$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft File: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft (raw, json) Hash identifier: FSo59ZFDBBAVZyOL5Ifoabl4IrB/IKbn2Olzyasn+D8= Subject key identifier: A3:D5:E6:9F:8B:0F:22:3D:70:17:58:FB:33:DE:46:3D:70:3B:68:B4 Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Certificate serial: 16CDDF75791B4AD7065B9E974A634863C6968057 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:32 +0000 Manifest this update: Tue 12 May 2026 19:25:32 +0000 Manifest next update: Wed 13 May 2026 20:03:32 +0000 Files and hashes: 1: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl (hash: wN5vkmcUZrIAXSMUfrrZ0CcT4WTFSt4QqKoVjh/mwdQ=) 2: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0=) 3: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cd:df:75:79:1b:4a:d7:06:5b:9e:97:4a:63:48:63:c6:96:80:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Validity Not Before: May 12 19:25:32 2026 GMT Not After : May 13 20:03:32 2026 GMT Subject: CN=A3D5E69F8B0F223D701758FB33DE463D703B68B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:30:43:a0:dc:1e:9c:ef:20:5d:e4:b4:61: 5c:ad:3b:82:72:30:66:7f:be:ab:61:35:48:b0:7f: 0b:06:3d:e9:5c:0d:a1:24:c5:c2:ab:61:11:6a:d9: af:8f:bb:9d:16:be:d9:50:7c:6f:2d:f2:32:d4:0b: 59:b6:9b:4d:2f:2d:33:62:0f:d3:7a:18:1f:81:5c: 0a:c3:52:c0:38:53:bf:d3:9f:82:2c:eb:0d:f6:bd: b7:4b:82:86:92:0a:2a:a2:42:2b:2b:8e:dd:c1:9c: 89:94:92:e9:48:b1:f5:dd:a8:6c:5d:b8:00:1b:fa: 74:54:13:70:b9:4c:53:eb:01:6d:12:ea:b7:02:68: cf:cb:dc:08:9d:15:23:a7:aa:e3:44:35:88:b0:6d: 80:30:e0:23:22:79:01:05:1a:1a:2d:19:b4:59:17: 18:1b:7b:33:e7:dc:78:0c:7d:4d:d3:a2:9a:94:37: 14:53:ee:79:9f:92:2c:62:88:19:d4:22:1b:b5:21: 04:9f:60:39:10:fb:3c:c3:ce:b6:91:75:28:50:ce: bc:1b:2d:a5:80:56:8b:b8:9b:55:b8:39:14:5f:32: 25:f5:b0:80:c3:04:54:98:55:49:66:83:d7:68:c5: 6a:8a:c4:03:c8:35:92:16:0a:ac:96:7d:0e:f8:19: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:E6:9F:8B:0F:22:3D:70:17:58:FB:33:DE:46:3D:70:3B:68:B4 X509v3 Authority Key Identifier: keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d6:5c:a7:a7:2e:1d:71:70:00:0e:f3:7e:d0:31:48:9f:e8: 02:84:24:77:79:07:4f:d2:88:a3:86:3a:0b:2c:13:f2:44:4c: 26:e0:d6:49:c1:74:e5:e6:e6:1d:b1:ed:6d:8a:d3:a4:4e:c8: c9:a6:66:4f:c2:ae:24:aa:3e:d5:e0:1c:90:e3:fd:68:7e:9e: d3:1c:4e:78:ca:06:42:16:83:53:ce:71:22:f4:80:b5:61:3c: 6b:1a:b4:1d:c0:62:6c:37:0f:3f:44:21:50:32:ac:eb:6a:e0: ee:a2:6a:b7:d0:fd:8d:02:41:8b:29:3f:c6:0c:d0:f3:b8:bf: f2:df:2c:f0:d5:72:6b:2a:38:06:21:67:2a:ff:11:1b:75:35: 86:46:93:1f:a9:34:85:9b:a2:c3:8b:db:a0:33:ca:d4:d2:dd: 75:d6:ec:c4:82:23:9e:1f:aa:ed:e8:1a:bc:2d:38:2f:9d:8a: 87:4f:c0:4d:8a:96:75:4e:38:7b:66:2b:89:9d:4e:9a:05:ac: 1c:33:0b:d0:9e:0b:c1:9f:9d:64:b9:84:08:32:b4:5b:bf:46: 75:43:98:bb:01:c3:fb:4e:4d:06:69:b4:0d:4b:be:6d:61:08: 96:17:98:6c:c4:32:6b:54:ca:a2:ef:29:1a:ea:13:0f:82:44: a8:dd:57:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFs3fdXkbStcGW56XSmNIY8aWgFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJD NUVBMzY4ODAeFw0yNjA1MTIxOTI1MzJaFw0yNjA1MTMyMDAzMzJaMDMxMTAvBgNV BAMTKEEzRDVFNjlGOEIwRjIyM0Q3MDE3NThGQjMzREU0NjNENzAzQjY4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RjBDoNwenO8gXeS0YVytO4Jy MGZ/vqthNUiwfwsGPelcDaEkxcKrYRFq2a+Pu50WvtlQfG8t8jLUC1m2m00vLTNi D9N6GB+BXArDUsA4U7/Tn4Is6w32vbdLgoaSCiqiQisrjt3BnImUkulIsfXdqGxd uAAb+nRUE3C5TFPrAW0S6rcCaM/L3AidFSOnquNENYiwbYAw4CMieQEFGhotGbRZ FxgbezPn3HgMfU3TopqUNxRT7nmfkixiiBnUIhu1IQSfYDkQ+zzDzraRdShQzrwb LaWAVou4m1W4ORRfMiX1sIDDBFSYVUlmg9doxWqKxAPINZIWCqyWfQ74GbChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9Xmn4sPIj1wF1j7M95GPXA7aLQwHwYDVR0j BBgwFoAU4cvlcamzXlSIAlDzwDXjosXqNogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIwN2IzN2MtMDUwNy00OTEzLTgzMjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFB OUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJDNUVBMzY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUNCRTU3MUE5QjM1RTU0ODgwMjUwRjNDMDM1RTNBMkM1RUEz Njg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUz QTJDNUVBMzY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDWXKenLh1xcAAO837QMUif6AKEJHd5B0/S iKOGOgssE/JETCbg1knBdOXm5h2x7W2K06ROyMmmZk/CriSqPtXgHJDj/Wh+ntMc TnjKBkIWg1POcSL0gLVhPGsatB3AYmw3Dz9EIVAyrOtq4O6iarfQ/Y0CQYspP8YM 0PO4v/LfLPDVcmsqOAYhZyr/ERt1NYZGkx+pNIWbosOL26AzytTS3XXW7MSCI54f qu3oGrwtOC+diodPwE2KlnVOOHtmK4mdTpoFrBwzC9CeC8GfnWS5hAgytFu/RnVD mLsBw/tOTQZptA1Lvm1hCJYXmGzEMmtUyqLvKRrqEw+CRKjdV5I= -----END CERTIFICATE-----Generated at Wed May 13 06:56:16 2026 by rpki-client