$ rpki-client -vvf rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft File: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft (raw, json) Hash identifier: rzT9w41xMaoL5ZR3npBpNP4ddGMLFLD8CmZjduinyaQ= Subject key identifier: 98:47:F1:12:32:48:1B:25:6D:E7:96:1E:55:96:6D:44:61:C6:35:50 Authority key identifier: E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63 Certificate issuer: /CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663 Certificate serial: 4876508405377CFEB1CB1330AB246071FAE0D5E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 17:25:56 +0000 Manifest this update: Tue 02 Jun 2026 17:20:56 +0000 Manifest next update: Wed 03 Jun 2026 20:08:56 +0000 Files and hashes: 1: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: qWYNgEcwRG0KPNqrROH2O3FctIU4/zQ2NKHO3/uikuo=) 2: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: x/aLbzvpFAKtjeU3rH0ALM/iYwbJRGNDYx6P3rrU1Q8=) 3: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl (hash: 0oXj/MXV98UtgJXxUdd3FqBKtrW9bZODGuHSHv9GTuE=) 4: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: 7VYgmOP0YO7cH1VxALvRRKcOoHBx5YAjdZr3/vH5WcY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:76:50:84:05:37:7c:fe:b1:cb:13:30:ab:24:60:71:fa:e0:d5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663 Validity Not Before: Jun 2 17:20:56 2026 GMT Not After : Jun 3 20:08:56 2026 GMT Subject: CN=9847F11232481B256DE7961E55966D4461C63550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:d1:bb:12:29:b5:ba:30:6b:82:f4:5b:76: 75:cd:87:77:cc:d0:33:f4:ad:35:00:95:b0:cc:17: 45:3e:89:ac:2e:29:60:02:cd:c1:25:47:3d:61:47: d2:6f:18:e5:ab:d4:36:f1:52:11:05:29:4c:2d:8d: e7:6d:e7:b5:e8:d7:f1:fd:45:c8:d6:37:ff:fb:7c: 9e:ec:b3:e9:a0:a6:1e:07:34:5b:0a:da:72:7d:f9: e5:cf:b9:0d:68:8e:2d:05:f4:ec:c9:95:02:9c:38: e3:1f:f5:6d:32:b4:73:2f:f4:16:04:01:cd:2f:d8: 20:c7:2c:c6:c9:18:7b:2a:f1:7c:cd:d5:f7:49:fc: 15:eb:e2:fe:f1:9a:33:ff:1b:ea:05:01:73:72:25: 47:0e:52:43:60:d4:33:0d:f7:3a:4b:73:fe:0f:2c: b3:1b:01:6e:c4:24:d4:91:64:35:52:ae:59:c2:73: ab:06:e5:f8:15:81:00:a9:d7:97:1c:b0:a3:db:99: f5:1e:09:23:8b:a5:a4:f4:53:5b:27:9c:7b:3b:66: 10:a9:ec:94:a9:bb:56:4e:46:32:af:1d:21:a4:49: e9:8f:f3:9c:a9:66:68:4e:3a:d3:11:dd:09:df:b2: 2a:71:c1:db:e0:92:94:84:18:5e:ca:94:64:3d:d1: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:47:F1:12:32:48:1B:25:6D:E7:96:1E:55:96:6D:44:61:C6:35:50 X509v3 Authority Key Identifier: keyid:E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:07:99:f8:6f:2c:8e:5f:80:56:3c:b5:a1:2e:08:85:93:53: fb:47:c6:f1:2f:14:73:8f:66:b8:74:95:64:7e:13:b3:2f:fd: 71:27:ec:8f:ab:bf:c1:a4:9b:44:70:5e:07:ed:38:8d:7e:a2: b1:90:ec:5e:41:91:40:71:35:c6:e4:78:2f:a4:72:f9:7e:a1: 38:be:6a:f7:b6:ce:04:eb:44:e1:0b:2b:5d:4c:8f:c5:7f:f9: a3:10:f1:06:08:c0:b5:18:b6:2a:38:1b:38:d0:65:1d:1f:5a: 67:f9:2c:6a:e6:c3:43:98:f8:a7:c6:c2:c1:bc:32:5f:f1:8c: aa:b0:44:29:cc:fa:e6:b4:b3:10:14:b6:40:8a:5b:e0:14:68: 9e:a5:c3:d0:8f:11:c7:ea:98:68:dc:f9:db:6d:83:0c:8b:77: 01:4d:02:eb:50:50:80:ad:b0:1a:e4:19:f2:d3:46:02:92:34: b1:0d:9f:62:18:72:ed:8c:6f:8b:98:13:4f:c8:f5:d3:35:e9: e8:cc:4c:df:6c:32:aa:f6:2f:d8:1f:47:13:cb:0e:a7:57:d8: bc:f7:79:05:a5:79:91:6d:3d:90:18:ca:78:ef:9e:59:d7:47: d9:5c:51:f5:57:88:ed:99:f6:d8:f1:5d:55:f7:8a:90:cb:4e: 1d:f5:96:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHZQhAU3fP6xyxMwqyRgcfrg1eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVFNDZCNDBEQTRCMzk4MTI1OTBGNjZGOEQ5QTQ4RUI3 QkY4MDY2MzAeFw0yNjA2MDIxNzIwNTZaFw0yNjA2MDMyMDA4NTZaMDMxMTAvBgNV BAMTKDk4NDdGMTEyMzI0ODFCMjU2REU3OTYxRTU1OTY2RDQ0NjFDNjM1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFttG7Eim1ujBrgvRbdnXNh3fM 0DP0rTUAlbDMF0U+iawuKWACzcElRz1hR9JvGOWr1DbxUhEFKUwtjedt57Xo1/H9 RcjWN//7fJ7ss+mgph4HNFsK2nJ9+eXPuQ1oji0F9OzJlQKcOOMf9W0ytHMv9BYE Ac0v2CDHLMbJGHsq8XzN1fdJ/BXr4v7xmjP/G+oFAXNyJUcOUkNg1DMN9zpLc/4P LLMbAW7EJNSRZDVSrlnCc6sG5fgVgQCp15ccsKPbmfUeCSOLpaT0U1snnHs7ZhCp 7JSpu1ZORjKvHSGkSemP85ypZmhOOtMR3QnfsipxwdvgkpSEGF7KlGQ90YztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmEfxEjJIGyVt55YeVZZtRGHGNVAwHwYDVR0j BBgwFoAU5eRrQNpLOYElkPZvjZpI63v4BmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBkMmJkZTQtMDU2Yi00NWM2LTgwYmYtZjVkNGQyNzczMzZiLzAvRTVFNDZCNDBE QTRCMzk4MTI1OTBGNjZGOEQ5QTQ4RUI3QkY4MDY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNUU0NkI0MERBNEIzOTgxMjU5MEY2NkY4RDlBNDhFQjdCRjgw NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvRTVFNDZCNDBEQTRCMzk4MTI1OTBGNjZGOEQ5QTQ4 RUI3QkY4MDY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsHmfhvLI5fgFY8taEuCIWTU/tHxvEvFHOP Zrh0lWR+E7Mv/XEn7I+rv8Gkm0RwXgftOI1+orGQ7F5BkUBxNcbkeC+kcvl+oTi+ ave2zgTrROELK11Mj8V/+aMQ8QYIwLUYtio4GzjQZR0fWmf5LGrmw0OY+KfGwsG8 Ml/xjKqwRCnM+ua0sxAUtkCKW+AUaJ6lw9CPEcfqmGjc+dttgwyLdwFNAutQUICt sBrkGfLTRgKSNLENn2IYcu2Mb4uYE0/I9dM16ejMTN9sMqr2L9gfRxPLDqdX2Lz3 eQWleZFtPZAYynjvnlnXR9lcUfVXiO2Z9tjxXVX3ipDLTh31lhc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:10:15 2026 by rpki-client