$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft File: EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft (raw, json) Hash identifier: 6QAA0Am5llaAErI/Q4m9B/Sji4RjV/X/mD50LzX/nnY= Subject key identifier: 88:79:45:35:10:0B:E1:6E:A7:95:2D:BC:F2:04:35:30:FD:F3:2C:CA Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Certificate serial: 49E642076AD8D2CEF915879AB488AAF22CBD0FE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:13 +0000 Manifest this update: Tue 12 May 2026 20:53:13 +0000 Manifest next update: Wed 13 May 2026 21:05:13 +0000 Files and hashes: 1: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: RSC52CIB9gdiO0mwgB0RPCA6fPz9z6KlTh9C7/oKbQo=) 2: EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl (hash: OTyMu7KZAP/nWPb4DHUhrOltfOHfhKZNGbifcVMHHJo=) 3: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: o4JOjbFiv+4qyKKMgo76HMlwWX3ya/KPCg6m6TUpetU=) 4: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=) 5: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e6:42:07:6a:d8:d2:ce:f9:15:87:9a:b4:88:aa:f2:2c:bd:0f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269 Validity Not Before: May 12 20:53:13 2026 GMT Not After : May 13 21:05:13 2026 GMT Subject: CN=88794535100BE16EA7952DBCF2043530FDF32CCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:28:67:4e:57:0e:82:c4:1e:74:7d:30:e9: b2:1a:18:b5:a8:ee:55:9c:3b:41:85:69:c7:2a:1b: 7b:e9:b2:de:49:b3:bd:2a:89:8f:72:21:24:80:b1: c7:65:eb:66:64:a3:dd:69:8f:72:50:24:17:1b:34: 0e:92:7e:27:f8:44:ce:9f:b7:8c:99:28:f1:c4:2e: ec:c5:7b:79:dd:63:24:a6:e1:1a:92:a2:6f:5e:7f: 1d:18:a1:34:45:4e:c1:dc:07:96:bd:40:b2:7d:c5: 93:88:5d:33:46:41:0d:ff:6e:7d:cb:76:7e:dc:31: 94:c9:73:13:f8:c7:1f:5f:d8:4e:43:a9:33:f2:ca: c5:f9:56:7b:84:fb:67:e0:91:d1:c6:07:2a:1c:83: 6c:f7:95:91:d0:98:48:32:d8:ee:af:33:35:54:17: 69:dd:62:47:63:19:c2:7f:93:99:75:99:c2:ee:89: 79:d0:7d:9a:0c:0b:42:eb:d9:df:e1:fa:6f:cc:0e: cd:6a:c8:f7:44:cf:eb:58:81:57:c2:f8:db:09:5a: 62:de:1d:61:30:05:34:a4:23:74:1d:5b:4f:ea:75: 40:ee:3d:14:81:4f:81:dc:08:d9:c5:e1:9e:c8:e6: 46:9a:73:ff:81:98:8a:57:7e:c0:0e:2a:b6:7d:dd: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:79:45:35:10:0B:E1:6E:A7:95:2D:BC:F2:04:35:30:FD:F3:2C:CA X509v3 Authority Key Identifier: keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:a3:b6:3d:df:73:02:a9:7d:b0:c4:d3:a3:d4:fb:e5:11: 5b:4e:cd:82:c6:3a:5f:ed:47:04:f3:2e:cc:b3:ab:58:07:15: bc:c4:0c:1e:f9:87:92:3b:00:0a:2b:c7:1a:c9:51:c5:c0:29: ee:f9:c2:85:cf:1b:6f:a4:f7:4c:60:1a:a6:c2:eb:a7:1d:9d: 9d:b2:76:6f:fb:3b:28:22:0b:df:38:15:23:c7:db:76:1e:0c: 7d:a2:85:aa:92:1e:76:b6:bd:bb:01:d3:70:8b:24:d2:1f:76: 90:9d:04:3b:6a:e3:6b:02:b8:cb:34:51:2a:39:7a:05:e7:79: bc:66:11:32:85:91:d9:e7:04:d6:aa:16:d5:5b:de:4d:b8:60: 44:46:8d:e3:24:d4:04:fd:70:4d:e9:d4:57:3b:54:a0:c1:d1: 7c:03:e8:fa:82:ff:a2:55:08:b3:1b:f3:7d:7d:d9:63:b0:d7: fa:e5:48:bb:3d:3c:1e:15:c1:e5:b9:4d:c7:e4:a7:02:b4:7e: 4e:db:35:78:84:44:0f:75:cd:c1:28:a2:c5:4d:6c:42:b7:5e: 1a:14:29:80:ef:d9:67:f7:1c:40:81:bf:49:78:8b:bf:65:8a: 6a:bb:29:6d:bb:18:9d:75:57:1f:12:aa:ab:02:ed:a7:9f:98: 92:64:3c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSeZCB2rY0s75FYeatIiq8iy9D+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRDQTUy MjgzRTI2OTAeFw0yNjA1MTIyMDUzMTNaFw0yNjA1MTMyMTA1MTNaMDMxMTAvBgNV BAMTKDg4Nzk0NTM1MTAwQkUxNkVBNzk1MkRCQ0YyMDQzNTMwRkRGMzJDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRShnTlcOgsQedH0w6bIaGLWo 7lWcO0GFaccqG3vpst5Js70qiY9yISSAscdl62Zko91pj3JQJBcbNA6Sfif4RM6f t4yZKPHELuzFe3ndYySm4RqSom9efx0YoTRFTsHcB5a9QLJ9xZOIXTNGQQ3/bn3L dn7cMZTJcxP4xx9f2E5DqTPyysX5VnuE+2fgkdHGByocg2z3lZHQmEgy2O6vMzVU F2ndYkdjGcJ/k5l1mcLuiXnQfZoMC0Lr2d/h+m/MDs1qyPdEz+tYgVfC+NsJWmLe HWEwBTSkI3QdW0/qdUDuPRSBT4HcCNnF4Z7I5kaac/+BmIpXfsAOKrZ93fVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiHlFNRAL4W6nlS288gQ1MP3zLMowHwYDVR0j BBgwFoAU7indPUwXqOhxuspp31hMpSKD4mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFlOGRiMzgtNjNhOC00MTNjLWE5ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0 QzE3QThFODcxQkFDQTY5REY1ODRDQTUyMjgzRTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRTI5REQzRDRDMTdBOEU4NzFCQUNBNjlERjU4NENBNTIyODNF MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvRUUyOUREM0Q0QzE3QThFODcxQkFDQTY5REY1ODRD QTUyMjgzRTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACM/o7Y933MCqX2wxNOj1PvlEVtOzYLGOl/t RwTzLsyzq1gHFbzEDB75h5I7AAorxxrJUcXAKe75woXPG2+k90xgGqbC66cdnZ2y dm/7OygiC984FSPH23YeDH2ihaqSHna2vbsB03CLJNIfdpCdBDtq42sCuMs0USo5 egXnebxmETKFkdnnBNaqFtVb3k24YERGjeMk1AT9cE3p1Fc7VKDB0XwD6PqC/6JV CLMb83192WOw1/rlSLs9PB4VweW5TcfkpwK0fk7bNXiERA91zcEoosVNbEK3XhoU KYDv2Wf3HECBv0l4i79limq7KW27GJ11Vx8SqqsC7aefmJJkPCA= -----END CERTIFICATE-----Generated at Wed May 13 02:37:56 2026 by rpki-client