$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json) Hash identifier: /NcGXWU21cA/p9VF+dK07PFkFinV90XGGYf5YMITf6k= Subject key identifier: 6A:95:3D:BF:AE:BC:27:98:FF:01:30:A5:CA:7F:94:9A:A3:A6:3F:E8 Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Certificate serial: 234131FD190426CF847104E6425ECA0F383CD149 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft Manifest number: 13 Signing time: Fri 15 May 2026 18:07:11 +0000 Manifest this update: Fri 15 May 2026 18:02:11 +0000 Manifest next update: Sat 16 May 2026 19:49:11 +0000 Files and hashes: 1: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=) 2: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=) 3: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: OKPLelQIMxc9xMrgYtK+K9vmeueobPCr4xVL1/oi2OU=) 4: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=) 5: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 19:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:41:31:fd:19:04:26:cf:84:71:04:e6:42:5e:ca:0f:38:3c:d1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Validity Not Before: May 15 18:02:11 2026 GMT Not After : May 16 19:49:11 2026 GMT Subject: CN=6A953DBFAEBC2798FF0130A5CA7F949AA3A63FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:da:6e:35:b7:ce:b4:03:b1:d7:cf:95:ae:3e: 4a:74:da:a7:5d:9e:9f:94:82:51:92:84:06:6b:33: d1:7d:80:3b:70:84:45:11:db:5f:1b:6f:00:40:94: cf:78:13:80:e2:98:f2:d9:64:c5:50:9c:3e:49:2e: 30:40:51:87:b5:93:13:52:71:54:58:e2:a4:ff:5d: 8c:1e:f7:b8:37:52:5c:68:ca:f1:9b:8b:45:7e:79: 43:98:d7:23:da:30:bf:f2:33:fb:79:3c:e6:d4:a8: b5:0c:2a:d7:a3:55:b1:f3:45:a3:d6:bc:91:76:af: 76:9c:c6:a1:4b:5c:48:af:e9:1d:79:50:7b:ad:ef: 0d:d8:cf:3d:b5:86:aa:76:d6:21:a1:14:11:23:d1: e7:fe:a7:04:0f:4d:1f:f6:0b:ab:2c:97:b0:3c:f1: c7:28:d7:4d:41:c8:bb:22:16:2b:59:55:19:5b:32: 6c:9c:39:cc:d2:d1:86:08:bc:2c:f4:37:a6:d2:f3: 8f:86:67:b2:05:2c:3c:9e:0b:e1:db:7f:b3:c6:24: b1:44:0d:a0:bf:c6:f3:80:2b:00:a8:24:fb:b2:de: 53:bf:7f:0d:82:0f:19:f5:c4:91:9c:73:dd:50:58: 93:51:3b:a9:74:08:93:bf:1d:be:f6:98:76:74:4e: a1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:3D:BF:AE:BC:27:98:FF:01:30:A5:CA:7F:94:9A:A3:A6:3F:E8 X509v3 Authority Key Identifier: keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9f:9a:4e:a3:27:3f:bc:c6:f3:0c:86:48:97:0f:f0:de:26: ac:bf:10:d4:b9:f2:ac:26:6a:80:01:d6:9c:58:e2:6d:2f:a3: e3:8e:7a:ae:e3:a3:6b:17:85:21:c9:2e:6b:3b:ef:54:04:cf: b7:2e:8a:b6:59:fd:2a:58:ce:ac:d7:c1:65:6c:63:0a:a1:b1: b3:e5:c9:68:c7:28:81:70:1c:34:5d:19:4c:db:76:85:02:77: 91:2d:d7:b1:3b:76:d3:f2:9b:7c:21:42:af:fe:96:33:43:44: 9c:96:78:bd:b7:ad:e8:2a:40:73:e0:28:20:43:ba:d4:b5:a9: db:c2:8e:56:90:9f:03:3d:7b:06:a3:6c:0d:e3:1d:9a:e6:48: b8:96:99:46:20:ad:fd:9b:a2:bf:32:88:0d:42:2c:48:db:3d: ec:e2:ba:b3:17:19:95:d7:9e:0f:68:a3:1c:4e:86:92:ba:ea: 8f:4e:96:ef:5e:35:66:6e:59:01:fa:1d:84:57:5f:a0:3e:ac: 31:9f:ce:12:06:dc:2c:d6:63:cd:41:ee:26:3d:e2:17:20:cb: 0f:db:5a:01:64:4d:ad:6b:2d:07:65:9a:be:ac:c6:3e:9c:f0: 24:b3:3c:b6:26:b2:ae:84:52:46:04:8c:31:24:a3:8e:55:c2: 53:4a:5c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0Ex/RkEJs+EcQTmQl7KDzg80UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG MzgxMkI0NDAeFw0yNjA1MTUxODAyMTFaFw0yNjA1MTYxOTQ5MTFaMDMxMTAvBgNV BAMTKDZBOTUzREJGQUVCQzI3OThGRjAxMzBBNUNBN0Y5NDlBQTNBNjNGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx2m41t860A7HXz5WuPkp02qdd np+UglGShAZrM9F9gDtwhEUR218bbwBAlM94E4DimPLZZMVQnD5JLjBAUYe1kxNS cVRY4qT/XYwe97g3UlxoyvGbi0V+eUOY1yPaML/yM/t5PObUqLUMKtejVbHzRaPW vJF2r3acxqFLXEiv6R15UHut7w3Yzz21hqp21iGhFBEj0ef+pwQPTR/2C6ssl7A8 8cco101ByLsiFitZVRlbMmycOczS0YYIvCz0N6bS84+GZ7IFLDyeC+Hbf7PGJLFE DaC/xvOAKwCoJPuy3lO/fw2CDxn1xJGcc91QWJNRO6l0CJO/Hb72mHZ0TqFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUapU9v668J5j/ATClyn+UmqOmP+gwHwYDVR0j BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2 MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSfmk6jJz+8xvMMhkiXD/DeJqy/ENS58qwm aoAB1pxY4m0vo+OOeq7jo2sXhSHJLms771QEz7cuirZZ/SpYzqzXwWVsYwqhsbPl yWjHKIFwHDRdGUzbdoUCd5Et17E7dtPym3whQq/+ljNDRJyWeL23regqQHPgKCBD utS1qdvCjlaQnwM9ewajbA3jHZrmSLiWmUYgrf2bor8yiA1CLEjbPeziurMXGZXX ng9ooxxOhpK66o9Olu9eNWZuWQH6HYRXX6A+rDGfzhIG3CzWY81B7iY94hcgyw/b WgFkTa1rLQdlmr6sxj6c8CSzPLYmsq6EUkYEjDEko45VwlNKXOM= -----END CERTIFICATE-----Generated at Sat May 16 11:24:34 2026 by rpki-client