$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft File: E23AA0021573342645A2DFB669071A3FC460F128.mft (raw, json) Hash identifier: teOoAINIv39/TQFyvsOspRhSjMgjCVhgQZt7khdYnyw= Subject key identifier: 66:A1:E4:34:0F:9A:60:D6:E0:92:82:C9:38:77:C6:5D:D3:96:A3:A4 Authority key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 Certificate issuer: /CN=E23AA0021573342645A2DFB669071A3FC460F128 Certificate serial: 167D9D6DDBCE064EDE91ABD0533FBF4D7C1F3EE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:35:32 +0000 Manifest this update: Tue 02 Jun 2026 12:30:32 +0000 Manifest next update: Wed 03 Jun 2026 14:10:32 +0000 Files and hashes: 1: E23AA0021573342645A2DFB669071A3FC460F128.crl (hash: ZQapLGnRDzNJOhlFIWfVBjprEeh3bw1SEDsNrphA3sw=) 2: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: ehJTG/Z8MCWRpYE7Mv6MPXlKzKRx5WpLNTB9Vc1HLns=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7d:9d:6d:db:ce:06:4e:de:91:ab:d0:53:3f:bf:4d:7c:1f:3e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23AA0021573342645A2DFB669071A3FC460F128 Validity Not Before: Jun 2 12:30:32 2026 GMT Not After : Jun 3 14:10:32 2026 GMT Subject: CN=66A1E4340F9A60D6E09282C93877C65DD396A3A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:3c:1d:cd:09:5d:46:4a:d8:98:d1:cb:5c: 73:f9:2f:14:63:e1:b4:8c:1b:35:20:89:a2:a4:5f: 49:91:30:dc:8c:0a:57:8d:60:1b:48:09:5e:9b:40: a9:c4:22:1a:fc:98:ce:4f:c2:5d:27:44:6d:e3:04: 82:09:88:01:4e:7f:4d:01:f5:6b:3a:2d:f6:93:5a: ce:a6:62:1f:f9:67:6c:e4:7c:3e:ba:01:31:e7:c4: 9f:51:94:9e:22:7d:41:dd:01:1e:d2:12:c7:13:0b: f0:dd:3f:e6:aa:ac:a5:d2:a3:03:a5:89:ba:1e:a8: e3:8b:4f:e3:ea:f3:af:14:3c:bd:1d:fc:41:0d:b1: 9b:0e:74:8a:92:b6:5b:be:83:c6:3c:bd:fc:d3:48: ef:73:61:68:fd:20:69:53:39:db:19:05:51:36:c0: ac:f0:f7:c7:7d:ac:d7:0e:84:a5:bc:70:7c:34:d4: 0f:c6:5d:2d:80:bd:59:fc:2f:b1:cd:91:27:68:ea: 0a:5d:4d:f9:b7:2d:56:ea:d4:da:ef:b7:06:9f:98: 28:02:e3:cc:5c:97:a6:97:9c:2d:76:16:3a:78:14: ce:89:02:ae:75:4f:4d:e6:c9:af:c1:d0:c3:16:fb: 82:0d:61:0c:f4:64:cb:d7:2f:3f:2f:98:ad:81:46: a3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A1:E4:34:0F:9A:60:D6:E0:92:82:C9:38:77:C6:5D:D3:96:A3:A4 X509v3 Authority Key Identifier: keyid:E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fd:43:9e:80:58:75:57:ce:1c:ff:22:a0:6a:20:20:93:55: ad:2d:3e:ab:8f:7b:ae:d8:04:4c:0d:9e:d5:94:7d:b9:d7:ab: 13:d6:91:be:0e:f2:3b:34:de:88:b7:49:1a:4e:74:b5:6a:51: 50:d3:33:3a:d1:c2:0e:e7:59:8d:56:03:78:a1:f0:2e:b2:ab: 06:3b:b7:aa:e2:30:62:8c:60:a1:e9:dc:cb:1e:e7:56:27:4e: b2:23:4a:9b:33:56:a6:d4:dd:f9:09:3e:37:57:6d:f7:e9:54: f6:5c:82:de:52:91:22:5f:84:69:41:8a:67:30:8d:e8:68:d0: cd:03:a9:68:ed:3d:44:ed:52:68:81:e9:08:8a:f7:4d:fd:7c: 84:f3:35:1c:ed:a8:58:6a:5d:89:31:12:d5:31:37:b4:71:34: 34:4a:42:d6:fc:85:ba:fd:d1:a1:4d:b3:6a:58:fc:bb:28:01: fb:3b:86:13:af:e8:57:67:55:17:59:1d:ee:de:e1:1c:42:61: bb:89:7d:4f:3c:30:27:8d:2c:de:54:2e:80:68:d1:2b:2e:36: 3c:31:59:95:76:49:0d:ed:d3:1b:39:81:85:66:4c:b7:63:9d: 92:23:d5:60:fe:ce:b3:e0:0b:a1:7f:bc:46:d0:74:27:4b:78: 9a:ae:22:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFn2dbdvOBk7ekavQUz+/TXwfPuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZD NDYwRjEyODAeFw0yNjA2MDIxMjMwMzJaFw0yNjA2MDMxNDEwMzJaMDMxMTAvBgNV BAMTKDY2QTFFNDM0MEY5QTYwRDZFMDkyODJDOTM4NzdDNjVERDM5NkEzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYzwdzQldRkrYmNHLXHP5LxRj 4bSMGzUgiaKkX0mRMNyMCleNYBtICV6bQKnEIhr8mM5Pwl0nRG3jBIIJiAFOf00B 9Ws6LfaTWs6mYh/5Z2zkfD66ATHnxJ9RlJ4ifUHdAR7SEscTC/DdP+aqrKXSowOl iboeqOOLT+Pq868UPL0d/EENsZsOdIqStlu+g8Y8vfzTSO9zYWj9IGlTOdsZBVE2 wKzw98d9rNcOhKW8cHw01A/GXS2AvVn8L7HNkSdo6gpdTfm3LVbq1NrvtwafmCgC 48xcl6aXnC12Fjp4FM6JAq51T03mya/B0MMW+4INYQz0ZMvXLz8vmK2BRqP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqHkNA+aYNbgkoLJOHfGXdOWo6QwHwYDVR0j BBgwFoAU4jqgAhVzNCZFot+2aQcaP8Rg8SgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkMGZjYTgtNWMyZC00ZTM1LWJkN2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIx NTczMzQyNjQ1QTJERkI2NjkwNzFBM0ZDNDYwRjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMjNBQTAwMjE1NzMzNDI2NDVBMkRGQjY2OTA3MUEzRkM0NjBG MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvRTIzQUEwMDIxNTczMzQyNjQ1QTJERkI2NjkwNzFB M0ZDNDYwRjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT9Q56AWHVXzhz/IqBqICCTVa0tPquPe67Y BEwNntWUfbnXqxPWkb4O8js03oi3SRpOdLVqUVDTMzrRwg7nWY1WA3ih8C6yqwY7 t6riMGKMYKHp3Mse51YnTrIjSpszVqbU3fkJPjdXbffpVPZcgt5SkSJfhGlBimcw jeho0M0DqWjtPUTtUmiB6QiK9039fITzNRztqFhqXYkxEtUxN7RxNDRKQtb8hbr9 0aFNs2pY/LsoAfs7hhOv6FdnVRdZHe7e4RxCYbuJfU88MCeNLN5ULoBo0SsuNjwx WZV2SQ3t0xs5gYVmTLdjnZIj1WD+zrPgC6F/vEbQdCdLeJquIlg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:08 2026 by rpki-client