$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json) Hash identifier: 372qvbin4Y93Qa6JHAbZTi27UtZit16R84r7Nc/KUmM= Subject key identifier: 36:BA:D2:7D:04:71:DE:96:2D:38:06:88:14:40:2A:53:71:62:DA:EC Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Certificate serial: 2A2EF193F62DE162AA3F88DC00E8534A5FFD47BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft Manifest number: 08 Signing time: Thu 07 May 2026 20:54:29 +0000 Manifest this update: Thu 07 May 2026 20:49:29 +0000 Manifest next update: Fri 08 May 2026 21:38:29 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=) 2: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: nk8H6t3k4KmbRTiBIXxho+9QZnaw6lPXnsr/4N+wGno=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 21:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2e:f1:93:f6:2d:e1:62:aa:3f:88:dc:00:e8:53:4a:5f:fd:47:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Validity Not Before: May 7 20:49:29 2026 GMT Not After : May 8 21:38:29 2026 GMT Subject: CN=36BAD27D0471DE962D38068814402A537162DAEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:fc:4d:de:ee:b1:31:77:40:cd:b6:b8:d6: 86:ea:4d:d1:74:41:19:7f:61:fb:58:d8:70:bf:12: df:00:44:48:4c:5a:6a:42:01:e4:1e:c0:5c:fc:e0: e3:e6:b5:df:60:b9:cd:fe:36:bc:16:08:fa:81:77: 47:93:91:f2:7d:ea:66:15:a0:8d:5f:0d:6b:83:21: b2:f8:c1:ff:62:3d:48:40:43:69:6d:40:d1:28:41: 91:67:c1:ce:77:fb:17:56:da:53:7a:b5:49:58:a9: 80:1f:34:9c:19:04:bd:c9:5f:cd:38:a7:47:54:b4: 4d:a6:54:ed:73:93:29:7d:d4:26:2c:90:fe:48:de: 68:87:67:22:b4:6b:82:18:93:b2:6f:17:f0:7f:11: e4:ec:d5:8c:b3:f6:4b:07:73:fd:7f:70:0c:5f:c7: c8:68:2f:18:33:47:26:27:f8:8b:e3:ac:41:a9:7c: 18:7a:f2:fe:4b:36:85:de:b3:84:c6:f2:51:53:d2: a5:9c:06:fa:c4:62:a9:17:8d:bd:82:59:e7:98:9a: 63:ee:d8:ff:68:eb:3c:2e:f1:03:33:4d:61:92:e9: 5d:45:e4:29:56:8e:04:89:70:f9:d8:a9:87:d1:57: 07:55:72:55:d1:83:77:ca:3d:31:76:19:95:50:16: 26:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BA:D2:7D:04:71:DE:96:2D:38:06:88:14:40:2A:53:71:62:DA:EC X509v3 Authority Key Identifier: keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:05:5e:db:37:80:dc:df:5f:da:bb:a5:3d:6a:3b:3e:d1:da: 5e:26:53:b0:db:4a:14:36:ac:58:20:63:21:e5:ef:79:f1:1f: c4:42:eb:ff:d9:dd:9f:38:d3:3d:36:29:8c:cc:0c:37:aa:0f: 05:29:3d:1b:27:22:80:8b:6f:f3:dc:1f:04:a1:d9:1c:5a:a2: 84:39:fa:5f:67:44:00:db:eb:67:e5:ec:9b:d4:16:4f:a0:22: c1:90:80:d6:5c:7b:67:a2:b3:46:fd:f2:ae:e7:b4:37:ae:8b: 6b:11:8d:6b:bd:bb:e7:dc:e2:f9:d6:10:e5:e9:5f:06:cb:ea: 1f:d3:8d:7a:ff:21:fb:d9:0b:74:b8:30:a9:c8:15:5c:cf:db: c6:0e:4f:ab:fc:52:db:57:75:23:a2:6f:e8:1e:76:d3:08:d0: ff:8e:b5:86:ad:a5:3e:5c:39:73:fa:5b:f1:4b:a1:0b:e6:e1: 2e:84:a7:7c:f1:53:45:95:ef:03:e6:8d:03:d5:a3:e3:aa:5e: 34:4b:24:de:c6:43:4b:04:9b:62:7b:ea:65:a5:9b:26:a2:d9: be:ea:8d:40:67:c1:98:f2:aa:75:2d:33:8f:1c:7b:5d:ef:2b: 95:5c:87:7e:c0:7d:58:4a:29:14:72:2f:4e:f7:48:19:6d:02: 03:3e:f6:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKi7xk/Yt4WKqP4jcAOhTSl/9R7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNC RTM4REQ4ODAeFw0yNjA1MDcyMDQ5MjlaFw0yNjA1MDgyMTM4MjlaMDMxMTAvBgNV BAMTKDM2QkFEMjdEMDQ3MURFOTYyRDM4MDY4ODE0NDAyQTUzNzE2MkRBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6vxN3u6xMXdAzba41obqTdF0 QRl/YftY2HC/Et8AREhMWmpCAeQewFz84OPmtd9guc3+NrwWCPqBd0eTkfJ96mYV oI1fDWuDIbL4wf9iPUhAQ2ltQNEoQZFnwc53+xdW2lN6tUlYqYAfNJwZBL3JX804 p0dUtE2mVO1zkyl91CYskP5I3miHZyK0a4IYk7JvF/B/EeTs1Yyz9ksHc/1/cAxf x8hoLxgzRyYn+IvjrEGpfBh68v5LNoXes4TG8lFT0qWcBvrEYqkXjb2CWeeYmmPu 2P9o6zwu8QMzTWGS6V1F5ClWjgSJcPnYqYfRVwdVclXRg3fKPTF2GZVQFiYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNrrSfQRx3pYtOAaIFEAqU3Fi2uwwHwYDVR0j BBgwFoAULrjL56R5J3rAPugPNl3Yg7443YgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOTJlODktOTJkNS00MDY0LTk1MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdB NDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNCRTM4REQ4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRUI4Q0JFN0E0NzkyNzdBQzAzRUU4MEYzNjVERDg4M0JFMzhE RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4 ODNCRTM4REQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8FXts3gNzfX9q7pT1qOz7R2l4mU7DbShQ2 rFggYyHl73nxH8RC6//Z3Z840z02KYzMDDeqDwUpPRsnIoCLb/PcHwSh2RxaooQ5 +l9nRADb62fl7JvUFk+gIsGQgNZce2eis0b98q7ntDeui2sRjWu9u+fc4vnWEOXp XwbL6h/TjXr/IfvZC3S4MKnIFVzP28YOT6v8UttXdSOib+gedtMI0P+OtYatpT5c OXP6W/FLoQvm4S6Ep3zxU0WV7wPmjQPVo+OqXjRLJN7GQ0sEm2J76mWlmyai2b7q jUBnwZjyqnUtM48ce13vK5Vch37AfVhKKRRyL073SBltAgM+9h8= -----END CERTIFICATE-----Generated at Fri May 8 07:29:49 2026 by rpki-client