$ rpki-client -vvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json) Hash identifier: FNe9WdIsFQKfG+JhVCx5iupp75/Yu2JIGRxO3gj014c= Subject key identifier: E0:A8:8E:D7:78:5B:0A:A7:72:E8:C9:54:29:BB:B9:5A:F1:E5:58:A3 Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Certificate serial: 376D27D30FB5CE86B99CF55ECF3C0FE50AF3F2CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:06:50 +0000 Manifest this update: Tue 12 May 2026 06:01:50 +0000 Manifest next update: Wed 13 May 2026 08:15:50 +0000 Files and hashes: 1: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=) 2: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=) 3: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: PKRGfXAHHTwUyAB3NKtSFOKxEYznSmv0R8ZzwVEWNGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6d:27:d3:0f:b5:ce:86:b9:9c:f5:5e:cf:3c:0f:e5:0a:f3:f2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Validity Not Before: May 12 06:01:50 2026 GMT Not After : May 13 08:15:50 2026 GMT Subject: CN=E0A88ED7785B0AA772E8C95429BBB95AF1E558A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:a0:d2:69:e9:ec:1b:f0:1f:db:3e:bd:c7: fd:6f:82:af:30:ff:44:db:d8:fd:0d:52:96:78:52: cf:f2:b5:a8:7c:12:74:70:b9:70:ab:9f:94:14:9e: b4:62:22:59:c0:d4:24:c3:e5:11:4e:7f:70:06:d3: fe:38:4e:6f:d2:70:65:26:44:39:e1:5f:a7:a9:fd: fe:f6:78:ba:e9:38:2d:44:47:ec:55:80:30:5e:cb: 71:92:39:ba:36:53:43:a3:ec:01:cb:1f:a1:f7:95: 24:2b:66:5a:79:f5:75:58:f6:11:bc:b9:da:5a:34: 2b:d3:91:a2:30:9a:90:2f:9b:03:b6:d1:d3:ac:d1: 34:34:85:0e:17:ba:f4:94:86:f9:0e:27:8d:78:2b: c3:73:55:f9:98:25:be:46:10:29:9f:3d:f7:a4:61: 6b:13:e9:f9:75:fd:1b:b4:2b:bc:82:c7:41:f9:36: 22:50:d0:17:74:b8:b6:60:ef:2b:13:2b:0a:c4:21: ba:09:6e:22:25:83:53:65:3c:f1:36:80:90:1f:0c: b9:54:00:59:2f:cb:01:c0:6a:a0:6e:38:c0:4c:9c: 74:4e:b1:2e:18:76:cc:6f:c8:8c:c8:97:d6:d6:82: 4a:f9:04:fe:0d:d0:f6:dc:0c:fb:e9:61:87:83:23: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A8:8E:D7:78:5B:0A:A7:72:E8:C9:54:29:BB:B9:5A:F1:E5:58:A3 X509v3 Authority Key Identifier: keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:c2:98:a1:c9:94:4a:64:45:c8:ad:3e:dc:e3:5c:0b:c4:f6: 6a:3c:53:9c:6f:6a:20:db:12:ea:52:03:0b:ff:00:33:8e:c8: 81:59:21:95:a0:88:c3:2d:19:8f:b5:aa:bb:c3:31:0a:0e:a7: fb:a7:2d:e8:8f:00:f0:62:0b:a1:ef:7a:e9:ef:d8:b7:85:b4: 7b:94:00:6f:e5:49:aa:97:8f:00:3c:14:57:71:21:37:53:08: d4:0b:8d:4d:98:ff:ed:92:b0:f1:28:f9:ba:74:4f:71:f8:81: 90:35:b6:82:6f:9b:58:d8:e9:be:e7:01:f6:f7:f1:44:1e:2f: b9:3b:e4:fd:4b:1c:38:83:4f:da:86:f8:68:df:3d:e5:4b:dc: a7:0c:6a:42:5c:51:9d:1e:68:6c:b0:00:e6:1d:19:f5:6a:71: a6:d8:1b:26:33:b6:e2:c9:0a:14:ee:33:79:64:f6:d3:0f:f8: 92:6b:01:7e:ec:2c:52:c7:0b:36:7c:2f:c1:5d:a9:1e:33:fe: 64:60:da:22:83:f2:4c:61:cb:5d:2b:7a:a3:35:4a:df:80:fb: 68:e1:52:3e:c0:0d:4b:66:a4:0a:ef:02:a0:94:3b:10:74:d8: d5:bd:ac:2f:5b:a4:bb:71:ad:ed:b5:9a:56:a5:52:d6:99:74: 03:64:c7:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN20n0w+1zoa5nPVezzwP5Qrz8s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD REZFMjRGOTAeFw0yNjA1MTIwNjAxNTBaFw0yNjA1MTMwODE1NTBaMDMxMTAvBgNV BAMTKEUwQTg4RUQ3Nzg1QjBBQTc3MkU4Qzk1NDI5QkJCOTVBRjFFNTU4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP8qDSaensG/Af2z69x/1vgq8w /0Tb2P0NUpZ4Us/ytah8EnRwuXCrn5QUnrRiIlnA1CTD5RFOf3AG0/44Tm/ScGUm RDnhX6ep/f72eLrpOC1ER+xVgDBey3GSObo2U0Oj7AHLH6H3lSQrZlp59XVY9hG8 udpaNCvTkaIwmpAvmwO20dOs0TQ0hQ4XuvSUhvkOJ414K8NzVfmYJb5GECmfPfek YWsT6fl1/Ru0K7yCx0H5NiJQ0Bd0uLZg7ysTKwrEIboJbiIlg1NlPPE2gJAfDLlU AFkvywHAaqBuOMBMnHROsS4YdsxvyIzIl9bWgkr5BP4N0PbcDPvpYYeDI3WpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KiO13hbCqdy6MlUKbu5WvHlWKMwHwYDVR0j BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy NEY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUw RERDREZFMjRGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPCmKHJlEpkRcitPtzjXAvE9mo8U5xvaiDb EupSAwv/ADOOyIFZIZWgiMMtGY+1qrvDMQoOp/unLeiPAPBiC6Hveunv2LeFtHuU AG/lSaqXjwA8FFdxITdTCNQLjU2Y/+2SsPEo+bp0T3H4gZA1toJvm1jY6b7nAfb3 8UQeL7k75P1LHDiDT9qG+GjfPeVL3KcMakJcUZ0eaGywAOYdGfVqcabYGyYztuLJ ChTuM3lk9tMP+JJrAX7sLFLHCzZ8L8FdqR4z/mRg2iKD8kxhy10reqM1St+A+2jh Uj7ADUtmpArvAqCUOxB02NW9rC9bpLtxre21mlalUtaZdANkxzQ= -----END CERTIFICATE-----Generated at Tue May 12 22:52:00 2026 by rpki-client