$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft File: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft (raw, json) Hash identifier: jo6JSHWbsshTTDQBvHu+Nb96ElJ9wOOl5b7CIlaqks8= Subject key identifier: 08:AF:EE:53:8F:48:A4:73:6A:B1:21:87:E0:C4:B9:31:25:F9:6E:C7 Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Certificate serial: 5E7BE4255D472ABF0450D1F2FE1C78EFB7504A89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:22:21 +0000 Manifest this update: Tue 12 May 2026 23:17:21 +0000 Manifest next update: Thu 14 May 2026 02:39:21 +0000 Files and hashes: 1: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: R27uG9wLK3XnlCddZVxdbbwrtPpS8ZSeb7rGWZG6Ph4=) 2: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: GFz+TTDbnW2nztXcZjgib7laNHpvzTT0hcf+2L3G+7o=) 3: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: a9SdeOZSphcGVgljZg1tnbLWdBiFIVD0GygHfLT2ZLs=) 4: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: mf3IPyVMZfES2LPj/qKW1uxRQxXFsgdbVk4fq7bhazg=) 5: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: EhQ7R7hv9ww9SVAVibUO5OafRSJMymQa0QNdea7zNE0=) 6: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: 2Vf+pTFqJv7XrQMn75awWPNpommC6ezf5Mi4NO6m5ug=) 7: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: IBqjxLNXqSTykZaxJEDmSDLPjTO+m3MiFe7W+kVNa1Q=) 8: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl (hash: VMpkXpCdxiSliH8gflNYPVDHeBWQaVARp7HuLf2enCg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7b:e4:25:5d:47:2a:bf:04:50:d1:f2:fe:1c:78:ef:b7:50:4a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Validity Not Before: May 12 23:17:21 2026 GMT Not After : May 14 02:39:21 2026 GMT Subject: CN=08AFEE538F48A4736AB12187E0C4B93125F96EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e2:ef:19:f1:35:2f:33:61:f9:8e:2a:d3:69: b0:fe:cf:9b:63:1f:44:44:4c:20:43:b1:3a:01:e5: 97:24:13:1f:ac:f9:f6:c3:b8:72:80:00:cc:f9:9e: 04:ef:2a:84:57:78:3b:d6:00:27:91:98:23:dd:0b: 32:50:2b:a7:0d:f8:c2:0f:c8:57:f5:c9:af:8c:a1: d8:fd:db:c6:90:dc:46:9f:cc:c7:70:c6:0f:15:fb: 15:b7:77:fd:5b:1a:68:93:00:e5:9c:ec:90:c1:b7: 3a:e6:d4:b1:03:e2:a4:72:32:b8:7c:47:e7:41:b6: 3d:40:97:6c:45:15:38:b1:fe:70:e9:41:42:73:42: d8:3c:80:a1:d9:14:26:46:ec:39:18:91:54:4b:13: 2d:a2:1a:9c:b2:fc:2c:5f:0f:48:81:ca:d4:9e:c5: 33:3d:52:01:ca:4e:54:e3:d9:12:c6:9b:e6:15:d1: f3:7f:66:c1:83:ee:d3:1a:8c:94:47:17:6a:bf:b3: 42:57:c8:61:a3:5f:da:5a:23:f5:e4:0f:8a:8f:50: 8d:30:ed:a8:f3:43:41:6a:c3:29:b7:72:00:0b:60: 28:84:33:47:63:01:8f:71:f4:b3:f9:66:15:f0:0f: 86:59:da:05:7d:49:a0:5d:27:6b:a8:52:ea:9e:8e: c5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:EE:53:8F:48:A4:73:6A:B1:21:87:E0:C4:B9:31:25:F9:6E:C7 X509v3 Authority Key Identifier: keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:5a:82:f1:f0:2f:a5:b0:da:e5:72:44:7f:de:39:7f:04:ed: 20:50:56:78:15:2a:f3:85:f2:81:26:3d:20:f1:88:95:af:df: 3a:ef:56:85:42:29:f7:ba:1e:63:6b:09:cc:86:a7:e0:f4:99: d8:64:09:3a:3f:15:ec:97:c1:60:36:2f:a6:2c:0f:9d:a2:fc: 36:b8:09:a9:59:a2:f4:8d:09:3c:dd:ba:5b:33:c3:43:00:da: 9f:73:75:43:9c:ea:24:cc:e9:bb:ac:73:b8:36:74:c9:b9:16: 38:1a:bb:98:4d:08:ff:40:ec:74:d1:9e:79:ed:7d:75:b2:5b: ab:6e:ab:88:c5:66:5e:70:4f:8e:df:29:26:e7:98:29:8a:92: 86:7d:9f:a8:38:02:44:3b:e9:bc:05:3a:5f:35:6d:69:a0:7c: f5:3e:50:1d:38:ed:6d:10:c7:76:7d:8a:da:a3:5e:e9:48:65: 96:f1:ae:87:15:40:fb:60:9e:f7:a3:56:c1:14:a9:51:9e:69: f7:d4:cd:17:18:af:3f:29:b1:d4:7c:2e:cb:db:39:ce:02:72: 53:40:64:b7:bc:a3:b3:a7:f4:13:59:39:29:05:5f:1c:ca:68: a6:de:d9:68:81:b9:c5:e9:3c:f0:f6:4c:af:ef:d5:93:dc:7b: 19:2c:e5:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnvkJV1HKr8EUNHy/hx477dQSokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1QTNB RTBGNUVDMTAeFw0yNjA1MTIyMzE3MjFaFw0yNjA1MTQwMjM5MjFaMDMxMTAvBgNV BAMTKDA4QUZFRTUzOEY0OEE0NzM2QUIxMjE4N0UwQzRCOTMxMjVGOTZFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm4u8Z8TUvM2H5jirTabD+z5tj H0RETCBDsToB5ZckEx+s+fbDuHKAAMz5ngTvKoRXeDvWACeRmCPdCzJQK6cN+MIP yFf1ya+Modj928aQ3EafzMdwxg8V+xW3d/1bGmiTAOWc7JDBtzrm1LED4qRyMrh8 R+dBtj1Al2xFFTix/nDpQUJzQtg8gKHZFCZG7DkYkVRLEy2iGpyy/CxfD0iBytSe xTM9UgHKTlTj2RLGm+YV0fN/ZsGD7tMajJRHF2q/s0JXyGGjX9paI/XkD4qPUI0w 7ajzQ0Fqwym3cgALYCiEM0djAY9x9LP5ZhXwD4ZZ2gV9SaBdJ2uoUuqejsUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCK/uU49IpHNqsSGH4MS5MSX5bscwHwYDVR0j BBgwFoAU6X0kBi4+gJE4jg4m3+glo64PXsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkYzFiMDUtMmE2OS00NWIwLThjNDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYy RTNFODA5MTM4OEUwRTI2REZFODI1QTNBRTBGNUVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdEMjQwNjJFM0U4MDkxMzg4RTBFMjZERkU4MjVBM0FFMEY1 RUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1 QTNBRTBGNUVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlagvHwL6Ww2uVyRH/eOX8E7SBQVngVKvOF 8oEmPSDxiJWv3zrvVoVCKfe6HmNrCcyGp+D0mdhkCTo/FeyXwWA2L6YsD52i/Da4 CalZovSNCTzdulszw0MA2p9zdUOc6iTM6busc7g2dMm5Fjgau5hNCP9A7HTRnnnt fXWyW6tuq4jFZl5wT47fKSbnmCmKkoZ9n6g4AkQ76bwFOl81bWmgfPU+UB047W0Q x3Z9itqjXulIZZbxrocVQPtgnvejVsEUqVGeaffUzRcYrz8psdR8LsvbOc4CclNA ZLe8o7On9BNZOSkFXxzKaKbe2WiBucXpPPD2TK/v1ZPcexks5TU= -----END CERTIFICATE-----Generated at Wed May 13 03:52:10 2026 by rpki-client