$ rpki-client -vvf rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft File: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft (raw, json) Hash identifier: 5bvdz+1qqoSPHi5Ukdicv118x/Z2xeRmOrXo3eE9Ycs= Subject key identifier: 5E:3D:AF:53:89:DB:33:7F:3B:CB:10:74:CE:44:B2:BC:0A:7E:91:8D Authority key identifier: EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB Certificate issuer: /CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB Certificate serial: 0283542D3CE408E91F67F6A8092B7B5543B329F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:52 +0000 Manifest this update: Tue 12 May 2026 20:06:52 +0000 Manifest next update: Wed 13 May 2026 22:18:52 +0000 Files and hashes: 1: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl (hash: 33TdxdSRfol2AUXC6n7ZAqSKVKMSI7O9GS8/tiksRTM=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: AuCdih88NSq35lOqDy4yw7F/uYDNOpEkZusC24B4jX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:83:54:2d:3c:e4:08:e9:1f:67:f6:a8:09:2b:7b:55:43:b3:29:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB Validity Not Before: May 12 20:06:52 2026 GMT Not After : May 13 22:18:52 2026 GMT Subject: CN=5E3DAF5389DB337F3BCB1074CE44B2BC0A7E918D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:af:86:8d:77:9e:cd:f0:a4:9f:62:7f:f5:ba: 54:51:2e:d8:a1:3e:85:82:92:43:3c:9a:f5:ab:41: 57:ec:82:56:2e:e2:6f:0d:c4:c4:c3:94:c2:07:b4: 97:30:b7:3c:49:79:32:d5:6f:9c:e8:74:f6:5a:20: e0:ed:9d:2a:99:3a:bd:3d:5e:82:f4:aa:f3:e2:ae: 51:d7:1d:2d:45:93:fb:1a:fa:b5:56:b4:03:a1:34: ed:8f:8c:ed:3b:65:bf:23:2c:1b:e0:91:40:3c:81: fe:76:fd:f6:8a:d4:01:ad:f8:e2:92:51:bc:e6:01: ce:f2:98:53:e0:1c:b6:4c:95:24:d7:1f:03:eb:48: 21:f1:b8:e6:3a:62:7d:75:d0:db:90:54:6c:1a:1e: ef:85:f5:8c:b2:bb:bc:b4:f7:af:ab:8e:61:05:59: 42:9e:49:1d:ee:b0:5c:35:98:03:a8:0a:31:3d:ef: 73:74:b7:e2:c0:d2:a9:7c:21:95:cd:6e:d3:2a:4f: 72:3d:c2:05:37:58:bb:d5:a2:f8:b3:60:7a:c6:5a: 2d:d3:1a:ea:3b:9e:66:0c:4d:ac:ca:c4:b6:a5:cf: d7:d0:96:af:47:d1:b7:1e:ce:3b:5e:8f:d0:16:0f: 4e:9b:11:0b:39:2e:58:7b:3b:2c:6d:ef:47:97:8b: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3D:AF:53:89:DB:33:7F:3B:CB:10:74:CE:44:B2:BC:0A:7E:91:8D X509v3 Authority Key Identifier: keyid:EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b0:5a:86:bd:92:16:80:b1:5f:7c:0c:be:dc:99:16:c1:dd: 55:8d:31:50:c0:81:13:af:74:ca:0a:31:30:b2:6a:89:d0:49: 1a:26:bd:3b:89:8e:09:d3:cc:6d:be:8b:3d:e8:64:9d:32:9d: 89:86:c6:57:bc:f0:45:c9:4b:e7:d9:52:e5:7d:45:20:45:b7: e5:3c:b2:b6:b7:3e:f9:6a:5d:35:df:0b:2f:63:36:57:ee:28: 7c:ee:c2:53:5d:ce:7f:39:a0:07:d1:a7:65:c1:03:c5:c1:87: 0c:9a:30:aa:d0:05:d1:0e:fd:c2:7b:f3:8b:51:2b:70:70:ad: 7f:a1:0a:40:b1:b5:6a:df:9f:1c:3f:c0:84:ea:b9:36:68:e9: e7:b1:0f:ff:2f:6a:28:d3:48:8a:d3:63:a4:2d:1e:7f:1d:26: 70:d3:df:93:69:f7:6a:32:c8:c7:84:3d:3c:49:ea:4d:38:3c: ba:3d:2d:63:e1:d4:79:d9:90:3f:f2:b2:03:3d:75:2c:25:67: 9f:ba:35:bf:54:0f:88:d0:2f:05:d7:b0:18:3e:70:04:99:59: 3e:06:9a:51:f5:ff:bc:21:93:2d:a9:5e:07:11:67:38:92:74: bb:b6:39:a4:1d:65:fd:f1:f2:85:db:46:31:42:37:17:4b:4e: 9f:f8:56:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoNULTzkCOkfZ/aoCSt7VUOzKfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBNEZFNDUxOTVENTE0Q0NBNzU5REUxQ0YyMTI0RENE ODQwQThEQjAeFw0yNjA1MTIyMDA2NTJaFw0yNjA1MTMyMjE4NTJaMDMxMTAvBgNV BAMTKDVFM0RBRjUzODlEQjMzN0YzQkNCMTA3NENFNDRCMkJDMEE3RTkxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRr4aNd57N8KSfYn/1ulRRLtih PoWCkkM8mvWrQVfsglYu4m8NxMTDlMIHtJcwtzxJeTLVb5zodPZaIODtnSqZOr09 XoL0qvPirlHXHS1Fk/sa+rVWtAOhNO2PjO07Zb8jLBvgkUA8gf52/faK1AGt+OKS UbzmAc7ymFPgHLZMlSTXHwPrSCHxuOY6Yn110NuQVGwaHu+F9Yyyu7y096+rjmEF WUKeSR3usFw1mAOoCjE973N0t+LA0ql8IZXNbtMqT3I9wgU3WLvVovizYHrGWi3T Guo7nmYMTazKxLalz9fQlq9H0bcezjtej9AWD06bEQs5Llh7Oyxt70eXiye3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXj2vU4nbM387yxB0zkSyvAp+kY0wHwYDVR0j BBgwFoAU6qT+RRldUUzKdZ3hzyEk3NhAqNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTc5NWEzNzgtZDY5ZS00NTJlLWFjNjctM2I3NDkwMzlhOGM4LzAvRUFBNEZFNDUx OTVENTE0Q0NBNzU5REUxQ0YyMTI0RENEODQwQThEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUE0RkU0NTE5NUQ1MTRDQ0E3NTlERTFDRjIxMjREQ0Q4NDBB OERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvRUFBNEZFNDUxOTVENTE0Q0NBNzU5REUxQ0YyMTI0 RENEODQwQThEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADywWoa9khaAsV98DL7cmRbB3VWNMVDAgROv dMoKMTCyaonQSRomvTuJjgnTzG2+iz3oZJ0ynYmGxle88EXJS+fZUuV9RSBFt+U8 sra3PvlqXTXfCy9jNlfuKHzuwlNdzn85oAfRp2XBA8XBhwyaMKrQBdEO/cJ784tR K3BwrX+hCkCxtWrfnxw/wITquTZo6eexD/8vaijTSIrTY6QtHn8dJnDT35Np92oy yMeEPTxJ6k04PLo9LWPh1HnZkD/ysgM9dSwlZ5+6Nb9UD4jQLwXXsBg+cASZWT4G mlH1/7whky2pXgcRZziSdLu2OaQdZf3x8oXbRjFCNxdLTp/4VvQ= -----END CERTIFICATE-----Generated at Wed May 13 02:59:33 2026 by rpki-client