$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft File: EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft (raw, json) Hash identifier: IY82yBG9lXlJAFkqq7OGW0jVKqbqhgHwvxlcqzwXmPA= Subject key identifier: 17:CF:97:7E:D0:07:A0:A8:92:00:DB:E6:22:83:F3:CC:86:BB:E4:59 Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Certificate serial: 4668F6919FC1160376383C1DD892805853B35638 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:18:16 +0000 Manifest this update: Fri 24 Jul 2026 07:13:16 +0000 Manifest next update: Sat 25 Jul 2026 07:32:16 +0000 Files and hashes: 1: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=) 2: EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl (hash: YnzUNJHd/j6GNH9Kry1fM925ptomj8ThdtysuYjNb+w=) 3: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: RSC52CIB9gdiO0mwgB0RPCA6fPz9z6KlTh9C7/oKbQo=) 4: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=) 5: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:68:f6:91:9f:c1:16:03:76:38:3c:1d:d8:92:80:58:53:b3:56:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Validity Not Before: Jul 24 07:13:16 2026 GMT Not After : Jul 25 07:32:16 2026 GMT Subject: CN=17CF977ED007A0A89200DBE62283F3CC86BBE459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:8f:f5:b1:09:37:34:78:de:07:e5:c7:37: be:46:1b:70:53:04:bf:d6:e1:7a:07:92:e0:99:58: 98:88:28:e6:c4:e2:ea:45:8f:f5:8c:86:35:14:1c: 15:62:4b:91:00:8a:0c:7f:0e:c6:f8:8d:2d:38:1c: 8a:6b:94:3f:ea:b6:9d:30:1c:5d:a8:d8:96:f7:c1: ea:e0:b1:2f:09:db:93:d3:f3:d5:bc:54:dd:1b:83: 88:b5:2c:54:03:d0:b1:e6:d2:76:ff:a6:a0:41:d0: 41:4f:00:ca:94:72:3c:b3:89:a4:07:4c:c9:f4:bc: f2:ab:6c:37:0a:e5:0d:a9:a7:79:76:ac:4e:11:03: 2c:95:de:ec:52:86:dc:50:5e:86:ee:50:e8:50:8d: 26:ce:e1:8f:52:df:14:56:76:61:3a:4c:5e:e0:0e: 1f:b5:9b:dc:21:3e:84:fc:15:89:d1:b7:59:42:f0: e5:e5:14:1f:73:62:c3:f7:4e:08:cd:69:81:c7:ef: 80:a6:a7:17:7b:12:66:fa:1e:9a:52:65:09:e1:8b: eb:9e:9f:8e:c5:3d:6c:91:8a:11:6d:ba:ff:99:22: 06:46:3e:da:78:4a:1c:65:bb:2f:bc:89:aa:b2:40: 59:ee:39:00:1a:bd:c0:7a:62:e4:05:d3:c4:0b:3c: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CF:97:7E:D0:07:A0:A8:92:00:DB:E6:22:83:F3:CC:86:BB:E4:59 X509v3 Authority Key Identifier: keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:32:bd:4d:0d:c0:e3:68:1a:e8:ab:d6:b6:8e:66:6c:09:a1: a6:b8:90:ac:8a:9b:f3:bf:ad:17:d2:ed:3d:5a:35:ca:75:e7: 90:59:92:53:b8:99:5b:6d:2f:c8:53:01:2d:69:7e:75:52:27: 2a:b5:90:4e:6d:6c:41:ef:f2:43:01:97:6c:d7:55:eb:03:22: 9d:2e:fc:09:ec:04:81:40:c6:51:b5:c5:cc:74:39:04:fc:6e: 30:ae:ef:82:f1:58:f9:b1:56:52:3c:4a:be:ac:d6:71:09:f9: e2:1f:cc:e5:3b:b5:c0:ba:c1:86:db:61:df:0d:7d:b1:82:a9: e7:b4:c6:1e:43:f4:11:ba:91:30:79:f4:47:99:a0:e9:38:d3: 70:22:44:10:7d:d9:51:0e:10:f7:6e:67:f0:71:d8:e7:b6:c6: 5d:4b:60:03:b9:bb:9c:c0:44:6b:c2:de:c7:6f:33:af:f8:15: 7b:08:b3:a1:0e:86:30:15:81:aa:ea:d4:63:cf:23:58:b0:3a: 35:5b:0a:36:5a:ee:a4:b3:fe:7c:44:b3:42:9d:b9:4b:74:b7: 9a:b4:b2:e0:66:81:57:de:9b:d5:e3:75:17:f6:a4:52:5c:70: 53:a9:af:7b:c7:5b:cf:f0:b7:3d:ca:be:77:7a:cf:e7:fc:3b: 86:e7:1a:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmj2kZ/BFgN2ODwd2JKAWFOzVjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy MjgzRTI2OTAeFw0yNjA3MjQwNzEzMTZaFw0yNjA3MjUwNzMyMTZaMDMxMTAvBgNV BAMTKDE3Q0Y5NzdFRDAwN0EwQTg5MjAwREJFNjIyODNGM0NDODZCQkU0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2o/1sQk3NHjeB+XHN75GG3BT BL/W4XoHkuCZWJiIKObE4upFj/WMhjUUHBViS5EAigx/Dsb4jS04HIprlD/qtp0w HF2o2Jb3wergsS8J25PT89W8VN0bg4i1LFQD0LHm0nb/pqBB0EFPAMqUcjyziaQH TMn0vPKrbDcK5Q2pp3l2rE4RAyyV3uxShtxQXobuUOhQjSbO4Y9S3xRWdmE6TF7g Dh+1m9whPoT8FYnRt1lC8OXlFB9zYsP3TgjNaYHH74Cmpxd7Emb6HppSZQnhi+ue n47FPWyRihFtuv+ZIgZGPtp4Shxluy+8iaqyQFnuOQAavcB6YuQF08QLPHY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF8+XftAHoKiSANvmIoPzzIa75FkwHwYDVR0j BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0 QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRD QTUyMjgzRTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0yvU0NwONoGuir1raOZmwJoaa4kKyKm/O/ rRfS7T1aNcp155BZklO4mVttL8hTAS1pfnVSJyq1kE5tbEHv8kMBl2zXVesDIp0u /AnsBIFAxlG1xcx0OQT8bjCu74LxWPmxVlI8Sr6s1nEJ+eIfzOU7tcC6wYbbYd8N fbGCqee0xh5D9BG6kTB59EeZoOk403AiRBB92VEOEPduZ/Bx2Oe2xl1LYAO5u5zA RGvC3sdvM6/4FXsIs6EOhjAVgarq1GPPI1iwOjVbCjZa7qSz/nxEs0KduUt0t5q0 suBmgVfem9XjdRf2pFJccFOpr3vHW8/wtz3Kvnd6z+f8O4bnGpw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:46:00 2026 by rpki-client