$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft File: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft (raw, json) Hash identifier: KhW9gbdnWMmMdZRn7x2puTxUEkOTP9pD3gPvpSvYW/s= Subject key identifier: 15:61:53:88:BA:7A:97:4B:86:9E:CE:9A:65:77:4F:01:9B:CB:3D:C0 Authority key identifier: E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 Certificate issuer: /CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Certificate serial: 3644A4BE4DA3153B817C16D6F243AB0B5430F64B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:49:08 +0000 Manifest this update: Tue 02 Jun 2026 15:44:08 +0000 Manifest next update: Wed 03 Jun 2026 19:47:08 +0000 Files and hashes: 1: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: /GUQyhQCCG48GVOr5PjkMlvyumHtwdaSkLWzQJVBKPU=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: hL7QfKjtDKqwKchVRtqitw7xLrTQDNQicxI0MMMupQI=) 3: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl (hash: fmBU1srRrT5L8U0kn16NA6uaapf3I2U1PMRX2ybW8Ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:44:a4:be:4d:a3:15:3b:81:7c:16:d6:f2:43:ab:0b:54:30:f6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Validity Not Before: Jun 2 15:44:08 2026 GMT Not After : Jun 3 19:47:08 2026 GMT Subject: CN=15615388BA7A974B869ECE9A65774F019BCB3DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:66:01:69:0d:a6:ef:77:71:a5:88:c9:29: 89:70:af:3a:49:e2:27:fd:a6:6d:f7:d2:21:9e:9b: 9a:4f:b4:26:fe:32:46:55:4e:e6:49:67:96:7a:fa: 5f:31:af:be:f6:71:ac:d4:76:81:fd:1e:b1:5b:f1: c2:3e:4d:82:28:e3:3a:e8:b3:a9:3a:9d:6a:7f:11: 61:ae:c0:be:0b:18:b4:a2:4d:fb:f8:04:75:36:9c: 0b:40:5d:b7:10:23:7b:3d:37:de:26:10:a3:87:20: 51:9a:16:49:60:1f:30:6c:ad:af:bc:0b:b1:90:bb: 3f:9c:50:19:84:94:45:1c:06:be:69:c0:0c:9e:70: 42:c3:cd:bd:fc:78:65:26:9b:47:f5:fb:04:47:3c: a4:a1:fb:8e:de:2e:22:e0:12:b7:67:0b:0d:3d:1c: c6:0d:e3:da:f5:11:ef:9b:35:4e:7a:f7:50:0e:06: 70:af:e2:d7:f5:a3:6f:e8:bd:45:f7:e6:be:c1:f7: c8:d8:47:49:e9:90:dd:a7:f6:50:ed:2f:d0:e0:98: ed:5c:79:82:c3:8a:04:21:64:b8:14:75:fd:25:14: c8:53:0b:7d:fc:99:7d:fb:7a:c0:bd:21:47:1d:a1: b5:a2:03:57:fd:f3:be:5e:fa:42:2c:22:e2:54:20: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:61:53:88:BA:7A:97:4B:86:9E:CE:9A:65:77:4F:01:9B:CB:3D:C0 X509v3 Authority Key Identifier: keyid:E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:5e:0f:8b:30:45:94:d9:b6:5c:a6:66:d5:ac:ce:f0:71:6d: 60:db:ea:d5:64:21:4c:4a:cb:92:ee:74:7c:0e:b6:0f:28:17: 5b:83:8d:45:c2:3d:7e:ad:24:b4:f6:e3:13:82:ae:53:a2:33: eb:1d:11:2f:c7:61:75:d6:01:b4:c6:e7:65:19:28:17:ae:e5: a1:e8:dd:6e:15:67:46:d6:bd:05:80:ba:29:a2:aa:46:6e:dd: 4d:b9:83:72:64:81:8b:96:10:38:42:eb:12:3e:99:03:50:7a: 05:43:6f:bf:05:1d:ad:5b:d3:16:c0:88:dd:4e:86:4a:15:2e: f9:73:4c:91:56:59:ef:c9:3d:78:cc:b9:8f:1f:6c:d6:40:1a: e3:90:8e:cd:9f:7c:97:38:37:02:0d:34:d8:ec:ff:15:8e:82: f6:68:0c:38:7d:d4:d8:ec:30:15:c7:2f:d3:d0:f7:fc:54:16: 3d:78:15:9f:6d:82:04:fc:e5:0b:76:fc:a5:d6:f3:5b:a7:a7: a5:db:27:ab:e2:f5:8b:98:9f:e6:48:f8:02:53:19:66:7b:1d: 34:a2:46:1a:99:20:47:27:c3:df:f4:4f:35:8d:ca:df:ff:70: 44:3b:16:78:1a:7e:16:78:39:d2:b3:10:f4:04:4e:20:fa:9a: ad:e3:6a:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkSkvk2jFTuBfBbW8kOrC1Qw9kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRBQkRD NzE3MkVBMzAeFw0yNjA2MDIxNTQ0MDhaFw0yNjA2MDMxOTQ3MDhaMDMxMTAvBgNV BAMTKDE1NjE1Mzg4QkE3QTk3NEI4NjlFQ0U5QTY1Nzc0RjAxOUJDQjNEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqmYBaQ2m73dxpYjJKYlwrzpJ 4if9pm330iGem5pPtCb+MkZVTuZJZ5Z6+l8xr772cazUdoH9HrFb8cI+TYIo4zro s6k6nWp/EWGuwL4LGLSiTfv4BHU2nAtAXbcQI3s9N94mEKOHIFGaFklgHzBsra+8 C7GQuz+cUBmElEUcBr5pwAyecELDzb38eGUmm0f1+wRHPKSh+47eLiLgErdnCw09 HMYN49r1Ee+bNU5691AOBnCv4tf1o2/ovUX35r7B98jYR0npkN2n9lDtL9DgmO1c eYLDigQhZLgUdf0lFMhTC338mX37esC9IUcdobWiA1f9875e+kIsIuJUILfBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFWFTiLp6l0uGns6aZXdPAZvLPcAwHwYDVR0j BBgwFoAU6PI5QshxsaI9UKpwJ6dKvccXLqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJhZTU4YWMtNTkxNy00MDY5LTlhNmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJD ODcxQjFBMjNENTBBQTcwMjdBNzRBQkRDNzE3MkVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEYyMzk0MkM4NzFCMUEyM0Q1MEFBNzAyN0E3NEFCREM3MTcy RUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRB QkRDNzE3MkVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKReD4swRZTZtlymZtWszvBxbWDb6tVkIUxK y5LudHwOtg8oF1uDjUXCPX6tJLT24xOCrlOiM+sdES/HYXXWAbTG52UZKBeu5aHo 3W4VZ0bWvQWAuimiqkZu3U25g3JkgYuWEDhC6xI+mQNQegVDb78FHa1b0xbAiN1O hkoVLvlzTJFWWe/JPXjMuY8fbNZAGuOQjs2ffJc4NwINNNjs/xWOgvZoDDh91Njs MBXHL9PQ9/xUFj14FZ9tggT85Qt2/KXW81unp6XbJ6vi9YuYn+ZI+AJTGWZ7HTSi RhqZIEcnw9/0TzWNyt//cEQ7FngafhZ4OdKzEPQETiD6mq3jans= -----END CERTIFICATE-----Generated at Wed Jun 3 03:47:19 2026 by rpki-client