$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft (raw, json) Hash identifier: lnxYroAwTM2IVLHBlbCGU+ACWM9ys9yhhRFqEVUTn5k= Subject key identifier: E9:30:4C:AB:63:C5:3D:CE:18:6E:A2:DD:BF:97:0E:EE:45:0D:EF:09 Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Certificate serial: 7BDDDE1FFA854CFBC1C95F6F2F7526645CA935F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:46:44 +0000 Manifest this update: Tue 12 May 2026 10:41:44 +0000 Manifest next update: Wed 13 May 2026 13:14:44 +0000 Files and hashes: 1: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl (hash: NpXuGHVFkAXX7VyB7rRTOpYvx/Okj45vKQhZWG3L+mw=) 2: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=) 3: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:dd:de:1f:fa:85:4c:fb:c1:c9:5f:6f:2f:75:26:64:5c:a9:35:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Validity Not Before: May 12 10:41:44 2026 GMT Not After : May 13 13:14:44 2026 GMT Subject: CN=E9304CAB63C53DCE186EA2DDBF970EEE450DEF09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:29:8f:7c:59:4c:b2:f9:1b:cb:b6:04:f3: 76:14:76:88:c0:0c:d2:67:e4:69:79:10:64:1f:98: ad:88:5e:5a:23:ca:9d:3d:d6:26:93:90:5a:45:97: 72:2a:56:c0:f8:ce:e5:01:d5:09:e4:76:da:2a:6a: 90:7a:67:eb:3f:76:46:44:d9:57:01:1d:de:1b:e9: bc:0f:a5:c8:1c:21:5e:f9:5d:6c:4e:30:29:f0:43: 8a:f2:29:cd:8b:0a:fb:af:40:60:c2:0c:74:8d:aa: 5b:42:ba:5c:d5:6e:55:77:97:b1:9c:59:cf:e7:be: f1:af:5a:16:15:84:94:21:b0:21:73:2f:24:f3:58: 83:c8:28:77:24:61:ed:db:d3:4b:25:b9:41:e8:93: 0e:b4:49:77:5b:2e:78:78:f0:e1:c3:0c:bf:cf:72: 75:1c:32:69:86:d1:28:35:99:84:9a:86:84:2b:19: 07:34:6f:ea:50:1d:7e:2d:b2:de:12:2d:ac:91:60: 42:45:4a:a0:bd:3b:7b:1f:fc:28:3f:66:64:66:8d: c6:32:7c:98:2e:d2:d4:41:71:2a:f0:c0:e7:05:26: 12:f5:be:49:ad:27:83:fb:e1:f7:8a:c1:a6:f0:42: d0:d6:e8:39:30:da:2a:e2:f1:b7:c9:48:29:b2:83: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:30:4C:AB:63:C5:3D:CE:18:6E:A2:DD:BF:97:0E:EE:45:0D:EF:09 X509v3 Authority Key Identifier: keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1f:2e:41:9f:24:01:20:39:b5:14:88:b8:8f:1e:86:6f:99: 52:76:5c:a2:c8:0b:f5:d6:2f:71:d3:96:e9:2e:47:22:77:38: 4c:01:59:6b:94:3d:12:9b:25:1d:0e:1c:67:f3:44:e5:fe:d9: 74:da:b4:ca:8f:6e:88:15:c2:80:f5:7f:1c:7c:60:6e:4b:a3: 1d:98:51:26:86:41:7c:de:e9:bd:6d:60:fd:97:32:c1:06:18: cb:26:87:c9:ef:17:cc:9a:73:d2:cd:68:09:32:25:20:1b:18: de:8f:50:c8:37:5b:93:19:b5:c1:d6:a8:2e:e2:56:9d:28:a0: bc:40:df:15:86:8e:7f:3c:2f:ee:ee:cf:2e:1c:fa:3a:37:5e: d0:e5:42:48:34:b3:20:76:d8:69:ab:4e:9b:51:50:b1:b5:31: a5:38:33:b9:e8:25:c8:92:68:50:b2:50:ce:74:f4:26:81:5f: 50:8f:59:9d:9f:9a:08:50:4d:b3:42:f8:43:89:d5:45:5d:65: 22:ea:4f:a7:6b:5f:78:77:31:6b:9e:95:d1:68:6f:b9:6c:e2: c8:81:3e:73:64:82:df:69:1b:f9:10:aa:5d:4b:22:50:75:82: a8:5d:2a:70:fc:0a:3b:59:d0:9f:fd:d8:4b:7a:f9:f5:77:80: 4a:44:b5:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe93eH/qFTPvByV9vL3UmZFypNfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdG QzFFNkY5MzAeFw0yNjA1MTIxMDQxNDRaFw0yNjA1MTMxMzE0NDRaMDMxMTAvBgNV BAMTKEU5MzA0Q0FCNjNDNTNEQ0UxODZFQTJEREJGOTcwRUVFNDUwREVGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7ymPfFlMsvkby7YE83YUdojA DNJn5Gl5EGQfmK2IXlojyp091iaTkFpFl3IqVsD4zuUB1QnkdtoqapB6Z+s/dkZE 2VcBHd4b6bwPpcgcIV75XWxOMCnwQ4ryKc2LCvuvQGDCDHSNqltCulzVblV3l7Gc Wc/nvvGvWhYVhJQhsCFzLyTzWIPIKHckYe3b00sluUHokw60SXdbLnh48OHDDL/P cnUcMmmG0Sg1mYSahoQrGQc0b+pQHX4tst4SLayRYEJFSqC9O3sf/Cg/ZmRmjcYy fJgu0tRBcSrwwOcFJhL1vkmtJ4P74feKwabwQtDW6Dkw2iri8bfJSCmyg5g9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6TBMq2PFPc4YbqLdv5cO7kUN7wkwHwYDVR0j BBgwFoAUJXr97p+h7WxVq/DAzPFz5/web5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZmNzUwMjEtODM2OC00NDgxLTkyNjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5 RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdGQzFFNkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTdBRkRFRTlGQTFFRDZDNTVBQkYwQzBDQ0YxNzNFN0ZDMUU2 RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTcz RTdGQzFFNkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQfLkGfJAEgObUUiLiPHoZvmVJ2XKLIC/XW L3HTlukuRyJ3OEwBWWuUPRKbJR0OHGfzROX+2XTatMqPbogVwoD1fxx8YG5Lox2Y USaGQXze6b1tYP2XMsEGGMsmh8nvF8yac9LNaAkyJSAbGN6PUMg3W5MZtcHWqC7i Vp0ooLxA3xWGjn88L+7uzy4c+jo3XtDlQkg0syB22GmrTptRULG1MaU4M7noJciS aFCyUM509CaBX1CPWZ2fmghQTbNC+EOJ1UVdZSLqT6drX3h3MWueldFob7ls4siB PnNkgt9pG/kQql1LIlB1gqhdKnD8CjtZ0J/92Et6+fV3gEpEtRM= -----END CERTIFICATE-----Generated at Wed May 13 02:47:52 2026 by rpki-client