$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft File: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft (raw, json) Hash identifier: n2piPV4LSvfr6ML8FhC6DbFwVu2DSzQA5hhYvxCzZNo= Subject key identifier: 47:D3:29:A0:9D:92:4A:A0:68:F4:1C:8A:7E:74:A1:DA:1E:1D:BC:2E Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 Certificate issuer: /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Certificate serial: 429704C5541D67900ED89BFCCCE9AEDDA32FE1C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:53 +0000 Manifest this update: Tue 12 May 2026 19:35:53 +0000 Manifest next update: Wed 13 May 2026 21:41:53 +0000 Files and hashes: 1: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: Nq+2Vf2Sjui286xvlwdV6qhYVII60AjIdtuhfdXAxbY=) 2: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl (hash: rMHIB8hWhLuuRyv9KhcLvNK73xbU6exQ32sYUbAOaqo=) 3: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: HEWIf8VBw+80Q4rp+6Ysujhm51rVLU6tXVKj84ErweQ=) 4: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: 3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=) 5: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: eU4i0Mhd/q+mYMVjCXIfd0DHyb4s/+BNKr0BLfdT+jA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:97:04:c5:54:1d:67:90:0e:d8:9b:fc:cc:e9:ae:dd:a3:2f:e1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Validity Not Before: May 12 19:35:53 2026 GMT Not After : May 13 21:41:53 2026 GMT Subject: CN=47D329A09D924AA068F41C8A7E74A1DA1E1DBC2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:d3:25:28:08:f0:fd:b0:6f:39:98:ef:b3: bf:a7:3f:49:89:6e:fd:ab:4a:16:44:f1:27:33:19: 72:1c:3b:a6:60:6d:95:fc:92:f3:e5:df:28:d7:3b: c2:e5:c2:d9:fd:fe:01:74:80:35:6b:ea:a8:3d:42: 32:68:36:c4:a4:49:98:0c:ab:14:2f:74:a2:b9:2f: e5:86:14:e0:54:93:0d:fb:9a:61:82:9d:37:88:cc: 09:be:89:0a:a5:2a:ab:18:fa:7d:18:d0:73:c2:ee: 0d:df:8e:15:01:1b:12:8a:52:71:b3:ba:64:6b:79: 8c:a3:f0:82:63:9b:e9:82:9e:4b:7a:e9:d2:e3:9c: ad:92:4a:2a:d4:83:d1:19:39:a9:45:e5:43:20:a9: 71:31:8b:d6:34:f2:09:0e:f7:be:95:cf:52:a0:10: e9:a0:35:72:bd:e7:57:d4:88:a6:8f:82:25:7d:d4: a7:ef:6a:d2:b3:e1:ba:71:8e:62:27:d9:41:ce:d6: 20:12:fc:8c:b0:ab:18:2f:d0:c3:6f:dc:79:98:71: 84:db:12:95:5e:f9:42:a3:b7:53:75:04:6c:f8:50: dc:08:c0:5b:84:32:9c:3c:a0:19:eb:d9:b7:d0:a6: 1a:12:bc:c2:e5:ab:df:da:08:7d:1e:1b:ea:5c:0e: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D3:29:A0:9D:92:4A:A0:68:F4:1C:8A:7E:74:A1:DA:1E:1D:BC:2E X509v3 Authority Key Identifier: keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:84:79:79:ec:5e:13:11:c7:ef:aa:e8:40:8e:2b:2f:ac:ff: f0:d2:57:e8:11:d7:d0:45:03:d2:b5:99:6d:8b:60:a1:3c:22: 8c:e9:9d:f7:ac:dc:60:48:71:53:5a:96:39:07:9d:ae:a0:31: 25:62:e5:d9:04:8e:83:45:1e:53:e8:98:cf:c3:d8:e4:61:c1: e3:df:9d:0e:12:06:a3:c3:90:3b:1e:16:b5:c2:64:9e:07:f1: c1:03:dc:ae:19:44:e7:98:ac:8b:31:01:e2:f7:db:77:d9:bc: 64:8e:71:e7:2d:54:8c:1c:61:12:fe:ca:c1:dd:0a:d7:57:55: 5d:99:eb:76:b8:f8:58:5c:59:40:c5:42:ca:5b:00:b0:fb:c4: 24:3f:60:8f:e6:74:7e:9e:08:cc:55:3b:26:82:ef:32:f1:fb: b2:c0:80:b6:da:67:51:c0:7d:33:95:74:52:aa:bd:4d:5b:e6: 26:07:64:c3:15:27:be:09:de:c6:97:be:e1:c5:bf:d4:e6:73: ae:c0:c6:46:88:99:be:9d:c6:62:94:55:a6:ee:5f:d3:97:67: 41:3c:be:5e:db:03:ba:6f:e8:bf:66:49:ec:5f:73:77:49:79: d1:34:81:ca:79:4b:66:b1:34:c5:63:64:86:59:8e:59:39:87: 2c:e5:dc:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQpcExVQdZ5AO2Jv8zOmu3aMv4cUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3 RTZDNDQ3OTAeFw0yNjA1MTIxOTM1NTNaFw0yNjA1MTMyMTQxNTNaMDMxMTAvBgNV BAMTKDQ3RDMyOUEwOUQ5MjRBQTA2OEY0MUM4QTdFNzRBMURBMUUxREJDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFdMlKAjw/bBvOZjvs7+nP0mJ bv2rShZE8SczGXIcO6ZgbZX8kvPl3yjXO8Llwtn9/gF0gDVr6qg9QjJoNsSkSZgM qxQvdKK5L+WGFOBUkw37mmGCnTeIzAm+iQqlKqsY+n0Y0HPC7g3fjhUBGxKKUnGz umRreYyj8IJjm+mCnkt66dLjnK2SSirUg9EZOalF5UMgqXExi9Y08gkO976Vz1Kg EOmgNXK951fUiKaPgiV91KfvatKz4bpxjmIn2UHO1iAS/Iywqxgv0MNv3HmYcYTb EpVe+UKjt1N1BGz4UNwIwFuEMpw8oBnr2bfQphoSvMLlq9/aCH0eG+pcDt2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9MpoJ2SSqBo9ByKfnSh2h4dvC4wHwYDVR0j BBgwFoAU6wvi8vSfDi7Q3KRQzHpw435sRHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmEzYWU0ODUtYTY1OC00YzVjLWFiZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJG NDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3RTZDNDQ3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBCRTJGMkY0OUYwRTJFRDBEQ0E0NTBDQzdBNzBFMzdFNkM0 NDc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcw RTM3RTZDNDQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuEeXnsXhMRx++q6ECOKy+s//DSV+gR19BF A9K1mW2LYKE8Iozpnfes3GBIcVNaljkHna6gMSVi5dkEjoNFHlPomM/D2ORhwePf nQ4SBqPDkDseFrXCZJ4H8cED3K4ZROeYrIsxAeL323fZvGSOcectVIwcYRL+ysHd CtdXVV2Z63a4+FhcWUDFQspbALD7xCQ/YI/mdH6eCMxVOyaC7zLx+7LAgLbaZ1HA fTOVdFKqvU1b5iYHZMMVJ74J3saXvuHFv9Tmc67AxkaImb6dxmKUVabuX9OXZ0E8 vl7bA7pv6L9mSexfc3dJedE0gcp5S2axNMVjZIZZjlk5hyzl3BU= -----END CERTIFICATE-----Generated at Wed May 13 00:43:38 2026 by rpki-client