$ rpki-client -vvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: +gEQ7wuQ0yqx9T0VZDoK/SKKOO24NNUfgKwpjVm3dnE= Subject key identifier: D0:BC:B5:EF:D4:01:67:38:2A:87:DD:91:CD:99:38:23:3D:9B:58:CE Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 12127B22FE2E6C5A3885CD45DC0AB13035FB63BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:59:19 +0000 Manifest this update: Tue 12 May 2026 07:54:19 +0000 Manifest next update: Wed 13 May 2026 09:53:19 +0000 Files and hashes: 1: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 2: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: Cq0v9Lvayb2fOou0fkhCsMGPPk7L+wlGMgoXqkohGQs=) 3: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) 4: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 5: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 6: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 7: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) 8: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) 9: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:12:7b:22:fe:2e:6c:5a:38:85:cd:45:dc:0a:b1:30:35:fb:63:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: May 12 07:54:19 2026 GMT Not After : May 13 09:53:19 2026 GMT Subject: CN=D0BCB5EFD40167382A87DD91CD9938233D9B58CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:51:11:65:10:ed:d8:f6:f8:a2:c1:5c:cd: 72:a2:9e:c1:94:88:ea:e2:b9:8c:33:95:38:22:91: 94:31:03:34:95:bd:af:c2:b8:90:60:9b:b2:12:1c: 07:62:b8:d4:6e:09:26:67:ed:b9:60:ed:57:20:bd: d3:56:a4:ef:0d:e1:c7:dc:3d:a2:af:0f:9a:7f:11: 00:d9:c3:b9:60:60:9c:52:02:7f:33:69:a9:6f:16: a3:49:e8:45:0f:83:9c:b9:19:a5:ef:ac:02:e3:90: f2:42:1e:47:ce:be:2e:ca:23:d8:40:81:ec:24:5f: 9f:8b:e0:5c:9b:02:2d:80:c2:ac:a7:c0:ae:57:7f: ad:3a:1c:a3:cb:94:d6:84:f5:75:10:fd:03:c5:46: ea:b3:6f:a0:3f:59:53:ea:b4:18:b2:3f:08:66:17: 43:9a:aa:ff:3d:41:ba:17:74:5c:fb:b7:ac:77:8d: 8f:a9:48:c9:5a:cc:78:e3:ba:55:91:56:58:1e:c3: f8:4f:89:37:d8:99:74:72:ba:26:a4:86:37:71:29: bd:de:d4:d3:c8:c0:21:01:15:62:fc:71:ef:ee:e5: 78:d3:81:12:bd:fe:da:9c:da:7f:fb:d0:ea:18:b0: 8c:51:c6:76:93:f0:30:dc:52:d9:a9:6c:0d:ca:27: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BC:B5:EF:D4:01:67:38:2A:87:DD:91:CD:99:38:23:3D:9B:58:CE X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f4:68:4d:e6:17:f7:cb:0c:7c:11:fa:29:7a:24:b5:3e:ce: 5a:5b:45:05:81:a2:d5:66:2a:5d:54:99:2e:cd:84:8e:66:a1: 6a:0f:b4:44:ec:59:03:37:80:53:9c:58:b1:61:48:11:e5:96: e7:0c:69:2b:e8:88:f2:bf:6b:dd:5f:30:46:e0:d7:f8:ff:e7: 17:82:1c:58:0e:9e:60:5e:7d:7b:77:4e:ac:11:96:15:b4:18: 2f:82:06:09:63:00:e3:f1:28:7f:36:44:c5:25:27:bd:ac:26: b8:43:1f:32:e6:37:e8:fc:af:72:22:e6:40:9d:74:be:2c:d2: 85:ff:51:82:2b:b6:a2:29:c4:38:37:94:9a:51:3b:29:03:b3: 74:6e:ec:bd:5b:b9:42:89:cc:c6:47:55:a6:8f:8b:b9:07:7a: b2:49:28:3f:9c:e6:b7:46:13:fe:59:ed:0b:b3:29:02:98:cb: e0:6b:98:a0:d4:46:71:cd:a2:60:fa:5d:06:a0:e8:b2:19:40: db:f5:f9:91:c7:39:f2:d3:99:f8:81:e7:d9:00:86:bf:f7:af: 33:c3:ad:d6:80:56:35:1f:cd:ba:a7:20:31:66:c3:05:16:e6: b4:12:e1:ec:53:45:a4:1b:22:61:52:c8:4a:27:22:6a:dd:89: 9f:b0:2c:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhJ7Iv4ubFo4hc1F3AqxMDX7Y74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA1MTIwNzU0MTlaFw0yNjA1MTMwOTUzMTlaMDMxMTAvBgNV BAMTKEQwQkNCNUVGRDQwMTY3MzgyQTg3REQ5MUNEOTkzODIzM0Q5QjU4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVxlERZRDt2Pb4osFczXKinsGU iOriuYwzlTgikZQxAzSVva/CuJBgm7ISHAdiuNRuCSZn7blg7VcgvdNWpO8N4cfc PaKvD5p/EQDZw7lgYJxSAn8zaalvFqNJ6EUPg5y5GaXvrALjkPJCHkfOvi7KI9hA gewkX5+L4FybAi2AwqynwK5Xf606HKPLlNaE9XUQ/QPFRuqzb6A/WVPqtBiyPwhm F0Oaqv89QboXdFz7t6x3jY+pSMlazHjjulWRVlgew/hPiTfYmXRyuiakhjdxKb3e 1NPIwCEBFWL8ce/u5XjTgRK9/tqc2n/70OoYsIxRxnaT8DDcUtmpbA3KJ8FRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Ly179QBZzgqh92RzZk4Iz2bWM4wHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK70aE3mF/fLDHwR+il6JLU+zlpbRQWBotVm Kl1UmS7NhI5moWoPtETsWQM3gFOcWLFhSBHllucMaSvoiPK/a91fMEbg1/j/5xeC HFgOnmBefXt3TqwRlhW0GC+CBgljAOPxKH82RMUlJ72sJrhDHzLmN+j8r3Ii5kCd dL4s0oX/UYIrtqIpxDg3lJpROykDs3Ru7L1buUKJzMZHVaaPi7kHerJJKD+c5rdG E/5Z7QuzKQKYy+BrmKDURnHNomD6XQag6LIZQNv1+ZHHOfLTmfiB59kAhr/3rzPD rdaAVjUfzbqnIDFmwwUW5rQS4exTRaQbImFSyEonImrdiZ+wLE4= -----END CERTIFICATE-----Generated at Wed May 13 01:45:35 2026 by rpki-client