$ rpki-client -vvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft File: EB314E0C129A5CAF077447531422664A0DBA21EB.mft (raw, json) Hash identifier: bGhe5fO1lhkeei7Ej0PfkyU1XZ4v3+VrJmtmydvr4CM= Subject key identifier: EC:31:E7:1F:21:12:AA:40:E2:8E:A0:0A:3F:99:5D:92:90:A7:20:FF Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB Certificate serial: 5BE5F7B7C301122604FAD3F0440C3E637AC7F7B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:15:30 +0000 Manifest this update: Tue 12 May 2026 05:10:30 +0000 Manifest next update: Wed 13 May 2026 07:28:30 +0000 Files and hashes: 1: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=) 2: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=) 3: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: A5PltxTRAuGwKx7Z5AFNGaTklePgssNYT6aD4qcBx0s=) 4: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=) 5: EB314E0C129A5CAF077447531422664A0DBA21EB.crl (hash: yV1my9hfpJC/YZDzghZErhJHdjiA5hSL7d620l9ptLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e5:f7:b7:c3:01:12:26:04:fa:d3:f0:44:0c:3e:63:7a:c7:f7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB Validity Not Before: May 12 05:10:30 2026 GMT Not After : May 13 07:28:30 2026 GMT Subject: CN=EC31E71F2112AA40E28EA00A3F995D9290A720FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:8f:51:39:69:f7:6f:a2:34:4b:9b:d4:36: c8:f5:c6:7e:36:2c:12:70:60:8a:f3:01:d4:de:48: 88:4a:b1:93:02:8c:cd:19:19:92:35:f4:2b:50:12: fa:f1:b7:6e:16:15:d8:fe:8f:df:15:08:f3:01:31: 1d:fe:c9:b9:aa:73:1c:a7:85:eb:ad:88:a1:95:2f: 61:64:9e:80:f8:e2:61:4b:0b:53:98:b7:df:6e:0e: 6f:b2:54:99:64:44:8d:63:6a:48:31:fc:47:37:30: 9b:52:99:32:3a:bc:eb:ff:43:ad:fe:e1:e0:45:a2: 05:1e:c4:5f:5e:79:6b:53:60:cf:6d:29:4c:d0:79: 4f:d7:5c:65:bb:98:16:c4:2b:8b:f9:3c:6a:65:c0: 3d:32:60:47:34:98:73:d1:fd:90:4f:e3:ee:a2:0d: c7:86:37:7f:7c:27:5b:80:f8:0e:bd:fe:2c:21:6e: 96:ff:52:f2:38:d8:de:00:86:05:a5:3c:bf:34:41: 83:2e:7a:64:f3:14:43:0b:57:a9:94:a8:54:4e:85: 1f:5c:28:b4:66:db:b5:fd:46:b7:ea:8a:a4:68:de: dc:10:f9:69:75:dc:8f:9c:57:c4:a9:4b:3c:0d:c5: c3:49:58:55:b8:5b:53:65:90:e8:7a:54:71:9e:56: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:31:E7:1F:21:12:AA:40:E2:8E:A0:0A:3F:99:5D:92:90:A7:20:FF X509v3 Authority Key Identifier: keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:49:2d:30:8a:58:58:6e:28:80:2a:b8:8c:bb:8c:d7:c8:83: a6:80:82:16:3d:72:7c:06:97:65:64:cd:85:d2:83:49:b1:5c: 79:92:04:07:ee:ad:87:02:5f:fc:20:2a:93:24:93:9d:96:5d: 20:75:1f:c8:4d:30:c4:1a:34:f3:2e:72:a5:65:4a:81:d3:6b: 01:5d:72:7a:cd:8a:a1:fc:e2:61:6e:f8:4e:81:47:63:39:1f: f9:87:e4:fb:5b:7c:5b:d7:bf:dc:b0:a4:72:f6:c2:7c:ac:1d: 86:42:2b:1a:53:0f:08:37:3e:93:17:b3:03:75:e7:f1:83:26: 5b:00:9f:a2:da:6b:a9:f5:cb:62:de:03:ba:3f:2b:66:d3:fa: 68:0c:70:7e:73:a8:a6:8a:39:67:0c:83:c4:47:0d:e7:d3:8a: 53:63:b4:8a:66:37:d8:6a:a8:59:64:f5:fd:ac:24:95:df:b3: ea:d8:d5:da:1f:4f:25:12:47:b3:86:47:db:53:86:6e:32:e0: 56:76:64:41:3d:d9:d4:d1:6f:d0:44:6f:a7:97:73:38:f0:86: b4:80:56:36:f4:89:0d:fb:cf:56:0a:10:2b:5a:f3:61:0d:f7: 4b:30:12:a2:d7:dc:b1:46:d2:2c:19:ce:b5:01:7c:7f:0b:37: cf:a9:a0:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+X3t8MBEiYE+tPwRAw+Y3rH97kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw REJBMjFFQjAeFw0yNjA1MTIwNTEwMzBaFw0yNjA1MTMwNzI4MzBaMDMxMTAvBgNV BAMTKEVDMzFFNzFGMjExMkFBNDBFMjhFQTAwQTNGOTk1RDkyOTBBNzIwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAo9ROWn3b6I0S5vUNsj1xn42 LBJwYIrzAdTeSIhKsZMCjM0ZGZI19CtQEvrxt24WFdj+j98VCPMBMR3+ybmqcxyn heutiKGVL2FknoD44mFLC1OYt99uDm+yVJlkRI1jakgx/Ec3MJtSmTI6vOv/Q63+ 4eBFogUexF9eeWtTYM9tKUzQeU/XXGW7mBbEK4v5PGplwD0yYEc0mHPR/ZBP4+6i DceGN398J1uA+A69/iwhbpb/UvI42N4AhgWlPL80QYMuemTzFEMLV6mUqFROhR9c KLRm27X9RrfqiqRo3twQ+Wl13I+cV8SpSzwNxcNJWFW4W1NlkOh6VHGeVt0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7DHnHyESqkDijqAKP5ldkpCnIP8wHwYDVR0j BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2 NEEwREJBMjFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFJLTCKWFhuKIAquIy7jNfIg6aAghY9cnwG l2VkzYXSg0mxXHmSBAfurYcCX/wgKpMkk52WXSB1H8hNMMQaNPMucqVlSoHTawFd cnrNiqH84mFu+E6BR2M5H/mH5PtbfFvXv9ywpHL2wnysHYZCKxpTDwg3PpMXswN1 5/GDJlsAn6Laa6n1y2LeA7o/K2bT+mgMcH5zqKaKOWcMg8RHDefTilNjtIpmN9hq qFlk9f2sJJXfs+rY1dofTyUSR7OGR9tThm4y4FZ2ZEE92dTRb9BEb6eXczjwhrSA Vjb0iQ37z1YKECta82EN90swEqLX3LFG0iwZzrUBfH8LN8+poPc= -----END CERTIFICATE-----Generated at Wed May 13 01:37:18 2026 by rpki-client