$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: 0x597rFciI1qAs9n0es/rzSoLzMAPncqR2LUVjpccYw= Subject key identifier: C3:BC:18:50:A4:CA:50:8B:46:E0:AF:59:26:97:90:23:BE:9E:81:2D Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 446582DE5864E3BCEB7335F7CF9D9FA479EEC072 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:35 +0000 Manifest this update: Tue 12 May 2026 19:56:35 +0000 Manifest next update: Wed 13 May 2026 23:06:35 +0000 Files and hashes: 1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: EKDM/6Nt/GiE0g//ShGGN3o5zT7ekaZmeg2Czez9BoU=) 2: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) 3: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:65:82:de:58:64:e3:bc:eb:73:35:f7:cf:9d:9f:a4:79:ee:c0:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: May 12 19:56:35 2026 GMT Not After : May 13 23:06:35 2026 GMT Subject: CN=C3BC1850A4CA508B46E0AF5926979023BE9E812D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:93:f1:cd:0b:74:f3:17:d6:0e:bc:bd:fc: 79:69:7d:a9:74:49:d6:75:65:89:35:d3:34:2f:8a: e5:1a:bf:72:c2:23:88:87:f2:84:23:e8:98:b3:cb: 2e:ab:3e:ef:99:91:03:c3:3a:84:67:34:f6:23:0a: 9d:4f:4b:05:40:21:64:f1:11:7f:80:46:a8:12:a4: fa:65:de:69:79:bb:d5:be:74:62:51:92:b5:a3:75: 43:aa:48:aa:ba:3d:2b:06:32:cd:68:c0:ba:8e:4f: a7:32:a2:02:04:d7:9e:05:35:61:e8:6d:4e:4f:a6: cc:bc:0f:b2:d3:18:31:0c:94:61:8c:34:0b:2c:2e: 65:12:2a:b5:0b:aa:ec:18:43:ad:4f:cf:01:4b:a5: 44:59:21:f7:4b:52:9b:83:d5:34:61:68:3a:f0:ec: 55:13:52:19:f1:80:4a:08:e8:19:e9:96:35:da:1b: c1:e8:26:f4:ad:6b:c3:d5:7f:06:27:75:ce:70:95: 50:87:0b:e2:a4:6e:1b:32:ac:02:6f:cf:18:aa:a1: b3:9d:07:c7:db:21:f7:e9:72:f1:01:3a:f6:9e:78: 0e:55:a9:51:dd:dc:6e:d5:bb:cf:a0:3c:2d:38:87: b4:3f:8d:a6:78:1e:78:01:33:a9:eb:d2:51:66:e4: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BC:18:50:A4:CA:50:8B:46:E0:AF:59:26:97:90:23:BE:9E:81:2D X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:71:c6:78:ec:8a:9f:e7:11:3f:19:7f:f7:71:12:25:69:64: 5e:ce:75:eb:07:46:20:e7:9b:89:db:34:e8:b3:62:88:b9:62: ba:86:fb:ec:d6:fb:1f:1e:f7:21:a1:bf:e0:c8:bf:21:ea:7c: e8:56:9b:13:47:d9:6a:91:b9:58:db:07:3a:71:e8:93:0c:86: f2:94:b1:1b:34:4e:c8:f0:73:f1:54:56:51:86:72:8e:d5:a6: 1c:2d:e0:1d:08:e4:c5:67:a8:67:e8:ed:de:43:01:01:0a:d1: ad:dd:4e:1b:8b:b2:81:9e:73:ca:80:c9:f7:8d:cc:93:19:ea: 82:88:eb:99:6f:93:08:d5:8f:ab:29:e0:1a:24:57:81:e5:95: 6f:b8:8b:ec:9f:24:cd:73:3c:60:aa:d2:2c:ac:08:b1:fa:8c: fd:19:e1:bf:d5:b5:62:cb:dd:2e:31:ef:ea:fa:94:43:a1:ee: af:16:40:e9:df:f3:bd:03:2e:7f:22:cc:99:1c:7d:75:b9:02: 68:00:b1:65:02:aa:62:19:61:9a:be:c5:c3:ef:ec:1e:72:ff: 62:bf:43:9a:5e:82:86:c9:1c:01:73:f8:ee:c8:36:2c:8a:da: d0:80:32:b9:6d:48:57:d0:f2:3d:c3:ce:ed:14:ae:08:55:ed: 54:58:10:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGWC3lhk47zrczX3z52fpHnuwHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA1MTIxOTU2MzVaFw0yNjA1MTMyMzA2MzVaMDMxMTAvBgNV BAMTKEMzQkMxODUwQTRDQTUwOEI0NkUwQUY1OTI2OTc5MDIzQkU5RTgxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTJPxzQt08xfWDry9/Hlpfal0 SdZ1ZYk10zQviuUav3LCI4iH8oQj6Jizyy6rPu+ZkQPDOoRnNPYjCp1PSwVAIWTx EX+ARqgSpPpl3ml5u9W+dGJRkrWjdUOqSKq6PSsGMs1owLqOT6cyogIE154FNWHo bU5Ppsy8D7LTGDEMlGGMNAssLmUSKrULquwYQ61PzwFLpURZIfdLUpuD1TRhaDrw 7FUTUhnxgEoI6BnpljXaG8HoJvSta8PVfwYndc5wlVCHC+KkbhsyrAJvzxiqobOd B8fbIffpcvEBOvaeeA5VqVHd3G7Vu8+gPC04h7Q/jaZ4HngBM6nr0lFm5EmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7wYUKTKUItG4K9ZJpeQI76egS0wHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZxxnjsip/nET8Zf/dxEiVpZF7OdesHRiDn m4nbNOizYoi5YrqG++zW+x8e9yGhv+DIvyHqfOhWmxNH2WqRuVjbBzpx6JMMhvKU sRs0Tsjwc/FUVlGGco7Vphwt4B0I5MVnqGfo7d5DAQEK0a3dThuLsoGec8qAyfeN zJMZ6oKI65lvkwjVj6sp4BokV4HllW+4i+yfJM1zPGCq0iysCLH6jP0Z4b/VtWLL 3S4x7+r6lEOh7q8WQOnf870DLn8izJkcfXW5AmgAsWUCqmIZYZq+xcPv7B5y/2K/ Q5pegobJHAFz+O7INiyK2tCAMrltSFfQ8j3Dzu0UrghV7VRYEFI= -----END CERTIFICATE-----Generated at Wed May 13 02:50:13 2026 by rpki-client