$ rpki-client -vvf rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft File: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft (raw, json) Hash identifier: 3tme9fiP07fah++C56KhPdP6FcUcGx19GJ0Iedfsvk0= Subject key identifier: D1:E5:32:AA:45:58:29:83:82:87:F1:C0:4A:8A:2D:FA:9A:DF:66:C3 Authority key identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A Certificate issuer: /CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Certificate serial: 7FF9D72524A3956A707BA8C763990009FC0CB026 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:50:48 +0000 Manifest this update: Wed 03 Jun 2026 00:45:48 +0000 Manifest next update: Thu 04 Jun 2026 03:19:48 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: CNG3TKSalvuCxf+hLEGkOQvjI+uVRC0qCR05spnG4ao=) 2: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl (hash: 1WMs4/NRqFgwmwCPV9FJN4QwFeY0H4K3kzWh93G5pEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f9:d7:25:24:a3:95:6a:70:7b:a8:c7:63:99:00:09:fc:0c:b0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Validity Not Before: Jun 3 00:45:48 2026 GMT Not After : Jun 4 03:19:48 2026 GMT Subject: CN=D1E532AA455829838287F1C04A8A2DFA9ADF66C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:28:27:91:65:68:b4:c7:4c:27:66:f3:9f:bc: 80:44:96:81:f6:9d:da:47:ab:6a:8a:b3:af:80:14: f1:3d:39:b2:21:f8:9c:42:f3:80:9d:7d:5c:de:74: d6:71:fc:fd:dc:71:d5:1e:6a:5f:78:44:dd:bd:a9: d7:ea:d7:92:fa:5f:f1:c9:9e:fd:b9:cd:e7:40:cd: fa:75:a7:98:0b:03:2b:44:fb:cb:65:cf:55:57:a5: e9:84:f8:d8:dc:18:53:37:ba:32:2a:ae:a8:31:4b: 63:22:66:62:85:73:03:ef:cb:f3:8c:ad:a4:c7:da: aa:af:5b:d8:c7:bf:c3:a8:8e:da:1c:19:2e:68:b4: 41:7a:7f:ad:63:e0:4d:34:5d:92:c2:48:50:57:9f: c0:25:de:73:57:cd:3e:75:0a:5d:0d:6c:61:87:fe: b8:c5:0c:a3:c6:81:68:72:46:ec:a6:79:fb:90:cf: fa:29:4f:8f:44:b7:43:6a:4a:74:1e:ad:89:75:bd: 74:fe:cd:cb:85:28:4c:e4:50:f1:b4:7d:70:13:d4: 42:a3:de:5a:ce:f3:48:12:53:2f:5a:2f:9d:a0:9b: 2a:45:3f:cd:e0:64:19:a8:9e:52:27:8f:65:f6:03: 30:8b:41:b8:59:ea:e5:50:33:f1:bd:bf:14:42:f8: 8e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E5:32:AA:45:58:29:83:82:87:F1:C0:4A:8A:2D:FA:9A:DF:66:C3 X509v3 Authority Key Identifier: keyid:E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3e:60:ea:ac:87:3e:b9:9d:98:bd:e6:de:d2:3e:f3:6a:11: ca:f5:e0:bc:b1:03:f9:d3:44:76:cd:67:eb:07:56:95:8d:80: 8d:df:d6:8e:b9:e1:f0:71:69:8b:cd:d3:96:dd:ed:78:d4:40: 12:0a:32:e4:33:2d:d5:52:12:6f:77:48:60:c5:5e:8c:90:85: 30:1c:e4:0a:cd:7b:76:ed:f6:3d:02:f2:75:2e:2b:f9:5d:88: 7d:fb:1b:aa:f8:40:4c:ec:93:cd:f5:db:5d:d9:09:71:c4:42: e1:6b:9b:e8:27:75:6b:c8:df:41:cc:d2:57:27:bb:48:37:fd: 7d:72:7f:58:ea:b2:4d:b1:16:2a:e1:2f:18:06:9e:89:ec:ff: 70:e7:c3:75:87:a0:ab:71:06:ae:48:95:69:9e:ce:20:5c:2e: ca:1e:0b:fa:bc:14:6c:5e:6f:6d:01:83:6c:17:db:de:b7:f3: ea:06:01:34:6d:61:e5:c0:62:18:31:c9:4f:15:9b:02:e7:cc: 67:5a:be:0a:d8:2a:62:f7:6c:88:18:95:be:41:c0:88:42:f4: 82:21:72:0e:cc:5a:a5:e9:73:30:e2:a4:80:c1:fc:15:be:2b: bd:65:f9:38:da:df:3f:cc:85:36:07:31:7f:c2:f4:07:ee:1e: 63:fa:e0:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/nXJSSjlWpwe6jHY5kACfwMsCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUy OUEzNzkzQTAeFw0yNjA2MDMwMDQ1NDhaFw0yNjA2MDQwMzE5NDhaMDMxMTAvBgNV BAMTKEQxRTUzMkFBNDU1ODI5ODM4Mjg3RjFDMDRBOEEyREZBOUFERjY2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyKCeRZWi0x0wnZvOfvIBEloH2 ndpHq2qKs6+AFPE9ObIh+JxC84CdfVzedNZx/P3ccdUeal94RN29qdfq15L6X/HJ nv25zedAzfp1p5gLAytE+8tlz1VXpemE+NjcGFM3ujIqrqgxS2MiZmKFcwPvy/OM raTH2qqvW9jHv8OojtocGS5otEF6f61j4E00XZLCSFBXn8Al3nNXzT51Cl0NbGGH /rjFDKPGgWhyRuymefuQz/opT49Et0NqSnQerYl1vXT+zcuFKEzkUPG0fXAT1EKj 3lrO80gSUy9aL52gmypFP83gZBmonlInj2X2AzCLQbhZ6uVQM/G9vxRC+I7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0eUyqkVYKYOCh/HASoot+prfZsMwHwYDVR0j BBgwFoAU6d35j7Mh1al3rUewxBzU/imjeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQzM2ExYzYtMGY3MC00Yzk4LTk2YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZC MzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0RkUyOUEzNzkzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOURERjk4RkIzMjFENUE5NzdBRDQ3QjBDNDFDRDRGRTI5QTM3 OTNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvRTlEREY5OEZCMzIxRDVBOTc3QUQ0N0IwQzQxQ0Q0 RkUyOUEzNzkzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw+YOqshz65nZi95t7SPvNqEcr14LyxA/nT RHbNZ+sHVpWNgI3f1o654fBxaYvN05bd7XjUQBIKMuQzLdVSEm93SGDFXoyQhTAc 5ArNe3bt9j0C8nUuK/ldiH37G6r4QEzsk831213ZCXHEQuFrm+gndWvI30HM0lcn u0g3/X1yf1jqsk2xFirhLxgGnons/3Dnw3WHoKtxBq5IlWmeziBcLsoeC/q8FGxe b20Bg2wX29638+oGATRtYeXAYhgxyU8VmwLnzGdavgrYKmL3bIgYlb5BwIhC9IIh cg7MWqXpczDipIDB/BW+K71l+Tja3z/MhTYHMX/C9AfuHmP64Hs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:45 2026 by rpki-client