$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json) Hash identifier: 14S45i272/fSQ8LBNmruiJXoTmhJNzDO0Owd5CPgnOM= Subject key identifier: D3:4D:65:17:57:3B:C5:86:C1:18:A2:26:D9:E5:98:73:70:83:77:C3 Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Certificate serial: 374A35EA567F5E874F45F3CB6943D5DFF17564CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:39:29 +0000 Manifest this update: Tue 12 May 2026 21:34:29 +0000 Manifest next update: Wed 13 May 2026 22:47:29 +0000 Files and hashes: 1: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=) 2: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=) 3: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=) 4: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: M283Gb/Ai11lz4v+8dD0JkoRuDPAPocVL70sesewFKc=) 5: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4a:35:ea:56:7f:5e:87:4f:45:f3:cb:69:43:d5:df:f1:75:64:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Validity Not Before: May 12 21:34:29 2026 GMT Not After : May 13 22:47:29 2026 GMT Subject: CN=D34D6517573BC586C118A226D9E59873708377C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:08:90:14:b7:1f:cd:2d:c0:6b:74:1a:a8:cb: cb:54:12:03:12:b7:19:14:dc:84:1a:71:d4:c9:1f: 0d:93:93:56:cd:3c:6c:c2:bb:c8:0d:33:a9:67:f7: f0:e4:5d:79:bf:d3:92:20:29:c2:32:5f:4b:87:4e: 88:9a:f0:53:37:8c:11:da:40:b2:39:a9:17:a3:3c: b5:0e:c4:e8:41:fc:ea:98:52:ff:2f:15:73:99:c6: a8:3a:b1:08:da:04:8a:79:97:1b:65:35:c6:54:2d: 66:0f:d6:b9:81:1a:bc:d5:d9:57:a7:3e:a3:77:07: b3:34:00:5b:34:a3:3e:0c:a7:c9:f9:97:15:d7:0f: c0:80:ce:04:b4:02:57:c0:01:a9:4a:31:c5:f8:d9: 3a:b9:31:78:bd:6c:26:1a:b1:f0:eb:3e:95:5f:f8: 2c:cc:56:34:48:62:fc:f2:dc:43:e2:41:3e:b2:42: 53:91:2e:2e:a3:4f:24:e1:a0:da:9d:e6:de:23:da: 83:0f:1b:2e:79:6b:91:94:14:db:90:d3:e0:21:18: 94:cf:e2:fb:bb:42:03:0b:d8:a7:66:8b:7f:91:7a: f0:81:4c:22:ee:e3:e8:86:3a:24:65:ba:fd:b7:b1: 33:d1:da:97:58:a3:23:61:10:ab:6c:76:ae:10:27: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4D:65:17:57:3B:C5:86:C1:18:A2:26:D9:E5:98:73:70:83:77:C3 X509v3 Authority Key Identifier: keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0e:16:38:1d:01:3c:d3:09:ac:07:ee:41:c7:6b:27:46:46: 70:ad:9f:b3:b5:ef:7c:1a:76:e1:20:ef:1a:53:f0:61:d1:7e: be:f5:8e:ec:2a:60:06:0b:46:c9:b6:fd:34:7a:fb:04:a6:68: 8b:4d:76:26:e4:5d:71:9e:cd:11:a3:8b:30:6c:e0:3e:56:22: 01:e2:d4:3b:cd:79:3e:b6:f7:47:63:89:cb:1b:e4:cc:ce:0b: fb:e6:3c:7d:2b:60:41:bd:36:92:12:84:2d:ed:cd:09:e1:6b: c7:18:9a:e3:d1:8d:18:7b:5e:b2:c0:94:23:d6:fb:6d:60:f5: a5:8c:c0:51:15:ff:2f:2d:15:cd:66:f1:14:8a:94:7e:eb:66: 94:c1:31:58:63:a0:8c:6d:91:24:6c:30:20:47:21:2e:7f:5a: ee:6a:80:50:c9:4e:25:83:12:0c:d9:ad:41:b0:8b:98:c1:75: 83:24:8c:d9:8e:01:25:4a:42:22:c5:4b:40:23:23:21:fa:37: 80:a7:7b:55:42:f4:6f:4e:ad:20:25:0b:15:1c:3e:ea:2f:07: 57:5f:60:7a:52:36:0b:94:0e:97:eb:eb:8e:25:3a:cc:5f:4f: 6f:be:b1:41:4d:fb:17:55:15:33:dc:c6:0e:97:61:e4:2b:5c: 02:c1:f1:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0o16lZ/XodPRfPLaUPV3/F1ZM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNFMzNF OTMzMEQwRjAeFw0yNjA1MTIyMTM0MjlaFw0yNjA1MTMyMjQ3MjlaMDMxMTAvBgNV BAMTKEQzNEQ2NTE3NTczQkM1ODZDMTE4QTIyNkQ5RTU5ODczNzA4Mzc3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjCJAUtx/NLcBrdBqoy8tUEgMS txkU3IQacdTJHw2Tk1bNPGzCu8gNM6ln9/DkXXm/05IgKcIyX0uHToia8FM3jBHa QLI5qRejPLUOxOhB/OqYUv8vFXOZxqg6sQjaBIp5lxtlNcZULWYP1rmBGrzV2Ven PqN3B7M0AFs0oz4Mp8n5lxXXD8CAzgS0AlfAAalKMcX42Tq5MXi9bCYasfDrPpVf +CzMVjRIYvzy3EPiQT6yQlORLi6jTyThoNqd5t4j2oMPGy55a5GUFNuQ0+AhGJTP 4vu7QgML2Kdmi3+RevCBTCLu4+iGOiRluv23sTPR2pdYoyNhEKtsdq4QJ74hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU001lF1c7xYbBGKIm2eWYc3CDd8MwHwYDVR0j BBgwFoAU6kE/vL4r9zZS2FECSV7OM+kzDQ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmU5MDUtZjI5Ni00NWQxLWE4NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNC RTJCRjczNjUyRDg1MTAyNDk1RUNFMzNFOTMzMEQwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTQxM0ZCQ0JFMkJGNzM2NTJEODUxMDI0OTVFQ0UzM0U5MzMw RDBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNF MzNFOTMzMEQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUOFjgdATzTCawH7kHHaydGRnCtn7O173wa duEg7xpT8GHRfr71juwqYAYLRsm2/TR6+wSmaItNdibkXXGezRGjizBs4D5WIgHi 1DvNeT6290djicsb5MzOC/vmPH0rYEG9NpIShC3tzQnha8cYmuPRjRh7XrLAlCPW +21g9aWMwFEV/y8tFc1m8RSKlH7rZpTBMVhjoIxtkSRsMCBHIS5/Wu5qgFDJTiWD EgzZrUGwi5jBdYMkjNmOASVKQiLFS0AjIyH6N4Cne1VC9G9OrSAlCxUcPuovB1df YHpSNguUDpfr644lOsxfT2++sUFN+xdVFTPcxg6XYeQrXALB8Z4= -----END CERTIFICATE-----Generated at Wed May 13 04:54:15 2026 by rpki-client