$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json) Hash identifier: VIH2TFJ3jSMibQOjc3nTY1YxO3nV55lgeDFJuoNm1LM= Subject key identifier: AA:60:BE:49:9A:46:3D:53:28:C7:E4:B5:5F:F7:E2:B9:A2:AC:F2:14 Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Certificate serial: 5EEEECA8983364C0591D5CDC7437410A85BBA733 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft Manifest number: 04 Signing time: Mon 04 May 2026 14:08:12 +0000 Manifest this update: Mon 04 May 2026 14:03:12 +0000 Manifest next update: Tue 05 May 2026 18:04:12 +0000 Files and hashes: 1: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=) 2: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: 51CLVuo3ORWby3gS0Zgx7Bx0MxEqreGkyM07XKdhTks=) 3: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=) 4: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=) 5: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=) 6: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=) 7: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=) 8: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=) 9: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=) 10: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=) 11: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 18:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ee:ec:a8:98:33:64:c0:59:1d:5c:dc:74:37:41:0a:85:bb:a7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3 Validity Not Before: May 4 14:03:12 2026 GMT Not After : May 5 18:04:12 2026 GMT Subject: CN=AA60BE499A463D5328C7E4B55FF7E2B9A2ACF214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:eb:50:b3:2b:85:e6:bc:f5:c4:12:0e:d1:21: c0:52:87:0b:db:a2:e2:fd:65:93:f0:c1:ac:23:c7: fe:c1:7b:04:5a:80:58:c4:ef:15:f7:74:12:83:04: be:25:4c:66:a4:5d:4f:e8:7e:81:63:f7:75:4d:79: ed:c8:fd:0b:e1:e7:79:ad:00:69:5c:b8:d0:44:c4: c6:bf:b5:4b:b1:d9:7e:d1:28:e3:43:ae:3f:d3:68: bf:85:a8:37:3a:c7:77:55:1b:26:78:84:c1:57:da: 00:34:4e:88:16:1f:61:80:40:cd:ed:f6:0b:f8:0e: cd:82:0b:f1:52:e9:90:8c:6a:25:a5:07:07:d0:fc: e2:65:3d:2a:aa:7b:37:4e:64:10:be:bc:d8:03:8c: 4a:1f:2e:1c:ce:cd:4c:b7:bf:30:44:ed:97:79:b5: 9a:36:2b:65:33:78:2b:85:07:e5:80:5b:73:9c:77: a4:53:81:27:c8:db:18:80:d8:72:2d:4f:66:b4:71: b0:fc:bb:a5:ee:a0:eb:e8:ba:78:97:de:78:4a:f9: 4d:14:a2:f9:c5:b7:bc:53:5a:21:a4:62:eb:b9:ea: ca:82:94:34:bf:b8:d7:6e:aa:61:bb:a5:40:83:25: fd:c2:13:1b:b1:18:28:bb:e5:8a:8d:51:0b:12:24: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:60:BE:49:9A:46:3D:53:28:C7:E4:B5:5F:F7:E2:B9:A2:AC:F2:14 X509v3 Authority Key Identifier: keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0a:dd:ad:15:4b:c9:58:ee:78:32:9f:9d:6e:0d:90:23:d4: d5:20:34:8e:a6:27:6e:78:b1:9e:42:25:24:c8:e7:3d:bc:97: 4f:8b:83:a3:7d:ae:c4:4c:52:c7:04:78:05:54:11:2e:87:ee: de:64:95:e9:e4:2f:25:17:aa:07:88:be:9f:04:dd:24:8f:14: 01:83:35:2f:90:cc:fb:c9:1d:7b:e8:30:ec:54:34:ed:73:49: 48:5e:60:2e:25:f6:71:aa:d2:e9:a8:12:70:cf:f4:6e:84:51: 85:0c:0f:39:f0:cb:95:91:54:a7:fc:fc:a0:ba:46:af:f9:45: e4:f0:69:88:0b:a8:d0:78:b0:ec:bb:4a:46:d1:1f:6c:bc:b4: 85:e9:ab:ba:7d:67:0e:ae:d4:76:6d:d8:62:f6:01:d6:34:0a: de:cc:69:dd:1e:15:81:fc:4d:c4:14:51:b4:e1:06:a8:f8:79: 15:4a:de:87:8d:55:d2:93:5c:95:84:ab:21:25:4f:77:50:62: f9:e4:f1:c4:40:e3:60:19:58:45:c5:23:e2:1f:47:47:e7:6d: 1c:02:b3:90:14:52:db:95:44:b7:e1:19:44:5b:61:0a:5f:1a: 87:cc:66:64:c0:19:04:f1:6e:6b:0a:17:21:ee:ec:6d:99:b4: c9:39:a3:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXu7sqJgzZMBZHVzcdDdBCoW7pzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2NzRE REIyOUFDMzAeFw0yNjA1MDQxNDAzMTJaFw0yNjA1MDUxODA0MTJaMDMxMTAvBgNV BAMTKEFBNjBCRTQ5OUE0NjNENTMyOEM3RTRCNTVGRjdFMkI5QTJBQ0YyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq61CzK4XmvPXEEg7RIcBShwvb ouL9ZZPwwawjx/7BewRagFjE7xX3dBKDBL4lTGakXU/ofoFj93VNee3I/Qvh53mt AGlcuNBExMa/tUux2X7RKONDrj/TaL+FqDc6x3dVGyZ4hMFX2gA0TogWH2GAQM3t 9gv4Ds2CC/FS6ZCMaiWlBwfQ/OJlPSqqezdOZBC+vNgDjEofLhzOzUy3vzBE7Zd5 tZo2K2UzeCuFB+WAW3Ocd6RTgSfI2xiA2HItT2a0cbD8u6XuoOvouniX3nhK+U0U ovnFt7xTWiGkYuu56sqClDS/uNduqmG7pUCDJf3CExuxGCi75YqNUQsSJLNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqmC+SZpGPVMox+S1X/fiuaKs8hQwHwYDVR0j BBgwFoAU3k6Z6gMK+K6/t7anoOkWdN2ymsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyNTQ0MTktNTNiZS00YWQ0LWJmN2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEw MzBBRjhBRUJGQjdCNkE3QTBFOTE2NzREREIyOUFDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTRFOTlFQTAzMEFGOEFFQkZCN0I2QTdBMEU5MTY3NEREQjI5 QUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2 NzREREIyOUFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAK3a0VS8lY7ngyn51uDZAj1NUgNI6mJ254 sZ5CJSTI5z28l0+Lg6N9rsRMUscEeAVUES6H7t5klenkLyUXqgeIvp8E3SSPFAGD NS+QzPvJHXvoMOxUNO1zSUheYC4l9nGq0umoEnDP9G6EUYUMDznwy5WRVKf8/KC6 Rq/5ReTwaYgLqNB4sOy7SkbRH2y8tIXpq7p9Zw6u1HZt2GL2AdY0Ct7Mad0eFYH8 TcQUUbThBqj4eRVK3oeNVdKTXJWEqyElT3dQYvnk8cRA42AZWEXFI+IfR0fnbRwC s5AUUtuVRLfhGURbYQpfGofMZmTAGQTxbmsKFyHu7G2ZtMk5o1A= -----END CERTIFICATE-----Generated at Tue May 5 11:14:41 2026 by rpki-client