$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft File: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft (raw, json) Hash identifier: NelJ6LVaW0ztpjgK9+TB3ukqZL/uq062p1kMWuJVBfo= Subject key identifier: 73:2B:03:52:02:B9:EA:B9:FC:AB:EA:D1:96:4E:7F:25:EA:06:11:58 Authority key identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D Certificate issuer: /CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Certificate serial: 3B0BF85AC80C779EB196789723196AA3A8D85379 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft Manifest number: 14 Signing time: Sat 16 May 2026 17:16:43 +0000 Manifest this update: Sat 16 May 2026 17:11:43 +0000 Manifest next update: Sun 17 May 2026 20:54:43 +0000 Files and hashes: 1: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl (hash: vmTggjmR9M3TDq2o8tazqCiblkznUPHNkj+qYDKlIWU=) 2: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: Bo3J9bvJrG5KvK6zISNrunddpueB7wbNcCGt/02SR80=) 3: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: O1jacwkaM82L67sDrz7lXelPyRl9Rz1j5J3jiVwgpPw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0b:f8:5a:c8:0c:77:9e:b1:96:78:97:23:19:6a:a3:a8:d8:53:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Validity Not Before: May 16 17:11:43 2026 GMT Not After : May 17 20:54:43 2026 GMT Subject: CN=732B035202B9EAB9FCABEAD1964E7F25EA061158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:d2:16:ee:60:f8:22:2c:bd:d8:b1:98:d5: 25:8d:d0:46:bb:88:3d:31:65:28:ee:fa:18:c6:92: 23:9f:0c:35:79:31:e2:57:cc:35:63:f7:c7:44:dc: 0a:ae:b2:57:77:65:63:2e:ec:b2:77:d2:d8:a0:d7: b3:b0:a4:ab:38:35:9d:75:0d:57:88:9b:27:ae:b4: 8c:1c:38:f7:c6:65:a7:d6:96:72:97:78:1a:a9:33: d7:e3:67:fa:8a:0f:bf:6a:6b:3b:e7:ba:e8:89:aa: 75:2c:a8:4e:7a:33:ff:19:be:ec:4f:83:87:ec:be: 24:ae:f9:0c:58:30:6d:28:4d:98:cc:a0:55:ba:6b: 5c:c7:66:fb:e9:b4:85:68:69:25:3e:1a:1e:f8:be: 30:d5:e5:79:99:3d:6e:13:23:c3:be:c4:44:c0:26: 3b:67:5c:06:e7:a3:55:9d:55:bf:9f:89:cd:bb:36: b3:0b:93:02:95:23:a0:56:5f:61:cb:cc:13:93:81: 11:d5:0c:55:b7:b0:da:27:08:0c:76:62:2e:4a:64: 8e:01:3c:9c:92:c3:85:a6:46:99:aa:73:95:ff:67: 0d:dc:80:0b:0f:e8:7c:2a:4b:19:5f:de:ac:b6:ca: 8b:a3:b5:c7:55:29:62:76:20:cb:04:b6:2c:61:dd: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2B:03:52:02:B9:EA:B9:FC:AB:EA:D1:96:4E:7F:25:EA:06:11:58 X509v3 Authority Key Identifier: keyid:E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:28:57:4b:c3:6f:0b:09:a6:40:4c:c3:fc:d5:8d:0a:c7:d6: 3b:34:e9:6f:f5:f7:b4:72:6f:8f:2c:78:b4:61:74:7b:96:24: 97:3c:a0:22:30:e1:15:56:24:42:cd:9e:da:76:48:1c:c9:78: c7:41:26:e3:3a:f0:f5:f9:10:73:2b:de:90:64:57:9b:13:ad: 88:db:ab:7d:a5:fc:90:a9:31:18:8b:d2:19:12:8d:8f:49:c4: a3:07:16:fa:b6:8e:38:3a:1b:05:9c:77:47:2d:57:fb:4f:84: 56:8d:0a:eb:8b:f6:d0:e5:76:78:ac:b0:bd:3c:c3:c8:78:25: 6b:64:e6:8e:ed:6d:ad:5a:a1:68:27:6a:b1:8c:f5:b4:25:e8: 7c:5d:89:ca:c3:ae:ec:26:15:98:b4:65:ad:33:8e:10:13:c7: d2:57:a6:48:12:4f:2f:4b:7f:fc:85:1e:37:96:34:6f:69:4c: c4:f9:c6:80:b5:60:a0:8f:f9:5e:b9:1a:9a:fd:e0:3b:93:db: 95:af:59:c1:bc:2f:b9:c3:ee:dc:72:ef:81:e8:ac:82:de:a9: be:41:b3:d8:e4:ea:7c:f5:91:e7:de:0b:2e:43:11:1b:2f:b3: 5e:6b:ed:ea:8f:b2:2a:52:ff:41:bf:ff:3b:09:06:b9:00:ad: 9b:d8:eb:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwv4WsgMd56xlniXIxlqo6jYU3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5 NDJCOTI5RDAeFw0yNjA1MTYxNzExNDNaFw0yNjA1MTcyMDU0NDNaMDMxMTAvBgNV BAMTKDczMkIwMzUyMDJCOUVBQjlGQ0FCRUFEMTk2NEU3RjI1RUEwNjExNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtu9IW7mD4Iiy92LGY1SWN0Ea7 iD0xZSju+hjGkiOfDDV5MeJXzDVj98dE3Aqusld3ZWMu7LJ30tig17OwpKs4NZ11 DVeImyeutIwcOPfGZafWlnKXeBqpM9fjZ/qKD79qazvnuuiJqnUsqE56M/8ZvuxP g4fsviSu+QxYMG0oTZjMoFW6a1zHZvvptIVoaSU+Gh74vjDV5XmZPW4TI8O+xETA JjtnXAbno1WdVb+fic27NrMLkwKVI6BWX2HLzBOTgRHVDFW3sNonCAx2Yi5KZI4B PJySw4WmRpmqc5X/Zw3cgAsP6HwqSxlf3qy2youjtcdVKWJ2IMsEtixh3UR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcysDUgK56rn8q+rRlk5/JeoGEVgwHwYDVR0j BBgwFoAU5P0RozS9yjTC6rlk3KImtpQrkp0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTM4MDkzODQtOWIxYy00ZjVhLWFhNmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMz NEJEQ0EzNEMyRUFCOTY0RENBMjI2QjY5NDJCOTI5RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEZEMTFBMzM0QkRDQTM0QzJFQUI5NjREQ0EyMjZCNjk0MkI5 MjlELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvRTRGRDExQTMzNEJEQ0EzNEMyRUFCOTY0RENBMjI2 QjY5NDJCOTI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgoV0vDbwsJpkBMw/zVjQrH1js06W/197Ry b48seLRhdHuWJJc8oCIw4RVWJELNntp2SBzJeMdBJuM68PX5EHMr3pBkV5sTrYjb q32l/JCpMRiL0hkSjY9JxKMHFvq2jjg6GwWcd0ctV/tPhFaNCuuL9tDldnissL08 w8h4JWtk5o7tba1aoWgnarGM9bQl6HxdicrDruwmFZi0Za0zjhATx9JXpkgSTy9L f/yFHjeWNG9pTMT5xoC1YKCP+V65Gpr94DuT25WvWcG8L7nD7txy74HorILeqb5B s9jk6nz1kefeCy5DERsvs15r7eqPsipS/0G//zsJBrkArZvY60w= -----END CERTIFICATE-----Generated at Sun May 17 00:04:14 2026 by rpki-client