$ rpki-client -vvf rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft File: EE8460B7474632B852DBA37769D3FACD4E5171BB.mft (raw, json) Hash identifier: YPHG/IzvWQ7xTlOgm14D4qIYaIAKl1VlBQqVPVVt/Ic= Subject key identifier: 1B:22:56:E4:BC:C4:34:0D:44:FB:7C:FF:A7:35:E7:45:5C:C1:E1:7D Authority key identifier: EE:84:60:B7:47:46:32:B8:52:DB:A3:77:69:D3:FA:CD:4E:51:71:BB Certificate issuer: /CN=EE8460B7474632B852DBA37769D3FACD4E5171BB Certificate serial: 35F5D9383AD37D0E62A80EF54A120C2F22F0A8AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:35:44 +0000 Manifest this update: Tue 12 May 2026 19:30:44 +0000 Manifest next update: Wed 13 May 2026 20:47:44 +0000 Files and hashes: 1: EE8460B7474632B852DBA37769D3FACD4E5171BB.crl (hash: 9civi39maFT+ln5kotMhbt/xYntBNs72FOFZRIX/1bY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.crl rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f5:d9:38:3a:d3:7d:0e:62:a8:0e:f5:4a:12:0c:2f:22:f0:a8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8460B7474632B852DBA37769D3FACD4E5171BB Validity Not Before: May 12 19:30:44 2026 GMT Not After : May 13 20:47:44 2026 GMT Subject: CN=1B2256E4BCC4340D44FB7CFFA735E7455CC1E17D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:7c:99:a2:0d:00:0c:0a:4a:23:a3:de:cb: ac:3e:fe:d4:bb:2e:75:e6:9b:99:69:0b:61:4f:d8: d2:77:ff:9e:c3:70:62:6a:61:60:6e:e0:53:c4:b0: d9:da:7a:c8:95:63:e9:01:e9:bb:1e:28:19:17:d9: df:5a:43:e4:9f:f3:bc:76:3d:42:54:1c:6e:67:b1: c9:98:ef:a9:7d:a4:37:ba:8f:c7:0d:04:61:90:37: 37:01:e0:12:ed:3c:7b:38:a0:55:04:66:22:b7:58: a7:0c:ff:c1:12:39:50:2a:d5:73:3b:18:4c:89:c7: cb:59:11:74:74:d2:87:32:d8:5b:12:87:d4:7c:6d: c3:ac:41:17:44:61:a9:d3:09:1b:dd:9a:5b:43:3c: 8f:fb:36:98:d1:50:37:9f:74:e0:a2:91:02:1e:cc: 19:fb:9d:49:6b:86:d9:ee:78:1e:d4:a2:9e:9b:1e: 54:2b:7c:f7:49:d3:e5:55:53:a1:c2:39:a1:cf:4f: 3b:d3:ec:04:2d:8f:32:09:e9:8d:04:7f:91:63:db: 30:9a:3e:a4:42:42:9a:8d:92:f6:af:e3:fe:9b:e3: 1f:5a:b0:d0:69:da:4e:05:af:f6:31:25:ea:9e:a4: 61:f9:69:6b:35:9b:fc:ce:57:02:10:c0:18:2c:57: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:22:56:E4:BC:C4:34:0D:44:FB:7C:FF:A7:35:E7:45:5C:C1:E1:7D X509v3 Authority Key Identifier: keyid:EE:84:60:B7:47:46:32:B8:52:DB:A3:77:69:D3:FA:CD:4E:51:71:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:38:ff:a1:fe:40:37:71:b3:56:37:17:1e:4c:e7:fb:51:92: 05:12:bb:0b:a0:35:37:4a:ff:b2:49:d4:b9:cb:86:d9:aa:29: 70:0f:92:6d:64:1b:15:55:33:f1:e5:ab:65:19:02:49:2b:a5: d7:86:d3:54:d4:42:0d:ad:dc:9b:ca:36:18:c1:86:33:4c:11: 87:12:2d:5b:66:71:58:dd:85:e3:15:8f:67:11:b4:ec:5a:2c: e6:b1:18:b1:b7:45:c3:70:7a:ad:78:8b:fa:7b:ac:ee:0a:75: 5b:11:43:0d:e8:4e:b2:99:f9:24:e4:42:42:aa:90:57:14:d7: d8:03:4b:10:c4:4e:01:99:58:6f:a1:f3:7e:23:64:f7:0c:f8: 32:b1:92:67:27:bf:1c:6c:0d:e9:c1:10:d9:79:29:ec:0e:8f: b1:31:45:86:7d:af:98:4f:41:17:83:67:c1:a4:db:32:44:c0: 5a:12:69:32:7d:46:a7:fa:2a:df:c6:ec:94:76:72:4b:88:d9: a2:7e:0d:79:4f:95:a8:19:8a:eb:bb:be:08:7d:1f:d6:65:3d: 3e:fd:2f:0f:91:3e:45:ef:82:de:65:f8:0d:bf:09:be:c3:44: 48:27:29:2f:9b:0f:53:1f:b4:c4:28:d6:a6:3c:08:32:49:74: 3d:fe:b3:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfXZODrTfQ5iqA71ShIMLyLwqKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4NDYwQjc0NzQ2MzJCODUyREJBMzc3NjlEM0ZBQ0Q0 RTUxNzFCQjAeFw0yNjA1MTIxOTMwNDRaFw0yNjA1MTMyMDQ3NDRaMDMxMTAvBgNV BAMTKDFCMjI1NkU0QkNDNDM0MEQ0NEZCN0NGRkE3MzVFNzQ1NUNDMUUxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//XyZog0ADApKI6Pey6w+/tS7 LnXmm5lpC2FP2NJ3/57DcGJqYWBu4FPEsNnaesiVY+kB6bseKBkX2d9aQ+Sf87x2 PUJUHG5nscmY76l9pDe6j8cNBGGQNzcB4BLtPHs4oFUEZiK3WKcM/8ESOVAq1XM7 GEyJx8tZEXR00ocy2FsSh9R8bcOsQRdEYanTCRvdmltDPI/7NpjRUDefdOCikQIe zBn7nUlrhtnueB7Uop6bHlQrfPdJ0+VVU6HCOaHPTzvT7AQtjzIJ6Y0Ef5Fj2zCa PqRCQpqNkvav4/6b4x9asNBp2k4Fr/YxJeqepGH5aWs1m/zOVwIQwBgsV8r/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGyJW5LzENA1E+3z/pzXnRVzB4X0wHwYDVR0j BBgwFoAU7oRgt0dGMrhS26N3adP6zU5RcbswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZkNmVhY2EtZjVmZC00YWNiLTg1YTUtZWI4ZDM3MDgyM2FmLzAvRUU4NDYwQjc0 NzQ2MzJCODUyREJBMzc3NjlEM0ZBQ0Q0RTUxNzFCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTg0NjBCNzQ3NDYzMkI4NTJEQkEzNzc2OUQzRkFDRDRFNTE3 MUJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvRUU4NDYwQjc0NzQ2MzJCODUyREJBMzc3NjlEM0ZB Q0Q0RTUxNzFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKE4/6H+QDdxs1Y3Fx5M5/tRkgUSuwugNTdK /7JJ1LnLhtmqKXAPkm1kGxVVM/Hlq2UZAkkrpdeG01TUQg2t3JvKNhjBhjNMEYcS LVtmcVjdheMVj2cRtOxaLOaxGLG3RcNweq14i/p7rO4KdVsRQw3oTrKZ+STkQkKq kFcU19gDSxDETgGZWG+h834jZPcM+DKxkmcnvxxsDenBENl5KewOj7ExRYZ9r5hP QReDZ8Gk2zJEwFoSaTJ9Rqf6Kt/G7JR2ckuI2aJ+DXlPlagZiuu7vgh9H9ZlPT79 Lw+RPkXvgt5l+A2/Cb7DREgnKS+bD1MftMQo1qY8CDJJdD3+s1I= -----END CERTIFICATE-----Generated at Wed May 13 02:16:05 2026 by rpki-client