$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft File: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft (raw, json) Hash identifier: xYpOmL038RRafwZ0Fqx9bAQZ9KqCC9qcijHoYIiuC28= Subject key identifier: AD:D7:7F:7E:CD:B6:ED:C1:7E:F6:06:6C:72:6F:95:CF:62:DF:D5:9D Authority key identifier: E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 Certificate issuer: /CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Certificate serial: 2E100DA87FCA821CBF13F6848366455FA35F113D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:15:13 +0000 Manifest this update: Tue 02 Jun 2026 08:10:13 +0000 Manifest next update: Wed 03 Jun 2026 11:42:13 +0000 Files and hashes: 1: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl (hash: Pj3Mi0ydU/lt+O9P6g/OYfCm6Ei2ze9gRfKDxD9ahd4=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rkWYYYj/vAK/TOK+jQF6QsvjFqSfb6NPiKItrVefpzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:10:0d:a8:7f:ca:82:1c:bf:13:f6:84:83:66:45:5f:a3:5f:11:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Validity Not Before: Jun 2 08:10:13 2026 GMT Not After : Jun 3 11:42:13 2026 GMT Subject: CN=ADD77F7ECDB6EDC17EF6066C726F95CF62DFD59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:89:9a:d3:f6:ca:bf:fd:70:9c:33:31:10: 30:49:04:3d:55:3a:02:ae:92:d2:f6:f5:39:a5:57: 84:b4:38:6d:41:e0:48:57:d7:2a:5a:99:10:c4:2e: 78:5f:ae:9c:6c:c3:53:c4:3b:72:fd:67:98:2f:e0: 04:0e:1f:94:69:eb:44:1d:98:18:c1:d5:fa:4b:f8: 3f:c6:42:16:88:01:85:bd:d9:46:c4:fa:9a:8a:3b: 33:e6:4c:6e:3b:80:21:1c:93:2f:5b:23:97:8b:0a: 40:83:a9:5f:5b:a0:f3:cb:e4:c4:85:d2:f4:84:08: c1:0e:0e:59:b3:2c:ed:89:0a:fa:14:49:43:57:c0: 40:11:71:bc:50:97:a0:9b:ac:60:3c:09:f3:6e:97: b8:98:4d:d8:ed:b5:e0:5e:37:98:cb:2a:1b:37:b2: f4:43:df:2b:c8:45:aa:94:05:ef:b8:3f:02:f5:9f: b0:4e:e9:72:c8:20:16:60:83:71:8f:74:75:fd:8a: cb:e5:dd:81:f4:9a:a2:6f:32:09:84:69:d1:0b:41: 1c:8f:ef:19:24:da:39:24:dc:5c:04:9b:eb:c6:f8: cb:4a:b5:a2:ad:17:f9:bf:66:ea:74:83:7f:4b:e9: 9b:62:3f:3d:4e:e5:dd:cc:16:cb:3a:4f:04:1c:c3: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:7F:7E:CD:B6:ED:C1:7E:F6:06:6C:72:6F:95:CF:62:DF:D5:9D X509v3 Authority Key Identifier: keyid:E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:71:84:1a:21:5a:bf:17:93:51:32:e7:62:70:41:ac:57:41: ef:fc:b4:90:37:8b:f8:5d:d3:d5:64:1e:e3:a9:54:69:df:e9: 8d:ae:13:10:92:5d:65:cc:57:7f:cd:18:5d:26:bc:8f:16:8c: 07:db:16:f5:c2:5e:ba:45:f5:d7:3d:19:ea:2e:ac:15:b4:5a: 4d:ef:93:68:98:7e:59:15:ee:2f:79:10:3a:6b:e7:7c:2c:33: 12:63:1b:57:3c:8a:c6:d2:f4:cb:01:53:6c:b4:74:11:b3:6e: 6c:98:28:08:18:e3:19:df:95:a1:d7:4c:c2:1b:2b:fc:3b:cb: 82:9a:60:3e:60:9d:0e:7b:25:a5:04:3d:1d:19:0a:fe:04:cd: 33:15:48:c1:5f:01:97:2d:40:ee:5a:21:a1:53:94:fb:15:30: 88:68:2b:ec:16:0b:e4:3c:9c:fa:51:e9:31:6e:42:55:78:63: 5e:0c:78:e7:5a:71:c0:5f:25:8c:0c:25:66:ea:e1:a0:2b:79: 0e:91:e9:f9:50:e8:f1:3c:10:d9:3c:60:48:79:df:10:66:a9: d1:06:bb:d3:78:b4:6b:bf:a7:34:72:22:f3:23:b4:90:7b:0c: 98:0b:7d:e2:44:9a:8c:c0:06:a3:67:1b:61:c3:16:af:1f:6f: 10:51:c5:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhANqH/Kghy/E/aEg2ZFX6NfET0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5 QzMzNjgxNzAeFw0yNjA2MDIwODEwMTNaFw0yNjA2MDMxMTQyMTNaMDMxMTAvBgNV BAMTKEFERDc3RjdFQ0RCNkVEQzE3RUY2MDY2QzcyNkY5NUNGNjJERkQ1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmoma0/bKv/1wnDMxEDBJBD1V OgKuktL29TmlV4S0OG1B4EhX1ypamRDELnhfrpxsw1PEO3L9Z5gv4AQOH5Rp60Qd mBjB1fpL+D/GQhaIAYW92UbE+pqKOzPmTG47gCEcky9bI5eLCkCDqV9boPPL5MSF 0vSECMEODlmzLO2JCvoUSUNXwEARcbxQl6CbrGA8CfNul7iYTdjtteBeN5jLKhs3 svRD3yvIRaqUBe+4PwL1n7BO6XLIIBZgg3GPdHX9isvl3YH0mqJvMgmEadELQRyP 7xkk2jkk3FwEm+vG+MtKtaKtF/m/Zup0g39L6ZtiPz1O5d3MFss6TwQcw9RtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdd/fs227cF+9gZscm+Vz2Lf1Z0wHwYDVR0j BBgwFoAU4Jb+26/yrbc8c+fgmM5JS5wzaBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwOWNiYjktMWFhZC00YjFhLWJkNGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJB RkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5QzMzNjgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDk2RkVEQkFGRjJBREI3M0M3M0U3RTA5OENFNDk0QjlDMzM2 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5 NEI5QzMzNjgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVxhBohWr8Xk1Ey52JwQaxXQe/8tJA3i/hd 09VkHuOpVGnf6Y2uExCSXWXMV3/NGF0mvI8WjAfbFvXCXrpF9dc9GeourBW0Wk3v k2iYflkV7i95EDpr53wsMxJjG1c8isbS9MsBU2y0dBGzbmyYKAgY4xnflaHXTMIb K/w7y4KaYD5gnQ57JaUEPR0ZCv4EzTMVSMFfAZctQO5aIaFTlPsVMIhoK+wWC+Q8 nPpR6TFuQlV4Y14MeOdaccBfJYwMJWbq4aAreQ6R6flQ6PE8ENk8YEh53xBmqdEG u9N4tGu/pzRyIvMjtJB7DJgLfeJEmozABqNnG2HDFq8fbxBRxWE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:43 2026 by rpki-client