$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft File: E83F205BF306DAF53F99D7D0596E19991D122A75.mft (raw, json) Hash identifier: dvkB63NumS3Mmn/taFczCpSomcOvUismzKwSauo75MI= Subject key identifier: 9D:CC:CB:D3:53:00:9D:2E:E9:BF:EB:5D:F7:E0:99:89:CF:10:4D:70 Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 Certificate issuer: /CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Certificate serial: 018EC6F2B3D666336DFBCE0FC4D16E6DCE6C5133 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:09:02 +0000 Manifest this update: Tue 12 May 2026 14:04:02 +0000 Manifest next update: Wed 13 May 2026 14:54:02 +0000 Files and hashes: 1: E83F205BF306DAF53F99D7D0596E19991D122A75.crl (hash: MnMHqAxRyO3QoChsmlJXILbcd4mbKdSRemZA3Oq1fbA=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 4/4i0yLfh0SYWVvIB+ls28jcDhOwmL2zwW2k6ffDKik=) 3: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: qr0g5LVzrVb3dBi48fKGU2IZ+49TkkVc1Y82FpKn5Mk=) 4: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:c6:f2:b3:d6:66:33:6d:fb:ce:0f:c4:d1:6e:6d:ce:6c:51:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75 Validity Not Before: May 12 14:04:02 2026 GMT Not After : May 13 14:54:02 2026 GMT Subject: CN=9DCCCBD353009D2EE9BFEB5DF7E09989CF104D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:99:c5:4f:10:d6:ac:5d:8c:4a:28:b7:27: 97:80:4b:7c:3c:a2:8b:52:5e:ad:81:b3:17:39:f1: 89:43:e7:51:6f:d1:72:a6:5b:d5:dd:63:76:35:71: 05:17:79:68:e9:f6:3a:d4:bf:a4:d2:66:32:c4:c7: 6c:66:44:9d:d9:25:43:45:7a:01:2d:78:e4:39:f7: 74:fe:a4:ea:1e:54:66:43:de:dc:30:20:de:68:34: 35:39:46:e5:2f:1c:9d:76:cd:fd:84:f6:e9:00:fd: cd:0e:c4:20:f0:99:7e:3b:57:9d:7b:03:30:68:26: 1b:d9:19:2e:b7:f4:b7:48:bb:75:e1:0c:85:19:a5: 45:eb:31:b2:6c:9f:98:37:61:d3:9b:21:46:f8:59: ca:3e:bd:5c:36:a8:65:86:d7:23:35:a0:49:81:86: ea:c8:97:cb:1d:cc:8c:66:d5:a1:87:cd:e5:a7:96: c2:4d:e5:73:63:69:21:33:e6:43:15:36:f2:39:18: 13:58:d2:e9:87:5a:ec:54:e9:29:01:e2:26:54:9d: 93:c4:51:44:53:56:fc:56:8a:98:55:6a:5c:32:38: 42:f7:62:86:54:47:ca:c9:d3:df:13:fe:b1:e1:cf: a1:d2:c0:94:d2:8d:34:35:33:4d:bc:31:4a:f4:6e: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CC:CB:D3:53:00:9D:2E:E9:BF:EB:5D:F7:E0:99:89:CF:10:4D:70 X509v3 Authority Key Identifier: keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:8a:70:28:ce:bf:2d:b1:7e:e4:c5:b9:bb:ce:2e:ae:cb:70: 27:c1:0a:a6:82:be:6b:12:6f:0b:2e:9f:05:57:8b:d2:4d:6d: 6e:bc:d7:4f:a7:e6:32:94:8a:5a:0a:f9:a0:7b:bf:4e:d9:c8: 37:0b:9b:10:31:bb:87:4d:7d:96:c1:27:e9:5f:86:1e:dc:92: 36:15:7c:28:3a:ff:d8:38:93:d2:16:fd:15:8f:3c:e4:46:78: 45:41:9f:df:83:a2:65:b7:d4:89:c1:d1:cc:91:bb:3a:8e:91: 7c:fa:37:26:a0:98:2d:f9:d4:58:68:66:04:11:b4:25:8e:da: df:7b:89:ed:bf:b7:96:51:34:9e:dc:b8:28:60:2d:49:f6:00: 6a:7d:53:b2:0f:a5:12:87:d0:7f:49:4d:20:a1:1b:1b:77:45: d5:ae:b4:08:f0:94:f1:31:11:e2:67:3a:6c:a9:c7:d3:fe:dd: 05:1d:a4:1e:39:b2:61:ae:63:71:d8:c2:36:f7:55:62:cd:2b: 7e:ce:ab:71:95:be:a2:40:7b:21:a5:e8:34:5e:d8:e8:07:d6: a0:a1:8d:cb:6d:67:61:a7:3f:49:f9:7e:be:ff:b2:54:1d:ae: 82:76:2d:fc:bf:ad:36:19:82:ee:97:0c:e8:d2:b9:db:be:d2: 96:63:32:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAY7G8rPWZjNt+84PxNFubc5sUTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5OTkx RDEyMkE3NTAeFw0yNjA1MTIxNDA0MDJaFw0yNjA1MTMxNDU0MDJaMDMxMTAvBgNV BAMTKDlEQ0NDQkQzNTMwMDlEMkVFOUJGRUI1REY3RTA5OTg5Q0YxMDRENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUw5nFTxDWrF2MSii3J5eAS3w8 ootSXq2Bsxc58YlD51Fv0XKmW9XdY3Y1cQUXeWjp9jrUv6TSZjLEx2xmRJ3ZJUNF egEteOQ593T+pOoeVGZD3twwIN5oNDU5RuUvHJ12zf2E9ukA/c0OxCDwmX47V517 AzBoJhvZGS639LdIu3XhDIUZpUXrMbJsn5g3YdObIUb4Wco+vVw2qGWG1yM1oEmB hurIl8sdzIxm1aGHzeWnlsJN5XNjaSEz5kMVNvI5GBNY0umHWuxU6SkB4iZUnZPE UURTVvxWiphValwyOEL3YoZUR8rJ098T/rHhz6HSwJTSjTQ1M028MUr0bk6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnczL01MAnS7pv+td9+CZic8QTXAwHwYDVR0j BBgwFoAU6D8gW/MG2vU/mdfQWW4ZmR0SKnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMzNjI0YzQtYmZkYy00ZTQ4LThlYTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJG MzA2REFGNTNGOTlEN0QwNTk2RTE5OTkxRDEyMkE3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODNGMjA1QkYzMDZEQUY1M0Y5OUQ3RDA1OTZFMTk5OTFEMTIy QTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvRTgzRjIwNUJGMzA2REFGNTNGOTlEN0QwNTk2RTE5 OTkxRDEyMkE3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKKcCjOvy2xfuTFubvOLq7LcCfBCqaCvmsS bwsunwVXi9JNbW6810+n5jKUiloK+aB7v07ZyDcLmxAxu4dNfZbBJ+lfhh7ckjYV fCg6/9g4k9IW/RWPPORGeEVBn9+DomW31InB0cyRuzqOkXz6NyagmC351FhoZgQR tCWO2t97ie2/t5ZRNJ7cuChgLUn2AGp9U7IPpRKH0H9JTSChGxt3RdWutAjwlPEx EeJnOmypx9P+3QUdpB45smGuY3HYwjb3VWLNK37Oq3GVvqJAeyGl6DRe2OgH1qCh jcttZ2GnP0n5fr7/slQdroJ2Lfy/rTYZgu6XDOjSudu+0pZjMmI= -----END CERTIFICATE-----Generated at Tue May 12 22:13:19 2026 by rpki-client