$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: 1Ui/CXBjC4o4Nn5wR5l8OZLfw8ccYGltT4lbsuZqCVw= Subject key identifier: 1F:BA:2E:A8:14:AF:6E:33:B9:B4:0B:1A:9F:4A:22:E2:81:78:F4:F1 Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 650626879901B0AD6CD755F1D38677D490226BDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:08:08 +0000 Manifest this update: Tue 12 May 2026 18:03:08 +0000 Manifest next update: Wed 13 May 2026 19:30:08 +0000 Files and hashes: 1: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) 2: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) 3: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: Ih8qkf4ypaolrwA8NMdzmfW3M7NrE8r/XknXcjqG+lo=) 4: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:06:26:87:99:01:b0:ad:6c:d7:55:f1:d3:86:77:d4:90:22:6b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: May 12 18:03:08 2026 GMT Not After : May 13 19:30:08 2026 GMT Subject: CN=1FBA2EA814AF6E33B9B40B1A9F4A22E28178F4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:2f:57:7f:8a:a3:ed:68:fe:96:86:c1:a5: 6f:6e:57:c7:16:8b:40:ae:02:05:14:c3:25:cf:fd: 2e:5d:b7:9e:ea:24:59:6a:83:f5:2e:51:56:7b:79: 4a:d1:45:eb:59:be:b3:10:7b:09:6e:69:d1:f8:b5: d2:68:39:2b:b3:1c:26:34:7e:24:77:c7:4e:67:75: 64:ff:5f:0d:77:6a:87:15:4e:fc:02:56:6a:36:3b: dc:53:40:2c:84:50:36:75:b8:6c:eb:ad:5c:b0:0b: 99:58:80:a0:fc:ec:6f:05:e4:e4:d7:ad:20:93:47: da:ec:5d:17:9c:52:d6:a6:7b:fe:d1:15:2a:40:3a: 4b:f0:c3:ac:cd:ac:1f:9a:12:13:c0:33:24:80:c1: c5:0e:44:c1:93:3b:33:9f:60:7a:af:14:d8:a4:f1: c1:2c:c7:fa:fc:6f:aa:33:cc:60:d1:bb:7b:37:d9: fa:64:c3:87:b7:29:71:2c:2f:66:f0:ea:39:8f:69: 60:20:92:49:4d:87:f4:98:37:32:62:80:29:dd:43: 23:dd:34:6c:0b:dc:d9:9d:86:76:11:35:09:1e:53: cc:24:01:28:c0:ff:1e:ac:57:6f:d0:bb:49:13:7c: 79:72:df:a1:eb:f6:b4:3d:25:62:12:a0:4c:1b:eb: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BA:2E:A8:14:AF:6E:33:B9:B4:0B:1A:9F:4A:22:E2:81:78:F4:F1 X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:10:6c:63:23:12:ce:59:88:ec:67:77:9a:ae:94:0f:ee:75: 31:42:bb:70:3d:c1:ce:eb:af:0e:9d:e8:25:8e:07:93:53:c3: c4:71:9c:79:46:b9:3f:69:ff:bc:c9:ec:6f:32:5d:1c:4e:b9: ad:bf:07:f3:9e:52:bc:e6:ad:dd:5f:67:5b:f6:6a:b4:f9:25: f3:69:77:9d:97:82:ed:3c:1a:05:60:2b:ac:0f:d9:2a:95:50: ea:b8:e9:43:96:eb:94:06:53:83:60:f2:fa:18:95:2e:1a:80: 88:34:7a:82:75:9c:7c:7c:57:c5:35:78:03:57:af:5c:c8:66: 38:12:9a:20:e8:35:ad:8e:c5:d5:4e:c5:fc:03:60:cf:d0:2a: ce:7e:c1:28:a7:9d:50:b6:fb:75:13:00:db:0e:12:99:96:46: 07:fa:84:62:01:7a:f8:1b:ad:cf:2f:92:65:97:96:32:90:05: 5e:f1:e5:ff:ea:78:f0:b5:f9:6a:2b:e5:81:1b:1e:44:0f:21: 60:6b:9f:02:89:cc:88:34:4c:99:92:1b:98:5f:a7:e2:c4:f2: 40:c4:7e:34:ba:bf:8d:69:e4:83:8c:aa:ca:e2:01:85:c7:8e: 26:55:8a:33:66:af:20:1a:8b:35:15:8f:bb:4c:f4:f5:50:aa: d3:f4:76:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQYmh5kBsK1s11Xx04Z31JAia9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjA1MTIxODAzMDhaFw0yNjA1MTMxOTMwMDhaMDMxMTAvBgNV BAMTKDFGQkEyRUE4MTRBRjZFMzNCOUI0MEIxQTlGNEEyMkUyODE3OEY0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5C9Xf4qj7Wj+lobBpW9uV8cW i0CuAgUUwyXP/S5dt57qJFlqg/UuUVZ7eUrRRetZvrMQewluadH4tdJoOSuzHCY0 fiR3x05ndWT/Xw13aocVTvwCVmo2O9xTQCyEUDZ1uGzrrVywC5lYgKD87G8F5OTX rSCTR9rsXRecUtame/7RFSpAOkvww6zNrB+aEhPAMySAwcUORMGTOzOfYHqvFNik 8cEsx/r8b6ozzGDRu3s32fpkw4e3KXEsL2bw6jmPaWAgkklNh/SYNzJigCndQyPd NGwL3NmdhnYRNQkeU8wkASjA/x6sV2/Qu0kTfHly36Hr9rQ9JWISoEwb64mjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH7ouqBSvbjO5tAsan0oi4oF49PEwHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcQbGMjEs5ZiOxnd5qulA/udTFCu3A9wc7r rw6d6CWOB5NTw8RxnHlGuT9p/7zJ7G8yXRxOua2/B/OeUrzmrd1fZ1v2arT5JfNp d52Xgu08GgVgK6wP2SqVUOq46UOW65QGU4Ng8voYlS4agIg0eoJ1nHx8V8U1eANX r1zIZjgSmiDoNa2OxdVOxfwDYM/QKs5+wSinnVC2+3UTANsOEpmWRgf6hGIBevgb rc8vkmWXljKQBV7x5f/qePC1+Wor5YEbHkQPIWBrnwKJzIg0TJmSG5hfp+LE8kDE fjS6v41p5IOMqsriAYXHjiZVijNmryAaizUVj7tM9PVQqtP0doI= -----END CERTIFICATE-----Generated at Wed May 13 01:14:17 2026 by rpki-client