$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft File: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft (raw, json) Hash identifier: VGh4NyLSHt2gWU82aWz/ImPUIAb4VTzaSXN98GOgVhY= Subject key identifier: DE:B0:30:0E:F9:BE:68:93:CA:61:D9:64:3B:74:24:6B:CF:6B:3C:90 Authority key identifier: EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB Certificate issuer: /CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Certificate serial: 3E58F82D420B93E31AB51C373689D1E8BE4266C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:26:20 +0000 Manifest this update: Wed 23 Sep 2026 16:21:20 +0000 Manifest next update: Thu 24 Sep 2026 18:28:20 +0000 Files and hashes: 1: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl (hash: 5oG4QOf+GByPks6DjiOuOycLs15Qnlgo2WfT6A+VDN0=) 2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: 4kBrY3m/YUmUepWlqfPB38SwXp7zMRirxL+70ddYk80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:58:f8:2d:42:0b:93:e3:1a:b5:1c:37:36:89:d1:e8:be:42:66:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Validity Not Before: Sep 23 16:21:20 2026 GMT Not After : Sep 24 18:28:20 2026 GMT Subject: CN=DEB0300EF9BE6893CA61D9643B74246BCF6B3C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:6d:e1:85:3f:cd:d8:96:a7:22:2d:68:e0: 22:2d:d3:83:f0:b6:8e:4e:af:dc:6a:a5:9c:a3:73: 89:30:aa:36:d7:a5:d6:bb:bc:22:55:41:15:62:88: fd:4d:e4:6f:32:21:39:8c:a1:4c:d9:2b:c2:af:d2: 54:56:11:6c:8e:f4:79:8a:6b:23:df:89:ed:9c:0d: de:13:dd:5f:ab:67:e1:ca:93:bb:14:3f:c1:e8:fb: 8b:97:b7:0b:09:03:52:de:0b:6a:23:27:1e:56:bf: bb:7e:79:9d:96:0d:a3:81:1b:4c:3a:9a:43:1e:c0: 6d:9e:ff:57:06:36:0a:4a:be:96:a8:a6:fc:6c:b1: 94:9d:21:0f:d7:70:67:78:c7:f9:f2:a1:96:78:5e: d7:f1:d3:da:d5:61:d5:75:90:4a:d0:6f:83:6c:1f: 64:cb:5d:2b:d2:77:b8:36:bd:12:a8:85:eb:0e:50: cb:87:a5:1a:8f:98:3c:10:c9:08:21:f7:f5:8b:e6: 88:6c:85:8b:46:ef:29:d3:ad:16:79:05:df:af:87: a5:e5:47:bb:ee:95:30:11:fe:a0:16:af:0c:2b:42: 70:65:cc:ac:bf:c8:64:0a:a9:e2:65:41:e9:a4:db: 00:87:28:93:de:8b:54:52:bd:d6:29:1f:ff:f1:5c: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B0:30:0E:F9:BE:68:93:CA:61:D9:64:3B:74:24:6B:CF:6B:3C:90 X509v3 Authority Key Identifier: keyid:EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0a:27:03:69:f4:45:a1:a9:2c:6b:fb:5e:86:d5:b8:86:4b: d5:14:71:35:a6:71:64:dd:dc:c0:37:be:36:d9:b5:5f:56:3e: ae:37:0f:c7:aa:d3:05:b3:8b:29:d2:73:73:5c:7d:ca:f4:f1: 94:b9:de:25:9c:b2:a3:a5:69:d4:3d:f4:a1:e2:5d:b6:60:38: 39:1c:c3:cd:ea:09:39:75:65:e5:1f:ce:10:6a:fe:e2:72:4b: 7e:78:8d:c9:55:43:4a:15:7e:b9:ab:15:64:af:f9:41:00:3e: 48:39:70:1f:a9:7f:bf:9d:d7:b7:70:15:31:36:4c:47:2b:7d: 47:53:53:8c:97:74:d7:12:ba:27:03:c9:8d:e9:11:a8:ce:4c: 0b:78:8f:5f:60:b9:ea:10:cc:a8:90:3d:d8:20:72:25:b9:44: 73:4d:6c:42:b2:5b:25:96:22:84:0e:42:2d:44:90:01:db:6b: 0d:25:69:02:ee:87:98:73:76:e7:35:07:d4:15:e8:d1:e9:c5: 66:39:63:30:5d:d5:fa:66:8b:89:8f:13:91:b6:d3:65:33:30: 79:9c:fc:1a:64:fc:38:6a:6a:b6:6d:80:9a:fb:10:ce:4c:be: 9a:7b:34:5c:6f:57:14:6b:6a:3e:a6:76:fb:be:29:fb:4a:65: b1:79:1f:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlj4LUILk+MatRw3NonR6L5CZsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJC M0U2RTFFQjAeFw0yNjA5MjMxNjIxMjBaFw0yNjA5MjQxODI4MjBaMDMxMTAvBgNV BAMTKERFQjAzMDBFRjlCRTY4OTNDQTYxRDk2NDNCNzQyNDZCQ0Y2QjNDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52W3hhT/N2JanIi1o4CIt04Pw to5Or9xqpZyjc4kwqjbXpda7vCJVQRViiP1N5G8yITmMoUzZK8Kv0lRWEWyO9HmK ayPfie2cDd4T3V+rZ+HKk7sUP8Ho+4uXtwsJA1LeC2ojJx5Wv7t+eZ2WDaOBG0w6 mkMewG2e/1cGNgpKvpaopvxssZSdIQ/XcGd4x/nyoZZ4Xtfx09rVYdV1kErQb4Ns H2TLXSvSd7g2vRKohesOUMuHpRqPmDwQyQgh9/WL5ohshYtG7ynTrRZ5Bd+vh6Xl R7vulTAR/qAWrwwrQnBlzKy/yGQKqeJlQemk2wCHKJPei1RSvdYpH//xXAG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rAwDvm+aJPKYdlkO3Qka89rPJAwHwYDVR0j BBgwFoAU7vI9x7xwxI7F9Gf+RN5bsrPm4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdC QzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJCM0U2RTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUYyM0RDN0JDNzBDNDhFQzVGNDY3RkU0NERFNUJCMkIzRTZF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVC QjJCM0U2RTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMKJwNp9EWhqSxr+16G1biGS9UUcTWmcWTd 3MA3vjbZtV9WPq43D8eq0wWziynSc3Ncfcr08ZS53iWcsqOladQ99KHiXbZgODkc w83qCTl1ZeUfzhBq/uJyS354jclVQ0oVfrmrFWSv+UEAPkg5cB+pf7+d17dwFTE2 TEcrfUdTU4yXdNcSuicDyY3pEajOTAt4j19gueoQzKiQPdggciW5RHNNbEKyWyWW IoQOQi1EkAHbaw0laQLuh5hzduc1B9QV6NHpxWY5YzBd1fpmi4mPE5G202UzMHmc /Bpk/DhqarZtgJr7EM5Mvpp7NFxvVxRraj6mdvu+KftKZbF5H1U= -----END CERTIFICATE-----Generated at Wed Sep 23 21:57:31 2026 by rpki-client