$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft File: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft (raw, json) Hash identifier: l89/ObHdm1K5NfuzpWoTwiggBfLPtxrtaVgbHV/4oE0= Subject key identifier: BA:23:5A:CC:DC:3A:D9:45:6D:39:98:CA:ED:D6:F9:BA:05:16:0C:01 Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60 Certificate issuer: /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60 Certificate serial: 3B3454EE1AAC9303AF8650B27E72FF047E35362E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:54:44 +0000 Manifest this update: Tue 12 May 2026 01:49:44 +0000 Manifest next update: Wed 13 May 2026 04:04:44 +0000 Files and hashes: 1: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=) 2: E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl (hash: PO0z9on5Dd3ZTRBaK62hz5eOBfnLTFyo/yzimEytzJI=) 3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: aDinqjPhgNq50kNy+lg2Iba0bDegBSFkr3DIakb0nTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:34:54:ee:1a:ac:93:03:af:86:50:b2:7e:72:ff:04:7e:35:36:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60 Validity Not Before: May 12 01:49:44 2026 GMT Not After : May 13 04:04:44 2026 GMT Subject: CN=BA235ACCDC3AD9456D3998CAEDD6F9BA05160C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:69:43:7d:ed:45:aa:a3:6b:06:31:17:15:46: 69:cd:6d:05:62:4e:6a:06:2c:cc:1b:ed:ba:74:63: 8e:2c:85:b4:0f:1d:44:28:03:c8:52:d9:42:99:4d: 3f:3f:3a:95:13:34:12:2b:56:27:b2:76:02:1d:a2: e9:aa:6c:c8:ee:cf:92:04:bd:02:bd:ac:ef:92:ce: 20:8a:ea:94:75:29:41:b2:03:5d:9c:3a:a6:d7:10: b3:06:3e:cf:98:cd:d4:e8:00:b4:d7:14:08:79:b0: e1:d9:57:7e:fa:64:18:20:3b:62:9f:cc:0b:83:90: 38:d7:97:8e:10:bd:3a:dd:31:3c:86:3b:62:c1:87: db:51:bb:15:df:2b:66:e5:c7:4a:b9:72:bd:82:35: 77:ca:a0:c3:6f:18:86:d8:82:cc:e5:6c:cb:0c:6c: 88:1c:44:28:d8:14:b8:20:d6:45:64:a5:70:a0:26: 40:08:c7:fd:70:96:82:e5:c4:74:f9:44:21:30:cb: 72:f9:fa:59:58:77:d6:15:ae:ad:f2:a0:4b:e4:60: 34:bc:93:92:3a:99:e3:ad:96:7e:4d:23:e6:c0:00: cf:08:1e:0d:27:1f:10:89:40:6f:11:1a:d6:9e:48: e2:17:86:53:1c:32:80:2b:a3:a8:ab:5b:94:21:35: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:23:5A:CC:DC:3A:D9:45:6D:39:98:CA:ED:D6:F9:BA:05:16:0C:01 X509v3 Authority Key Identifier: keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:26:5e:2f:7b:2d:b4:a2:bb:21:27:00:f5:f9:65:98:55:38: 5a:5c:07:10:7b:dd:ff:02:4a:25:eb:ae:af:3a:ce:e8:a1:71: ef:04:ad:0e:c3:20:40:45:8d:a1:25:ca:fe:92:80:3c:b9:45: f5:e5:88:c0:25:35:ad:c1:5a:b5:a3:92:d8:35:80:8b:03:98: d6:3e:62:71:8d:1c:2a:33:73:a3:6b:bc:24:2c:3f:30:7f:05: bb:96:73:5f:e7:35:f6:7b:cf:33:e4:f1:1e:11:a1:cf:0b:e1: e9:7f:09:14:9e:65:75:00:25:4f:84:04:4f:bb:66:4d:a5:8c: f5:c0:45:1d:10:dc:ff:ad:c1:7f:22:92:6a:77:c8:60:51:3c: bf:4d:44:aa:c5:18:49:38:3b:8d:eb:07:b1:39:79:c4:07:fd: 65:c8:4e:98:a9:56:0c:0a:f4:49:96:db:4f:34:0f:21:69:5c: 12:97:94:58:93:91:79:8f:a8:be:d4:29:f6:a8:90:fd:7a:5b: 51:64:ed:85:78:d0:c6:f1:37:b0:ab:53:a2:ec:a7:dc:1f:4f: 9b:35:25:20:62:9d:43:f6:71:69:b2:00:cc:44:43:b3:cd:29: ce:c0:59:a6:de:a9:98:35:97:1f:8b:6d:45:5e:22:50:d2:61: 41:5a:34:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzRU7hqskwOvhlCyfnL/BH41Ni4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVGNkY5RTVERDlEMzRCREEwOEM0NTMxQkE3MDg3NjFB MzVBREU2MDAeFw0yNjA1MTIwMTQ5NDRaFw0yNjA1MTMwNDA0NDRaMDMxMTAvBgNV BAMTKEJBMjM1QUNDREMzQUQ5NDU2RDM5OThDQUVERDZGOUJBMDUxNjBDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXaUN97UWqo2sGMRcVRmnNbQVi TmoGLMwb7bp0Y44shbQPHUQoA8hS2UKZTT8/OpUTNBIrVieydgIdoumqbMjuz5IE vQK9rO+SziCK6pR1KUGyA12cOqbXELMGPs+YzdToALTXFAh5sOHZV376ZBggO2Kf zAuDkDjXl44QvTrdMTyGO2LBh9tRuxXfK2blx0q5cr2CNXfKoMNvGIbYgszlbMsM bIgcRCjYFLgg1kVkpXCgJkAIx/1wloLlxHT5RCEwy3L5+llYd9YVrq3yoEvkYDS8 k5I6meOtln5NI+bAAM8IHg0nHxCJQG8RGtaeSOIXhlMcMoAro6irW5QhNcG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuiNazNw62UVtOZjK7db5ugUWDAEwHwYDVR0j BBgwFoAU5fb55d2dNL2gjEUxunCHYaNa3mAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMwMWZkNDQtOGNkNi00ZDlmLTliZDEtODM2N2FkOWNkOWVhLzAvRTVGNkY5RTVE RDlEMzRCREEwOEM0NTMxQkE3MDg3NjFBMzVBREU2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNUY2RjlFNUREOUQzNEJEQTA4QzQ1MzFCQTcwODc2MUEzNUFE RTYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTVGNkY5RTVERDlEMzRCREEwOEM0NTMxQkE3MDg3 NjFBMzVBREU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEmXi97LbSiuyEnAPX5ZZhVOFpcBxB73f8C SiXrrq86zuihce8ErQ7DIEBFjaElyv6SgDy5RfXliMAlNa3BWrWjktg1gIsDmNY+ YnGNHCozc6NrvCQsPzB/BbuWc1/nNfZ7zzPk8R4Roc8L4el/CRSeZXUAJU+EBE+7 Zk2ljPXARR0Q3P+twX8ikmp3yGBRPL9NRKrFGEk4O43rB7E5ecQH/WXITpipVgwK 9EmW2080DyFpXBKXlFiTkXmPqL7UKfaokP16W1Fk7YV40MbxN7CrU6Lsp9wfT5s1 JSBinUP2cWmyAMxEQ7PNKc7AWabeqZg1lx+LbUVeIlDSYUFaNGw= -----END CERTIFICATE-----Generated at Tue May 12 22:39:02 2026 by rpki-client