$ rpki-client -vvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft File: EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft (raw, json) Hash identifier: RcLGuBj0EsskJKjI8gTSAAqQK9e+LwVyq0wJqpb+Hf4= Subject key identifier: F9:F2:8E:F3:2A:75:AE:0E:44:FD:58:5B:82:61:36:31:17:B8:FC:75 Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F Certificate issuer: /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Certificate serial: 6C8FE9FC7A75EAF23EE5128402A00FA73448CC35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:18:31 +0000 Manifest this update: Tue 12 May 2026 07:13:31 +0000 Manifest next update: Wed 13 May 2026 11:17:31 +0000 Files and hashes: 1: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: CZezg3V9YTA7rAg0HQHAWG4rHwKphI57kR4SMjyKwas=) 2: EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl (hash: BogR7HEp0VJTgdNyy1ikAlzNhqeSdTxILyHceJVfsJY=) 3: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=) 4: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: pj1vmNVgdJMcLPpwXDPbTSTqYs/nj1UjJZcEGgiuKJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8f:e9:fc:7a:75:ea:f2:3e:e5:12:84:02:a0:0f:a7:34:48:cc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F Validity Not Before: May 12 07:13:31 2026 GMT Not After : May 13 11:17:31 2026 GMT Subject: CN=F9F28EF32A75AE0E44FD585B8261363117B8FC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:38:d0:09:0f:c2:8b:5e:c0:4c:75:fe:60: dc:d8:06:cb:9c:2c:7a:16:0d:50:e2:36:2f:55:79: c4:90:3d:4e:51:2e:04:fd:bf:42:64:c6:c5:47:ed: d8:c3:55:65:8f:00:5f:fa:09:df:c1:ac:ec:b6:0d: aa:36:31:42:d5:23:fd:77:f0:cf:5d:63:84:9b:23: 78:9c:4b:8b:9c:e2:e2:d6:c2:33:10:00:6d:94:d7: 71:5a:10:d1:45:f2:eb:63:79:a1:5c:dd:c4:91:64: 88:e4:af:37:8f:6e:14:b9:21:84:4a:b1:2a:5e:09: c7:83:14:01:1e:db:8f:43:39:8b:d9:4b:26:2b:9d: e9:c7:47:7e:c9:99:fe:29:42:18:00:ef:d1:be:0b: 21:0c:37:88:24:67:32:bf:3a:c8:2e:6d:e2:16:13: c5:88:40:21:7e:a0:43:97:f5:15:d3:d7:f7:9c:9a: 06:fb:ef:f9:11:40:4c:5a:56:54:73:36:47:ca:97: cb:f0:b1:64:36:a8:0a:72:0c:87:1c:81:56:5d:ba: d7:59:b4:41:8f:91:2f:37:e0:a6:42:af:06:18:0e: 15:35:91:48:45:37:23:29:86:9e:86:c8:6b:18:53: 66:e3:05:18:86:a8:e3:f4:0f:f9:64:28:9d:19:5b: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F2:8E:F3:2A:75:AE:0E:44:FD:58:5B:82:61:36:31:17:B8:FC:75 X509v3 Authority Key Identifier: keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:10:cd:39:bc:12:fc:39:e0:7b:43:a7:95:f3:3d:b9:0b:19: ec:30:42:2b:e9:98:7c:c9:c3:4b:79:18:45:3d:f3:90:f0:05: 5e:76:4e:5d:c2:77:2c:ab:c1:b7:0f:c9:79:22:c4:f8:5b:84: 73:5c:da:11:cd:85:54:45:e5:af:c9:e3:ad:8e:6c:61:85:f6: f9:24:05:ed:e6:63:1b:77:66:f2:f5:ec:6a:cf:f0:7d:62:90: bf:56:6a:6f:6f:80:ee:1f:5e:90:31:f1:2f:91:f1:34:0c:8a: 12:c1:b4:e2:16:74:3b:f9:3c:52:fa:cf:74:c7:72:80:0e:2a: e7:94:98:04:4a:ae:bb:9e:e8:7d:80:14:66:33:a9:d8:94:3d: 7b:45:80:41:02:23:0c:b8:91:59:d2:0e:d5:3d:a2:b7:86:13: 0b:70:9a:1a:ac:06:0f:1b:43:bd:e0:7b:34:99:a4:55:2b:66: 9f:80:34:90:a7:d1:39:7f:6d:fa:39:d4:4f:46:0c:56:0b:62: f2:50:37:79:e1:6f:c3:e6:23:87:75:d1:21:44:52:7d:6a:d9: 2f:02:c3:ad:8a:d2:47:5e:7b:c6:90:b0:b8:15:3b:af:d5:f9: a3:dc:c7:d6:95:3a:aa:bd:97:78:3f:5d:7a:b8:4d:2c:ff:ca: 5a:b9:6f:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbI/p/Hp16vI+5RKEAqAPpzRIzDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRG NTUxMDczRjAeFw0yNjA1MTIwNzEzMzFaFw0yNjA1MTMxMTE3MzFaMDMxMTAvBgNV BAMTKEY5RjI4RUYzMkE3NUFFMEU0NEZENTg1QjgyNjEzNjMxMTdCOEZDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6DjQCQ/Ci17ATHX+YNzYBsuc LHoWDVDiNi9VecSQPU5RLgT9v0JkxsVH7djDVWWPAF/6Cd/BrOy2Dao2MULVI/13 8M9dY4SbI3icS4uc4uLWwjMQAG2U13FaENFF8utjeaFc3cSRZIjkrzePbhS5IYRK sSpeCceDFAEe249DOYvZSyYrnenHR37Jmf4pQhgA79G+CyEMN4gkZzK/OsgubeIW E8WIQCF+oEOX9RXT1/ecmgb77/kRQExaVlRzNkfKl8vwsWQ2qApyDIccgVZdutdZ tEGPkS834KZCrwYYDhU1kUhFNyMphp6GyGsYU2bjBRiGqOP0D/lkKJ0ZW/qJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+fKO8yp1rg5E/VhbgmE2MRe4/HUwHwYDVR0j BBgwFoAU7sgpj2NR4NHpCZ2J1SwhvfVRBz8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkOTI2OGItNWU2MS00M2IyLWE2MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2 MzUxRTBEMUU5MDk5RDg5RDUyQzIxQkRGNTUxMDczRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUM4Mjk4RjYzNTFFMEQxRTkwOTlEODlENTJDMjFCREY1NTEw NzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvRUVDODI5OEY2MzUxRTBEMUU5MDk5RDg5RDUyQzIx QkRGNTUxMDczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAQzTm8Evw54HtDp5XzPbkLGewwQivpmHzJ w0t5GEU985DwBV52Tl3CdyyrwbcPyXkixPhbhHNc2hHNhVRF5a/J462ObGGF9vkk Be3mYxt3ZvL17GrP8H1ikL9Wam9vgO4fXpAx8S+R8TQMihLBtOIWdDv5PFL6z3TH coAOKueUmARKrrue6H2AFGYzqdiUPXtFgEECIwy4kVnSDtU9oreGEwtwmhqsBg8b Q73gezSZpFUrZp+ANJCn0Tl/bfo51E9GDFYLYvJQN3nhb8PmI4d10SFEUn1q2S8C w62K0kdee8aQsLgVO6/V+aPcx9aVOqq9l3g/XXq4TSz/ylq5b+A= -----END CERTIFICATE-----Generated at Tue May 12 22:52:00 2026 by rpki-client