$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft File: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft (raw, json) Hash identifier: O29edb+A/tA+92GtBkoyIMV1yP+PuleXq6VgmtA3KBk= Subject key identifier: D5:FA:41:78:2D:E0:D1:D9:4E:27:D5:57:A7:9C:26:78:D7:6D:9B:69 Authority key identifier: EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 Certificate issuer: /CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Certificate serial: 21A4314F39B3829BA6062616D71E341981125BCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:33:34 +0000 Manifest this update: Tue 12 May 2026 13:28:34 +0000 Manifest next update: Wed 13 May 2026 15:40:34 +0000 Files and hashes: 1: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: zQyUZlOFUHDGNe+npgwTsdpaoQy1XyYjr7ZYgl99pvg=) 2: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: GdDE8SC5CnBeQmp3oWwqYVk6uwDRjhVlj4+oTAdzWC4=) 3: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl (hash: 5p7/4Ddo+ly/3fsIXGYbdhTGXjPlffH2zQH1w9LhoN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a4:31:4f:39:b3:82:9b:a6:06:26:16:d7:1e:34:19:81:12:5b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Validity Not Before: May 12 13:28:34 2026 GMT Not After : May 13 15:40:34 2026 GMT Subject: CN=D5FA41782DE0D1D94E27D557A79C2678D76D9B69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:32:87:88:94:1e:cd:97:0e:bd:ac:df:2c: cc:f5:ea:2b:5c:9b:9b:59:f1:5c:5c:19:c2:7c:d6: a2:b8:cf:78:c5:18:77:df:71:71:2b:95:4a:e0:5c: e5:3f:d2:f3:df:d1:b7:0a:42:f9:08:96:35:5f:aa: 13:74:db:d4:2a:7b:4c:34:8d:c4:7f:ff:91:94:eb: ad:0a:4b:b2:bb:1f:e8:62:69:cc:95:ee:aa:d6:20: 5d:4f:68:50:bd:45:e3:00:88:25:80:23:7e:d3:38: 00:3f:61:0b:fa:12:d1:c5:a2:c4:54:1e:d0:6a:56: b0:c3:81:20:74:a6:00:20:71:37:b1:96:8c:0f:40: b5:21:57:49:73:84:4c:b0:2e:ac:96:a5:70:bf:c1: db:95:a4:24:c0:43:84:20:b1:1d:50:54:73:ef:83: 4e:6f:1a:ef:25:28:31:45:4d:97:26:a8:ed:bf:b9: 31:95:c4:27:3d:65:eb:fc:dd:8d:13:a8:68:cd:83: 03:c7:c9:3f:da:43:be:0f:bf:0a:7e:28:35:d3:85: 26:6f:5a:e3:0b:ee:6c:98:7f:89:2a:f4:cc:75:c4: c0:6b:da:5f:fe:47:50:9c:73:9b:74:dd:62:17:df: 41:c8:4a:1f:b2:2b:a8:18:04:0c:59:02:6f:bc:b0: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FA:41:78:2D:E0:D1:D9:4E:27:D5:57:A7:9C:26:78:D7:6D:9B:69 X509v3 Authority Key Identifier: keyid:EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:18:20:69:9b:ba:3a:3a:b2:4b:52:b4:df:48:7b:1e:7d:6d: 30:e2:f0:b1:8c:c7:2c:98:0c:30:bc:47:b2:0c:10:7c:32:8f: 3f:5e:c2:e7:6c:dd:23:41:39:b7:2d:2f:2b:6d:d2:ed:61:89: 39:d9:44:48:fb:ca:6f:a6:24:ed:b3:38:23:92:88:09:54:9b: ac:f0:03:aa:88:1b:5c:80:82:ea:76:8f:a4:91:cd:b5:da:15: 7b:db:57:46:e7:6e:8a:8a:ad:ed:2b:c3:8b:69:ab:6f:9b:cb: 2a:ee:2e:30:31:ce:80:80:6c:de:bc:8b:dd:81:99:c2:8b:85: 4c:ea:91:13:99:22:78:02:c3:a2:ff:77:2a:de:5f:7f:56:be: 85:c4:13:69:09:ba:ba:b5:96:5f:7d:8c:5f:a1:4f:b6:b9:23: 2f:0b:12:f5:49:60:8b:de:e1:85:a0:f3:16:88:b4:fb:53:e4: f1:3e:97:2e:91:cd:a5:85:d2:41:e6:a6:69:69:c6:03:0c:24: 98:01:6c:39:a3:94:0e:27:24:db:21:f6:48:3b:29:e4:05:10: ec:9f:0a:3d:52:58:0b:e8:0c:43:73:17:45:f3:8a:0d:92:5e: 73:7c:1d:96:ff:2f:c8:4d:64:7c:31:4b:e9:36:67:f7:fb:e3: 92:8f:7f:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaQxTzmzgpumBiYW1x40GYESW88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2 MjhDNkE1NDAeFw0yNjA1MTIxMzI4MzRaFw0yNjA1MTMxNTQwMzRaMDMxMTAvBgNV BAMTKEQ1RkE0MTc4MkRFMEQxRDk0RTI3RDU1N0E3OUMyNjc4RDc2RDlCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOTKHiJQezZcOvazfLMz16itc m5tZ8VxcGcJ81qK4z3jFGHffcXErlUrgXOU/0vPf0bcKQvkIljVfqhN029Qqe0w0 jcR//5GU660KS7K7H+hiacyV7qrWIF1PaFC9ReMAiCWAI37TOAA/YQv6EtHFosRU HtBqVrDDgSB0pgAgcTexlowPQLUhV0lzhEywLqyWpXC/wduVpCTAQ4QgsR1QVHPv g05vGu8lKDFFTZcmqO2/uTGVxCc9Zev83Y0TqGjNgwPHyT/aQ74Pvwp+KDXThSZv WuML7myYf4kq9Mx1xMBr2l/+R1Ccc5t03WIX30HISh+yK6gYBAxZAm+8sEijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fpBeC3g0dlOJ9VXp5wmeNdtm2kwHwYDVR0j BBgwFoAU7ovrqL5NRPQ+z9n/V4noeGKMalQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkODUwYTgtYWJiOS00NDgyLWE1YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThC RTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2MjhDNkE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRThCRUJBOEJFNEQ0NEY0M0VDRkQ5RkY1Nzg5RTg3ODYyOEM2 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4 Nzg2MjhDNkE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANMYIGmbujo6sktStN9Iex59bTDi8LGMxyyY DDC8R7IMEHwyjz9ewuds3SNBObctLytt0u1hiTnZREj7ym+mJO2zOCOSiAlUm6zw A6qIG1yAgup2j6SRzbXaFXvbV0bnboqKre0rw4tpq2+byyruLjAxzoCAbN68i92B mcKLhUzqkROZIngCw6L/dyreX39WvoXEE2kJurq1ll99jF+hT7a5Iy8LEvVJYIve 4YWg8xaItPtT5PE+ly6RzaWF0kHmpmlpxgMMJJgBbDmjlA4nJNsh9kg7KeQFEOyf Cj1SWAvoDENzF0Xzig2SXnN8HZb/L8hNZHwxS+k2Z/f745KPf0g= -----END CERTIFICATE-----Generated at Wed May 13 01:40:50 2026 by rpki-client