$ rpki-client -vvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft File: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft (raw, json) Hash identifier: e4C5/yBKvL5PT5xHyrjHDJD6n/k2BuggMUsgyuNf5jk= Subject key identifier: 44:46:47:E0:E1:F9:C7:9A:32:CF:78:89:88:58:EC:58:E5:0E:92:1C Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 Certificate issuer: /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Certificate serial: 53453EE10A5C2769954582E46A079A09792E2D40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:31:06 +0000 Manifest this update: Tue 12 May 2026 16:26:06 +0000 Manifest next update: Wed 13 May 2026 17:35:06 +0000 Files and hashes: 1: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl (hash: Sqyu0jRxHcR9Ufbn5YbgiZ1scCVUpZS7aJPBCMoNXaM=) 2: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=) 3: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: mwSnVoqEhlM2lDBuSkv9Lk0pH8PdVGL8EzeI43YHgNM=) 4: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: Kwk5pernXmim9KIGTT8s13y4BcSyxFt8vOqda3e394A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:45:3e:e1:0a:5c:27:69:95:45:82:e4:6a:07:9a:09:79:2e:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Validity Not Before: May 12 16:26:06 2026 GMT Not After : May 13 17:35:06 2026 GMT Subject: CN=444647E0E1F9C79A32CF78898858EC58E50E921C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:fa:c8:e6:b5:43:6e:bd:fd:3e:1c:4c:56: 32:27:3d:40:44:22:ad:ef:98:1f:c8:ff:2d:d2:1a: 2d:fa:5e:7e:b1:42:d6:61:98:e7:5c:91:0c:59:02: d5:bf:52:27:9a:3b:88:51:0b:b1:71:3b:88:0f:38: 75:df:aa:51:e3:e1:2e:21:75:0d:f0:a7:93:f5:05: 0c:44:20:5d:7d:24:1c:a7:4a:bd:0b:07:02:86:31: 76:08:fd:9e:ab:4f:c4:42:8e:90:b3:f4:dc:55:df: 5b:b3:c4:b1:32:cb:0d:8a:50:9d:07:a3:6b:9c:44: c8:a3:03:d4:94:c2:7a:69:e0:2c:b8:83:01:f0:ab: 9d:5c:eb:26:f4:5d:bf:2c:4d:28:7d:5b:08:bd:44: cf:ac:72:5c:2b:d0:0d:29:b3:07:3e:c2:f7:90:6d: c4:60:ca:40:0d:b1:8f:fa:03:13:ab:f5:95:3d:72: 7b:d0:bb:dd:e7:d6:22:de:4e:ea:2a:ce:2e:11:b6: 63:6c:a7:60:dc:b0:67:10:ff:9d:5c:21:ec:c8:10: 2f:38:ff:e5:84:86:c8:1e:4a:ac:e8:46:91:9e:ed: 1d:ae:b0:8b:41:dc:69:a6:70:cd:ac:96:bd:5b:b7: c3:c8:d5:c8:bf:d6:1a:c4:c8:d5:f3:cd:ff:9a:27: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:46:47:E0:E1:F9:C7:9A:32:CF:78:89:88:58:EC:58:E5:0E:92:1C X509v3 Authority Key Identifier: keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:02:a7:99:ed:5a:50:6e:18:86:f4:ac:33:c1:33:9d:7b:4b: c7:eb:ed:41:8b:ee:63:2a:df:3c:8c:1b:86:09:c1:86:60:dc: 78:f8:55:d8:8a:b3:df:a3:4d:38:27:ee:2f:d9:61:93:97:47: b0:4e:4a:59:07:54:c9:e1:70:07:5a:34:ef:22:e7:d3:01:51: aa:a4:1e:f1:3f:52:d2:97:76:52:c4:47:ec:23:4a:6b:8f:c8: eb:72:cc:e2:9b:5f:61:ed:cd:9f:b3:56:69:a8:aa:ab:9d:5f: 53:e5:10:7c:81:9e:cd:f7:f0:24:9f:4e:da:25:67:d9:56:07: 1f:44:db:68:83:52:72:69:d2:da:5a:00:d4:99:88:17:c5:63: cf:3f:42:3d:55:c9:b1:1d:9f:1b:c5:17:a1:21:50:96:54:91: 25:cc:58:e0:82:a2:7b:d9:20:cc:5a:ee:4b:76:ff:70:37:89: fc:9f:8b:d2:0f:fb:94:6d:0f:d9:8a:3c:d2:b4:a9:f1:d3:73: ee:7d:a6:5c:b2:e8:46:1d:2c:02:76:ae:a4:ba:b1:85:51:e4: 6a:85:e2:ae:3f:a3:c4:73:67:58:b6:e9:cf:8e:e9:1a:5d:db: 2f:f8:34:b6:cb:79:5c:61:df:73:ba:1b:80:a7:41:51:51:b5: fa:9f:45:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0U+4QpcJ2mVRYLkageaCXkuLUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4 MjZBREY3MTAeFw0yNjA1MTIxNjI2MDZaFw0yNjA1MTMxNzM1MDZaMDMxMTAvBgNV BAMTKDQ0NDY0N0UwRTFGOUM3OUEzMkNGNzg4OTg4NThFQzU4RTUwRTkyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGfrI5rVDbr39PhxMVjInPUBE Iq3vmB/I/y3SGi36Xn6xQtZhmOdckQxZAtW/UieaO4hRC7FxO4gPOHXfqlHj4S4h dQ3wp5P1BQxEIF19JBynSr0LBwKGMXYI/Z6rT8RCjpCz9NxV31uzxLEyyw2KUJ0H o2ucRMijA9SUwnpp4Cy4gwHwq51c6yb0Xb8sTSh9Wwi9RM+sclwr0A0pswc+wveQ bcRgykANsY/6AxOr9ZU9cnvQu93n1iLeTuoqzi4RtmNsp2DcsGcQ/51cIezIEC84 /+WEhsgeSqzoRpGe7R2usItB3GmmcM2slr1bt8PI1ci/1hrEyNXzzf+aJ8Z7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUREZH4OH5x5oyz3iJiFjsWOUOkhwwHwYDVR0j BBgwFoAUDqGuL8wxlYEISWb85yDguYJq33EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdjOGEwYzMtMzdmNS00NjY3LWE0MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZD QzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4MjZBREY3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUExQUUyRkNDMzE5NTgxMDg0OTY2RkNFNzIwRTBCOTgyNkFE RjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUw Qjk4MjZBREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcCp5ntWlBuGIb0rDPBM517S8fr7UGL7mMq 3zyMG4YJwYZg3Hj4VdiKs9+jTTgn7i/ZYZOXR7BOSlkHVMnhcAdaNO8i59MBUaqk HvE/UtKXdlLER+wjSmuPyOtyzOKbX2HtzZ+zVmmoqqudX1PlEHyBns338CSfTtol Z9lWBx9E22iDUnJp0tpaANSZiBfFY88/Qj1VybEdnxvFF6EhUJZUkSXMWOCConvZ IMxa7kt2/3A3ifyfi9IP+5RtD9mKPNK0qfHTc+59plyy6EYdLAJ2rqS6sYVR5GqF 4q4/o8RzZ1i26c+O6Rpd2y/4NLbLeVxh33O6G4CnQVFRtfqfRX0= -----END CERTIFICATE-----Generated at Wed May 13 00:33:53 2026 by rpki-client