$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft File: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft (raw, json) Hash identifier: eG9zAmB0+hJ4zKzkGYICM3hiV4ozeXZQ/TSL7GQspr0= Subject key identifier: CF:F1:50:9A:DA:EE:EC:8F:1C:FD:9F:E0:95:C7:11:7E:8A:00:AF:9F Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Certificate serial: 5EDA4C6446E2EB841061ADEF659488104A01298A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 08:09:29 +0000 Manifest this update: Fri 24 Jul 2026 08:04:29 +0000 Manifest next update: Sat 25 Jul 2026 08:55:29 +0000 Files and hashes: 1: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=) 2: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=) 3: EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl (hash: QBP1KtWZrwVSEboUH33Yxlnv6tHAldmg0FHNd9E2SCM=) 4: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:da:4c:64:46:e2:eb:84:10:61:ad:ef:65:94:88:10:4a:01:29:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Validity Not Before: Jul 24 08:04:29 2026 GMT Not After : Jul 25 08:55:29 2026 GMT Subject: CN=CFF1509ADAEEEC8F1CFD9FE095C7117E8A00AF9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:52:6a:07:40:a7:a9:4d:c5:4a:fb:41:00: 5e:94:34:87:b4:eb:f0:ce:60:72:80:73:04:87:7d: c0:4a:0a:4c:26:62:13:a3:08:39:56:b4:76:2c:4e: 02:fb:cf:9e:82:59:4a:9b:5b:3a:f5:75:33:e6:3c: 2c:9f:69:7d:f5:bf:27:34:a0:23:a3:04:e6:24:88: 37:61:4b:8e:28:74:48:c7:99:7c:5d:a1:e9:e6:4e: e4:78:67:20:c1:4c:5d:b8:50:ec:d7:73:d1:df:80: a6:7a:d2:60:bd:2f:a4:7a:b6:02:3b:98:76:99:85: f5:61:34:00:52:27:c5:09:95:ca:4a:59:4b:d6:cb: ff:7c:e9:00:b6:79:98:a9:5d:ad:2a:c4:81:b3:45: 45:5d:ca:3e:60:f9:5e:ac:db:6e:54:df:0f:11:1b: eb:92:21:3f:d7:ab:28:7c:f8:f7:a1:51:08:63:3d: c5:b5:b7:7d:ad:66:a3:c8:1c:67:74:9b:6d:7b:f5: ac:b1:13:0d:bd:7e:54:72:34:bf:88:36:36:f2:03: 2d:d9:f1:e1:d7:f3:7b:e2:dc:24:d4:98:2e:d8:82: 1f:39:c6:8a:02:7b:33:62:9f:99:b4:3d:9a:52:29: 20:e0:78:da:0d:38:77:9e:f6:89:f9:fd:ac:8a:7f: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:50:9A:DA:EE:EC:8F:1C:FD:9F:E0:95:C7:11:7E:8A:00:AF:9F X509v3 Authority Key Identifier: keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6d:7d:80:b8:c1:68:25:72:5f:4e:cc:17:16:f5:85:4f:1d: a3:c2:28:18:9a:ee:9f:81:ed:f2:a5:57:61:ee:03:93:94:b1: c2:d3:35:ee:18:a2:14:a4:11:7d:a6:bd:77:e5:72:7a:f4:58: fe:07:83:cd:3e:00:ce:f0:fa:68:d5:b2:7b:6b:42:df:ed:61: 60:d7:0e:d9:43:7a:df:41:48:cc:4d:70:1a:ac:b7:03:df:d8: a5:e5:cd:7f:db:1f:f9:16:7f:78:3d:b4:06:99:7f:8b:42:d5: 2b:6a:30:9c:c5:7e:9a:07:ee:8d:cc:58:83:4f:eb:7b:db:94: d8:ca:d2:7c:7e:24:16:7e:d9:1e:88:60:04:20:29:30:5e:e1: 67:ec:f3:40:ef:9a:77:3e:5d:d4:a4:62:04:b1:21:6d:1d:a8: 47:33:c5:d8:75:a0:2d:84:bc:8c:6f:fd:8e:04:b1:fd:f9:6c: 71:70:f6:19:69:2b:da:e5:eb:95:f6:24:50:c1:01:3c:14:9e: 30:e1:dc:c3:2e:2b:2e:8e:61:15:56:50:df:c7:61:a3:a4:9c: 2d:04:7a:1f:d0:1e:aa:86:3e:c8:8d:96:40:a5:26:fa:fb:aa: dd:86:ac:c1:d4:13:b1:d4:1a:b4:e7:bc:d3:25:ff:7a:65:2a: 5a:30:38:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtpMZEbi64QQYa3vZZSIEEoBKYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx QTZCOEQwRTAeFw0yNjA3MjQwODA0MjlaFw0yNjA3MjUwODU1MjlaMDMxMTAvBgNV BAMTKENGRjE1MDlBREFFRUVDOEYxQ0ZEOUZFMDk1QzcxMTdFOEEwMEFGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2FJqB0CnqU3FSvtBAF6UNIe0 6/DOYHKAcwSHfcBKCkwmYhOjCDlWtHYsTgL7z56CWUqbWzr1dTPmPCyfaX31vyc0 oCOjBOYkiDdhS44odEjHmXxdoenmTuR4ZyDBTF24UOzXc9HfgKZ60mC9L6R6tgI7 mHaZhfVhNABSJ8UJlcpKWUvWy/986QC2eZipXa0qxIGzRUVdyj5g+V6s225U3w8R G+uSIT/Xqyh8+PehUQhjPcW1t32tZqPIHGd0m2179ayxEw29flRyNL+INjbyAy3Z 8eHX83vi3CTUmC7Ygh85xooCezNin5m0PZpSKSDgeNoNOHee9on5/ayKf4odAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/FQmtru7I8c/Z/glccRfooAr58wHwYDVR0j BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0 RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4 RDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNG NkUxQTZCOEQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1tfYC4wWglcl9OzBcW9YVPHaPCKBia7p+B 7fKlV2HuA5OUscLTNe4YohSkEX2mvXflcnr0WP4Hg80+AM7w+mjVsntrQt/tYWDX DtlDet9BSMxNcBqstwPf2KXlzX/bH/kWf3g9tAaZf4tC1StqMJzFfpoH7o3MWINP 63vblNjK0nx+JBZ+2R6IYAQgKTBe4Wfs80Dvmnc+XdSkYgSxIW0dqEczxdh1oC2E vIxv/Y4Esf35bHFw9hlpK9rl65X2JFDBATwUnjDh3MMuKy6OYRVWUN/HYaOknC0E eh/QHqqGPsiNlkClJvr7qt2GrMHUE7HUGrTnvNMl/3plKlowOHs= -----END CERTIFICATE-----Generated at Fri Jul 24 15:06:51 2026 by rpki-client