$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft File: EE8460B7474632B852DBA37769D3FACD4E5171BB.mft (raw, json) Hash identifier: 3e87RCqMV/CPm1faQcxiJ27kch9r0ycrvuHrTkpZl70= Subject key identifier: 2A:83:42:EC:A4:23:16:18:45:B6:04:9C:5B:D3:27:58:67:DF:66:DE Authority key identifier: EE:84:60:B7:47:46:32:B8:52:DB:A3:77:69:D3:FA:CD:4E:51:71:BB Certificate issuer: /CN=EE8460B7474632B852DBA37769D3FACD4E5171BB Certificate serial: 230029D86E1B9FC007555642764676DE25B15E6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 19:19:30 +0000 Manifest this update: Thu 24 Sep 2026 19:14:30 +0000 Manifest next update: Fri 25 Sep 2026 22:18:30 +0000 Files and hashes: 1: EE8460B7474632B852DBA37769D3FACD4E5171BB.crl (hash: ZU2WJtLER0V2S9aX/649sRFPfpU3sTU9wXpHHtEfVI8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.crl rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:00:29:d8:6e:1b:9f:c0:07:55:56:42:76:46:76:de:25:b1:5e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8460B7474632B852DBA37769D3FACD4E5171BB Validity Not Before: Sep 24 19:14:30 2026 GMT Not After : Sep 25 22:18:30 2026 GMT Subject: CN=2A8342ECA423161845B6049C5BD3275867DF66DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:eb:aa:65:30:1b:b5:95:ec:c6:51:15:07: b8:b3:d7:42:5d:4c:9f:21:f3:24:a6:52:db:ce:bd: 50:d0:32:f4:5a:72:23:87:60:e9:d6:74:0e:bb:fc: 35:61:ca:65:00:47:01:a3:e1:08:23:06:80:f7:c4: 8a:9c:4f:29:77:35:31:86:41:c1:ec:df:3e:b0:81: 21:53:38:0c:da:c8:ba:e6:fc:28:23:53:fc:42:81: 8f:80:75:d2:6a:0b:c7:ea:9f:c9:44:13:77:78:c2: 92:40:23:e7:40:ef:e7:b0:cb:e3:2f:7a:9b:bd:bb: 47:d0:50:63:39:c6:e4:8e:05:fd:70:2e:7f:4e:be: c2:44:8b:3b:70:42:d9:db:7b:b7:68:fe:8a:34:e2: 2c:ad:0f:b2:a2:ea:51:88:f9:f5:27:0d:e7:8b:c3: 8c:44:f2:2e:ad:86:6f:fe:41:1b:25:53:d6:2c:47: 2f:bd:e8:da:27:f6:d8:f9:e3:aa:bc:35:95:17:e8: 2f:0d:44:f8:e9:cf:c7:27:25:a1:d4:c7:a3:e1:31: fa:ef:bd:c5:84:f0:5c:23:ce:49:2b:7d:87:1d:57: 02:1a:c1:47:b1:e4:69:ec:a9:4b:e9:d5:6a:9c:68: 13:b6:2c:9e:3d:6b:88:6e:07:83:db:a2:57:bf:19: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:42:EC:A4:23:16:18:45:B6:04:9C:5B:D3:27:58:67:DF:66:DE X509v3 Authority Key Identifier: keyid:EE:84:60:B7:47:46:32:B8:52:DB:A3:77:69:D3:FA:CD:4E:51:71:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8460B7474632B852DBA37769D3FACD4E5171BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/EE8460B7474632B852DBA37769D3FACD4E5171BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:00:c5:d4:c6:de:01:49:80:64:ab:a2:15:f6:98:72:f5:34: 70:f5:a9:5b:83:0d:cf:51:ef:3f:37:ac:71:e1:c3:61:e5:7e: 53:ad:e4:30:dc:c5:4f:f5:6b:51:52:98:f5:09:fe:0c:9c:e5: 8b:48:00:de:5b:e1:f0:d1:fa:a0:47:d2:d6:8f:0c:61:16:67: 38:fd:cd:df:08:bb:5a:bf:37:86:a7:4f:9f:00:96:b6:5d:10: 85:cb:40:d3:75:60:58:8e:f4:4b:c0:f1:e5:2a:03:de:db:d9: 74:c3:35:b2:8c:2a:42:1f:dd:6f:92:25:23:b3:97:a4:7a:10: 2c:11:85:75:70:34:bc:bf:14:10:fa:01:06:02:86:a0:bc:93: 6a:e0:33:5a:12:46:cd:3a:31:3c:0b:47:1d:79:3d:bf:3a:fd: 9d:bb:f0:09:ba:25:7f:ad:9f:1e:75:31:8b:80:53:89:12:eb: a9:79:90:4c:88:71:9d:39:cc:ea:29:a5:67:37:f1:4b:62:4d: 7e:db:5f:f0:be:da:bc:29:3d:f7:f6:cf:7d:20:1c:93:8e:84: 6f:de:56:4c:fe:2b:b6:7a:34:5f:4a:dc:ba:f9:f8:78:ef:a5: b7:48:cd:32:d3:29:94:16:ef:91:4e:d6:91:d3:f2:7e:92:aa: 83:af:1b:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwAp2G4bn8AHVVZCdkZ23iWxXm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4NDYwQjc0NzQ2MzJCODUyREJBMzc3NjlEM0ZBQ0Q0 RTUxNzFCQjAeFw0yNjA5MjQxOTE0MzBaFw0yNjA5MjUyMjE4MzBaMDMxMTAvBgNV BAMTKDJBODM0MkVDQTQyMzE2MTg0NUI2MDQ5QzVCRDMyNzU4NjdERjY2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4euqZTAbtZXsxlEVB7iz10Jd TJ8h8ySmUtvOvVDQMvRaciOHYOnWdA67/DVhymUARwGj4QgjBoD3xIqcTyl3NTGG QcHs3z6wgSFTOAzayLrm/CgjU/xCgY+AddJqC8fqn8lEE3d4wpJAI+dA7+ewy+Mv epu9u0fQUGM5xuSOBf1wLn9OvsJEiztwQtnbe7do/oo04iytD7Ki6lGI+fUnDeeL w4xE8i6thm/+QRslU9YsRy+96Non9tj546q8NZUX6C8NRPjpz8cnJaHUx6PhMfrv vcWE8FwjzkkrfYcdVwIawUex5GnsqUvp1WqcaBO2LJ49a4huB4Pbole/GauLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKoNC7KQjFhhFtgScW9MnWGffZt4wHwYDVR0j BBgwFoAU7oRgt0dGMrhS26N3adP6zU5RcbswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZkNmVhY2EtZjVmZC00YWNiLTg1YTUtZWI4ZDM3MDgyM2FmLzAvRUU4NDYwQjc0 NzQ2MzJCODUyREJBMzc3NjlEM0ZBQ0Q0RTUxNzFCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTg0NjBCNzQ3NDYzMkI4NTJEQkEzNzc2OUQzRkFDRDRFNTE3 MUJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvRUU4NDYwQjc0NzQ2MzJCODUyREJBMzc3NjlEM0ZB Q0Q0RTUxNzFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAAxdTG3gFJgGSrohX2mHL1NHD1qVuDDc9R 7z83rHHhw2HlflOt5DDcxU/1a1FSmPUJ/gyc5YtIAN5b4fDR+qBH0taPDGEWZzj9 zd8Iu1q/N4anT58AlrZdEIXLQNN1YFiO9EvA8eUqA97b2XTDNbKMKkIf3W+SJSOz l6R6ECwRhXVwNLy/FBD6AQYChqC8k2rgM1oSRs06MTwLRx15Pb86/Z278Am6JX+t nx51MYuAU4kS66l5kEyIcZ05zOoppWc38UtiTX7bX/C+2rwpPff2z30gHJOOhG/e Vkz+K7Z6NF9K3Lr5+HjvpbdIzTLTKZQW75FO1pHT8n6SqoOvG50= -----END CERTIFICATE-----Generated at Thu Sep 24 23:36:10 2026 by rpki-client