$ rpki-client -vvf rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft File: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft (raw, json) Hash identifier: i+IQVjYh7uPr2FIUrezi8xbxCPSEc/WqQL/74KYJxhU= Subject key identifier: A3:7F:59:6A:C4:80:BF:C4:6E:EE:F4:4E:20:DB:F8:CA:9E:04:D5:EC Authority key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 Certificate issuer: /CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Certificate serial: 76D8C136CFECDA37D58B038742C2BAFD3C20FA76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:55:28 +0000 Manifest this update: Tue 12 May 2026 15:50:28 +0000 Manifest next update: Wed 13 May 2026 16:43:28 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: G9l0N/5Yff3x6/dE83tqKmpystb7dUXqvchJKY01Vfc=) 2: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: PIAfDzknn9MyXCe2w271kJi6m07dYGdxpQ/h99WENdo=) 3: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl (hash: aTfresOclfEdDCF8Ro+rk/x21MV1vwzxan03vrlQ6sM=) 4: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: SLypnwrf3BxVH5EVMKZIAtA3FLjbxPQy2OlEBbQP8b8=) 5: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: OU9KpCVaFyFqRPmbCa6ZHBE8msf8iFpD0/BG/bOi1fc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d8:c1:36:cf:ec:da:37:d5:8b:03:87:42:c2:ba:fd:3c:20:fa:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Validity Not Before: May 12 15:50:28 2026 GMT Not After : May 13 16:43:28 2026 GMT Subject: CN=A37F596AC480BFC46EEEF44E20DBF8CA9E04D5EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:ad:ac:48:b3:e3:14:09:7f:7f:c9:90:20: 69:e6:86:59:1b:60:63:93:ee:75:27:a9:6e:91:9e: 7e:ba:17:6c:3e:a1:be:f1:3f:0e:22:a2:ec:54:90: 3f:db:b9:e8:b6:8d:eb:12:ae:d8:b3:ba:f2:0e:7d: 22:f8:e9:63:e9:da:67:17:97:94:1c:2d:3d:8a:a0: e6:bb:8a:53:b5:bf:da:fc:55:6e:87:e9:0a:92:b9: ca:f2:bd:4c:80:74:1e:10:4b:4b:30:5a:a9:3e:f9: 4f:bb:3e:88:6e:65:28:f5:1a:3a:7b:b0:79:43:e0: f5:35:da:43:cc:e7:f9:ee:46:13:79:4e:78:6c:97: 9e:91:6e:88:f9:cb:cf:ac:2e:ee:81:cc:9c:cb:8e: 74:0c:c4:7c:e8:9f:4b:7d:1a:0b:4c:2a:18:38:46: be:9f:75:21:e7:73:2c:93:38:08:71:63:dc:1a:b9: 3e:35:50:01:49:3f:53:34:1e:b2:1e:aa:05:91:1c: 54:88:97:d1:f3:07:d0:eb:33:e8:81:ea:58:80:c6: 1e:66:81:0a:cb:95:39:27:11:c1:9b:23:14:e5:f1: b0:f0:41:ab:01:cd:12:c2:3b:49:37:87:83:f8:91: 78:09:ff:84:1b:0b:f8:46:9d:2a:b3:29:2f:7d:54: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7F:59:6A:C4:80:BF:C4:6E:EE:F4:4E:20:DB:F8:CA:9E:04:D5:EC X509v3 Authority Key Identifier: keyid:E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:11:95:10:f9:f1:38:c8:84:81:de:d0:c3:20:4f:c0:5e:6a: 2c:dd:f1:d0:50:91:21:02:af:d6:2f:94:89:57:9d:14:6b:9f: 72:0f:5e:6a:d1:5a:46:45:43:5d:b1:a7:f9:7b:ff:3c:c8:12: b3:a7:f4:83:3c:c7:90:52:3a:cf:c5:1e:19:c2:bd:81:a4:39: 0b:16:7e:c4:72:b6:32:00:40:7e:02:d1:40:cd:8f:a1:b6:f5: 42:0b:6f:67:d0:13:af:3f:2e:73:d7:fc:dd:74:53:3a:65:f8: 19:19:c9:6a:1f:11:88:5d:70:96:5d:a0:40:72:5f:dd:b4:92: 69:c7:f9:60:7c:ab:e5:75:6a:f6:b6:92:95:c9:41:31:d1:85: 88:4c:8c:d0:2e:d4:1c:8c:01:9e:59:4b:a3:56:a4:8a:de:0d: c2:cc:57:1a:51:87:8f:7f:84:9f:52:0e:ed:7c:b5:d8:b0:00: 97:ac:98:0d:c3:14:3a:87:de:b4:a7:f8:18:dd:dc:fc:db:fd: 65:93:ec:aa:c4:95:0b:ad:6e:63:ee:53:e5:76:95:d5:ec:5c: 4b:75:f7:bc:3f:f8:72:51:30:1e:7f:43:80:67:9e:6c:67:0e: 2e:cc:b3:10:37:09:3e:0f:cb:e2:df:a1:ef:1e:15:e2:e1:8e: 69:7e:79:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtjBNs/s2jfViwOHQsK6/Twg+nYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdC ODBGOUVEMjAeFw0yNjA1MTIxNTUwMjhaFw0yNjA1MTMxNjQzMjhaMDMxMTAvBgNV BAMTKEEzN0Y1OTZBQzQ4MEJGQzQ2RUVFRjQ0RTIwREJGOENBOUUwNEQ1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTK2sSLPjFAl/f8mQIGnmhlkb YGOT7nUnqW6Rnn66F2w+ob7xPw4iouxUkD/buei2jesSrtizuvIOfSL46WPp2mcX l5QcLT2KoOa7ilO1v9r8VW6H6QqSucryvUyAdB4QS0swWqk++U+7PohuZSj1Gjp7 sHlD4PU12kPM5/nuRhN5Tnhsl56Rboj5y8+sLu6BzJzLjnQMxHzon0t9GgtMKhg4 Rr6fdSHncyyTOAhxY9wauT41UAFJP1M0HrIeqgWRHFSIl9HzB9DrM+iB6liAxh5m gQrLlTknEcGbIxTl8bDwQasBzRLCO0k3h4P4kXgJ/4QbC/hGnSqzKS99VOZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo39ZasSAv8Ru7vROINv4yp4E1ewwHwYDVR0j BBgwFoAU4wp4KU0aa2pj0n433W/G57gPntIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYxY2Y3NzctOGFkZi00ZWYxLThkNmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0 RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdCODBGOUVEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzBBNzgyOTREMUE2QjZBNjNEMjdFMzdERDZGQzZFN0I4MEY5 RUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2 RTdCODBGOUVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYRlRD58TjIhIHe0MMgT8Beaizd8dBQkSEC r9YvlIlXnRRrn3IPXmrRWkZFQ12xp/l7/zzIErOn9IM8x5BSOs/FHhnCvYGkOQsW fsRytjIAQH4C0UDNj6G29UILb2fQE68/LnPX/N10Uzpl+BkZyWofEYhdcJZdoEBy X920kmnH+WB8q+V1ava2kpXJQTHRhYhMjNAu1ByMAZ5ZS6NWpIreDcLMVxpRh49/ hJ9SDu18tdiwAJesmA3DFDqH3rSn+Bjd3Pzb/WWT7KrElQutbmPuU+V2ldXsXEt1 97w/+HJRMB5/Q4BnnmxnDi7MsxA3CT4Py+Lfoe8eFeLhjml+ec8= -----END CERTIFICATE-----Generated at Wed May 13 04:08:59 2026 by rpki-client