$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft File: EB57B4A8B7DB581F45D8854952928F5926755B5D.mft (raw, json) Hash identifier: z2h64CkgpjXRhBDfL/NBSPjcBsw8dNMD2ny3HSZCbi4= Subject key identifier: AF:4C:43:42:98:FA:9C:5E:EA:26:5A:CD:77:03:F9:32:3A:FA:C9:E5 Authority key identifier: EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D Certificate issuer: /CN=EB57B4A8B7DB581F45D8854952928F5926755B5D Certificate serial: 68E15E49846A9D5DE96234A335E33C4E8BE632EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:27:09 +0000 Manifest this update: Tue 12 May 2026 11:22:09 +0000 Manifest next update: Wed 13 May 2026 13:44:09 +0000 Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: jRiKTU/j+tIlx8UR6dB8nvnEvGokztihjDnumCFG4MY=) 2: EB57B4A8B7DB581F45D8854952928F5926755B5D.crl (hash: LvLWCYZKhCY3fz5eSoxpapX/NfjBs26f/NINHeBmkB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e1:5e:49:84:6a:9d:5d:e9:62:34:a3:35:e3:3c:4e:8b:e6:32:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB57B4A8B7DB581F45D8854952928F5926755B5D Validity Not Before: May 12 11:22:09 2026 GMT Not After : May 13 13:44:09 2026 GMT Subject: CN=AF4C434298FA9C5EEA265ACD7703F9323AFAC9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3b:5e:ad:c2:91:b7:28:e0:aa:20:19:77:05: 44:2d:3c:85:d6:a9:84:8b:d9:80:32:49:b8:6f:30: 28:2a:30:9d:95:ef:28:70:63:d6:e3:7d:33:56:f4: 2c:c4:b0:9b:b3:27:ab:a8:32:38:d7:54:ad:e4:ee: 0f:34:59:2f:84:cf:fe:20:46:9b:be:42:ba:15:d7: 73:a6:3a:c3:c2:9d:cd:5e:df:05:3c:e5:65:57:1e: 61:80:93:0b:7d:3f:4f:67:0c:aa:fd:f0:63:bf:4b: 97:3a:fc:a7:5d:5e:3d:be:42:1d:43:9e:23:4f:d7: 73:64:39:d0:75:17:dd:e9:7f:94:12:32:aa:a9:13: 63:44:e6:da:8e:10:df:ea:80:f6:6d:68:05:5a:3c: b3:b2:fb:a5:7f:75:f5:6f:99:4f:02:7a:d5:b0:08: 7c:71:45:0c:18:eb:ce:fa:6e:b5:f0:91:26:f9:93: 05:33:c8:54:52:54:d1:d9:6c:2a:52:8a:b3:bb:ec: 9d:9a:71:63:9d:18:0b:5f:e8:4d:47:b1:d0:ba:64: a8:60:40:43:80:9f:07:1a:83:b7:a3:7b:6f:1d:16: c0:49:18:b2:fa:10:34:11:19:6e:83:5e:7f:8a:f2: 71:f6:4d:f0:9b:1a:cd:1e:b1:50:07:4b:d0:7d:ed: ed:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4C:43:42:98:FA:9C:5E:EA:26:5A:CD:77:03:F9:32:3A:FA:C9:E5 X509v3 Authority Key Identifier: keyid:EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3c:3d:b9:9c:c7:6f:bd:55:59:46:8f:75:26:d7:06:38:92: e4:32:81:da:98:63:94:c3:08:6f:e5:a2:95:41:89:df:04:39: b4:9b:d3:51:93:78:12:8f:c8:bc:24:74:73:5d:b1:b5:49:47: 06:e2:9f:f4:76:73:d3:74:ed:6f:6c:a6:2e:5d:6b:04:a8:ba: 73:1f:f7:0b:f4:2f:f4:fa:2d:0d:2d:e2:c9:cf:a4:4a:8f:f1: e5:73:f4:1a:00:40:f0:1e:9c:ab:6b:d7:b9:cd:c7:21:90:a4: bb:ee:65:3d:31:1f:3b:49:47:51:04:0f:0e:c0:43:8e:dd:21: 86:53:35:f8:9f:87:45:67:9e:66:eb:65:93:49:3a:c5:2e:67: 62:f3:06:68:ad:61:ef:73:eb:14:cb:03:17:7f:d8:5e:5d:5b: 7d:60:a3:43:be:f6:ec:56:0c:4d:67:8d:e2:c9:02:df:00:89: ed:cd:92:6c:8b:bd:d0:f9:9f:b2:64:df:c4:fc:8a:f9:13:c0: b1:13:2f:1f:c3:b8:0b:05:b1:07:58:da:40:fe:d3:05:1b:f1: 3b:13:83:80:52:be:6f:08:06:9f:8b:7c:8a:6a:9e:34:0e:5e: c1:b1:f0:86:ce:e0:d3:fc:b1:18:af:f6:a6:32:5a:3f:c5:f1: fe:35:f9:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOFeSYRqnV3pYjSjNeM8TovmMu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI1N0I0QThCN0RCNTgxRjQ1RDg4NTQ5NTI5MjhGNTky Njc1NUI1RDAeFw0yNjA1MTIxMTIyMDlaFw0yNjA1MTMxMzQ0MDlaMDMxMTAvBgNV BAMTKEFGNEM0MzQyOThGQTlDNUVFQTI2NUFDRDc3MDNGOTMyM0FGQUM5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnO16twpG3KOCqIBl3BUQtPIXW qYSL2YAySbhvMCgqMJ2V7yhwY9bjfTNW9CzEsJuzJ6uoMjjXVK3k7g80WS+Ez/4g Rpu+QroV13OmOsPCnc1e3wU85WVXHmGAkwt9P09nDKr98GO/S5c6/KddXj2+Qh1D niNP13NkOdB1F93pf5QSMqqpE2NE5tqOEN/qgPZtaAVaPLOy+6V/dfVvmU8CetWw CHxxRQwY6876brXwkSb5kwUzyFRSVNHZbCpSirO77J2acWOdGAtf6E1HsdC6ZKhg QEOAnwcag7eje28dFsBJGLL6EDQRGW6DXn+K8nH2TfCbGs0esVAHS9B97e2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr0xDQpj6nF7qJlrNdwP5Mjr6yeUwHwYDVR0j BBgwFoAU61e0qLfbWB9F2IVJUpKPWSZ1W10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzEvRUI1N0I0QThC N0RCNTgxRjQ1RDg4NTQ5NTI5MjhGNTkyNjc1NUI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjU3QjRBOEI3REI1ODFGNDVEODg1NDk1MjkyOEY1OTI2NzU1 QjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvRUI1N0I0QThCN0RCNTgxRjQ1RDg4NTQ5NTI5MjhG NTkyNjc1NUI1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo8Pbmcx2+9VVlGj3Um1wY4kuQygdqYY5TD CG/lopVBid8EObSb01GTeBKPyLwkdHNdsbVJRwbin/R2c9N07W9spi5dawSounMf 9wv0L/T6LQ0t4snPpEqP8eVz9BoAQPAenKtr17nNxyGQpLvuZT0xHztJR1EEDw7A Q47dIYZTNfifh0VnnmbrZZNJOsUuZ2LzBmitYe9z6xTLAxd/2F5dW31go0O+9uxW DE1njeLJAt8Aie3NkmyLvdD5n7Jk38T8ivkTwLETLx/DuAsFsQdY2kD+0wUb8TsT g4BSvm8IBp+LfIpqnjQOXsGx8IbO4NP8sRiv9qYyWj/F8f41+RA= -----END CERTIFICATE-----Generated at Tue May 12 22:20:21 2026 by rpki-client