$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: hS3nLKjSmcFhHMoUODeMD3ApVuKxbGn436TZtTxMTiM= Subject key identifier: 12:3D:44:68:A2:F9:40:65:CB:EF:FB:36:31:00:14:0A:31:59:72:9E Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: 110578B403D893C13F20BF4BB14F2B2EEE707E70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:20:13 +0000 Manifest this update: Wed 13 May 2026 01:15:13 +0000 Manifest next update: Thu 14 May 2026 02:10:13 +0000 Files and hashes: 1: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) 2: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) 3: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: Prg+f03htNZeVa8B5OtbpxMXTVthlANKWNoQmfh/sFo=) 4: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) 5: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:05:78:b4:03:d8:93:c1:3f:20:bf:4b:b1:4f:2b:2e:ee:70:7e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: May 13 01:15:13 2026 GMT Not After : May 14 02:10:13 2026 GMT Subject: CN=123D4468A2F94065CBEFFB363100140A3159729E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:00:98:c1:b2:a8:ea:6a:06:d5:b7:ac:18: 24:92:ef:d0:df:bc:dd:9c:5e:93:f2:16:e5:e0:03: 8a:cc:ba:cd:f7:10:cb:c6:47:f8:b9:fe:18:38:37: 1a:0b:a0:72:56:b2:4b:35:3d:4f:44:f4:d1:8d:c0: 6f:77:50:a5:b0:c2:29:c2:3a:8a:bb:9c:ec:b0:73: 5b:01:6d:36:68:de:0a:1d:a5:9f:55:cc:64:43:c1: f1:26:43:62:33:a6:62:96:fd:08:87:ae:78:52:ee: d9:f8:aa:00:7a:30:05:0f:5f:23:f7:51:67:87:4b: c0:a9:64:7d:4f:6e:40:9c:ff:e0:01:8c:ab:a5:77: 14:48:db:38:16:e9:36:eb:fd:a5:ea:2e:aa:3e:21: 1f:37:3c:4a:bb:ee:a7:87:1c:a7:f4:a6:2b:62:2d: b5:0c:6d:b9:da:35:e0:e1:d2:e1:b8:fe:70:84:92: 43:a1:55:57:01:9c:3a:09:6c:3a:e5:ba:78:22:90: 0b:a7:da:fc:0a:8d:7b:85:50:bd:41:96:61:88:ce: 5c:77:7b:14:d0:2b:7e:eb:bb:ca:e2:0a:75:c2:d0: 05:72:3a:9a:b7:a1:a4:c6:eb:b8:39:8e:05:33:46: 44:4f:ab:0a:08:68:7f:eb:18:b3:82:bf:a1:29:49: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:44:68:A2:F9:40:65:CB:EF:FB:36:31:00:14:0A:31:59:72:9E X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6a:fd:bd:a6:60:f9:7b:eb:9c:a9:f4:c0:52:ec:fc:9a:a5: 47:da:2d:1f:46:fc:d4:e6:81:64:44:45:6a:51:b8:e3:95:da: f4:49:d8:59:13:8a:35:50:81:c5:84:bc:e0:a1:bb:45:b9:a5: 07:3c:b7:cc:3f:f7:16:60:58:9f:03:dc:b9:51:16:cb:a3:76: 97:b2:1c:ab:10:8c:45:56:11:97:dd:08:b0:35:13:72:5e:6b: 15:e9:99:06:14:ea:59:75:47:be:5f:30:61:db:dd:19:62:af: 1c:5f:33:9f:7b:66:d1:2d:c9:b6:e6:01:08:1f:06:c8:5c:be: b1:59:7f:d0:ef:87:45:b0:c6:aa:ec:7a:be:c6:ba:7a:f9:67: 7f:8f:e1:1b:80:15:cd:e0:c7:5b:91:7d:00:0a:5f:46:36:da: cc:ca:ad:be:7c:8a:c1:63:fd:a4:92:0d:24:50:90:76:fe:f2: a2:63:f8:09:75:84:73:09:28:52:d9:a1:45:ad:94:90:4c:8e: fd:7c:50:6c:f1:9e:8f:6f:90:50:40:4e:c1:71:d2:96:65:e1: 95:b4:08:cd:a2:87:9d:b1:84:a3:ae:56:72:cb:a6:23:42:02: 93:78:fb:12:5f:f5:c8:40:ba:d6:bf:7b:8f:04:8e:af:1a:c5: 3f:20:18:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQV4tAPYk8E/IL9LsU8rLu5wfnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjA1MTMwMTE1MTNaFw0yNjA1MTQwMjEwMTNaMDMxMTAvBgNV BAMTKDEyM0Q0NDY4QTJGOTQwNjVDQkVGRkIzNjMxMDAxNDBBMzE1OTcyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ7gCYwbKo6moG1besGCSS79Df vN2cXpPyFuXgA4rMus33EMvGR/i5/hg4NxoLoHJWsks1PU9E9NGNwG93UKWwwinC Ooq7nOywc1sBbTZo3godpZ9VzGRDwfEmQ2IzpmKW/QiHrnhS7tn4qgB6MAUPXyP3 UWeHS8CpZH1PbkCc/+ABjKuldxRI2zgW6Tbr/aXqLqo+IR83PEq77qeHHKf0piti LbUMbbnaNeDh0uG4/nCEkkOhVVcBnDoJbDrlungikAun2vwKjXuFUL1BlmGIzlx3 exTQK37ru8riCnXC0AVyOpq3oaTG67g5jgUzRkRPqwoIaH/rGLOCv6EpSQw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEj1EaKL5QGXL7/s2MQAUCjFZcp4wHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtq/b2mYPl765yp9MBS7PyapUfaLR9G/NTm gWRERWpRuOOV2vRJ2FkTijVQgcWEvOChu0W5pQc8t8w/9xZgWJ8D3LlRFsujdpey HKsQjEVWEZfdCLA1E3JeaxXpmQYU6ll1R75fMGHb3RlirxxfM597ZtEtybbmAQgf BshcvrFZf9Dvh0Wwxqrser7Gunr5Z3+P4RuAFc3gx1uRfQAKX0Y22szKrb58isFj /aSSDSRQkHb+8qJj+Al1hHMJKFLZoUWtlJBMjv18UGzxno9vkFBATsFx0pZl4ZW0 CM2ih52xhKOuVnLLpiNCApN4+xJf9chAuta/e48Ejq8axT8gGM4= -----END CERTIFICATE-----Generated at Wed May 13 04:08:47 2026 by rpki-client