$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: CcKgG0tv1ICNYpanyW/fKsuOfedSn/SEF1+K8ZzlxWg= Subject key identifier: 8D:88:CE:81:B6:ED:84:6F:EA:80:52:2B:BF:5A:B0:6C:73:1A:97:A3 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 3FCE48B034D5264FBC2FC17D84BEEEE9B9103666 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:38 +0000 Manifest this update: Tue 12 May 2026 08:04:38 +0000 Manifest next update: Wed 13 May 2026 08:33:38 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 3: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: GMWulMGQoZMXllZChG1dvRJnfWEdj/hALJKbPhanUa8=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 6: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ce:48:b0:34:d5:26:4f:bc:2f:c1:7d:84:be:ee:e9:b9:10:36:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: May 12 08:04:38 2026 GMT Not After : May 13 08:33:38 2026 GMT Subject: CN=8D88CE81B6ED846FEA80522BBF5AB06C731A97A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:4a:ba:38:04:8c:13:8c:05:60:fb:ff:b2: fc:01:db:2f:34:06:b5:a5:7d:3b:0f:c7:e2:63:ad: 0e:b3:b6:43:38:76:28:09:5c:13:73:68:7e:8d:c6: 96:8f:fa:22:ad:ce:24:d9:dd:fd:d6:76:77:b5:bc: 33:58:03:5e:f1:95:bd:dc:1f:ba:b3:da:f2:b8:8e: f3:25:fc:13:38:4f:61:23:3d:3e:cf:db:63:6c:79: 38:d8:78:8c:79:6d:6b:f7:68:7f:cc:6d:36:c9:a1: 96:1d:82:a8:76:90:28:0e:0f:b7:0b:d9:60:84:7b: 7e:4b:97:48:c3:4d:ff:47:eb:04:a4:c1:1e:5a:df: 1b:2f:a8:bd:95:5d:9a:91:50:d6:6c:df:31:5c:42: 0a:b6:00:b8:ab:e3:ea:ca:6b:bd:70:f2:f7:90:f4: 54:c8:31:6b:53:f7:da:60:1f:8f:2a:49:df:a1:a9: ff:aa:76:12:c1:fa:44:9c:cf:44:44:44:b0:76:c9: 39:10:11:39:5a:cb:fc:8b:9c:e6:68:c2:40:63:86: 48:1d:df:3d:6c:d9:5a:ab:a1:94:ee:53:db:4f:98: 36:99:68:ed:08:72:20:1e:b8:3b:10:eb:56:cb:7a: 73:5f:2b:9b:cc:0e:7c:34:01:76:bc:06:19:5f:40: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:88:CE:81:B6:ED:84:6F:EA:80:52:2B:BF:5A:B0:6C:73:1A:97:A3 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:76:c8:b6:6f:2e:dd:11:50:17:39:34:58:1a:22:08:e8:50: cd:cb:ed:27:ac:94:29:ce:77:c0:b1:68:47:e4:cc:7b:16:83: 9a:5e:c5:d6:b7:e2:fe:bd:2c:d6:1d:1b:93:4b:9a:81:d6:78: b8:b8:a7:a7:a1:c5:6f:0e:8b:3f:84:e6:1c:b0:50:f7:96:81: 8c:5b:a9:c4:de:8a:73:5e:3b:31:b7:6c:76:c7:e9:b4:8a:ee: 9d:25:76:62:a7:25:64:69:04:82:f5:d5:c8:54:04:f0:1f:3e: d6:29:ba:1f:dd:1e:b0:d5:50:bb:12:96:32:c7:0c:78:99:fa: 00:57:05:b7:63:fe:47:86:11:c6:b1:ba:00:69:5c:e8:97:04: 09:10:dd:47:3c:3f:75:95:0e:44:3c:9b:5e:1b:e5:fe:05:e6: 36:5d:c3:b0:50:3c:93:2a:96:76:b8:f3:0c:99:6f:6c:df:c2: 6e:0d:1f:58:57:84:57:e4:f9:9d:33:a4:2b:58:90:08:44:02: 5c:d1:8a:54:9d:05:e3:0d:1d:48:17:3c:f3:34:6f:d4:cd:6d: 51:c6:bb:b0:73:d5:66:5d:54:a4:51:7f:cb:4f:40:84:1a:46: 70:0a:4c:01:27:6b:40:6a:ff:3a:b7:1c:ac:84:ea:cc:2d:cc: dc:db:de:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP85IsDTVJk+8L8F9hL7u6bkQNmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA1MTIwODA0MzhaFw0yNjA1MTMwODMzMzhaMDMxMTAvBgNV BAMTKDhEODhDRTgxQjZFRDg0NkZFQTgwNTIyQkJGNUFCMDZDNzMxQTk3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx20q6OASME4wFYPv/svwB2y80 BrWlfTsPx+JjrQ6ztkM4digJXBNzaH6NxpaP+iKtziTZ3f3Wdne1vDNYA17xlb3c H7qz2vK4jvMl/BM4T2EjPT7P22NseTjYeIx5bWv3aH/MbTbJoZYdgqh2kCgOD7cL 2WCEe35Ll0jDTf9H6wSkwR5a3xsvqL2VXZqRUNZs3zFcQgq2ALir4+rKa71w8veQ 9FTIMWtT99pgH48qSd+hqf+qdhLB+kScz0RERLB2yTkQETlay/yLnOZowkBjhkgd 3z1s2VqroZTuU9tPmDaZaO0IciAeuDsQ61bLenNfK5vMDnw0AXa8BhlfQCVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYjOgbbthG/qgFIrv1qwbHMal6MwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ2yLZvLt0RUBc5NFgaIgjoUM3L7SeslCnO d8CxaEfkzHsWg5pexda34v69LNYdG5NLmoHWeLi4p6ehxW8Oiz+E5hywUPeWgYxb qcTeinNeOzG3bHbH6bSK7p0ldmKnJWRpBIL11chUBPAfPtYpuh/dHrDVULsSljLH DHiZ+gBXBbdj/keGEcaxugBpXOiXBAkQ3Uc8P3WVDkQ8m14b5f4F5jZdw7BQPJMq lna48wyZb2zfwm4NH1hXhFfk+Z0zpCtYkAhEAlzRilSdBeMNHUgXPPM0b9TNbVHG u7Bz1WZdVKRRf8tPQIQaRnAKTAEna0Bq/zq3HKyE6swtzNzb3u4= -----END CERTIFICATE-----Generated at Tue May 12 22:19:30 2026 by rpki-client