$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft File: EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft (raw, json) Hash identifier: UfwUCkX9wc6cKccjGchU0ASQc/Mwo9GtLVciWiCThns= Subject key identifier: C6:0F:24:13:6E:50:B5:35:3F:79:FE:89:28:DC:C5:7F:EC:0B:45:89 Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Certificate serial: 16BEE5C045C868C63AC08B8C65251A42F7DD532B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:45:13 +0000 Manifest this update: Thu 24 Sep 2026 15:40:13 +0000 Manifest next update: Fri 25 Sep 2026 19:20:13 +0000 Files and hashes: 1: EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl (hash: E4MNMwAiUggVttbs5sjFeF/CihEQ7H4q2eB7PMC23fA=) 2: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=) 3: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: RSC52CIB9gdiO0mwgB0RPCA6fPz9z6KlTh9C7/oKbQo=) 4: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=) 5: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:be:e5:c0:45:c8:68:c6:3a:c0:8b:8c:65:25:1a:42:f7:dd:53:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Validity Not Before: Sep 24 15:40:13 2026 GMT Not After : Sep 25 19:20:13 2026 GMT Subject: CN=C60F24136E50B5353F79FE8928DCC57FEC0B4589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:06:b1:71:0d:2e:fa:9d:9e:32:b7:f3:32: d4:0c:4b:20:02:b7:2e:ea:65:4c:7b:7a:ff:3b:e2: 0c:14:40:78:e6:3c:c8:c3:7c:c3:16:9b:08:1d:18: 53:5f:bc:33:41:32:db:bf:5e:f7:74:97:e6:03:ee: 11:09:36:8f:25:3a:5f:c4:9b:f7:d4:9c:dc:cb:c4: f7:18:96:47:91:7e:c2:dc:c2:7a:12:9a:b6:f5:41: 34:4d:02:01:55:10:0c:e0:8c:9f:e8:c7:83:11:2f: 6b:de:aa:e7:28:72:64:f9:df:2c:32:03:a1:61:6a: 98:f3:27:d7:27:2b:8b:82:6f:c2:b6:21:c1:8a:2d: b5:55:33:29:ba:b9:66:dd:da:41:21:95:fe:05:dc: 2f:2a:f8:23:40:8f:c3:04:a0:ab:60:ff:34:74:1c: 2f:d4:b5:31:95:59:f5:a7:2d:fe:5d:29:f6:09:56: ff:64:19:33:c5:92:a0:15:2f:3d:64:c9:f5:ef:d8: 7f:28:33:ad:71:f1:ca:15:65:b2:7a:f9:6d:af:d8: 45:88:e9:c9:3c:fd:81:ad:de:e2:5e:a2:83:27:6a: 08:c7:a5:e6:6c:65:fe:00:de:d9:91:e3:52:26:ff: 6e:de:d8:50:df:5e:2a:9a:94:80:36:7c:2d:f2:c2: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0F:24:13:6E:50:B5:35:3F:79:FE:89:28:DC:C5:7F:EC:0B:45:89 X509v3 Authority Key Identifier: keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:24:54:26:b3:19:c1:b2:c3:70:df:71:da:21:7e:39:a7:12: ee:c1:2b:4c:9d:1b:50:fa:97:0f:0e:6f:4a:08:c9:e4:e4:58: 11:97:2f:8f:8c:78:bc:97:02:56:be:9d:b4:05:f4:c7:9c:bc: fa:65:85:41:c8:07:3f:fb:4f:15:f4:ec:e9:53:7d:81:0c:94: 05:df:18:b7:67:e4:be:b2:6c:cc:39:01:2a:c4:19:3f:cb:4d: ef:e9:e7:a8:9b:3d:01:24:dc:24:0a:f8:02:10:45:4f:5d:76: d7:48:90:7b:aa:a3:20:89:89:54:c3:71:87:4b:50:fc:e4:e6: 55:d4:b5:27:c4:94:7d:45:e4:23:05:8f:ff:4d:16:ce:2b:01: bf:f4:e6:2e:bc:8e:30:42:4b:5e:3c:6d:8d:e9:69:c8:32:ba: 1f:e6:3c:9f:95:90:5b:e4:55:b7:66:49:d8:56:b7:f2:08:92: 5a:8e:26:30:9b:c0:6e:fa:fb:77:87:16:6e:a7:e5:8f:13:38: f8:50:0e:5b:81:5b:02:f6:7c:3a:03:03:14:d4:39:89:9b:11: 67:86:c4:67:cf:f1:be:a4:f3:34:0a:de:f9:cf:83:07:29:45: b7:ba:30:86:bb:3d:b4:0a:96:77:a1:2d:30:7c:c0:91:c0:95: 19:76:27:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFr7lwEXIaMY6wIuMZSUaQvfdUyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy MjgzRTI2OTAeFw0yNjA5MjQxNTQwMTNaFw0yNjA5MjUxOTIwMTNaMDMxMTAvBgNV BAMTKEM2MEYyNDEzNkU1MEI1MzUzRjc5RkU4OTI4RENDNTdGRUMwQjQ1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldQaxcQ0u+p2eMrfzMtQMSyAC ty7qZUx7ev874gwUQHjmPMjDfMMWmwgdGFNfvDNBMtu/Xvd0l+YD7hEJNo8lOl/E m/fUnNzLxPcYlkeRfsLcwnoSmrb1QTRNAgFVEAzgjJ/ox4MRL2vequcocmT53ywy A6FhapjzJ9cnK4uCb8K2IcGKLbVVMym6uWbd2kEhlf4F3C8q+CNAj8MEoKtg/zR0 HC/UtTGVWfWnLf5dKfYJVv9kGTPFkqAVLz1kyfXv2H8oM61x8coVZbJ6+W2v2EWI 6ck8/YGt3uJeooMnagjHpeZsZf4A3tmR41Im/27e2FDfXiqalIA2fC3ywvgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxg8kE25QtTU/ef6JKNzFf+wLRYkwHwYDVR0j BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0 QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRD QTUyMjgzRTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgkVCazGcGyw3DfcdohfjmnEu7BK0ydG1D6 lw8Ob0oIyeTkWBGXL4+MeLyXAla+nbQF9MecvPplhUHIBz/7TxX07OlTfYEMlAXf GLdn5L6ybMw5ASrEGT/LTe/p56ibPQEk3CQK+AIQRU9ddtdIkHuqoyCJiVTDcYdL UPzk5lXUtSfElH1F5CMFj/9NFs4rAb/05i68jjBCS148bY3pacgyuh/mPJ+VkFvk VbdmSdhWt/IIklqOJjCbwG76+3eHFm6n5Y8TOPhQDluBWwL2fDoDAxTUOYmbEWeG xGfP8b6k8zQK3vnPgwcpRbe6MIa7PbQKlnehLTB8wJHAlRl2J1Y= -----END CERTIFICATE-----Generated at Thu Sep 24 21:23:29 2026 by rpki-client