$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft File: E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft (raw, json) Hash identifier: umYJt+ibJL8R1u3g3N9RF76FaypxHLmmPp0uz26S9zE= Subject key identifier: 81:2F:4A:27:09:F1:35:B4:BD:44:1A:62:0E:B0:E8:A3:80:3C:77:93 Authority key identifier: E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC Certificate issuer: /CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC Certificate serial: 76786E92F4220D6D3CFB7F23B1DAB8C354DBE940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:16:32 +0000 Manifest this update: Tue 02 Jun 2026 09:11:32 +0000 Manifest next update: Wed 03 Jun 2026 11:00:32 +0000 Files and hashes: 1: E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl (hash: YJB9IGHCEvOpkOxeAenGhFxAVGCt9R9Te66PZYD7kgQ=) 2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: PIufH5O182sP9pVKKuDwELYzvTT1F4q43CMzZkbvVHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:78:6e:92:f4:22:0d:6d:3c:fb:7f:23:b1:da:b8:c3:54:db:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC Validity Not Before: Jun 2 09:11:32 2026 GMT Not After : Jun 3 11:00:32 2026 GMT Subject: CN=812F4A2709F135B4BD441A620EB0E8A3803C7793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:e7:13:8f:6b:93:ae:b4:fc:9c:6f:60:71: fb:7f:b4:ee:4a:8d:56:a6:8d:83:0c:c1:02:5f:93: 61:43:03:a8:1b:be:f7:75:ff:2a:eb:64:d8:4d:91: f7:f5:41:f5:fb:ed:cc:b6:1c:c5:84:0b:cd:60:51: e8:a3:e5:a5:16:47:6d:a9:98:f8:cf:ff:eb:5d:be: 8c:62:3b:8d:36:61:12:ab:bb:cb:df:a2:34:58:fd: b3:32:a6:5c:e5:7d:d2:59:5e:e2:ba:bc:1e:8e:e2: 0c:57:9a:23:70:8a:c4:ed:fb:c9:58:68:97:9b:b6: 89:5e:11:58:31:22:44:9d:5d:22:29:8a:bf:65:50: a1:9e:a9:89:a0:b7:ed:bc:cb:28:31:53:11:18:41: 94:d0:9c:81:63:df:cd:db:6c:89:dd:d1:d5:13:8f: 7b:9e:47:22:99:e6:ee:8e:d6:d6:33:69:f8:ab:98: 09:30:60:97:dd:64:60:dd:3e:7e:8c:f1:9a:31:a2: 38:ec:41:75:32:21:73:1a:37:d7:16:33:d8:be:7a: 14:d2:4b:a0:39:ea:04:7f:45:f5:83:b7:fd:45:44: 0d:95:67:4b:ab:84:07:94:21:83:ba:6e:dc:1d:88: d5:a9:dc:26:4c:1c:f4:3d:3c:14:66:c4:5e:9f:3a: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2F:4A:27:09:F1:35:B4:BD:44:1A:62:0E:B0:E8:A3:80:3C:77:93 X509v3 Authority Key Identifier: keyid:E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bc:29:bb:31:e4:5f:5b:45:97:5e:da:69:b0:89:75:2c:da: 87:70:3c:0a:ca:cd:96:f9:57:9d:a3:a5:03:13:75:d0:f5:17: 65:05:56:82:33:2c:ef:35:71:d4:a6:30:2d:41:3e:56:81:ac: 04:da:14:b3:65:c6:9a:47:10:19:21:b6:fe:01:38:a8:06:40: de:1a:a0:d3:87:68:f4:eb:04:de:81:4e:65:c7:00:91:fc:f0: b8:e9:6d:dd:c3:2d:4e:3c:c3:96:30:11:4c:02:46:d0:bd:7e: c7:0a:f6:e1:bf:41:97:c1:99:41:d8:3b:33:0a:24:8a:b8:34: a1:3b:ff:e6:25:4b:11:bf:fa:de:25:b0:c6:c3:ee:d0:15:90: 99:f7:fb:b3:37:92:86:ab:b0:fc:cc:f8:f9:fe:eb:af:77:70: 7e:77:bd:bc:9c:1d:31:59:af:13:8b:eb:39:4f:71:f0:25:fc: c6:e0:51:ed:d4:9e:b7:c6:54:8a:e4:77:c6:9f:95:32:ad:f8: e6:8b:8c:b3:9d:17:2d:af:1a:01:9f:61:ef:9a:65:78:72:37: cb:e8:1d:af:30:28:13:62:d6:7f:20:bd:ad:0f:34:4b:78:47: 2e:e5:f0:1c:24:21:9a:6d:3d:16:a2:37:21:fa:55:48:a9:70: 00:aa:74:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnhukvQiDW08+38jsdq4w1Tb6UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThBOTM0MjY4RjQ1REE4QTZBNDMzMjk2ODFGMEQ0RkVB RUNGRjVCQzAeFw0yNjA2MDIwOTExMzJaFw0yNjA2MDMxMTAwMzJaMDMxMTAvBgNV BAMTKDgxMkY0QTI3MDlGMTM1QjRCRDQ0MUE2MjBFQjBFOEEzODAzQzc3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ3ucTj2uTrrT8nG9gcft/tO5K jVamjYMMwQJfk2FDA6gbvvd1/yrrZNhNkff1QfX77cy2HMWEC81gUeij5aUWR22p mPjP/+tdvoxiO402YRKru8vfojRY/bMyplzlfdJZXuK6vB6O4gxXmiNwisTt+8lY aJebtoleEVgxIkSdXSIpir9lUKGeqYmgt+28yygxUxEYQZTQnIFj383bbInd0dUT j3ueRyKZ5u6O1tYzafirmAkwYJfdZGDdPn6M8ZoxojjsQXUyIXMaN9cWM9i+ehTS S6A56gR/RfWDt/1FRA2VZ0urhAeUIYO6btwdiNWp3CZMHPQ9PBRmxF6fOjN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgS9KJwnxNbS9RBpiDrDoo4A8d5MwHwYDVR0j BBgwFoAU6Kk0Jo9F2opqQzKWgfDU/q7P9bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI1MjFiZDEtMWRhMi00YjgwLTg0MTYtZjA1ZGUyOTIyMTZlLzAvRThBOTM0MjY4 RjQ1REE4QTZBNDMzMjk2ODFGMEQ0RkVBRUNGRjVCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEE5MzQyNjhGNDVEQThBNkE0MzMyOTY4MUYwRDRGRUFFQ0ZG NUJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI1MjFiZDEtMWRhMi00YjgwLTg0 MTYtZjA1ZGUyOTIyMTZlLzAvRThBOTM0MjY4RjQ1REE4QTZBNDMzMjk2ODFGMEQ0 RkVBRUNGRjVCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIO8Kbsx5F9bRZde2mmwiXUs2odwPArKzZb5 V52jpQMTddD1F2UFVoIzLO81cdSmMC1BPlaBrATaFLNlxppHEBkhtv4BOKgGQN4a oNOHaPTrBN6BTmXHAJH88Ljpbd3DLU48w5YwEUwCRtC9fscK9uG/QZfBmUHYOzMK JIq4NKE7/+YlSxG/+t4lsMbD7tAVkJn3+7M3koarsPzM+Pn+6693cH53vbycHTFZ rxOL6zlPcfAl/MbgUe3UnrfGVIrkd8aflTKt+OaLjLOdFy2vGgGfYe+aZXhyN8vo Ha8wKBNi1n8gva0PNEt4Ry7l8BwkIZptPRaiNyH6VUipcACqdJE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:47 2026 by rpki-client