e5:2f:a8:3c:f6:3a:60:6c:04:93:67:fb:da: 38:1b:93:38:01:95:b7:d5:74:de:da:70:8b:49:90:79:d2:a8: f0:2f:a7:84:a7:e3:1f:ae:48:55:fe:a8:65:d9:a5:be:58:c6: 4a:53:88:e9:b7:46:98:31:c5:4b:bc:0a:67:7f:b9:55:30:15: 02:c3:88:b1:f2:7d:aa:86:83:89:dd:5b:bb:ed:9d:59:3f:4c: e5:c5:a4:a5:27:15:60:b5:d6:ba:e9:49:5b:16:65:83:69:7f: 95:b7:51:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPv0YUDn1uNrbS4t7YjU5Qgf70gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjA5MjMwODU3MTZaFw0yNjA5MjQxMDQ4MTZaMDMxMTAvBgNV BAMTKDk4QkEzRTRFOUY1RDQwRjY0N0RGODdFQUMwN0U3MEJDOTkzRUY5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZzucyJsdIRS8jBI/eKJ0m5dn 6a9KCv2iWQbA+sCrTEFNzx54x0g9XW0enNAK0BxBsXpz+P2S0c4IFVp7OYZZVIvY 569mHkQ6LKQYVbpY7A3U2Zk4pZtYTdVyBYIE0i06NP8aS2nhO3dtI7kJTxtfPEmx k8KxDZeIv6JliLoDSKI/j0d50nhRQ7JIS/wNHdNh17yLgvmvgbKXrYeLbrGWibO/ QQjpuSt3leC+GYu4Ronv5hU5IpQCHURFRLuNRTr4Oj+/iChHVZbJ3wX9MzknttJf q0t0LZQXrkTQyMxuXFaz3mDtdhVtNFhkRZ3nTHEUrHOjqN2xAVTE2RkCIeUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLo+Tp9dQPZH34fqwH5wvJk++VIwHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGB3panQ0wRHSy72gfUtGOR52hiQkvM2+kV NHlCRUTt+tVMUCWIL8JltPP5ORVZvaSV1DLPoVdNrg8AjIHvLneg1gx11boJbQRr o20N/EiqHZ3mADTM7kUmeTeFu7FXFh+ZlpDT/mcDqYiXSR3dbC9Uqxofyjby5dMC ATc28yzZSejKf7oW+i7mucubsLWYGRBzLvIx5S+oPPY6YGwEk2f72jgbkzgBlbfV dN7acItJkHnSqPAvp4Sn4x+uSFX+qGXZpb5YxkpTiOm3RpgxxUu8Cmd/uVUwFQLD iLHyfaqGg4ndW7vtnVk/TOXFpKUnFWC11rrpSVsWZYNpf5W3UYU= -----END CERTIFICATE-----Generated at Wed Sep 23 20:23:11 2026 by rpki-client