$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft File: E66029B9A162C470EEC1DFA42227448C5628C7C0.mft (raw, json) Hash identifier: fKk9ij7Jp9OS+fgcr6GD13QxNah9Q1pLhvsGtEnQ87w= Subject key identifier: 75:43:E4:90:DD:7F:9C:35:6E:21:85:CB:21:B0:4A:AD:BD:4D:09:FC Authority key identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 Certificate issuer: /CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Certificate serial: 2C09703591D7E631BE8637215B70F6DB8C534BF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:47 +0000 Manifest this update: Tue 12 May 2026 18:59:47 +0000 Manifest next update: Wed 13 May 2026 19:28:47 +0000 Files and hashes: 1: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: JZURZX2DPzG8sUm6gWajmDbIZlI3PcawCAcX3o9QYgk=) 2: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: j2kFk/YVfgNkgWhXwbYb7FWRSsZvQgR1cjJdN6Wj8Os=) 3: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: hA+ZmrATAmvRq+AW4JB/hKKoTjrXINAaVyYkBOTFDh0=) 4: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: /DI2LBlO0iN+GBCylD6NdAgnYz8xW3+cA1gyspDRqj4=) 5: E66029B9A162C470EEC1DFA42227448C5628C7C0.crl (hash: zISx2m6KRyQgUhDC2JM8W9iRpdNw3uqilZ5KnVw7x4k=) 6: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: 1O/1u/y7bw8tPk+iQAFMKxGZw0TRRYTTjU36vawpg/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:09:70:35:91:d7:e6:31:be:86:37:21:5b:70:f6:db:8c:53:4b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Validity Not Before: May 12 18:59:47 2026 GMT Not After : May 13 19:28:47 2026 GMT Subject: CN=7543E490DD7F9C356E2185CB21B04AADBD4D09FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:d1:ff:a3:d7:f5:b9:2c:c2:18:bb:0a:70: f2:61:fc:e0:82:37:eb:c2:d8:15:17:72:89:d3:71: f6:00:ce:f9:6a:6f:74:02:61:69:a7:d3:7b:33:74: bd:f2:b9:2d:91:c8:4a:3c:12:40:0d:5f:70:8b:51: 0c:84:0b:b7:47:64:b5:e4:85:bc:14:2d:bc:48:34: c2:8c:97:a0:9f:07:70:15:e9:19:f3:e2:c3:96:9d: 74:91:c6:a8:eb:6a:fe:2e:63:55:b0:fc:bd:64:86: 46:65:41:2a:7c:f3:6e:3c:15:61:cb:d3:33:bf:1f: fc:37:b2:31:4b:2f:5e:a4:e8:22:23:c0:a9:82:cd: 9e:d9:3c:5f:f2:fe:8e:40:a3:fb:e8:e9:b8:16:91: 19:15:6e:90:62:c4:59:b0:05:0e:0a:e8:8e:4f:87: 84:8f:09:f7:f4:1b:b8:22:29:16:25:c2:d3:dc:83: b5:24:8c:5b:43:db:a6:97:ae:46:5a:de:d5:98:0d: 9d:d8:40:51:12:40:80:67:64:89:67:4f:49:ea:a0: 42:c5:21:e3:e6:53:7e:39:a4:00:05:aa:92:18:dc: 83:15:bf:79:e4:a9:74:c1:08:32:9a:d6:e7:37:ef: cc:60:2c:1e:11:96:4e:43:1e:90:b6:6e:45:b5:e8: e1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:E4:90:DD:7F:9C:35:6E:21:85:CB:21:B0:4A:AD:BD:4D:09:FC X509v3 Authority Key Identifier: keyid:E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d4:ea:52:d9:c6:52:f8:5d:3f:00:7a:55:f6:66:b4:c0:f5: 41:07:c9:6a:09:4e:0d:63:c1:37:10:b7:78:bb:f3:87:e1:c2: 00:c4:1d:dd:79:1d:5b:1c:50:cc:5c:57:a0:1e:0a:52:29:1b: 57:b1:57:36:f3:71:84:58:72:54:bd:bb:09:87:7f:0d:78:1e: 2f:11:3f:db:ff:44:ff:57:bb:44:d7:75:b0:d7:75:aa:80:3a: 73:19:a2:85:4c:48:26:77:11:a5:e8:38:4f:b0:ed:23:5b:37: 69:17:a9:03:72:0d:e6:1c:3f:06:5b:f6:18:f8:3b:68:80:75: ac:ef:58:bf:c2:b1:fc:fa:18:c1:67:86:9b:c7:de:a7:60:ab: 2f:f0:be:4f:e9:9b:44:85:a1:f8:47:70:a5:23:76:e1:8e:b3: 08:91:13:fb:16:73:40:90:79:63:35:7f:94:f7:19:a1:a8:1d: 0b:67:19:58:c4:20:83:e1:dd:0a:23:b2:52:9a:bc:fa:82:c7: 0d:4c:d7:82:64:7b:a1:18:41:1b:79:d9:5c:2c:95:53:37:ca: e0:e3:ec:1b:92:58:ec:98:9b:08:0c:e3:08:2a:4c:6f:f8:34: c3:11:9f:23:40:a9:fb:b7:be:d0:17:39:96:b6:f7:63:98:b1: b5:9b:a5:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAlwNZHX5jG+hjchW3D224xTS/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1 NjI4QzdDMDAeFw0yNjA1MTIxODU5NDdaFw0yNjA1MTMxOTI4NDdaMDMxMTAvBgNV BAMTKDc1NDNFNDkwREQ3RjlDMzU2RTIxODVDQjIxQjA0QUFEQkQ0RDA5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYtH/o9f1uSzCGLsKcPJh/OCC N+vC2BUXconTcfYAzvlqb3QCYWmn03szdL3yuS2RyEo8EkANX3CLUQyEC7dHZLXk hbwULbxINMKMl6CfB3AV6Rnz4sOWnXSRxqjrav4uY1Ww/L1khkZlQSp88248FWHL 0zO/H/w3sjFLL16k6CIjwKmCzZ7ZPF/y/o5Ao/vo6bgWkRkVbpBixFmwBQ4K6I5P h4SPCff0G7giKRYlwtPcg7UkjFtD26aXrkZa3tWYDZ3YQFESQIBnZIlnT0nqoELF IePmU345pAAFqpIY3IMVv3nkqXTBCDKa1uc378xgLB4Rlk5DHpC2bkW16OEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUPkkN1/nDVuIYXLIbBKrb1NCfwwHwYDVR0j BBgwFoAU5mApuaFixHDuwd+kIidEjFYox8AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQwZjFhNmUtODNiNi00NTM0LTk2N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlB MTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1NjI4QzdDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNjYwMjlCOUExNjJDNDcwRUVDMURGQTQyMjI3NDQ4QzU2MjhD N0MwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0 OEM1NjI4QzdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjU6lLZxlL4XT8AelX2ZrTA9UEHyWoJTg1j wTcQt3i784fhwgDEHd15HVscUMxcV6AeClIpG1exVzbzcYRYclS9uwmHfw14Hi8R P9v/RP9Xu0TXdbDXdaqAOnMZooVMSCZ3EaXoOE+w7SNbN2kXqQNyDeYcPwZb9hj4 O2iAdazvWL/Csfz6GMFnhpvH3qdgqy/wvk/pm0SFofhHcKUjduGOswiRE/sWc0CQ eWM1f5T3GaGoHQtnGVjEIIPh3QojslKavPqCxw1M14Jke6EYQRt52VwslVM3yuDj 7BuSWOyYmwgM4wgqTG/4NMMRnyNAqfu3vtAXOZa292OYsbWbpQw= -----END CERTIFICATE-----Generated at Wed May 13 11:49:29 2026 by rpki-client