$ rpki-client -vvf rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft File: 0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft (raw, json) Hash identifier: jYeMHQ1iC9gQELiwtPG5n7sOxnwuIpvKBIN+jY7K2HY= Subject key identifier: B1:85:EC:05:93:08:0E:86:ED:3C:E0:16:71:A6:D5:72:43:5F:30:A7 Authority key identifier: 0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4 Certificate issuer: /CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4 Certificate serial: 0A15B09BDBCA40D2485BE9A3AE5553A26940F51A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:03:03 +0000 Manifest this update: Tue 12 May 2026 17:58:03 +0000 Manifest next update: Wed 13 May 2026 18:55:03 +0000 Files and hashes: 1: 3130332e38332e302e302f32342d3234203d3e20313530323532.roa (hash: ESYFLhLUVsrTAfVtaCjm2iupLDG9Q3qv3T4W73aB/40=) 2: 0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl (hash: dM2d0/JtuzunizBTwqvb0TsNQjoDcPxN9fMOHr5Z3O8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:15:b0:9b:db:ca:40:d2:48:5b:e9:a3:ae:55:53:a2:69:40:f5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4 Validity Not Before: May 12 17:58:03 2026 GMT Not After : May 13 18:55:03 2026 GMT Subject: CN=B185EC0593080E86ED3CE01671A6D572435F30A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:41:14:92:e6:bc:8c:d8:98:28:5b:b4:f4: 12:dc:d7:d1:88:e7:2a:3b:24:7b:90:e9:74:52:75: 36:e3:76:c7:52:89:3c:e1:26:97:d6:cc:f2:ea:f5: 2e:1e:14:03:d1:75:16:b3:f5:bb:1c:90:0f:b1:49: cf:7a:75:5d:b4:26:15:b9:10:fc:31:fd:d7:73:fe: 10:7f:f2:0b:15:a4:76:e4:fd:25:94:f3:51:f0:ea: d5:35:a7:e9:ec:1c:fe:b1:96:56:61:ca:e5:59:f7: 60:79:eb:ac:6e:d7:24:26:d3:4c:f7:4b:6a:5e:59: 09:0f:cf:c3:71:4f:b5:84:65:1f:25:76:4d:d3:08: ee:d4:f1:f3:dd:65:55:e4:7e:23:2a:62:16:4f:58: 66:58:60:ae:00:15:41:c7:ff:fc:56:cf:f4:e6:7e: b5:33:5f:3a:c9:9e:3f:d1:80:4f:f9:af:e9:fd:0e: d8:ea:b5:7f:ae:35:86:9b:e6:61:c7:05:46:a2:83: 82:28:5a:61:ee:32:54:1c:32:a3:d6:be:5f:06:bb: a6:5b:f0:0e:b3:84:d7:c2:d6:a2:60:b9:77:0b:cc: 7b:60:29:f8:13:8a:6d:a5:fc:ec:ea:ff:75:01:ac: 32:66:a0:9c:c6:d1:35:cd:20:bf:d3:1f:07:1a:e0: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:85:EC:05:93:08:0E:86:ED:3C:E0:16:71:A6:D5:72:43:5F:30:A7 X509v3 Authority Key Identifier: keyid:0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:fe:5e:2f:1c:b8:e3:43:26:9f:9c:72:0f:08:29:2d:1a:cc: a8:fd:57:2b:67:6e:1c:78:dd:61:69:36:bf:a0:c5:f0:37:f5: 52:41:5a:b3:1b:59:67:26:2b:33:95:25:0c:e6:31:ab:31:c9: 9b:be:bc:08:c5:7c:0c:fd:31:d6:e4:6b:bb:a5:9d:dd:47:b4: 2c:21:ee:b8:a2:d9:01:94:0a:58:cd:06:45:d1:32:69:d7:af: c0:b0:7e:a0:5a:b0:0e:66:25:db:e7:09:e6:41:28:0e:2a:33: 92:d6:35:41:5c:99:69:76:b3:60:23:64:fb:6e:f9:9b:24:5f: 93:3c:84:e6:9f:f2:13:df:0c:9d:d2:fe:9c:cc:01:a2:34:14: 35:e8:86:a7:51:73:08:f3:0e:1d:76:47:3b:fb:6d:a2:c5:b6: 6a:c6:47:0e:d0:0a:aa:e5:ae:74:fd:69:ce:5c:b1:71:5e:73: b9:63:e8:06:74:32:23:d1:d8:30:c1:76:65:8f:88:02:df:d1: 08:ef:90:ab:9f:15:ed:8c:03:b0:15:2b:43:5f:3d:ef:ea:3a: ec:c2:a2:2a:11:31:c0:6d:c9:6b:15:37:2e:1b:c1:3f:8a:7f: bf:8f:b8:0d:52:34:be:16:3d:28:5b:b3:ab:1d:03:55:f2:ae: 87:42:b5:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChWwm9vKQNJIW+mjrlVTomlA9RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4RTdGRjUyOUEzMDQwN0ZFREUxOENGODkyRjRFMjA1 NTc4Q0ZGNDAeFw0yNjA1MTIxNzU4MDNaFw0yNjA1MTMxODU1MDNaMDMxMTAvBgNV BAMTKEIxODVFQzA1OTMwODBFODZFRDNDRTAxNjcxQTZENTcyNDM1RjMwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCN0EUkua8jNiYKFu09BLc19GI 5yo7JHuQ6XRSdTbjdsdSiTzhJpfWzPLq9S4eFAPRdRaz9bsckA+xSc96dV20JhW5 EPwx/ddz/hB/8gsVpHbk/SWU81Hw6tU1p+nsHP6xllZhyuVZ92B566xu1yQm00z3 S2peWQkPz8NxT7WEZR8ldk3TCO7U8fPdZVXkfiMqYhZPWGZYYK4AFUHH//xWz/Tm frUzXzrJnj/RgE/5r+n9DtjqtX+uNYab5mHHBUaig4IoWmHuMlQcMqPWvl8Gu6Zb 8A6zhNfC1qJguXcLzHtgKfgTim2l/Ozq/3UBrDJmoJzG0TXNIL/THwca4M53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsYXsBZMIDobtPOAWcabVckNfMKcwHwYDVR0j BBgwFoAUDo5/9SmjBAf+3hjPiS9OIFV4z/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjYyYzIzNjYtZjllYy00NDU1LWE5ZmYtZmY2OTZhMTA3ZTYyLzAvMEU4RTdGRjUy OUEzMDQwN0ZFREUxOENGODkyRjRFMjA1NTc4Q0ZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRThFN0ZGNTI5QTMwNDA3RkVERTE4Q0Y4OTJGNEUyMDU1NzhD RkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjYyYzIzNjYtZjllYy00NDU1LWE5 ZmYtZmY2OTZhMTA3ZTYyLzAvMEU4RTdGRjUyOUEzMDQwN0ZFREUxOENGODkyRjRF MjA1NTc4Q0ZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMH+Xi8cuONDJp+ccg8IKS0azKj9Vytnbhx4 3WFpNr+gxfA39VJBWrMbWWcmKzOVJQzmMasxyZu+vAjFfAz9Mdbka7ulnd1HtCwh 7rii2QGUCljNBkXRMmnXr8CwfqBasA5mJdvnCeZBKA4qM5LWNUFcmWl2s2AjZPtu +ZskX5M8hOaf8hPfDJ3S/pzMAaI0FDXohqdRcwjzDh12Rzv7baLFtmrGRw7QCqrl rnT9ac5csXFec7lj6AZ0MiPR2DDBdmWPiALf0QjvkKufFe2MA7AVK0NfPe/qOuzC oioRMcBtyWsVNy4bwT+Kf7+PuA1SNL4WPShbs6sdA1XyrodCtTs= -----END CERTIFICATE-----Generated at Wed May 13 07:36:14 2026 by rpki-client