$ rpki-client -vvf rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft File: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft (raw, json) Hash identifier: EuW4gGVjw7keyiX+iibByBJlWLeqBQvw0S/NkP3DwI8= Subject key identifier: 1B:3A:C8:3F:12:43:DC:F5:22:D1:86:C6:AC:87:33:CD:3B:77:67:29 Authority key identifier: A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE Certificate issuer: /CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Certificate serial: 59E4A11C4BE790D6EDF143B8734E4E7977419F9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:31:49 +0000 Manifest this update: Tue 02 Jun 2026 09:26:49 +0000 Manifest next update: Wed 03 Jun 2026 12:11:49 +0000 Files and hashes: 1: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: XjEh4h/m9O4zav0oJbGUt3KwmUOKS7DwqIAy5aQ35aY=) 2: A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl (hash: qNlmYjFSum3Tge2NkYFjPo5ScyTHyY4U6LHobQo1ZO8=) 3: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: ICLSFvgSRRkmlVey9F0aZzpRAm3MpVToF57RNv3826o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e4:a1:1c:4b:e7:90:d6:ed:f1:43:b8:73:4e:4e:79:77:41:9f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE Validity Not Before: Jun 2 09:26:49 2026 GMT Not After : Jun 3 12:11:49 2026 GMT Subject: CN=1B3AC83F1243DCF522D186C6AC8733CD3B776729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:2f:65:05:24:b1:0c:2e:bb:30:94:f8:3d: fb:27:6d:21:66:06:23:2e:f1:f0:12:ec:b0:bb:65: 52:c9:a5:79:53:18:79:18:d5:e1:e3:a6:6e:5c:6b: b0:06:a7:7b:9e:ce:61:3d:0e:8c:eb:9e:1d:7f:16: cf:0b:0b:0f:12:44:3b:5a:22:a3:74:83:29:b5:34: 9f:a9:65:45:d1:43:51:4b:8e:8a:6c:cc:4c:5b:ee: 1e:bb:20:5a:18:b0:0a:19:e8:6e:d9:1c:a8:12:bc: 53:5e:ff:b7:56:8a:66:83:57:d2:61:66:be:e7:c6: aa:b4:5f:f2:38:f6:a3:c8:e4:8d:5e:bc:9d:c5:d2: c0:8f:06:8b:6b:de:34:2a:1a:50:29:80:17:ba:0d: 42:e5:dc:e4:fc:43:6e:a4:9c:8b:30:e5:f9:8c:eb: 31:6c:ab:40:4d:e1:78:55:69:49:2f:59:a6:ca:c0: 9d:f6:92:da:8e:90:56:58:26:32:ed:53:ff:78:d6: d2:96:44:a1:8a:d5:b5:24:8a:a3:f3:1c:f5:ca:ce: 14:30:66:5c:34:2b:59:fd:67:37:c3:6b:9f:30:08: c5:4e:b6:95:85:e7:b4:19:8c:48:82:38:a7:41:28: b8:ad:ae:e8:2d:9f:4c:b4:ed:4e:97:87:c8:73:cb: 93:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:C8:3F:12:43:DC:F5:22:D1:86:C6:AC:87:33:CD:3B:77:67:29 X509v3 Authority Key Identifier: keyid:A1:E9:7C:8D:C5:3E:D4:B9:4F:06:20:7D:AE:2B:3B:21:BA:08:D3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/A1E97C8DC53ED4B94F06207DAE2B3B21BA08D3FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:80:92:4d:cd:f6:95:99:ae:c8:74:90:fa:45:1e:3c:9a:42: ad:71:89:af:5d:65:e6:07:5b:b2:93:db:27:e4:33:04:fd:fd: 94:0d:68:a6:24:be:93:d2:c9:91:78:67:22:46:e8:2e:f3:73: 5b:d6:2b:70:01:b5:34:51:38:7e:ec:c7:08:aa:fa:d2:a7:41: de:3b:ec:af:c3:9d:25:87:2a:4c:93:8e:1c:ae:9b:46:4d:c5: 6d:85:aa:22:2a:ac:90:f0:4b:57:61:ed:b4:7f:b1:b8:c7:41: aa:11:76:99:2a:0b:a2:fb:cf:32:ca:8c:e7:e5:22:bb:a6:fb: 9c:6b:f6:cc:3c:95:9b:f6:f1:ad:af:02:1d:56:2e:54:e1:f3: ac:39:db:8f:c2:54:33:24:09:1b:47:3a:bd:17:9c:fe:7e:fd: 32:a3:7f:4c:bd:80:51:6c:ad:2b:ee:57:96:4a:f6:d5:42:2c: 40:ea:38:1d:33:0c:8c:9e:ed:0f:05:ee:b8:83:3b:1c:ca:10: cb:4c:fc:74:16:0d:12:fd:ce:88:39:62:ed:cc:c6:38:93:15: 22:50:29:9e:cb:74:7d:75:b6:e9:ab:cf:4b:f6:64:f6:1d:7a: 4c:44:74:fe:02:45:14:82:d6:a5:c6:30:85:fe:84:5d:a2:24: 55:30:d9:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeShHEvnkNbt8UO4c05OeXdBn5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFC QTA4RDNGRTAeFw0yNjA2MDIwOTI2NDlaFw0yNjA2MDMxMjExNDlaMDMxMTAvBgNV BAMTKDFCM0FDODNGMTI0M0RDRjUyMkQxODZDNkFDODczM0NEM0I3NzY3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mC9lBSSxDC67MJT4PfsnbSFm BiMu8fAS7LC7ZVLJpXlTGHkY1eHjpm5ca7AGp3uezmE9Dozrnh1/Fs8LCw8SRDta IqN0gym1NJ+pZUXRQ1FLjopszExb7h67IFoYsAoZ6G7ZHKgSvFNe/7dWimaDV9Jh Zr7nxqq0X/I49qPI5I1evJ3F0sCPBotr3jQqGlApgBe6DULl3OT8Q26knIsw5fmM 6zFsq0BN4XhVaUkvWabKwJ32ktqOkFZYJjLtU/941tKWRKGK1bUkiqPzHPXKzhQw Zlw0K1n9ZzfDa58wCMVOtpWF57QZjEiCOKdBKLitrugtn0y07U6Xh8hzy5PlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGzrIPxJD3PUi0YbGrIczzTt3ZykwHwYDVR0j BBgwFoAUoel8jcU+1LlPBiB9ris7IboI0/4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA1MGRjYzMtODRkZC00NTk1LWJhMmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERD NTNFRDRCOTRGMDYyMDdEQUUyQjNCMjFCQTA4RDNGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUU5N0M4REM1M0VENEI5NEYwNjIwN0RBRTJCM0IyMUJBMDhE M0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvQTFFOTdDOERDNTNFRDRCOTRGMDYyMDdEQUUyQjNC MjFCQTA4RDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6Akk3N9pWZrsh0kPpFHjyaQq1xia9dZeYH W7KT2yfkMwT9/ZQNaKYkvpPSyZF4ZyJG6C7zc1vWK3ABtTRROH7sxwiq+tKnQd47 7K/DnSWHKkyTjhyum0ZNxW2FqiIqrJDwS1dh7bR/sbjHQaoRdpkqC6L7zzLKjOfl Irum+5xr9sw8lZv28a2vAh1WLlTh86w524/CVDMkCRtHOr0XnP5+/TKjf0y9gFFs rSvuV5ZK9tVCLEDqOB0zDIye7Q8F7riDOxzKEMtM/HQWDRL9zog5Yu3MxjiTFSJQ KZ7LdH11tumrz0v2ZPYdekxEdP4CRRSC1qXGMIX+hF2iJFUw2a4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:19 2026 by rpki-client