$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft File: EE2943438815BD3AA204737348DB6D3884516325.mft (raw, json) Hash identifier: HBHIXD7nndm0IVFOpizyrCs+8A1B4DWmTtQFvJh7TuE= Subject key identifier: A8:8A:83:0C:56:B6:84:0D:AC:41:CA:A5:B0:BE:EA:FD:B0:54:50:8B Authority key identifier: EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25 Certificate issuer: /CN=EE2943438815BD3AA204737348DB6D3884516325 Certificate serial: 565AAEBA936B5F517BEB6D3000D41E560EA9859C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 01:32:09 +0000 Manifest this update: Fri 25 Sep 2026 01:27:09 +0000 Manifest next update: Sat 26 Sep 2026 02:34:09 +0000 Files and hashes: 1: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: G3KzWHfdyRcChB//+h8vgfZ65TxUJCZuJOLl/yrV7ac=) 2: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: fq5M+dx6USCMFcMueBlB0OlQMgC40bRFl66f36qCgPM=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: QxVgQbc9bJ28BSqw5k+C3GSuIOfZW0NlgNTshO2WruQ=) 4: EE2943438815BD3AA204737348DB6D3884516325.crl (hash: qyp247Cxi3JvTOzffOKER+5HwTGbhYdrCucJD6k830s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5a:ae:ba:93:6b:5f:51:7b:eb:6d:30:00:d4:1e:56:0e:a9:85:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2943438815BD3AA204737348DB6D3884516325 Validity Not Before: Sep 25 01:27:09 2026 GMT Not After : Sep 26 02:34:09 2026 GMT Subject: CN=A88A830C56B6840DAC41CAA5B0BEEAFDB054508B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:34:22:b4:d2:01:70:bb:8d:d8:d7:1e:67:8d: b5:1f:de:00:40:82:96:64:6c:46:20:47:d5:a1:11: e3:57:e8:38:43:48:7e:32:8d:06:80:08:dc:f9:b4: ea:49:3e:ee:51:54:57:96:74:29:00:03:ad:0d:9b: 6d:50:ca:2a:90:50:a0:ab:8c:ba:80:4e:27:d5:29: 29:c4:3c:57:b4:0c:de:0a:5b:4c:87:9c:c8:ce:6e: 80:90:8f:7b:e2:d1:45:18:af:84:f9:74:6b:cf:ca: 0c:b0:75:92:d4:3a:ae:ca:da:9a:58:c7:91:eb:29: d8:91:68:ad:7e:07:20:b4:df:b8:07:9c:03:43:0b: c8:a6:fc:e6:f2:47:4d:8a:62:8a:2b:86:a8:ec:e3: 30:ce:bb:aa:d6:bb:f0:fd:a7:11:c6:38:2b:5e:ae: 37:bc:67:7c:69:99:50:87:6c:aa:3b:8f:8d:26:27: e1:ce:0a:57:be:e2:1f:3b:ed:50:bd:78:96:e2:92: f6:c4:58:40:d3:0c:a5:ca:df:12:fd:b1:de:8b:da: 30:16:29:9f:aa:0f:9f:f3:1f:ed:cf:80:d4:b0:90: b9:8f:d4:3d:75:ea:07:b1:aa:e0:d8:9b:33:98:9f: c1:33:8b:60:78:33:26:81:39:68:04:8d:7f:2f:55: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8A:83:0C:56:B6:84:0D:AC:41:CA:A5:B0:BE:EA:FD:B0:54:50:8B X509v3 Authority Key Identifier: keyid:EE:29:43:43:88:15:BD:3A:A2:04:73:73:48:DB:6D:38:84:51:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE2943438815BD3AA204737348DB6D3884516325.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/EE2943438815BD3AA204737348DB6D3884516325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c0:f1:51:27:65:94:08:84:e4:f1:b8:86:b2:a8:d3:12:d3: 99:96:7d:51:5b:80:c1:a4:42:ac:3e:3c:bb:2d:37:68:a3:a6: 47:0e:cf:a2:10:55:e5:1e:4c:f6:57:8b:08:59:1e:4c:55:e4: be:5d:97:39:d1:9a:17:56:d1:35:c0:9a:2d:1e:db:10:78:44: d8:8a:68:36:0d:c1:d2:20:0f:14:d9:a3:0c:5d:0b:6a:bc:82: 7c:62:b0:c5:d0:16:e0:c0:6d:20:7e:6b:79:80:c0:b8:39:c1: 7e:56:51:40:da:33:ca:31:b7:5e:83:16:a2:40:2f:60:1c:a9: 10:43:ac:cb:7f:f6:a4:1c:66:90:50:6e:9e:f1:8e:e2:97:10: 14:a7:42:44:6a:be:dc:37:76:7e:e3:3e:23:eb:e4:5a:93:b7: c1:79:50:82:57:7a:92:ba:92:30:0d:be:75:09:d3:64:81:3f: 69:6d:77:8f:80:8a:e5:d2:f8:cb:ac:7c:c9:af:91:f2:26:9a: 54:ea:00:82:c2:65:6a:79:2b:21:fb:9f:ee:aa:25:8b:9e:20: 22:7b:c2:72:07:b3:00:97:24:cf:1b:e4:e9:1a:65:ca:d4:67: ce:ee:f3:16:55:ae:8a:ac:f6:f1:d0:ae:e2:e3:ba:e8:fa:af: 78:89:3b:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlquupNrX1F7620wANQeVg6phZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4 NDUxNjMyNTAeFw0yNjA5MjUwMTI3MDlaFw0yNjA5MjYwMjM0MDlaMDMxMTAvBgNV BAMTKEE4OEE4MzBDNTZCNjg0MERBQzQxQ0FBNUIwQkVFQUZEQjA1NDUwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeNCK00gFwu43Y1x5njbUf3gBA gpZkbEYgR9WhEeNX6DhDSH4yjQaACNz5tOpJPu5RVFeWdCkAA60Nm21QyiqQUKCr jLqATifVKSnEPFe0DN4KW0yHnMjOboCQj3vi0UUYr4T5dGvPygywdZLUOq7K2ppY x5HrKdiRaK1+ByC037gHnANDC8im/ObyR02KYoorhqjs4zDOu6rWu/D9pxHGOCte rje8Z3xpmVCHbKo7j40mJ+HOCle+4h877VC9eJbikvbEWEDTDKXK3xL9sd6L2jAW KZ+qD5/zH+3PgNSwkLmP1D116gexquDYmzOYn8Ezi2B4MyaBOWgEjX8vVZZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqIqDDFa2hA2sQcqlsL7q/bBUUIswHwYDVR0j BBgwFoAU7ilDQ4gVvTqiBHNzSNttOIRRYyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ3MDNiODAtMmU3OC00ZDExLWFiNzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4 ODE1QkQzQUEyMDQ3MzczNDhEQjZEMzg4NDUxNjMyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5NDM0Mzg4MTVCRDNBQTIwNDczNzM0OERCNkQzODg0NTE2 MzI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvRUUyOTQzNDM4ODE1QkQzQUEyMDQ3MzczNDhEQjZE Mzg4NDUxNjMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHA8VEnZZQIhOTxuIayqNMS05mWfVFbgMGk Qqw+PLstN2ijpkcOz6IQVeUeTPZXiwhZHkxV5L5dlznRmhdW0TXAmi0e2xB4RNiK aDYNwdIgDxTZowxdC2q8gnxisMXQFuDAbSB+a3mAwLg5wX5WUUDaM8oxt16DFqJA L2AcqRBDrMt/9qQcZpBQbp7xjuKXEBSnQkRqvtw3dn7jPiPr5FqTt8F5UIJXepK6 kjANvnUJ02SBP2ltd4+AiuXS+MusfMmvkfImmlTqAILCZWp5KyH7n+6qJYueICJ7 wnIHswCXJM8b5OkaZcrUZ87u8xZVroqs9vHQruLjuuj6r3iJO9o= -----END CERTIFICATE-----Generated at Fri Sep 25 06:40:13 2026 by rpki-client