$ rpki-client -vvf rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft File: E3D6C125B35E67510271310D928E4578404A3A46.mft (raw, json) Hash identifier: o2OhcboJG5TxNG/N3JHI9mltBwMsn9USBWaxXGDTRp0= Subject key identifier: EE:16:87:31:E3:D2:95:82:AB:29:F2:2E:88:1D:40:B8:D5:D4:30:EA Authority key identifier: E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 Certificate issuer: /CN=E3D6C125B35E67510271310D928E4578404A3A46 Certificate serial: 60608ACE68E6A4FFF6A79188021630E4EAF4D94D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:24:13 +0000 Manifest this update: Tue 12 May 2026 14:19:13 +0000 Manifest next update: Wed 13 May 2026 18:06:13 +0000 Files and hashes: 1: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 8qQMC3EFOK3yCgkVj+C7FEr6qF+CfYoBtbfTyKhcjE4=) 2: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: T5uRj9PC/T10VKks3wi10c2uBNec4FkHRnP0vvfYiOk=) 3: E3D6C125B35E67510271310D928E4578404A3A46.crl (hash: seMr8jf7Fx72JdYMBQ6yU7Bh/+KQhUMsukk1r6r4E9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:60:8a:ce:68:e6:a4:ff:f6:a7:91:88:02:16:30:e4:ea:f4:d9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3D6C125B35E67510271310D928E4578404A3A46 Validity Not Before: May 12 14:19:13 2026 GMT Not After : May 13 18:06:13 2026 GMT Subject: CN=EE168731E3D29582AB29F22E881D40B8D5D430EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bf:70:31:c4:72:55:20:d1:bd:10:02:26:8f: ca:88:48:8e:57:59:6a:94:e2:b6:70:a8:b0:07:df: 5c:99:f4:86:13:c5:81:56:81:3c:1a:8f:a5:fd:a1: 3c:61:0d:57:b0:eb:bc:a6:da:e4:17:a3:76:3b:c9: dc:10:c9:32:37:59:08:4e:36:d6:3c:8f:d3:60:fe: 7d:3c:5e:0f:a3:b7:bd:86:86:c7:02:f5:fc:69:04: a8:c8:ec:8a:b2:30:40:e6:7f:7b:a0:f9:d9:4f:53: 6c:00:dc:4f:a4:58:9b:ae:81:78:09:a2:56:58:86: 81:74:42:7c:a2:dd:8e:b2:e3:72:65:8a:75:95:0e: 8c:d4:9c:9a:c3:91:b9:b2:83:fb:d1:ea:a9:06:4d: 26:8c:f6:29:26:d2:75:7d:ad:8d:11:e1:fe:1a:5a: cb:2c:77:1e:93:5d:82:0e:d7:38:72:7c:1a:e6:2d: 93:3e:7d:f3:3e:7b:aa:6d:54:73:83:c7:bc:89:a3: e2:48:8d:c4:fe:eb:d3:ba:f6:5c:90:e9:74:a9:93: 2e:9c:31:24:6a:fc:38:58:3b:37:d1:eb:01:6f:ad: 85:f3:96:09:8c:6c:1a:c2:ee:56:1b:42:dd:b8:fd: fc:75:fd:71:b2:38:3c:0d:76:68:0d:ca:48:24:96: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:16:87:31:E3:D2:95:82:AB:29:F2:2E:88:1D:40:B8:D5:D4:30:EA X509v3 Authority Key Identifier: keyid:E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3c:cc:2e:3b:04:eb:1d:3a:8a:04:dc:d4:29:73:54:5d:87: 1d:1b:7d:5b:1a:fb:a7:31:fc:bc:c9:f5:b4:ec:03:3e:50:a4: 9d:cf:bf:e8:68:1b:54:d2:26:21:7f:46:9b:5e:b2:d5:d0:5b: 5b:48:a7:50:4b:d9:52:55:09:1c:2d:f3:45:83:9e:42:73:a1: 89:d0:13:a5:a4:b8:f0:dd:9f:01:50:1a:7a:68:03:8c:79:65: dc:5c:50:c4:9d:e1:b5:31:62:00:02:40:aa:d6:e0:7f:60:74: fb:da:c2:f8:64:d9:1d:ef:4e:28:30:4e:a7:c8:6b:a3:b8:a9: fe:7e:87:ec:bf:02:65:c7:1a:fe:b5:cf:d2:3d:dd:62:2a:18: 9d:da:cc:26:43:08:4e:78:c2:44:90:62:01:a3:d9:94:44:bf: d8:53:3e:05:76:a4:95:a0:f7:34:f6:33:b0:d5:6f:4f:0a:92: 2d:5f:de:4f:3a:63:12:42:7a:24:d6:87:45:85:d4:13:b3:bb: 0d:39:0e:ac:ba:50:12:08:be:0d:84:2e:31:9a:a2:5d:95:64: 5c:bb:14:5c:5e:d1:56:e5:ea:7c:51:3a:48:21:b0:65:00:47: 8c:3b:47:8b:ff:5a:45:b6:c2:f8:8a:f2:9f:b0:ad:4f:99:7c: ac:2e:11:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGCKzmjmpP/2p5GIAhYw5Or02U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0 MDRBM0E0NjAeFw0yNjA1MTIxNDE5MTNaFw0yNjA1MTMxODA2MTNaMDMxMTAvBgNV BAMTKEVFMTY4NzMxRTNEMjk1ODJBQjI5RjIyRTg4MUQ0MEI4RDVENDMwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhv3AxxHJVING9EAImj8qISI5X WWqU4rZwqLAH31yZ9IYTxYFWgTwaj6X9oTxhDVew67ym2uQXo3Y7ydwQyTI3WQhO NtY8j9Ng/n08Xg+jt72GhscC9fxpBKjI7IqyMEDmf3ug+dlPU2wA3E+kWJuugXgJ olZYhoF0Qnyi3Y6y43JlinWVDozUnJrDkbmyg/vR6qkGTSaM9ikm0nV9rY0R4f4a Wsssdx6TXYIO1zhyfBrmLZM+ffM+e6ptVHODx7yJo+JIjcT+69O69lyQ6XSpky6c MSRq/DhYOzfR6wFvrYXzlgmMbBrC7lYbQt24/fx1/XGyODwNdmgNykgklhFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7haHMePSlYKrKfIuiB1AuNXUMOowHwYDVR0j BBgwFoAU49bBJbNeZ1ECcTENko5FeEBKOkYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGI5ZTZkYTQtZGM0Ni00NzBmLWIwZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVC MzVFNjc1MTAyNzEzMTBEOTI4RTQ1Nzg0MDRBM0E0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FM0Q2QzEyNUIzNUU2NzUxMDI3MTMxMEQ5MjhFNDU3ODQwNEEz QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvRTNENkMxMjVCMzVFNjc1MTAyNzEzMTBEOTI4RTQ1 Nzg0MDRBM0E0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGw8zC47BOsdOooE3NQpc1Rdhx0bfVsa+6cx /LzJ9bTsAz5QpJ3Pv+hoG1TSJiF/RptestXQW1tIp1BL2VJVCRwt80WDnkJzoYnQ E6WkuPDdnwFQGnpoA4x5ZdxcUMSd4bUxYgACQKrW4H9gdPvawvhk2R3vTigwTqfI a6O4qf5+h+y/AmXHGv61z9I93WIqGJ3azCZDCE54wkSQYgGj2ZREv9hTPgV2pJWg 9zT2M7DVb08Kki1f3k86YxJCeiTWh0WF1BOzuw05Dqy6UBIIvg2ELjGaol2VZFy7 FFxe0Vbl6nxROkghsGUAR4w7R4v/WkW2wviK8p+wrU+ZfKwuEdE= -----END CERTIFICATE-----Generated at Wed May 13 05:25:17 2026 by rpki-client