$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft File: EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft (raw, json) Hash identifier: +EnyAAhw2RjRY98BNqKLxY7vaKs0PhL/FVKn9w70v0o= Subject key identifier: 24:DB:CF:CA:B1:82:46:D9:19:AD:0F:E2:E0:08:1C:5F:CE:9B:BD:5D Authority key identifier: EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC Certificate issuer: /CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC Certificate serial: 746DA857BDF57CE1210076427DB8097F2097E231 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:43:09 +0000 Manifest this update: Wed 23 Sep 2026 13:38:09 +0000 Manifest next update: Thu 24 Sep 2026 16:36:09 +0000 Files and hashes: 1: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: M8k9bViShtt4AmWU/AyDsamC5/RbL8EE0iMthIH76R4=) 2: EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl (hash: ppwWf+a+bnlNvKMFl8UDwXs50cYTFM0NbsNiCOkjCLk=) 3: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: oAmiFNqM3oX4aTDAmFzq05nIHAcLXlnLDdNWSaF00HQ=) 4: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: 1kRWH/01ZY8vcD8ZJ7NSjogRu3r8TcailYL1T9WDQmE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6d:a8:57:bd:f5:7c:e1:21:00:76:42:7d:b8:09:7f:20:97:e2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEEEDDCDA44B0713B397D27040721EEC4848E5DC Validity Not Before: Sep 23 13:38:09 2026 GMT Not After : Sep 24 16:36:09 2026 GMT Subject: CN=24DBCFCAB18246D919AD0FE2E0081C5FCE9BBD5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:de:7b:9b:b7:c4:42:99:32:9c:73:5c:72: a3:c7:ae:9e:ce:f4:a7:71:26:68:de:4e:da:ba:c0: c0:46:15:e8:61:e3:25:1a:55:32:ff:87:c9:ec:ea: a2:f3:3e:d6:6e:21:2f:41:95:7a:e1:c0:ef:0f:6f: 27:36:55:92:34:3e:b1:2f:a1:bc:fb:b0:09:c6:64: 39:a5:a8:8a:e2:d7:66:6b:8b:d2:f6:22:47:bd:fa: 8e:07:e6:8a:52:6c:0e:9d:b6:d7:3a:44:41:3c:ff: 79:07:f7:2f:98:33:60:b5:6c:b5:00:27:f3:e5:cc: 73:80:75:23:65:67:9f:48:13:19:a5:f4:b5:11:0d: 4f:42:d1:b2:c2:f2:3e:70:b2:49:a4:48:09:59:bb: b0:9c:8c:83:3b:6a:f2:40:9f:b8:b9:29:b1:0e:f1: 21:2e:87:41:46:4e:04:ff:22:4b:9c:0b:7f:29:3b: 29:94:75:10:3c:63:2b:3b:b9:26:68:d0:52:73:fd: a8:ca:6a:af:76:1f:7f:11:4c:4c:87:4a:57:33:8a: 87:03:f0:08:64:ff:fe:71:26:37:3a:3a:39:9b:2c: 3f:56:41:14:bd:45:96:8e:2f:68:03:88:14:44:95: 29:60:13:3a:31:cf:bb:5d:68:63:c4:22:3f:7a:5a: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DB:CF:CA:B1:82:46:D9:19:AD:0F:E2:E0:08:1C:5F:CE:9B:BD:5D X509v3 Authority Key Identifier: keyid:EE:EE:DD:CD:A4:4B:07:13:B3:97:D2:70:40:72:1E:EC:48:48:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/EEEEDDCDA44B0713B397D27040721EEC4848E5DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:86:6d:b6:06:a0:0d:96:79:e2:06:6a:d5:ff:c9:a9:6e:f9: 19:94:1a:30:59:ca:f1:95:bb:b0:a1:dc:19:e3:74:7d:75:2b: 1d:83:5c:09:35:4c:65:4d:a4:2e:4b:4d:9b:26:a7:04:fa:87: ae:a6:e5:a7:56:85:35:00:7d:ec:f3:1a:45:07:f5:58:fa:84: 79:44:27:b8:e7:e6:b8:10:96:3b:9c:ea:60:7b:08:aa:dd:d8: 88:43:ac:cf:99:77:3f:26:ce:9a:c9:6f:1d:70:db:3b:2c:19: f3:22:b8:14:d4:e3:f0:fe:85:33:f6:6f:1d:61:2d:ba:63:fe: e6:b6:ac:a4:5c:fd:50:2d:24:e1:74:bc:e6:4e:19:e9:90:6a: b7:18:b3:f5:7d:6b:fc:ee:d2:11:c8:75:14:f4:fa:0b:41:af: 75:3a:15:6c:17:c4:12:7f:99:54:6c:8b:14:ec:3d:9c:ae:e1: 7d:9f:1d:74:08:40:f1:03:06:97:03:b7:97:9a:c1:c1:99:cd: d5:a8:46:69:25:ae:10:c5:72:c3:2e:ec:89:50:43:0d:bc:fc: 04:9c:03:d3:f0:d7:b5:9c:34:43:24:93:51:b2:35:ba:c7:d0: bc:12:0d:2a:4b:9e:df:73:ea:f5:94:6f:c1:3b:16:6a:e5:39: 04:7f:20:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdG2oV731fOEhAHZCfbgJfyCX4jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVFRUREQ0RBNDRCMDcxM0IzOTdEMjcwNDA3MjFFRUM0 ODQ4RTVEQzAeFw0yNjA5MjMxMzM4MDlaFw0yNjA5MjQxNjM2MDlaMDMxMTAvBgNV BAMTKDI0REJDRkNBQjE4MjQ2RDkxOUFEMEZFMkUwMDgxQzVGQ0U5QkJENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pd57m7fEQpkynHNccqPHrp7O 9KdxJmjeTtq6wMBGFehh4yUaVTL/h8ns6qLzPtZuIS9BlXrhwO8Pbyc2VZI0PrEv obz7sAnGZDmlqIri12Zri9L2Ike9+o4H5opSbA6dttc6REE8/3kH9y+YM2C1bLUA J/PlzHOAdSNlZ59IExml9LURDU9C0bLC8j5wskmkSAlZu7CcjIM7avJAn7i5KbEO 8SEuh0FGTgT/IkucC38pOymUdRA8Yys7uSZo0FJz/ajKaq92H38RTEyHSlcziocD 8Ahk//5xJjc6OjmbLD9WQRS9RZaOL2gDiBRElSlgEzoxz7tdaGPEIj96Wtw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNvPyrGCRtkZrQ/i4AgcX86bvV0wHwYDVR0j BBgwFoAU7u7dzaRLBxOzl9JwQHIe7EhI5dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM2ZjgzMmItNWE5ZS00Y2FhLWJkZDQtMjYzNDcyN2E5ZWQ0LzAvRUVFRUREQ0RB NDRCMDcxM0IzOTdEMjcwNDA3MjFFRUM0ODQ4RTVEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRUVFRERDREE0NEIwNzEzQjM5N0QyNzA0MDcyMUVFQzQ4NDhF NURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvRUVFRUREQ0RBNDRCMDcxM0IzOTdEMjcwNDA3MjFF RUM0ODQ4RTVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKGbbYGoA2WeeIGatX/yalu+RmUGjBZyvGV u7Ch3BnjdH11Kx2DXAk1TGVNpC5LTZsmpwT6h66m5adWhTUAfezzGkUH9Vj6hHlE J7jn5rgQljuc6mB7CKrd2IhDrM+Zdz8mzprJbx1w2zssGfMiuBTU4/D+hTP2bx1h Lbpj/ua2rKRc/VAtJOF0vOZOGemQarcYs/V9a/zu0hHIdRT0+gtBr3U6FWwXxBJ/ mVRsixTsPZyu4X2fHXQIQPEDBpcDt5eawcGZzdWoRmklrhDFcsMu7IlQQw28/ASc A9Pw17WcNEMkk1GyNbrH0LwSDSpLnt9z6vWUb8E7FmrlOQR/IDI= -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:28 2026 by rpki-client