$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json) Hash identifier: 29myquJwFWvXoG45St2kG+1yvaYAT9Tj5pT6lGCmAs4= Subject key identifier: D6:65:0C:D7:6A:87:C5:8C:EB:76:B1:5B:63:BA:8C:EF:69:71:A1:1A Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Certificate serial: 4CDA438C653225CC46A9369955ABF2BC5278B489 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:08 +0000 Manifest this update: Tue 12 May 2026 19:41:08 +0000 Manifest next update: Wed 13 May 2026 21:06:08 +0000 Files and hashes: 1: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: w3dO2moODTMIzvdmlTq+ao36offPGMYqXBT30zdabK8=) 2: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=) 3: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=) 4: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=) 5: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:da:43:8c:65:32:25:cc:46:a9:36:99:55:ab:f2:bc:52:78:b4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Validity Not Before: May 12 19:41:08 2026 GMT Not After : May 13 21:06:08 2026 GMT Subject: CN=D6650CD76A87C58CEB76B15B63BA8CEF6971A11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:6b:b8:ad:4c:de:c4:d7:16:a0:27:56:c0: 3f:02:14:24:20:61:dc:d3:27:3d:4b:8d:7b:1a:b8: 24:2b:d0:79:c6:34:99:e2:24:8d:1e:25:e6:0d:c7: 28:dc:64:9f:bc:78:0c:9a:42:71:09:83:85:c0:69: 38:3f:83:a7:bd:e8:58:50:8b:4d:f6:f0:31:cc:26: 17:57:27:6e:26:00:78:37:1a:74:9e:b9:46:f4:06: 61:cf:ad:53:c7:b3:95:51:3c:c1:f0:72:b6:98:ff: df:7c:7f:5d:cd:40:17:fe:02:98:21:44:ed:a0:54: 2d:80:51:85:83:e2:20:6d:1c:14:2b:a6:4f:30:fd: 2a:a6:6c:f4:c2:7e:f2:04:e8:58:8a:57:69:d9:3a: 67:fd:87:41:fb:5e:9b:74:79:9f:b2:a4:14:65:45: 75:f5:c1:0d:20:b7:90:98:57:07:4b:91:b3:eb:f7: b2:89:c7:1d:4c:f7:10:78:3f:6b:75:dc:4e:3a:1b: 22:87:52:4c:b9:e7:6c:9a:e3:6e:43:4c:7c:28:38: 36:b7:d4:27:74:93:19:4d:bd:25:af:01:d8:30:13: 4a:79:b2:92:37:6e:96:87:82:83:d9:ad:98:50:de: 20:ec:42:3b:6f:49:e7:e8:9b:41:db:92:be:30:19: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:0C:D7:6A:87:C5:8C:EB:76:B1:5B:63:BA:8C:EF:69:71:A1:1A X509v3 Authority Key Identifier: keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cb:f0:7b:c0:b2:4c:e3:c4:07:b2:16:ed:29:cf:5f:5d:49: f3:62:3a:0c:4e:79:f8:ff:8b:09:bb:5f:0d:65:8e:0b:1b:57: 01:3d:2e:48:68:ee:d5:c1:9f:8d:f8:4a:61:90:1c:60:c9:b7: 26:19:17:48:22:d3:42:6d:44:66:76:6a:4f:37:a4:c7:e2:72: 84:b4:53:97:24:c4:02:7b:de:c8:25:a3:e7:b3:e3:b7:3e:c9: fe:85:aa:b5:9c:cb:1a:da:12:74:92:f5:2a:5a:ac:41:37:44: 29:9d:17:db:c1:fd:f5:38:14:20:4c:2c:67:7c:16:42:c1:23: b7:8c:c6:3f:ef:1f:be:98:25:5d:a5:63:63:6b:4d:39:cd:42: db:ac:72:2c:7d:4c:79:b8:a0:7f:70:ff:51:da:d0:a5:a9:b7: bd:96:cb:64:dc:fb:28:b5:b4:43:d2:39:f7:e7:df:9e:53:9f: d8:af:ce:eb:ff:d9:c9:ea:13:d3:ef:18:b7:fb:61:5e:d3:1e: 9a:8b:19:ab:43:71:4c:2e:48:09:81:13:f9:f5:7f:92:f1:8c: 0b:cc:a1:e7:5e:e2:24:57:5b:70:b3:4d:0d:f7:43:64:01:90: e0:0a:61:f2:55:f1:d4:d3:45:6e:7a:84:3b:80:2f:bc:20:e4: e2:00:8e:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNpDjGUyJcxGqTaZVavyvFJ4tIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG MzgxMkI0NDAeFw0yNjA1MTIxOTQxMDhaFw0yNjA1MTMyMTA2MDhaMDMxMTAvBgNV BAMTKEQ2NjUwQ0Q3NkE4N0M1OENFQjc2QjE1QjYzQkE4Q0VGNjk3MUExMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EGu4rUzexNcWoCdWwD8CFCQg YdzTJz1LjXsauCQr0HnGNJniJI0eJeYNxyjcZJ+8eAyaQnEJg4XAaTg/g6e96FhQ i0328DHMJhdXJ24mAHg3GnSeuUb0BmHPrVPHs5VRPMHwcraY/998f13NQBf+Apgh RO2gVC2AUYWD4iBtHBQrpk8w/SqmbPTCfvIE6FiKV2nZOmf9h0H7Xpt0eZ+ypBRl RXX1wQ0gt5CYVwdLkbPr97KJxx1M9xB4P2t13E46GyKHUky552ya425DTHwoODa3 1Cd0kxlNvSWvAdgwE0p5spI3bpaHgoPZrZhQ3iDsQjtvSefom0Hbkr4wGYvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1mUM12qHxYzrdrFbY7qM72lxoRowHwYDVR0j BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2 MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXL8HvAskzjxAeyFu0pz19dSfNiOgxOefj/ iwm7Xw1ljgsbVwE9Lkho7tXBn434SmGQHGDJtyYZF0gi00JtRGZ2ak83pMficoS0 U5ckxAJ73sglo+ez47c+yf6FqrWcyxraEnSS9SparEE3RCmdF9vB/fU4FCBMLGd8 FkLBI7eMxj/vH76YJV2lY2NrTTnNQtuscix9THm4oH9w/1Ha0KWpt72Wy2Tc+yi1 tEPSOffn355Tn9ivzuv/2cnqE9PvGLf7YV7THpqLGatDcUwuSAmBE/n1f5LxjAvM oede4iRXW3CzTQ33Q2QBkOAKYfJV8dTTRW56hDuAL7wg5OIAjmM= -----END CERTIFICATE-----Generated at Wed May 13 00:21:21 2026 by rpki-client