$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft File: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft (raw, json) Hash identifier: oEHzWJP9h9PGDc6J4IZitWbPOXgG+muOZXmEWZWvzsQ= Subject key identifier: 11:20:7F:D4:32:A2:2B:08:06:F1:26:F7:DE:96:07:12:B8:C6:6C:52 Authority key identifier: EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB Certificate issuer: /CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Certificate serial: 37AB744AD1BD6492314D83C18325FB4945441657 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:10:31 +0000 Manifest this update: Fri 24 Jul 2026 01:05:31 +0000 Manifest next update: Sat 25 Jul 2026 04:12:31 +0000 Files and hashes: 1: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl (hash: kaDnFa2SduSSd5WMhGShSkzNvMzD7GP+i28Qr4Z82Jk=) 2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: 4kBrY3m/YUmUepWlqfPB38SwXp7zMRirxL+70ddYk80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ab:74:4a:d1:bd:64:92:31:4d:83:c1:83:25:fb:49:45:44:16:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Validity Not Before: Jul 24 01:05:31 2026 GMT Not After : Jul 25 04:12:31 2026 GMT Subject: CN=11207FD432A22B0806F126F7DE960712B8C66C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:9e:60:f0:42:dc:75:00:fd:86:6f:dd:d3: df:ba:9b:1a:62:61:01:36:75:59:60:5e:5a:25:20: 5d:f3:a7:73:66:35:36:5d:24:1f:d8:f4:c5:93:64: e8:ea:22:47:1f:d5:14:e5:fa:28:79:cf:5b:cf:19: ca:d6:1d:7c:7b:9a:1b:cf:6e:81:d8:ca:30:7d:bf: 4f:4d:59:fd:b6:dd:83:85:2a:61:ef:12:37:e6:01: 94:8f:79:44:ff:a5:d8:af:dd:3c:ec:f6:5d:da:2f: ef:09:01:73:6c:8f:89:ae:87:c9:25:14:79:4a:f7: ac:e7:e4:ef:b8:03:5a:ed:48:29:fb:b5:48:bb:dc: bc:a1:e7:c5:1e:0b:87:05:46:d9:6b:b9:4a:a4:87: 58:76:a3:bf:4b:ca:00:57:94:01:b2:3e:10:04:0b: c3:2d:cf:e2:f3:21:ce:5f:ee:19:bb:13:39:0a:85: 15:a5:34:66:e0:1c:69:32:06:0e:88:bd:54:4a:0f: 8d:3b:41:57:c5:df:95:20:5c:01:b5:03:b7:73:c5: a2:60:31:50:bb:7b:52:de:35:23:1d:c9:39:b2:08: a0:85:db:42:ca:be:07:e8:f9:d8:90:0d:8e:b6:ab: e4:0a:02:c4:b0:b3:52:e3:e5:be:13:8c:78:49:0e: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:20:7F:D4:32:A2:2B:08:06:F1:26:F7:DE:96:07:12:B8:C6:6C:52 X509v3 Authority Key Identifier: keyid:EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3b:07:56:5d:02:b1:0c:73:88:b3:28:97:8c:f3:e8:da:92: f4:e9:a8:5b:d7:bd:18:ee:05:d7:d0:ea:90:32:86:3a:23:57: aa:0c:af:09:b3:fd:1c:4f:21:8a:15:df:53:9e:ca:7f:ec:4f: c5:ee:c7:c5:af:c8:00:44:cb:2d:f8:a0:e5:51:ca:47:56:3e: 52:af:95:3a:46:b3:3d:32:a0:35:e9:99:b6:85:1b:3e:70:4b: 9a:e1:ae:f2:9f:4b:bf:d6:d9:40:a3:5a:ba:0e:87:78:88:09: f0:78:1f:3f:8a:5b:26:c8:1d:17:8c:9f:26:94:c9:6c:2e:eb: 55:be:f8:3b:2c:cc:61:72:29:e7:18:9d:e5:5f:76:61:ab:83: 4d:8a:ca:0b:41:93:24:e7:5e:13:22:d6:5f:92:5d:8d:d4:02: 22:2e:70:01:50:47:a2:82:70:29:0f:f8:3c:88:70:17:e9:3a: 53:2d:d1:c2:13:2e:f8:cd:5e:9d:70:78:f0:33:0d:b5:b6:74: 0e:b5:4e:b7:6d:91:a6:6f:2c:23:cd:69:10:ee:ee:cb:ac:30: 61:a7:89:d5:63:fe:71:49:8e:e1:b9:6c:21:4b:1d:b9:92:1d: 09:c5:8b:0f:bf:22:1d:2b:ca:3c:0a:69:e8:be:9c:7d:a1:f1: f6:99:e1:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6t0StG9ZJIxTYPBgyX7SUVEFlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJC M0U2RTFFQjAeFw0yNjA3MjQwMTA1MzFaFw0yNjA3MjUwNDEyMzFaMDMxMTAvBgNV BAMTKDExMjA3RkQ0MzJBMjJCMDgwNkYxMjZGN0RFOTYwNzEyQjhDNjZDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LZ5g8ELcdQD9hm/d09+6mxpi YQE2dVlgXlolIF3zp3NmNTZdJB/Y9MWTZOjqIkcf1RTl+ih5z1vPGcrWHXx7mhvP boHYyjB9v09NWf223YOFKmHvEjfmAZSPeUT/pdiv3Tzs9l3aL+8JAXNsj4muh8kl FHlK96zn5O+4A1rtSCn7tUi73Lyh58UeC4cFRtlruUqkh1h2o79LygBXlAGyPhAE C8Mtz+LzIc5f7hm7EzkKhRWlNGbgHGkyBg6IvVRKD407QVfF35UgXAG1A7dzxaJg MVC7e1LeNSMdyTmyCKCF20LKvgfo+diQDY62q+QKAsSws1Lj5b4TjHhJDlAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESB/1DKiKwgG8Sb33pYHErjGbFIwHwYDVR0j BBgwFoAU7vI9x7xwxI7F9Gf+RN5bsrPm4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdC QzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJCM0U2RTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUYyM0RDN0JDNzBDNDhFQzVGNDY3RkU0NERFNUJCMkIzRTZF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVC QjJCM0U2RTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo7B1ZdArEMc4izKJeM8+jakvTpqFvXvRju BdfQ6pAyhjojV6oMrwmz/RxPIYoV31Oeyn/sT8Xux8WvyABEyy34oOVRykdWPlKv lTpGsz0yoDXpmbaFGz5wS5rhrvKfS7/W2UCjWroOh3iICfB4Hz+KWybIHReMnyaU yWwu61W++DsszGFyKecYneVfdmGrg02KygtBkyTnXhMi1l+SXY3UAiIucAFQR6KC cCkP+DyIcBfpOlMt0cITLvjNXp1wePAzDbW2dA61TrdtkaZvLCPNaRDu7susMGGn idVj/nFJjuG5bCFLHbmSHQnFiw+/Ih0ryjwKaei+nH2h8faZ4ec= -----END CERTIFICATE-----Generated at Fri Jul 24 04:16:40 2026 by rpki-client