$ rpki-client -vvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft File: E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft (raw, json) Hash identifier: yg0MfjxhgCHQwLvqNWLy9hn4WeqfGugYC0s00kzcGx8= Subject key identifier: 7A:B3:3A:69:11:61:EE:38:2F:A2:2E:36:9C:79:37:57:B4:25:1D:CB Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C Certificate issuer: /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Certificate serial: 50B0F67027DC4036AFAF5BFBEF7BEFDDDF6A1369 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:28:00 +0000 Manifest this update: Tue 02 Jun 2026 22:23:00 +0000 Manifest next update: Wed 03 Jun 2026 23:57:00 +0000 Files and hashes: 1: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: adRerI3tyaAoAsC9J+hV/5/qxos6XlWsLUCLBDHVCkI=) 2: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: O/24bYRJHwn8lGm4x/5IsjKHiRZPSA0Jbap1Vz4bsHo=) 3: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: O71Jl4mqVIKRIDU7d2ujmnsBUwDFC83l2q24DcsCcFA=) 4: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: fB2Vl1cIcPoBjN5rs9Ik+Eab2HMgRuDFWdtvrKSJoVw=) 5: E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl (hash: Mu14O3VKaXTDPgk0PWlzc1qhBPPVd2X52aAfIAw5BWc=) 6: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: j+y6AXj1f3E3oHmAFOLhkBlzYepk37VPnp6D6mtPQkY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b0:f6:70:27:dc:40:36:af:af:5b:fb:ef:7b:ef:dd:df:6a:13:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Validity Not Before: Jun 2 22:23:00 2026 GMT Not After : Jun 3 23:57:00 2026 GMT Subject: CN=7AB33A691161EE382FA22E369C793757B4251DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:b7:99:65:90:82:b0:39:48:b0:cc:f1:b2: 85:6b:75:9b:27:87:53:50:96:36:cd:ad:52:b6:7d: 72:c1:04:98:51:64:6f:29:6d:0c:b4:b0:b0:31:7d: b7:c3:68:a3:bd:5d:6f:cb:69:73:5e:8f:75:0c:be: ae:44:bf:55:35:1e:6d:a9:ee:7d:a2:d7:2d:78:4a: bf:3e:19:b0:10:11:3e:da:ef:ea:9c:9f:c7:fb:6a: 7e:11:00:b8:2e:dd:48:1a:ec:4b:9d:d0:6c:eb:76: fe:40:f0:2b:bf:03:a2:0c:da:c2:c6:66:ad:8d:2c: 70:fc:e3:1c:71:7a:02:93:3d:e1:2e:23:bd:ea:0e: 45:e9:a0:1e:9f:e0:41:94:0e:e7:d6:ac:b5:52:29: 89:77:17:77:72:47:d8:44:cb:5c:a4:6b:85:04:85: 51:da:9f:8e:ca:84:bf:61:f5:ad:b9:6e:f7:be:b0: 22:db:5a:1e:8c:0b:f1:31:5a:0b:44:85:5d:9d:fd: d6:b2:77:4a:83:9a:62:79:2a:84:f9:2f:e2:f3:17: af:98:15:3b:19:78:c8:c2:dc:73:34:34:f3:11:e7: 70:e4:2f:5b:1c:af:c5:61:e3:9e:b2:b7:11:c0:a6: 00:ed:64:3d:d5:3e:73:84:4f:e1:03:db:cd:b7:b6: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B3:3A:69:11:61:EE:38:2F:A2:2E:36:9C:79:37:57:B4:25:1D:CB X509v3 Authority Key Identifier: keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e9:41:1e:0c:03:ef:80:92:2a:98:d9:6d:ee:fa:b7:5e:86: cc:57:ca:30:fa:73:8d:d3:07:1e:76:59:0f:a1:0b:1d:06:96: 45:79:0a:da:03:12:26:b6:e2:e8:df:e6:90:14:57:36:a9:4a: 3d:22:44:61:c4:45:90:05:9b:56:b3:fb:54:82:1a:84:d6:a9: 7b:55:85:40:14:fd:43:17:9f:04:82:23:8b:d4:ce:14:bc:d4: 26:67:05:87:03:7a:7d:2f:b3:a1:99:08:37:7a:13:00:2d:ea: 03:f7:9e:ef:0f:bc:0b:7c:69:38:9a:3a:7f:07:47:41:e3:7e: f6:7c:ca:d8:50:9c:dd:35:4a:0e:16:2e:a6:23:bd:e8:0d:b0: 33:40:ad:6f:7b:eb:8b:b4:b9:0a:9c:db:99:85:eb:2f:45:0a: 47:26:ab:1c:53:a2:5c:86:cb:8c:5a:7f:f5:ce:5d:3f:c2:9f: f6:f9:c3:19:6d:80:7a:00:c1:51:d0:86:22:0c:5f:6f:9a:2c: a8:ed:6b:6a:6b:71:e5:c6:d9:69:9a:4c:fe:61:f7:68:f4:f7: e1:99:5e:a4:c5:7a:20:81:82:f4:e8:29:9c:b5:01:34:e8:13: 5e:b7:ae:97:24:30:fb:70:10:e5:8b:bf:c6:52:61:10:87:e9: 53:37:c7:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULD2cCfcQDavr1v773vv3d9qE2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJE MDA1NjcyQzAeFw0yNjA2MDIyMjIzMDBaFw0yNjA2MDMyMzU3MDBaMDMxMTAvBgNV BAMTKDdBQjMzQTY5MTE2MUVFMzgyRkEyMkUzNjlDNzkzNzU3QjQyNTFEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE+LeZZZCCsDlIsMzxsoVrdZsn h1NQljbNrVK2fXLBBJhRZG8pbQy0sLAxfbfDaKO9XW/LaXNej3UMvq5Ev1U1Hm2p 7n2i1y14Sr8+GbAQET7a7+qcn8f7an4RALgu3Uga7Eud0Gzrdv5A8Cu/A6IM2sLG Zq2NLHD84xxxegKTPeEuI73qDkXpoB6f4EGUDufWrLVSKYl3F3dyR9hEy1yka4UE hVHan47KhL9h9a25bve+sCLbWh6MC/ExWgtEhV2d/dayd0qDmmJ5KoT5L+LzF6+Y FTsZeMjC3HM0NPMR53DkL1scr8Vh456ytxHApgDtZD3VPnOET+ED2823tiTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerM6aRFh7jgvoi42nHk3V7QlHcswHwYDVR0j BBgwFoAU6e0HBZ6wH2G/apAusNlfktAFZywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYjFjMWItNjU2Yy00ODlkLTllZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5 RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJEMDA1NjcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVEMDcwNTlFQjAxRjYxQkY2QTkwMkVCMEQ5NUY5MkQwMDU2 NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVG OTJEMDA1NjcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbpQR4MA++AkiqY2W3u+rdehsxXyjD6c43T Bx52WQ+hCx0GlkV5CtoDEia24ujf5pAUVzapSj0iRGHERZAFm1az+1SCGoTWqXtV hUAU/UMXnwSCI4vUzhS81CZnBYcDen0vs6GZCDd6EwAt6gP3nu8PvAt8aTiaOn8H R0HjfvZ8ythQnN01Sg4WLqYjvegNsDNArW9764u0uQqc25mF6y9FCkcmqxxTolyG y4xaf/XOXT/Cn/b5wxltgHoAwVHQhiIMX2+aLKjta2prceXG2WmaTP5h92j09+GZ XqTFeiCBgvToKZy1ATToE163rpckMPtwEOWLv8ZSYRCH6VM3x0g= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:41 2026 by rpki-client