$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft File: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft (raw, json) Hash identifier: ps2XDGjNxVbpVTcIE52IC50moXy0PNhGOFel4/0n29E= Subject key identifier: AD:03:AF:4E:61:7A:9B:82:97:69:3C:8D:D4:3E:2D:C1:CD:EC:1A:72 Authority key identifier: 2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 Certificate issuer: /CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Certificate serial: 416363840D6C572D9201D428EE6122D1E558424C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:55:22 +0000 Manifest this update: Tue 12 May 2026 08:50:22 +0000 Manifest next update: Wed 13 May 2026 09:19:22 +0000 Files and hashes: 1: 2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl (hash: 9zo8EhMQeBv8tE630ggxfmouBvZst4CWDEqzzZzND8A=) 2: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: w0l4Z0QTqPW7n9jh4ktHZnj4TWLQC1w9BHsCnnP0SC0=) 3: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: hXYZBw+zcNWgfpkr4qfi2P6UAXZrhjOtAH+ubipVz38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:63:63:84:0d:6c:57:2d:92:01:d4:28:ee:61:22:d1:e5:58:42:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E5B4D919AE6E098454A21D83BEE489C0A1DF687 Validity Not Before: May 12 08:50:22 2026 GMT Not After : May 13 09:19:22 2026 GMT Subject: CN=AD03AF4E617A9B8297693C8DD43E2DC1CDEC1A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:c4:c1:fd:27:56:c7:9f:a1:69:17:1f:82: 21:45:27:d6:1a:be:8c:b2:0a:86:6d:58:94:28:6b: 85:2e:2e:84:34:76:af:8b:bd:2a:d6:99:3e:b9:dd: 5e:ae:29:8b:2a:83:e6:3a:1f:07:ba:c3:13:56:a9: 58:d4:b2:d2:f7:71:8f:36:0b:8f:ab:4b:db:61:1b: 1f:22:59:71:fd:e6:26:85:cd:ae:25:8d:fd:b2:70: 82:1f:3a:47:07:ad:c8:63:b9:91:12:27:0b:64:fe: 73:f3:f7:eb:00:ab:fe:fe:88:bc:96:ee:45:36:f1: 43:71:dd:b2:f0:99:55:b9:0b:8e:36:18:c2:ab:35: ef:d4:e0:c6:90:a8:7c:13:a0:8a:ce:c9:f4:56:a9: 01:10:24:cd:b9:33:14:1b:e9:ad:47:58:37:50:d9: 5e:b0:64:c5:b8:e3:a0:26:12:56:77:5c:fc:a7:f5: 13:90:a5:22:ca:04:2e:e8:2f:59:50:40:5e:20:70: 9f:d3:96:36:e3:24:45:54:51:c3:7e:2c:54:9c:25: 5a:6c:26:8c:f7:d5:35:0f:f1:ae:46:7a:31:7d:0a: 70:6a:65:b9:3b:88:cf:a1:fc:d1:8b:bf:9d:07:d6: 8e:ea:b0:40:3b:22:54:59:d9:fc:47:f0:79:79:87: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:03:AF:4E:61:7A:9B:82:97:69:3C:8D:D4:3E:2D:C1:CD:EC:1A:72 X509v3 Authority Key Identifier: keyid:2E:5B:4D:91:9A:E6:E0:98:45:4A:21:D8:3B:EE:48:9C:0A:1D:F6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/2E5B4D919AE6E098454A21D83BEE489C0A1DF687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6d:a2:a2:77:00:83:35:12:89:bc:b5:9f:d0:8e:6c:5d:99: 78:47:d3:0b:ef:33:47:9d:fc:29:c1:b0:46:df:2b:ba:8c:e5: ac:cc:4e:99:f9:ce:b0:91:ba:4f:fb:b9:53:dc:93:b5:39:88: 6d:64:13:bd:81:1d:08:fc:6d:cc:a8:cd:21:c7:54:62:a5:98: 20:d7:f5:45:fc:1c:ef:c7:de:0e:3e:91:e3:3b:1b:a6:c1:d4: ba:1f:e3:85:03:04:a0:98:fd:cd:6f:07:10:09:f9:b7:15:07: fd:92:92:8b:7a:c1:ca:9d:88:da:6b:b7:8d:ab:4f:e8:cb:f3: 37:40:38:99:a1:40:68:60:fe:ec:cf:ac:91:f7:8c:bd:b5:1b: 0b:93:98:8f:08:33:99:cd:4c:31:48:19:d7:b8:b9:e7:b6:ae: 89:ba:bd:16:ae:92:68:73:d4:66:44:33:a9:a0:54:4b:18:10: 0f:a6:69:c9:98:f8:50:96:dd:d1:4b:c7:82:2b:99:cf:2f:1b: 13:22:e9:f5:12:c5:b1:de:4a:29:db:84:43:61:44:8c:55:55: 7e:81:20:f3:92:88:ba:4c:38:4f:ee:96:46:69:9c:94:71:8a: 2c:15:dc:cd:82:29:d0:93:f5:f7:7f:45:ac:26:ab:b3:1e:60: f7:c6:ae:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWNjhA1sVy2SAdQo7mEi0eVYQkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMw QTFERjY4NzAeFw0yNjA1MTIwODUwMjJaFw0yNjA1MTMwOTE5MjJaMDMxMTAvBgNV BAMTKEFEMDNBRjRFNjE3QTlCODI5NzY5M0M4REQ0M0UyREMxQ0RFQzFBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnU8TB/SdWx5+haRcfgiFFJ9Ya voyyCoZtWJQoa4UuLoQ0dq+LvSrWmT653V6uKYsqg+Y6Hwe6wxNWqVjUstL3cY82 C4+rS9thGx8iWXH95iaFza4ljf2ycIIfOkcHrchjuZESJwtk/nPz9+sAq/7+iLyW 7kU28UNx3bLwmVW5C442GMKrNe/U4MaQqHwToIrOyfRWqQEQJM25MxQb6a1HWDdQ 2V6wZMW446AmElZ3XPyn9ROQpSLKBC7oL1lQQF4gcJ/TljbjJEVUUcN+LFScJVps Joz31TUP8a5GejF9CnBqZbk7iM+h/NGLv50H1o7qsEA7IlRZ2fxH8Hl5h7VbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrQOvTmF6m4KXaTyN1D4twc3sGnIwHwYDVR0j BBgwFoAULltNkZrm4JhFSiHYO+5InAod9ocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkM2RkNzktODYzNS00ODU3LThhM2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5 QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4OUMwQTFERjY4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTVCNEQ5MTlBRTZFMDk4NDU0QTIxRDgzQkVFNDg5QzBBMURG Njg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvMkU1QjREOTE5QUU2RTA5ODQ1NEEyMUQ4M0JFRTQ4 OUMwQTFERjY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBtoqJ3AIM1Eom8tZ/QjmxdmXhH0wvvM0ed /CnBsEbfK7qM5azMTpn5zrCRuk/7uVPck7U5iG1kE72BHQj8bcyozSHHVGKlmCDX 9UX8HO/H3g4+keM7G6bB1Lof44UDBKCY/c1vBxAJ+bcVB/2Skot6wcqdiNprt42r T+jL8zdAOJmhQGhg/uzPrJH3jL21GwuTmI8IM5nNTDFIGde4uee2rom6vRaukmhz 1GZEM6mgVEsYEA+macmY+FCW3dFLx4Irmc8vGxMi6fUSxbHeSinbhENhRIxVVX6B IPOSiLpMOE/ulkZpnJRxiiwV3M2CKdCT9fd/Rawmq7MeYPfGrvM= -----END CERTIFICATE-----Generated at Wed May 13 02:25:49 2026 by rpki-client