$ rpki-client -vvf rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft File: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft (raw, json) Hash identifier: uC/RQhbhHVjKGHgJv6A8lnuXWs7CDIXTV6oUdojy52w= Subject key identifier: B9:F8:5B:15:1C:40:1D:CC:D8:60:3B:99:88:2F:D6:F8:63:64:E7:CD Authority key identifier: EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 Certificate issuer: /CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Certificate serial: 7F4CA97847F8F435C2D82E20D21D5D27282FA616 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:59:35 +0000 Manifest this update: Tue 12 May 2026 14:54:35 +0000 Manifest next update: Wed 13 May 2026 16:21:35 +0000 Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: yCX5+Dxju6djsJMnbOlkqP9bGOuuQKBHDP9eW/sQSSc=) 2: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl (hash: xG/WnXAjE+Cesd6kEh/NGqHmXlLhvHpwUPeIvt5vlhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4c:a9:78:47:f8:f4:35:c2:d8:2e:20:d2:1d:5d:27:28:2f:a6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Validity Not Before: May 12 14:54:35 2026 GMT Not After : May 13 16:21:35 2026 GMT Subject: CN=B9F85B151C401DCCD8603B99882FD6F86364E7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:0a:0c:12:d0:d4:97:d1:0f:30:f9:d9:bf: b1:6a:33:8b:c1:4d:e7:bf:b0:b3:d8:3f:1d:41:f4: d9:17:49:8b:00:87:71:5c:80:a7:64:09:04:40:56: 05:a4:d5:c1:80:23:21:63:fb:bc:55:dd:1f:58:75: 8c:d0:5a:2d:80:5e:6c:73:47:04:29:6f:4b:25:81: 22:64:a8:cd:92:cb:95:85:03:52:a7:fa:54:9b:c3: 01:b5:2f:a9:1e:6f:3b:b0:4b:49:2a:02:64:a4:69: 94:75:09:e0:65:a9:c0:d4:27:e0:00:19:f1:43:dd: 92:85:df:3e:93:0f:fb:cd:74:aa:db:a4:6a:16:cb: 1c:8e:94:01:8a:9d:97:a4:ab:c0:59:ef:21:6b:24: 8f:82:fd:95:bb:99:42:a1:fb:6c:d8:37:20:60:4b: 7f:0f:4c:07:18:5f:26:3c:74:85:c1:8e:36:2b:a2: a5:d9:bc:6d:7e:e2:91:a6:0a:b8:4f:de:77:c7:e4: f5:cc:d6:1c:70:24:f1:59:52:84:5c:1b:63:92:96: bb:66:8a:df:39:4b:7d:c5:a5:5a:44:bd:26:b1:fa: 4a:46:28:e5:a4:b8:6b:a0:a6:7e:8b:be:c1:ae:ab: 8a:6d:16:54:37:bd:eb:41:9f:f2:82:fd:d6:12:a7: bb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:5B:15:1C:40:1D:CC:D8:60:3B:99:88:2F:D6:F8:63:64:E7:CD X509v3 Authority Key Identifier: keyid:EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:58:45:9b:39:13:b3:9f:e5:58:16:8a:f6:a2:12:31:1a:0e: 48:22:99:8e:97:3e:a9:72:c9:5e:92:c6:f2:cb:f4:20:1a:dc: 32:7c:81:fe:02:d6:32:4c:dc:f7:06:e1:ac:62:12:f2:bf:4c: 4d:37:0a:ea:65:ce:09:73:76:9d:03:9d:ac:e8:3b:c0:c5:05: bf:76:6b:c1:a1:27:33:ec:e2:c5:88:d8:86:ca:d1:1d:85:fb: 27:30:22:f9:b3:40:2f:08:f3:f9:6e:8a:17:c5:ae:f6:99:63: 26:31:5d:90:5a:3b:32:f2:9e:dd:72:0b:5c:a0:3c:19:41:26: 98:d0:f7:1e:b0:f7:84:c6:38:4f:a7:38:a9:3b:8f:17:a4:cf: 6a:d9:e8:8a:6d:fa:a0:3e:cc:f9:04:e5:9a:f4:43:eb:4e:93: c4:75:3b:32:0a:a8:59:dc:d0:d6:1b:ce:a8:f6:ce:e0:aa:f6: 19:00:d2:d8:57:e7:ef:3d:ce:78:db:1c:54:e0:81:42:b4:f2: 3b:d1:8f:4f:b2:a4:80:c9:d9:9e:39:26:bf:6c:90:fa:9b:95: 46:8f:c6:2e:fe:87:8e:b8:ec:5e:3a:3c:a7:ac:58:5a:f2:1e: f4:a6:8e:a0:29:ae:90:04:6a:8d:26:c4:9c:d9:49:60:c0:97: a9:3f:af:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0ypeEf49DXC2C4g0h1dJygvphYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNC RDVFRjU3OTAeFw0yNjA1MTIxNDU0MzVaFw0yNjA1MTMxNjIxMzVaMDMxMTAvBgNV BAMTKEI5Rjg1QjE1MUM0MDFEQ0NEODYwM0I5OTg4MkZENkY4NjM2NEU3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYAoMEtDUl9EPMPnZv7FqM4vB Tee/sLPYPx1B9NkXSYsAh3FcgKdkCQRAVgWk1cGAIyFj+7xV3R9YdYzQWi2AXmxz RwQpb0slgSJkqM2Sy5WFA1Kn+lSbwwG1L6kebzuwS0kqAmSkaZR1CeBlqcDUJ+AA GfFD3ZKF3z6TD/vNdKrbpGoWyxyOlAGKnZekq8BZ7yFrJI+C/ZW7mUKh+2zYNyBg S38PTAcYXyY8dIXBjjYroqXZvG1+4pGmCrhP3nfH5PXM1hxwJPFZUoRcG2OSlrtm it85S33FpVpEvSax+kpGKOWkuGugpn6LvsGuq4ptFlQ3vetBn/KC/dYSp7tJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUufhbFRxAHczYYDuZiC/W+GNk580wHwYDVR0j BBgwFoAU6o9WmnQFvquiP5sgzxrNLL1e9XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA0NTdkMjAtMDIzYS00NTA5LWJiNGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3 NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNCRDVFRjU3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThGNTY5QTc0MDVCRUFCQTIzRjlCMjBDRjFBQ0QyQ0JENUVG NTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNE MkNCRDVFRjU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFYRZs5E7Of5VgWivaiEjEaDkgimY6XPqly yV6SxvLL9CAa3DJ8gf4C1jJM3PcG4axiEvK/TE03Cuplzglzdp0DnazoO8DFBb92 a8GhJzPs4sWI2IbK0R2F+ycwIvmzQC8I8/luihfFrvaZYyYxXZBaOzLynt1yC1yg PBlBJpjQ9x6w94TGOE+nOKk7jxekz2rZ6Ipt+qA+zPkE5Zr0Q+tOk8R1OzIKqFnc 0NYbzqj2zuCq9hkA0thX5+89znjbHFTggUK08jvRj0+ypIDJ2Z45Jr9skPqblUaP xi7+h4647F46PKesWFryHvSmjqAprpAEao0mxJzZSWDAl6k/r0s= -----END CERTIFICATE-----Generated at Wed May 13 07:01:15 2026 by rpki-client