$ rpki-client -vvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft File: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft (raw, json) Hash identifier: z7Ia4COH/XgpFQLTJYTCeIJkUCK50prt3o9JZYDsems= Subject key identifier: 3D:F4:57:B5:7C:07:88:D2:57:A0:CF:37:6A:D7:50:F4:C8:D8:12:5E Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 Certificate issuer: /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Certificate serial: 56687138B492CADA844FC6423A66BC819A13C519 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:06:17 +0000 Manifest this update: Tue 12 May 2026 10:01:17 +0000 Manifest next update: Wed 13 May 2026 11:18:17 +0000 Files and hashes: 1: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl (hash: j6sJyVuErweJDrqeT9GbCW+e9FjjEiztdEkI4IuX8w8=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: ZsJ/jB1I6GIvE0h8Rn6eqplhxHo0cL9KOhuXdGF4spA=) 3: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: IOAwzQ73Cr2im/VcFN1TaAQYk3NUUawiD2oAPVCKSrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:68:71:38:b4:92:ca:da:84:4f:c6:42:3a:66:bc:81:9a:13:c5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Validity Not Before: May 12 10:01:17 2026 GMT Not After : May 13 11:18:17 2026 GMT Subject: CN=3DF457B57C0788D257A0CF376AD750F4C8D8125E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:b8:6e:f4:8c:64:56:80:b5:9c:fc:b7:b6: 6a:f0:3e:dd:e3:5b:79:09:a9:36:16:f0:c0:c9:32: e7:56:e3:fd:9b:69:f9:e9:ba:d8:be:25:09:7c:5d: b9:51:ac:4f:16:80:17:3b:48:37:91:49:f3:3b:03: 9d:c8:af:9c:18:77:41:42:1e:79:62:a3:78:c8:1b: e4:ee:77:a7:07:55:c4:25:e5:e8:ca:e8:69:6b:db: a5:78:a9:7e:3f:87:f3:16:f1:78:c1:23:df:9d:a5: bb:71:27:04:43:25:4e:f0:fa:16:43:65:6d:e6:71: c6:91:a0:46:b0:91:61:51:b0:5f:16:83:1a:60:6b: 59:8a:cd:49:4f:b6:25:2e:bb:e6:b8:44:0d:8e:40: 6a:2a:1f:9c:f5:20:14:de:de:64:67:3e:43:fd:5c: a5:7c:28:1e:1a:8b:4f:3f:85:c5:7c:28:20:aa:e9: 11:0f:f9:d0:3d:72:e3:e5:89:0c:3a:03:4a:bc:f6: fc:cb:93:70:e2:03:bf:1f:e0:0c:2f:90:3f:65:9b: c4:67:aa:f5:44:e9:86:9c:7b:dc:4d:c2:d1:81:b5: e1:63:46:5e:71:5e:f3:c6:43:c2:36:f3:5a:69:11: 74:03:9a:69:33:22:49:be:a0:25:a9:44:11:a3:c3: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F4:57:B5:7C:07:88:D2:57:A0:CF:37:6A:D7:50:F4:C8:D8:12:5E X509v3 Authority Key Identifier: keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9a:08:11:07:e9:04:11:d9:57:66:56:5f:0d:01:d4:d7:16: 9d:c5:8f:61:e6:bc:04:88:a3:ee:7c:23:16:90:5f:26:f2:14: 05:71:b7:8e:24:34:6a:85:7e:4f:20:48:c5:2a:f1:5b:2e:bf: c1:e8:57:8a:f0:24:b0:ad:0a:30:d8:0d:4b:83:b6:84:f8:5a: c1:8a:53:0a:cc:fb:8c:a5:7e:b0:ed:48:c9:6b:70:4b:e5:c6: c7:fe:ce:ea:37:a6:8c:71:76:1d:e6:ad:6c:77:72:82:c6:3e: a0:0b:d4:b2:bc:42:f4:b4:42:63:19:a8:98:d3:06:0c:cf:38: cc:fb:c8:17:78:b3:d6:0a:a8:95:4b:9d:66:be:73:c1:91:5f: 89:ea:c9:35:59:79:4d:8f:7f:d7:2e:fe:13:d0:f9:d2:90:19: 46:6e:0c:a6:93:ec:5c:c3:e5:85:40:8e:cf:7b:6e:8f:78:12: 0b:f6:25:ac:e4:62:01:78:4d:de:21:ed:75:04:16:1c:32:5b: a3:82:3b:37:74:66:6d:10:61:c4:ef:6e:7d:1c:72:8e:87:78: 76:38:0d:f4:7b:26:89:32:8e:03:71:4e:07:66:15:9c:cf:31: 72:92:61:16:26:bc:54:8a:49:df:24:4a:7d:c1:66:b9:06:8c: 13:dc:c1:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVmhxOLSSytqET8ZCOma8gZoTxRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERGQUYy NzMwMjQ2NzAeFw0yNjA1MTIxMDAxMTdaFw0yNjA1MTMxMTE4MTdaMDMxMTAvBgNV BAMTKDNERjQ1N0I1N0MwNzg4RDI1N0EwQ0YzNzZBRDc1MEY0QzhEODEyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Rbhu9IxkVoC1nPy3tmrwPt3j W3kJqTYW8MDJMudW4/2bafnputi+JQl8XblRrE8WgBc7SDeRSfM7A53Ir5wYd0FC Hnlio3jIG+Tud6cHVcQl5ejK6Glr26V4qX4/h/MW8XjBI9+dpbtxJwRDJU7w+hZD ZW3mccaRoEawkWFRsF8Wgxpga1mKzUlPtiUuu+a4RA2OQGoqH5z1IBTe3mRnPkP9 XKV8KB4ai08/hcV8KCCq6REP+dA9cuPliQw6A0q89vzLk3DiA78f4AwvkD9lm8Rn qvVE6Yace9xNwtGBteFjRl5xXvPGQ8I281ppEXQDmmkzIkm+oCWpRBGjw9+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPfRXtXwHiNJXoM83atdQ9MjYEl4wHwYDVR0j BBgwFoAUHqYQz63XJ62qdPqb/o3frycwJGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwZWRkY2QtN2QzOC00NzY1LWFhMjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZB REQ3MjdBREFBNzRGQTlCRkU4RERGQUYyNzMwMjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUE2MTBDRkFERDcyN0FEQUE3NEZBOUJGRThEREZBRjI3MzAy NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERG QUYyNzMwMjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaaCBEH6QQR2VdmVl8NAdTXFp3Fj2HmvASI o+58IxaQXybyFAVxt44kNGqFfk8gSMUq8Vsuv8HoV4rwJLCtCjDYDUuDtoT4WsGK UwrM+4ylfrDtSMlrcEvlxsf+zuo3poxxdh3mrWx3coLGPqAL1LK8QvS0QmMZqJjT BgzPOMz7yBd4s9YKqJVLnWa+c8GRX4nqyTVZeU2Pf9cu/hPQ+dKQGUZuDKaT7FzD 5YVAjs97bo94Egv2JazkYgF4Td4h7XUEFhwyW6OCOzd0Zm0QYcTvbn0cco6HeHY4 DfR7JokyjgNxTgdmFZzPMXKSYRYmvFSKSd8kSn3BZrkGjBPcwf4= -----END CERTIFICATE-----Generated at Tue May 12 22:19:53 2026 by rpki-client