$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json) Hash identifier: tes4fJXThMDM2e7xDk8fy+922tr061dIH5RYlPpGxNU= Subject key identifier: B0:D7:11:80:0A:4C:33:8A:63:D2:D8:78:D9:57:CC:5E:0B:4A:F8:70 Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Certificate serial: 2E45E8DD1DE8D7F3103CE8B30784C41BCABE6CD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:23:45 +0000 Manifest this update: Tue 12 May 2026 18:18:45 +0000 Manifest next update: Wed 13 May 2026 22:19:45 +0000 Files and hashes: 1: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=) 2: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=) 3: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=) 4: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=) 5: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=) 6: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=) 7: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=) 8: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=) 9: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=) 10: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: wufvVyL8pzkiPhCKY2HFSPF/sd16erRK5lE045SBtNQ=) 11: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:45:e8:dd:1d:e8:d7:f3:10:3c:e8:b3:07:84:c4:1b:ca:be:6c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Validity Not Before: May 12 18:18:45 2026 GMT Not After : May 13 22:19:45 2026 GMT Subject: CN=B0D711800A4C338A63D2D878D957CC5E0B4AF870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6d:38:c2:da:30:ab:17:eb:17:ff:aa:bf:e9: f8:ef:5b:b8:2c:8c:0b:c7:a2:5c:ec:bf:d3:2e:8d: ea:0e:cc:26:da:b0:8c:78:8e:a0:18:aa:3e:0e:7d: 73:26:d0:73:d3:d8:e3:3a:5d:4a:18:2f:7a:bc:40: e9:bc:f0:e9:24:43:3e:59:32:df:a4:1a:72:f7:28: 82:e9:ca:a2:1c:b0:19:49:8a:b4:53:50:02:e7:80: 52:18:c8:02:79:29:b0:06:57:6c:e6:67:a1:b3:80: d1:2c:45:5f:85:94:08:4b:ba:7d:8e:e4:68:51:f5: ac:8f:cf:0b:2e:47:a1:2e:b7:e6:e6:18:80:23:0a: 18:63:04:59:e2:14:2d:c6:49:f0:24:70:d1:d8:04: ce:9e:b2:ed:78:23:ca:61:e5:d0:c4:3a:f2:c2:64: 14:30:d7:97:cd:c8:ed:59:d8:89:8a:f8:d0:7b:86: 9c:a4:2b:07:20:be:51:48:31:a5:ab:61:43:9d:7f: 4f:fa:91:0e:55:74:e8:17:58:dd:fe:b5:c1:31:c0: cc:22:5b:a3:0d:51:52:f5:80:4f:4d:ec:96:74:8f: ed:41:fd:41:93:13:4e:8a:1d:6c:0c:aa:6a:67:bf: c0:4e:b6:26:f8:93:57:48:84:a8:3e:0c:96:70:0e: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D7:11:80:0A:4C:33:8A:63:D2:D8:78:D9:57:CC:5E:0B:4A:F8:70 X509v3 Authority Key Identifier: keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fa:f1:20:f1:42:4d:b7:3f:d0:09:bb:6b:f1:ea:18:1a:aa: 22:ef:bc:df:94:8f:e2:65:48:9e:62:c0:ca:bf:cf:38:ac:b8: 75:69:6c:4c:14:9b:0d:70:3f:a1:90:45:eb:84:50:a2:1c:5b: 9b:e2:b9:ce:36:d7:aa:a5:2e:4e:9e:03:af:13:0a:10:60:cb: 83:e9:2a:a9:46:3e:43:d7:9c:7e:f9:26:f0:55:70:27:c8:cd: 9f:4c:6f:31:5f:a5:00:38:82:97:65:95:ea:3b:20:e6:a0:79: ef:2e:2f:31:83:c3:e3:c5:d0:b0:b5:09:9b:88:73:a9:ad:4d: 96:01:5e:56:6d:15:0b:2e:aa:81:29:60:b3:98:f3:90:46:a5: 7f:ca:c1:84:b8:cd:a3:4c:22:9b:f8:ee:84:b5:c5:75:c5:cb: 82:45:8e:f6:c2:4f:b5:43:67:b7:f2:71:dd:de:75:56:be:cc: f6:33:a1:eb:3c:64:eb:87:99:e6:c6:62:70:b0:90:a4:21:af: 40:a6:6a:a2:76:46:4e:e5:37:e3:7b:4c:c1:51:c8:32:97:25: 36:c3:95:4c:ac:a6:db:25:df:a8:b5:f2:f7:51:a8:48:d6:28: b5:1c:09:fc:46:e2:d0:5e:0c:ab:09:3c:dd:e8:ba:21:1a:09: c9:0a:37:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkXo3R3o1/MQPOizB4TEG8q+bNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2NzRE REIyOUFDMzAeFw0yNjA1MTIxODE4NDVaFw0yNjA1MTMyMjE5NDVaMDMxMTAvBgNV BAMTKEIwRDcxMTgwMEE0QzMzOEE2M0QyRDg3OEQ5NTdDQzVFMEI0QUY4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrbTjC2jCrF+sX/6q/6fjvW7gs jAvHolzsv9MujeoOzCbasIx4jqAYqj4OfXMm0HPT2OM6XUoYL3q8QOm88OkkQz5Z Mt+kGnL3KILpyqIcsBlJirRTUALngFIYyAJ5KbAGV2zmZ6GzgNEsRV+FlAhLun2O 5GhR9ayPzwsuR6Eut+bmGIAjChhjBFniFC3GSfAkcNHYBM6esu14I8ph5dDEOvLC ZBQw15fNyO1Z2ImK+NB7hpykKwcgvlFIMaWrYUOdf0/6kQ5VdOgXWN3+tcExwMwi W6MNUVL1gE9N7JZ0j+1B/UGTE06KHWwMqmpnv8BOtib4k1dIhKg+DJZwDs+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsNcRgApMM4pj0th42VfMXgtK+HAwHwYDVR0j BBgwFoAU3k6Z6gMK+K6/t7anoOkWdN2ymsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyNTQ0MTktNTNiZS00YWQ0LWJmN2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEw MzBBRjhBRUJGQjdCNkE3QTBFOTE2NzREREIyOUFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTRFOTlFQTAzMEFGOEFFQkZCN0I2QTdBMEU5MTY3NEREQjI5 QUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2 NzREREIyOUFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAf68SDxQk23P9AJu2vx6hgaqiLvvN+Uj+Jl SJ5iwMq/zzisuHVpbEwUmw1wP6GQReuEUKIcW5viuc4216qlLk6eA68TChBgy4Pp KqlGPkPXnH75JvBVcCfIzZ9MbzFfpQA4gpdlleo7IOagee8uLzGDw+PF0LC1CZuI c6mtTZYBXlZtFQsuqoEpYLOY85BGpX/KwYS4zaNMIpv47oS1xXXFy4JFjvbCT7VD Z7fycd3edVa+zPYzoes8ZOuHmebGYnCwkKQhr0CmaqJ2Rk7lN+N7TMFRyDKXJTbD lUysptsl36i18vdRqEjWKLUcCfxG4tBeDKsJPN3ouiEaCckKNw8= -----END CERTIFICATE-----Generated at Wed May 13 05:14:44 2026 by rpki-client