$ rpki-client -vvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft File: E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft (raw, json) Hash identifier: Bla4g2fhqK5f/Ru9HoOZSnQaKYHJOKusVlk+LviFung= Subject key identifier: EF:AE:00:DE:87:8A:2E:88:B3:F5:5B:01:99:B5:22:0C:E1:5D:48:25 Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Certificate issuer: /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Certificate serial: 5BB4F0484CB175CC88BE03EACECFF782EA0D731B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:01 +0000 Manifest this update: Tue 12 May 2026 19:41:01 +0000 Manifest next update: Wed 13 May 2026 21:29:01 +0000 Files and hashes: 1: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: MQJVRwYJnTX2QpJhcgqI//Yd9f8cE6OV9xHlB/+R9PA=) 2: E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl (hash: /ejw9XB7L0+/qWmplgtO/P69VTvSl/0eJ58XJ+9ifoE=) 3: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: IjEzO4J4/DAGMp7yw/Fv4jYmilXWlJ5CggUFR3MkMwg=) 4: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: b2H2J9oU1FTem9NxnIqJBxJ6q92fSr/bX1QAdywuSTE=) 5: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: BkJTNl2EaGlXKx/0oxL6MDW8bV/3huXeq9qOcksMrJo=) 6: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: z3UTfjn7LsK1eLHAQE8Fe9WFM0g5YMcTUPNSeasibaA=) 7: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: YESQQe584DxGo0SLuNik4wkwCQuVf9tDli0g7fG2mUQ=) 8: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: b/Ogd32BhDs9RrIQse7X4kUyjngtFlmzyV/u5hkoU2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b4:f0:48:4c:b1:75:cc:88:be:03:ea:ce:cf:f7:82:ea:0d:73:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Validity Not Before: May 12 19:41:01 2026 GMT Not After : May 13 21:29:01 2026 GMT Subject: CN=EFAE00DE878A2E88B3F55B0199B5220CE15D4825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:ec:c6:73:d4:99:c2:af:ee:97:f7:8c:63: a6:1f:cc:55:f2:92:a2:8b:e8:4d:f6:85:c6:31:06: 69:5b:7b:92:0d:44:94:46:d8:10:c3:d0:62:24:38: af:75:50:61:64:08:1a:ef:dd:ca:25:67:52:f4:46: 98:5c:16:f1:73:e2:1b:89:ad:96:74:5f:0a:ac:b8: 2a:6e:3e:a0:53:94:c6:76:11:c1:64:28:aa:b4:6a: 9d:58:83:0a:1a:2a:35:a1:98:52:69:67:89:eb:72: f5:14:f8:34:f8:97:29:9c:8e:da:df:ff:98:8e:86: cb:87:f3:c9:2e:3b:31:9b:73:fa:a2:68:20:9b:d2: 26:41:b6:5d:f7:cc:08:69:49:05:e0:9a:e7:70:a9: 90:f3:7b:e9:7e:f1:4d:26:86:0e:f6:dc:bf:0d:d9: 18:c2:f3:ce:9c:f4:01:0a:59:e0:07:5a:c0:88:c2: 1d:44:99:0a:2f:74:70:fe:60:f8:19:31:8e:b2:dc: 16:36:0a:db:e2:ff:ed:19:bc:14:bb:8c:e0:2c:77: 47:93:a3:dd:b8:04:36:4b:a1:c1:38:2d:a9:4d:6e: b5:b0:44:10:4b:d5:7d:18:4b:05:b3:25:be:9f:ee: 6a:2f:a6:bf:9f:81:0c:b9:a2:cd:95:36:bd:af:c1: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AE:00:DE:87:8A:2E:88:B3:F5:5B:01:99:B5:22:0C:E1:5D:48:25 X509v3 Authority Key Identifier: keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c5:cd:94:87:0b:f7:8f:6f:f6:05:43:5d:98:a5:33:bc:0d: 49:a0:4f:35:1d:f7:78:52:4f:b2:b7:30:a4:36:d2:01:51:37: af:45:ed:8d:9f:76:83:f3:7f:e8:53:77:3a:91:45:88:ba:18: c2:7e:13:3f:77:63:33:00:b0:b8:1f:ea:76:9c:06:a8:f9:cc: 89:d8:ec:ed:df:1c:40:aa:37:8d:53:aa:08:3d:65:fa:26:26: 7b:73:63:c7:ab:c2:58:b4:d2:10:ac:19:3e:fc:e0:9e:48:a9: 61:29:51:22:e6:46:ab:aa:b3:5c:3c:93:46:e6:7a:07:6e:57: bd:88:97:00:68:22:ff:8c:10:26:dd:79:03:0f:7a:86:e5:94: 2d:c9:3f:db:9a:72:41:00:69:02:f5:bc:8b:58:30:1f:6f:10: fd:31:0e:34:05:c1:cd:18:a7:10:5b:6a:14:29:9c:a6:fc:2c: 59:f8:6c:b1:c9:d0:03:21:76:41:cc:36:b8:86:74:04:03:2a: bd:e2:2a:aa:4a:40:da:46:fa:29:40:4e:5f:b4:1e:dd:28:d9: 4f:5b:b8:d9:c1:8e:7c:1c:8b:5e:ae:a5:25:9c:11:fd:3f:34: 3d:94:01:56:9e:1a:1a:29:c8:c8:51:dd:26:a7:03:79:c1:52: 73:43:82:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7TwSEyxdcyIvgPqzs/3guoNcxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC ODAwNDlCNTAeFw0yNjA1MTIxOTQxMDFaFw0yNjA1MTMyMTI5MDFaMDMxMTAvBgNV BAMTKEVGQUUwMERFODc4QTJFODhCM0Y1NUIwMTk5QjUyMjBDRTE1RDQ4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfOzGc9SZwq/ul/eMY6YfzFXy kqKL6E32hcYxBmlbe5INRJRG2BDD0GIkOK91UGFkCBrv3colZ1L0RphcFvFz4huJ rZZ0XwqsuCpuPqBTlMZ2EcFkKKq0ap1YgwoaKjWhmFJpZ4nrcvUU+DT4lymcjtrf /5iOhsuH88kuOzGbc/qiaCCb0iZBtl33zAhpSQXgmudwqZDze+l+8U0mhg723L8N 2RjC886c9AEKWeAHWsCIwh1EmQovdHD+YPgZMY6y3BY2Ctvi/+0ZvBS7jOAsd0eT o924BDZLocE4LalNbrWwRBBL1X0YSwWzJb6f7movpr+fgQy5os2VNr2vwWFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU764A3oeKLoiz9VsBmbUiDOFdSCUwHwYDVR0j BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0 OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRG N0NCODAwNDlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnFzZSHC/ePb/YFQ12YpTO8DUmgTzUd93hS T7K3MKQ20gFRN69F7Y2fdoPzf+hTdzqRRYi6GMJ+Ez93YzMAsLgf6nacBqj5zInY 7O3fHECqN41Tqgg9ZfomJntzY8erwli00hCsGT784J5IqWEpUSLmRquqs1w8k0bm egduV72IlwBoIv+MECbdeQMPeobllC3JP9uackEAaQL1vItYMB9vEP0xDjQFwc0Y pxBbahQpnKb8LFn4bLHJ0AMhdkHMNriGdAQDKr3iKqpKQNpG+ilATl+0Ht0o2U9b uNnBjnwci16upSWcEf0/ND2UAVaeGhopyMhR3SanA3nBUnNDgpQ= -----END CERTIFICATE-----Generated at Wed May 13 03:23:25 2026 by rpki-client