$ rpki-client -vvf rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft File: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft (raw, json) Hash identifier: 0NTgzpHc1/edgBU1pt1WpXlov2YlITXusPxtqWvxFe4= Subject key identifier: 29:1B:70:CE:6E:95:A5:48:DA:20:AB:49:2D:A7:E1:6F:43:E6:8D:D9 Authority key identifier: E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 Certificate issuer: /CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Certificate serial: 42DD5A3C34EEB33CE65DB901111557A6A6708ACE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:23:58 +0000 Manifest this update: Tue 12 May 2026 21:18:58 +0000 Manifest next update: Thu 14 May 2026 01:00:58 +0000 Files and hashes: 1: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: oYW4sdySDReabIUJh8DtwbQ7r9wux6oX5lpHgcktZMY=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: lQVIlc5Ok7o6clRzLcj2IsYBHTzNzicGxWqDtjOXTeQ=) 3: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl (hash: I3SmLaOoUbD5Ygpa2JVo+5HY6mgdkyTgGIbwdnC4ZUo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:dd:5a:3c:34:ee:b3:3c:e6:5d:b9:01:11:15:57:a6:a6:70:8a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Validity Not Before: May 12 21:18:58 2026 GMT Not After : May 14 01:00:58 2026 GMT Subject: CN=291B70CE6E95A548DA20AB492DA7E16F43E68DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:cb:4a:03:ef:bc:d2:af:aa:23:d3:1a:ad: 24:bc:e7:fb:2c:43:c0:ac:d0:0e:d1:96:5a:39:b1: d3:6a:aa:9d:d0:85:76:2b:80:f2:dc:cb:2a:0d:b1: 22:1c:c7:41:f6:54:0e:07:07:ac:80:35:0a:e4:2e: 0c:2a:00:00:fa:70:f0:d3:44:67:77:56:d8:12:28: 26:c6:ef:be:c6:ca:35:9d:95:ec:67:f7:2b:5f:cd: 94:e2:bb:de:4d:89:b0:17:2a:24:28:34:e1:dc:d5: 05:c3:86:ae:2d:c7:85:0e:73:98:ad:bc:4e:bb:56: 23:7f:63:90:09:bf:50:cd:78:f0:bb:4a:95:63:a7: 90:d2:24:42:96:01:ee:43:7f:9d:97:79:84:0a:65: 32:90:3b:1c:ec:c0:45:8e:2d:91:4f:15:a4:56:1d: 77:21:c9:f6:5c:36:2d:90:09:ad:4f:a7:04:81:a4: fb:51:ae:16:95:24:0c:c0:75:c6:78:09:ef:9d:aa: 91:d8:80:5f:ef:66:08:e8:f7:07:db:e8:12:2b:e7: 9e:ca:92:96:46:8d:dc:ff:24:46:f7:bf:3a:a9:e4: b7:18:8f:74:d0:72:00:12:6d:05:67:67:04:b2:52: 5f:fd:60:88:2c:11:86:c2:e2:a1:d6:ee:1c:a3:dd: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1B:70:CE:6E:95:A5:48:DA:20:AB:49:2D:A7:E1:6F:43:E6:8D:D9 X509v3 Authority Key Identifier: keyid:E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:95:52:4c:10:6c:3d:6d:ce:17:6c:c6:fd:c5:4d:9e:b8:23: 89:c8:4b:d1:be:b3:9c:7f:a4:fe:1c:0e:3f:cd:fa:f3:11:87: 2c:85:c9:3b:76:94:6e:82:59:6c:4d:5f:40:c3:ae:81:5d:30: 49:da:37:a3:3a:a0:4f:c4:18:f6:7f:34:92:ae:40:d4:72:ed: 3a:19:e2:c2:b3:16:41:a5:c3:e0:32:d2:5d:4b:6d:de:a9:d2: aa:93:64:79:9e:0e:1f:67:b7:68:7b:b3:53:76:b7:43:90:b9: 14:04:4c:0b:a0:54:9b:f5:09:7b:e6:df:f8:2a:2a:de:d7:0f: 9b:e7:09:14:63:4e:66:b0:6d:53:a4:db:76:85:4d:43:a1:16: 26:81:a3:6c:89:6c:d7:49:1b:ee:37:ae:f7:5b:86:ab:be:dc: c2:f5:ef:5a:8e:29:73:14:a7:a3:19:d8:95:7b:e2:91:d3:6d: a4:29:6d:48:39:21:0b:00:2f:83:d6:d6:ee:04:14:7b:ba:83: 7d:11:bb:d3:4d:46:58:9e:02:4f:7c:50:a9:54:06:85:12:10: 79:2a:c9:9d:cd:b1:d8:cf:da:a7:22:92:0b:31:8e:ad:75:26: 04:e1:3f:25:97:bb:f0:31:2d:4c:64:73:5c:52:1a:d4:4a:0c: 43:b9:f4:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQt1aPDTuszzmXbkBERVXpqZwis4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5 QTZDQzgwODAeFw0yNjA1MTIyMTE4NThaFw0yNjA1MTQwMTAwNThaMDMxMTAvBgNV BAMTKDI5MUI3MENFNkU5NUE1NDhEQTIwQUI0OTJEQTdFMTZGNDNFNjhERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IstKA++80q+qI9MarSS85/ss Q8Cs0A7Rllo5sdNqqp3QhXYrgPLcyyoNsSIcx0H2VA4HB6yANQrkLgwqAAD6cPDT RGd3VtgSKCbG777GyjWdlexn9ytfzZTiu95NibAXKiQoNOHc1QXDhq4tx4UOc5it vE67ViN/Y5AJv1DNePC7SpVjp5DSJEKWAe5Df52XeYQKZTKQOxzswEWOLZFPFaRW HXchyfZcNi2QCa1PpwSBpPtRrhaVJAzAdcZ4Ce+dqpHYgF/vZgjo9wfb6BIr557K kpZGjdz/JEb3vzqp5LcYj3TQcgASbQVnZwSyUl/9YIgsEYbC4qHW7hyj3WGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRtwzm6VpUjaIKtJLafhb0PmjdkwHwYDVR0j BBgwFoAU5doh23bOkdbvckgv/f4CFppsyAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI5Zjg5MDItMWEwNi00NWE4LWE5OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3 NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5QTZDQzgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNURBMjFEQjc2Q0U5MUQ2RUY3MjQ4MkZGREZFMDIxNjlBNkND ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAy MTY5QTZDQzgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6VUkwQbD1tzhdsxv3FTZ64I4nIS9G+s5x/ pP4cDj/N+vMRhyyFyTt2lG6CWWxNX0DDroFdMEnaN6M6oE/EGPZ/NJKuQNRy7ToZ 4sKzFkGlw+Ay0l1Lbd6p0qqTZHmeDh9nt2h7s1N2t0OQuRQETAugVJv1CXvm3/gq Kt7XD5vnCRRjTmawbVOk23aFTUOhFiaBo2yJbNdJG+43rvdbhqu+3ML171qOKXMU p6MZ2JV74pHTbaQpbUg5IQsAL4PW1u4EFHu6g30Ru9NNRlieAk98UKlUBoUSEHkq yZ3NsdjP2qcikgsxjq11JgThPyWXu/AxLUxkc1xSGtRKDEO59Nc= -----END CERTIFICATE-----Generated at Wed May 13 00:45:23 2026 by rpki-client