$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft File: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft (raw, json) Hash identifier: 968KsKleSHJ2a36eR/cwjJHbLXTgctdcc3iBjoBS46M= Subject key identifier: A1:DD:AF:9E:32:DC:1D:CD:6A:57:9D:07:DB:BA:C0:7C:50:90:FB:EE Authority key identifier: EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB Certificate issuer: /CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Certificate serial: 39FB608A35833202BAFF4C335171733676C0D0B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:29 +0000 Manifest this update: Tue 12 May 2026 20:27:29 +0000 Manifest next update: Wed 13 May 2026 21:53:29 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: 4kBrY3m/YUmUepWlqfPB38SwXp7zMRirxL+70ddYk80=) 2: EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl (hash: +wYhYa1Wk7GQ9tj3inRgIMJpXbHrNqRUptrPkrt/uqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:fb:60:8a:35:83:32:02:ba:ff:4c:33:51:71:73:36:76:c0:d0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB Validity Not Before: May 12 20:27:29 2026 GMT Not After : May 13 21:53:29 2026 GMT Subject: CN=A1DDAF9E32DC1DCD6A579D07DBBAC07C5090FBEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:e5:d4:d2:1e:5a:78:4e:79:2c:bd:24:17: fc:f7:13:69:08:d8:16:b7:1a:13:91:1c:2f:39:3a: 29:e4:8e:03:1a:29:eb:51:f4:bd:24:80:7a:e1:c1: 41:a4:91:eb:1f:5c:a2:8f:8d:b1:b0:26:f5:0a:39: e9:ad:53:7f:6c:35:60:0d:1b:c7:e5:88:71:06:31: ba:58:c7:c6:27:ed:31:6a:3d:15:6d:3b:e0:8f:ac: 68:b7:68:4d:e0:a0:c0:d8:bc:db:fe:c5:04:53:2f: 43:20:c7:55:55:82:6c:f1:2b:c1:fb:e1:3e:10:2a: 36:40:4a:bc:79:1c:e8:ed:b1:59:fe:8a:d2:23:22: 05:79:47:2a:07:a4:d6:b1:40:1f:ee:77:e9:f6:52: c9:51:8d:e4:88:12:9e:e8:0d:15:f7:75:ae:a9:85: 2b:70:f3:d8:e2:28:d6:c8:6a:5b:f8:96:98:0c:ff: 11:f7:e6:32:de:22:d6:e4:bc:47:48:3c:ef:29:57: 09:0c:16:79:8d:b4:f6:ec:2b:95:80:86:34:27:b2: df:c6:c3:36:9d:19:b4:2b:f1:6d:ad:e4:d7:b2:4d: 10:79:e1:6b:25:19:e5:9c:6a:e1:64:cd:00:bc:2d: 47:90:b5:38:96:a6:d1:ae:c6:a1:0e:82:4c:11:22: 7f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DD:AF:9E:32:DC:1D:CD:6A:57:9D:07:DB:BA:C0:7C:50:90:FB:EE X509v3 Authority Key Identifier: keyid:EE:F2:3D:C7:BC:70:C4:8E:C5:F4:67:FE:44:DE:5B:B2:B3:E6:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/EEF23DC7BC70C48EC5F467FE44DE5BB2B3E6E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ef:86:c4:9c:66:fe:23:d6:7e:b3:09:0c:a3:94:93:cb:8f: 27:bb:68:1d:8d:38:21:d3:c2:99:f1:73:81:4b:89:3c:64:6c: 64:aa:88:f3:cc:88:1d:55:5f:ec:11:df:4f:9c:76:ca:96:72: 88:44:75:31:bc:e0:dc:b9:23:07:05:2e:3e:6e:1a:a4:d7:f1: 0e:8e:c7:28:0a:64:ea:a3:b9:4f:9d:f7:02:07:37:48:52:d4: 58:8b:8a:96:b8:b0:22:36:c8:96:bd:fe:80:cc:1c:a2:dc:90: 75:4a:ae:e2:11:73:b2:e4:ef:94:10:f6:d8:ce:91:27:18:84: ef:ee:a3:51:00:5c:a3:a3:d8:bf:57:c5:4d:cb:e5:b0:af:fc: ec:f9:fa:f5:f8:2c:f0:d3:e8:b8:4e:23:d2:3c:ca:8c:01:b6: fb:30:a0:0c:f9:ad:12:32:1c:86:36:9f:a1:d9:d5:af:8a:70: 8c:38:d7:b2:d2:93:a0:1c:44:30:99:8a:37:40:02:d5:c1:ac: 4c:8c:42:e3:25:73:16:38:70:08:76:2a:f1:dc:96:65:45:2b: 50:e7:fc:9b:7e:ea:15:ad:66:1e:ae:c4:88:ec:4d:ff:ca:08: 06:2c:3e:63:f9:0a:3b:c4:e2:51:2b:75:6f:6e:a6:a1:d7:4e: cc:ef:99:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOftgijWDMgK6/0wzUXFzNnbA0LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJC M0U2RTFFQjAeFw0yNjA1MTIyMDI3MjlaFw0yNjA1MTMyMTUzMjlaMDMxMTAvBgNV BAMTKEExRERBRjlFMzJEQzFEQ0Q2QTU3OUQwN0RCQkFDMDdDNTA5MEZCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6weXU0h5aeE55LL0kF/z3E2kI 2Ba3GhORHC85OinkjgMaKetR9L0kgHrhwUGkkesfXKKPjbGwJvUKOemtU39sNWAN G8fliHEGMbpYx8Yn7TFqPRVtO+CPrGi3aE3goMDYvNv+xQRTL0Mgx1VVgmzxK8H7 4T4QKjZASrx5HOjtsVn+itIjIgV5RyoHpNaxQB/ud+n2UslRjeSIEp7oDRX3da6p hStw89jiKNbIalv4lpgM/xH35jLeItbkvEdIPO8pVwkMFnmNtPbsK5WAhjQnst/G wzadGbQr8W2t5NeyTRB54WslGeWcauFkzQC8LUeQtTiWptGuxqEOgkwRIn8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUod2vnjLcHc1qV50H27rAfFCQ++4wHwYDVR0j BBgwFoAU7vI9x7xwxI7F9Gf+RN5bsrPm4eswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdC QzcwQzQ4RUM1RjQ2N0ZFNDRERTVCQjJCM0U2RTFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUYyM0RDN0JDNzBDNDhFQzVGNDY3RkU0NERFNUJCMkIzRTZF MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvRUVGMjNEQzdCQzcwQzQ4RUM1RjQ2N0ZFNDRERTVC QjJCM0U2RTFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/vhsScZv4j1n6zCQyjlJPLjye7aB2NOCHT wpnxc4FLiTxkbGSqiPPMiB1VX+wR30+cdsqWcohEdTG84Ny5IwcFLj5uGqTX8Q6O xygKZOqjuU+d9wIHN0hS1FiLipa4sCI2yJa9/oDMHKLckHVKruIRc7Lk75QQ9tjO kScYhO/uo1EAXKOj2L9XxU3L5bCv/Oz5+vX4LPDT6LhOI9I8yowBtvswoAz5rRIy HIY2n6HZ1a+KcIw417LSk6AcRDCZijdAAtXBrEyMQuMlcxY4cAh2KvHclmVFK1Dn /Jt+6hWtZh6uxIjsTf/KCAYsPmP5CjvE4lErdW9upqHXTszvmRk= -----END CERTIFICATE-----Generated at Wed May 13 01:45:15 2026 by rpki-client