$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft File: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft (raw, json) Hash identifier: /KhGLA0uywpLaaGLaUuEja65jT08e9cc96JpdQomxzY= Subject key identifier: FB:BF:3C:EE:15:0A:E1:73:F2:84:FE:B8:0C:19:A8:78:6A:5D:A3:6C Authority key identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 Certificate issuer: /CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Certificate serial: 7E7DD1AB9E1AD6A796EC5D4A666E822C11D5E139 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:44:05 +0000 Manifest this update: Tue 12 May 2026 07:39:05 +0000 Manifest next update: Wed 13 May 2026 08:29:05 +0000 Files and hashes: 1: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: PrnOvop5MQlI3Bsjow/Ci5R1laOpI/zKBTh7ZhHcVKA=) 2: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: q+RRwqPLMgbRcU4CF8v6ceD8xY9lz0UrAi1vn0vplwA=) 3: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl (hash: V03jZOP1D5Vq9Pbxzfoi/HxBrrsOx0YBJLAQMc3BtRw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7d:d1:ab:9e:1a:d6:a7:96:ec:5d:4a:66:6e:82:2c:11:d5:e1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Validity Not Before: May 12 07:39:05 2026 GMT Not After : May 13 08:29:05 2026 GMT Subject: CN=FBBF3CEE150AE173F284FEB80C19A8786A5DA36C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d1:15:39:ce:07:36:18:b1:be:b3:98:43:3c: ac:d4:35:47:8a:ee:e9:1d:48:e9:64:4d:97:a7:c6: 7e:60:b2:9f:f7:01:a0:97:e9:7b:43:92:59:12:48: 92:86:11:02:28:6c:0a:b2:24:4b:76:76:25:39:cc: e3:30:10:ea:67:cf:be:a5:10:81:ef:bd:59:61:56: 54:eb:57:81:a1:e7:60:28:a5:25:17:d2:c6:a3:17: fe:b9:c6:12:67:c2:1a:93:d6:7d:bb:43:d3:24:a7: 74:78:28:c9:c8:75:60:99:de:2f:1a:ca:61:47:f2: 5a:60:0f:d8:2c:b6:0e:93:42:cf:5e:a8:02:26:90: 57:ed:fe:8f:6a:66:c3:71:f4:e9:d4:70:7f:db:8d: b0:48:ba:67:6d:f6:b0:eb:3a:e8:93:30:6b:36:64: 38:f4:7d:54:d7:6f:94:27:83:d1:36:2b:80:72:25: 07:2b:10:ac:1b:35:4e:2d:1e:76:96:f8:7c:22:61: 32:91:53:03:3c:61:44:9b:77:be:79:23:fd:ee:8e: 0b:52:1a:9a:ac:b3:38:04:c7:32:93:62:ba:75:d7: a9:57:09:0a:8c:7e:99:c1:af:49:be:f9:c2:9d:bd: 6c:1d:2c:44:c7:58:e1:af:6b:20:6d:a3:60:d1:2c: 7b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BF:3C:EE:15:0A:E1:73:F2:84:FE:B8:0C:19:A8:78:6A:5D:A3:6C X509v3 Authority Key Identifier: keyid:E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:28:59:b0:f1:d0:b7:0d:0b:a7:6f:ce:95:72:fc:93:50:7b: 52:8a:78:f0:af:61:5a:f9:0d:10:be:b7:80:f4:7a:49:f8:fe: 3d:e8:fe:18:ed:d3:b7:04:81:3a:55:0c:b3:46:3d:e4:1e:0b: b5:50:6f:3c:c0:86:27:29:46:6b:3d:54:8d:25:ad:8a:99:f7: ff:54:0e:46:0b:8c:78:51:e9:6d:47:c8:89:33:98:16:42:2b: 56:4f:69:3a:19:14:c6:d0:e0:70:e7:24:78:c8:ad:89:88:d5: 86:77:0e:1d:17:75:2c:c5:7c:9e:14:c1:7e:4c:70:c1:f3:c2: 45:46:89:cf:a6:31:35:6b:f8:46:9b:80:af:d1:cc:62:c8:b0: 34:64:75:49:0c:8a:2a:c8:ae:78:99:6c:63:f7:d2:98:12:5f: 16:86:df:d5:9f:24:6c:7e:04:81:49:23:a8:25:bc:7d:61:be: df:ba:3c:27:10:c9:79:32:34:3f:f9:5c:3f:e3:f2:0e:94:34: d7:04:fe:11:f5:bf:a4:e6:c0:ef:38:8b:b6:14:42:bf:fb:f7: e1:51:1a:ae:8b:f6:4f:66:5d:35:7e:ca:d3:cf:de:6b:de:da: 11:a2:8d:52:19:96:1d:26:e7:c6:ca:8b:e9:da:8c:08:f2:26: 9c:45:29:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfn3Rq54a1qeW7F1KZm6CLBHV4TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZC ODYxMjVGOTAeFw0yNjA1MTIwNzM5MDVaFw0yNjA1MTMwODI5MDVaMDMxMTAvBgNV BAMTKEZCQkYzQ0VFMTUwQUUxNzNGMjg0RkVCODBDMTlBODc4NkE1REEzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR0RU5zgc2GLG+s5hDPKzUNUeK 7ukdSOlkTZenxn5gsp/3AaCX6XtDklkSSJKGEQIobAqyJEt2diU5zOMwEOpnz76l EIHvvVlhVlTrV4Gh52AopSUX0sajF/65xhJnwhqT1n27Q9Mkp3R4KMnIdWCZ3i8a ymFH8lpgD9gstg6TQs9eqAImkFft/o9qZsNx9OnUcH/bjbBIumdt9rDrOuiTMGs2 ZDj0fVTXb5Qng9E2K4ByJQcrEKwbNU4tHnaW+HwiYTKRUwM8YUSbd755I/3ujgtS GpqsszgExzKTYrp116lXCQqMfpnBr0m++cKdvWwdLETHWOGvayBto2DRLHvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+7887hUK4XPyhP64DBmoeGpdo2wwHwYDVR0j BBgwFoAU4K6frZ4lkIKwbMu5SvR49rhhJfkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ5MTJjOWItZGNlNC00MGU2LTk1ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5 RTI1OTA4MkIwNkNDQkI5NEFGNDc4RjZCODYxMjVGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMEFFOUZBRDlFMjU5MDgyQjA2Q0NCQjk0QUY0NzhGNkI4NjEy NUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvRTBBRTlGQUQ5RTI1OTA4MkIwNkNDQkI5NEFGNDc4 RjZCODYxMjVGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMoWbDx0LcNC6dvzpVy/JNQe1KKePCvYVr5 DRC+t4D0ekn4/j3o/hjt07cEgTpVDLNGPeQeC7VQbzzAhicpRms9VI0lrYqZ9/9U DkYLjHhR6W1HyIkzmBZCK1ZPaToZFMbQ4HDnJHjIrYmI1YZ3Dh0XdSzFfJ4UwX5M cMHzwkVGic+mMTVr+EabgK/RzGLIsDRkdUkMiirIrniZbGP30pgSXxaG39WfJGx+ BIFJI6glvH1hvt+6PCcQyXkyND/5XD/j8g6UNNcE/hH1v6TmwO84i7YUQr/79+FR Gq6L9k9mXTV+ytPP3mve2hGijVIZlh0m58bKi+najAjyJpxFKcI= -----END CERTIFICATE-----Generated at Tue May 12 22:19:41 2026 by rpki-client