$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json) Hash identifier: O/2vRwQb4W14Gov3gTl0sAL7xnLENGZuevQHF6/kXGA= Subject key identifier: 70:B0:B7:26:B3:E7:F6:C6:3D:48:DD:86:D1:46:DD:AB:13:C4:FA:E2 Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Certificate serial: 56143C63EE8BA11535D436A59E754B8EA5D10184 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:51:24 +0000 Manifest this update: Tue 12 May 2026 22:46:24 +0000 Manifest next update: Thu 14 May 2026 01:40:24 +0000 Files and hashes: 1: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: xmt3lQkIOi1OlPkZJxVRY6szp9GGf+FeQrszX1Mn+MA=) 2: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:14:3c:63:ee:8b:a1:15:35:d4:36:a5:9e:75:4b:8e:a5:d1:01:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Validity Not Before: May 12 22:46:24 2026 GMT Not After : May 14 01:40:24 2026 GMT Subject: CN=70B0B726B3E7F6C63D48DD86D146DDAB13C4FAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:5b:e2:1a:91:20:29:53:9f:06:0e:97:26: bd:53:af:13:e1:27:d8:f3:44:d2:97:dd:6a:d7:70: 61:86:31:4c:a0:d2:94:fe:df:7f:61:7e:e9:a1:73: 26:71:cb:98:9c:d3:2a:01:42:07:c0:7c:02:04:9a: b8:ac:2b:f0:d5:2f:4f:d1:07:2d:0f:7e:8b:83:02: 9e:e0:5f:92:a1:59:4f:fd:67:13:06:2e:db:ad:23: 5d:3a:e3:e8:8b:2a:aa:5c:a6:a1:d7:5a:e0:ca:48: 08:97:56:41:4d:ac:9b:84:08:8f:57:16:a8:86:1f: 5f:bc:29:f8:cc:63:68:02:b6:bd:d9:a9:86:d9:a4: 83:20:0a:09:2c:41:95:d9:c4:d8:94:68:7a:d1:7f: 17:6e:84:f7:6e:42:b0:d7:f3:1f:a6:02:fb:63:87: e2:49:c4:c2:bc:76:69:6f:81:4b:c6:ce:f3:a4:f5: e3:5e:bb:07:bb:1a:1b:ab:11:a2:c8:b8:62:7d:c6: 1c:52:14:67:4a:8c:54:0f:ea:72:54:a1:38:be:1c: 3b:14:fe:f3:f9:b3:07:73:6e:74:78:5c:94:04:9d: 46:fb:a3:ab:c5:46:ee:2f:c0:bb:e4:90:38:c7:93: ab:14:84:79:c7:bd:17:e6:3d:0f:1c:48:0d:e9:51: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:B7:26:B3:E7:F6:C6:3D:48:DD:86:D1:46:DD:AB:13:C4:FA:E2 X509v3 Authority Key Identifier: keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b7:ce:85:31:f0:a9:87:e8:47:d7:6a:c9:3d:6b:a4:15:d0: 5a:ea:28:c8:cd:d5:8a:0d:cf:e6:f8:fa:40:a1:35:63:fa:ef: a9:a4:08:d5:69:c4:c8:4e:bf:4b:07:a3:3d:ae:f2:bf:b1:35: f3:d2:12:8e:7c:d5:fa:3f:f6:fc:5b:09:74:78:87:e1:62:c1: 85:a7:b9:a4:10:7f:40:07:a7:17:55:67:82:07:1a:e9:41:7b: 11:ad:04:d6:b9:5c:12:fd:53:33:ce:79:4a:32:62:42:32:9e: 40:73:72:3a:a2:d9:41:c8:3f:3b:90:e0:a6:84:f1:9e:3e:40: b8:00:10:2b:23:e7:75:e7:43:d3:8c:b0:9f:0b:84:a5:f4:e2: 1b:a0:5b:2b:24:a6:a5:51:aa:cd:dd:2b:66:f3:47:2d:48:22: 40:c8:c3:bf:c1:49:09:e0:12:77:45:74:51:3a:f7:ad:81:71: 03:bc:ef:e1:f8:24:3c:3f:71:6c:b5:4a:58:ec:03:e6:5c:37: ce:79:4c:f1:f8:d9:f0:81:d1:91:64:5c:ed:74:4f:8b:03:c0: 4d:5c:05:34:69:2e:c4:9d:a7:8a:8e:20:80:08:94:27:cd:01: d4:38:7f:8a:ab:56:03:8a:36:f7:61:9a:0c:eb:71:71:63:31: 7a:4d:25:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhQ8Y+6LoRU11DalnnVLjqXRAYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNC RTM4REQ4ODAeFw0yNjA1MTIyMjQ2MjRaFw0yNjA1MTQwMTQwMjRaMDMxMTAvBgNV BAMTKDcwQjBCNzI2QjNFN0Y2QzYzRDQ4REQ4NkQxNDZEREFCMTNDNEZBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3FviGpEgKVOfBg6XJr1TrxPh J9jzRNKX3WrXcGGGMUyg0pT+339hfumhcyZxy5ic0yoBQgfAfAIEmrisK/DVL0/R By0PfouDAp7gX5KhWU/9ZxMGLtutI1064+iLKqpcpqHXWuDKSAiXVkFNrJuECI9X FqiGH1+8KfjMY2gCtr3ZqYbZpIMgCgksQZXZxNiUaHrRfxduhPduQrDX8x+mAvtj h+JJxMK8dmlvgUvGzvOk9eNeuwe7GhurEaLIuGJ9xhxSFGdKjFQP6nJUoTi+HDsU /vP5swdzbnR4XJQEnUb7o6vFRu4vwLvkkDjHk6sUhHnHvRfmPQ8cSA3pUfjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcLC3JrPn9sY9SN2G0UbdqxPE+uIwHwYDVR0j BBgwFoAULrjL56R5J3rAPugPNl3Yg7443YgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOTJlODktOTJkNS00MDY0LTk1MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdB NDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNCRTM4REQ4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRUI4Q0JFN0E0NzkyNzdBQzAzRUU4MEYzNjVERDg4M0JFMzhE RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4 ODNCRTM4REQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFK3zoUx8KmH6EfXask9a6QV0FrqKMjN1YoN z+b4+kChNWP676mkCNVpxMhOv0sHoz2u8r+xNfPSEo581fo/9vxbCXR4h+FiwYWn uaQQf0AHpxdVZ4IHGulBexGtBNa5XBL9UzPOeUoyYkIynkBzcjqi2UHIPzuQ4KaE 8Z4+QLgAECsj53XnQ9OMsJ8LhKX04hugWyskpqVRqs3dK2bzRy1IIkDIw7/BSQng EndFdFE6962BcQO87+H4JDw/cWy1SljsA+ZcN855TPH42fCB0ZFkXO10T4sDwE1c BTRpLsSdp4qOIIAIlCfNAdQ4f4qrVgOKNvdhmgzrcXFjMXpNJTA= -----END CERTIFICATE-----Generated at Wed May 13 00:14:05 2026 by rpki-client