$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: lDIxd2Dp2iN38ZdaBTfUKhqTsR329LBYMVjIBSPsq6E= Subject key identifier: 32:5D:40:71:50:B0:A7:2F:6B:68:C2:15:DB:E2:5C:28:D9:3E:62:B0 Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: E3CFFCAE55BEF59DF427595B1B1ABEBCF55948 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:52:03 +0000 Manifest this update: Tue 02 Jun 2026 13:47:03 +0000 Manifest next update: Wed 03 Jun 2026 15:20:03 +0000 Files and hashes: 1: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) 2: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: FAyuGN3/htCkq88soCa5UdiZxC8MBAusgndeQ9odRco=) 3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) 4: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) 5: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e3:cf:fc:ae:55:be:f5:9d:f4:27:59:5b:1b:1a:be:bc:f5:59:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: Jun 2 13:47:03 2026 GMT Not After : Jun 3 15:20:03 2026 GMT Subject: CN=325D407150B0A72F6B68C215DBE25C28D93E62B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:b6:cb:83:bc:45:40:cc:bb:cc:5b:39:ec: ad:55:d8:7c:2a:cc:ef:e0:f2:0b:01:e2:80:09:01: 0d:17:06:58:8d:cb:53:e5:b1:e5:c1:ff:78:cc:f4: 6b:40:c0:79:a0:ed:7a:03:0d:63:98:76:13:de:45: 2a:06:47:1e:e8:e5:cd:f0:4f:e7:37:c7:f3:7b:2d: 5d:e8:77:57:4b:29:49:ed:2c:09:9a:15:16:13:21: 11:ab:74:f5:89:d1:c1:43:46:05:85:6f:71:96:7f: 76:77:3c:39:f4:e2:a6:62:57:4a:d3:41:b4:93:fb: ff:3b:d4:bb:26:6a:cf:36:7b:39:6f:c1:88:ad:18: c5:8f:5a:27:2b:58:dc:77:ee:e4:64:5d:e6:89:16: d1:b4:89:93:a1:1a:66:3f:74:64:00:f2:0d:eb:72: 9c:7c:e0:bc:42:ce:23:35:e1:a8:70:f7:c7:58:c1: 29:cb:9d:f3:7e:d2:76:84:d7:ac:f5:01:2d:48:e9: c4:12:d1:13:7d:f7:c4:a6:a9:cc:50:3c:8d:3a:2b: ef:3c:ea:82:ea:13:db:f8:ab:1b:e4:98:c9:e2:63: 44:9a:40:dd:b8:76:81:f9:3b:d1:96:b2:a7:94:5e: 97:0d:64:df:b9:59:c9:2d:d7:b1:ca:aa:54:34:27: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5D:40:71:50:B0:A7:2F:6B:68:C2:15:DB:E2:5C:28:D9:3E:62:B0 X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f4:ea:9b:97:5d:69:53:65:49:dd:62:13:cb:92:c1:23:77: b4:95:f8:d8:bb:20:62:5a:11:07:df:b1:88:b8:eb:80:f8:b0: 1b:06:02:00:61:66:16:be:be:53:a2:a9:60:7d:87:f2:45:82: 85:b0:8e:a4:ab:02:6f:d9:a5:ff:13:5a:3c:27:f6:e3:7b:b1: f5:48:e4:f7:bb:31:5e:60:58:fb:c5:fb:6d:9b:6e:44:26:a8: cc:8b:fd:7b:44:f1:c7:5d:b9:c9:f4:92:ac:da:e0:4e:9d:8d: 32:35:91:ba:7f:e4:54:b7:ab:6a:ff:ab:02:fd:cc:31:7d:3d: 74:ca:3c:7b:7d:bb:27:ff:98:1f:c5:16:19:e3:08:9b:3d:30: da:15:94:8d:41:7c:5e:c9:3b:4f:89:e3:9a:a9:7d:45:37:df: dd:21:68:e8:89:4e:1a:e7:49:dc:bf:bc:4f:be:61:77:09:46: 85:1e:da:27:f8:8d:97:eb:b4:52:d7:21:63:25:f1:ba:3e:8f: 42:63:67:8d:5c:23:03:c5:0e:c8:3b:cf:26:d1:9b:35:1d:ef: 41:79:f9:8b:27:54:81:c4:35:72:95:75:1d:d3:9b:5a:39:4d: 82:b3:a4:ce:13:71:05:bf:af:fc:30:40:db:30:88:db:d5:3e: 45:61:48:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOPP/K5VvvWd9CdZWxsavrz1WUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjA2MDIxMzQ3MDNaFw0yNjA2MDMxNTIwMDNaMDMxMTAvBgNV BAMTKDMyNUQ0MDcxNTBCMEE3MkY2QjY4QzIxNURCRTI1QzI4RDkzRTYyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNrbLg7xFQMy7zFs57K1V2Hwq zO/g8gsB4oAJAQ0XBliNy1PlseXB/3jM9GtAwHmg7XoDDWOYdhPeRSoGRx7o5c3w T+c3x/N7LV3od1dLKUntLAmaFRYTIRGrdPWJ0cFDRgWFb3GWf3Z3PDn04qZiV0rT QbST+/871Lsmas82ezlvwYitGMWPWicrWNx37uRkXeaJFtG0iZOhGmY/dGQA8g3r cpx84LxCziM14ahw98dYwSnLnfN+0naE16z1AS1I6cQS0RN998SmqcxQPI06K+88 6oLqE9v4qxvkmMniY0SaQN24doH5O9GWsqeUXpcNZN+5Wckt17HKqlQ0J/nlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMl1AcVCwpy9raMIV2+JcKNk+YrAwHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT06puXXWlTZUndYhPLksEjd7SV+Ni7IGJa EQffsYi464D4sBsGAgBhZha+vlOiqWB9h/JFgoWwjqSrAm/Zpf8TWjwn9uN7sfVI 5Pe7MV5gWPvF+22bbkQmqMyL/XtE8cdducn0kqza4E6djTI1kbp/5FS3q2r/qwL9 zDF9PXTKPHt9uyf/mB/FFhnjCJs9MNoVlI1BfF7JO0+J45qpfUU3390haOiJThrn Sdy/vE++YXcJRoUe2if4jZfrtFLXIWMl8bo+j0JjZ41cIwPFDsg7zybRmzUd70F5 +YsnVIHENXKVdR3Tm1o5TYKzpM4TcQW/r/wwQNswiNvVPkVhSOw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:16 2026 by rpki-client