$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft File: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft (raw, json) Hash identifier: XBpumqcQTIibH8QY3+M0HDGtl1HUMft7hDmiGJeF44w= Subject key identifier: 03:DC:DB:E1:84:EC:40:E3:6A:C1:61:35:71:5E:E6:BA:9F:9E:7E:4B Authority key identifier: E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE Certificate issuer: /CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE Certificate serial: 48A03A94CEA813966255E9B1EA6814103A1CB5C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:28:04 +0000 Manifest this update: Tue 02 Jun 2026 22:23:04 +0000 Manifest next update: Thu 04 Jun 2026 01:50:04 +0000 Files and hashes: 1: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl (hash: onLv1uEq8GI7WeJ6VWcjZ5pqzmTQiSXWFlluOgUUQIE=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: SdJfcBicTcG5/kcedYnrcuYyXbwXNypphwy52Yrbsfs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a0:3a:94:ce:a8:13:96:62:55:e9:b1:ea:68:14:10:3a:1c:b5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE Validity Not Before: Jun 2 22:23:04 2026 GMT Not After : Jun 4 01:50:04 2026 GMT Subject: CN=03DCDBE184EC40E36AC16135715EE6BA9F9E7E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:72:fe:7e:8e:c8:0d:d1:d5:13:6d:43:cd: 52:33:76:fe:00:58:1e:e4:21:02:50:aa:9a:fa:05: c3:ec:7c:4d:78:35:3a:77:a1:0f:8a:71:4b:03:b5: 0a:6d:fc:be:ee:3e:80:26:2f:74:d4:9e:67:84:be: f2:0c:0f:ca:0d:45:51:4e:d9:89:8a:0f:63:ec:f3: 41:99:66:83:1c:db:f5:f6:92:3b:7c:b3:ab:b9:8e: 08:0d:65:b5:a9:c9:c7:ae:24:e2:e0:17:a7:62:b6: 65:4f:bf:47:27:ee:b8:c7:dc:82:02:18:75:35:a3: f7:94:68:78:47:99:77:44:a9:40:32:23:f9:17:3b: 48:2d:80:6e:d3:bb:97:af:64:a8:7b:97:4b:07:5f: 3b:c7:ec:26:1d:e4:61:51:b4:7d:71:64:48:b6:3b: 78:75:3d:ef:f0:6c:6d:b1:b2:14:74:a4:3a:b6:60: 55:1a:0d:22:da:2f:7e:51:45:70:4c:db:f3:e4:f0: 76:07:29:c7:2d:f1:e3:3d:eb:9f:76:00:7f:6d:52: 10:78:d9:0a:49:37:c1:46:62:5c:b2:19:2e:fb:a1: e7:db:6e:2d:b5:c8:e2:45:3d:6e:e4:3d:1c:87:00: 9f:d1:38:c1:f2:dc:b2:33:e7:ae:e5:f6:32:22:48: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DC:DB:E1:84:EC:40:E3:6A:C1:61:35:71:5E:E6:BA:9F:9E:7E:4B X509v3 Authority Key Identifier: keyid:E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:58:3d:7b:16:3b:75:ba:9c:a1:b0:fd:e1:29:de:04:fb:d4: 6b:28:04:b4:f7:57:0f:97:7b:02:18:fe:f0:f2:c9:6e:f1:75: 81:36:8f:4f:c9:b0:f5:46:8b:b1:92:e0:a9:37:30:d3:c0:6e: 1f:ba:af:9a:e1:ce:fe:10:57:10:a6:7d:23:c4:8f:d1:10:e7: d4:88:1b:43:e0:42:19:17:5d:2b:01:b1:72:d6:9e:99:bc:48: 0e:c6:59:1e:5a:2e:df:3e:62:62:72:5f:23:89:81:9b:70:3b: 1c:21:06:01:f7:8c:a7:1c:80:ca:fb:e2:21:cb:26:32:bb:74: b4:69:0d:ae:f7:32:bf:16:f9:be:4b:c1:9f:0a:30:7e:cb:e2: 18:38:6f:a8:e4:57:6c:7b:01:20:de:db:a7:50:70:ff:cb:40: 11:56:3f:a0:89:f5:3e:db:e9:7b:a4:ab:58:e8:52:85:2d:db: ad:c9:12:de:e7:76:79:64:4c:05:cd:50:d8:78:2b:f2:c6:a8: 1b:9b:90:58:f3:4a:67:d7:91:ca:ec:d0:3a:54:e3:30:87:89: f3:75:00:eb:2f:9d:35:66:18:a3:17:4d:65:db:b6:53:ad:66: 2d:1c:18:7b:c3:c2:01:0f:4a:b2:f4:05:2e:9d:cd:67:a9:85: 77:77:4e:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKA6lM6oE5ZiVemx6mgUEDoctckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3 QzhBQTZFRTAeFw0yNjA2MDIyMjIzMDRaFw0yNjA2MDQwMTUwMDRaMDMxMTAvBgNV BAMTKDAzRENEQkUxODRFQzQwRTM2QUMxNjEzNTcxNUVFNkJBOUY5RTdFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYHL+fo7IDdHVE21DzVIzdv4A WB7kIQJQqpr6BcPsfE14NTp3oQ+KcUsDtQpt/L7uPoAmL3TUnmeEvvIMD8oNRVFO 2YmKD2Ps80GZZoMc2/X2kjt8s6u5jggNZbWpyceuJOLgF6ditmVPv0cn7rjH3IIC GHU1o/eUaHhHmXdEqUAyI/kXO0gtgG7Tu5evZKh7l0sHXzvH7CYd5GFRtH1xZEi2 O3h1Pe/wbG2xshR0pDq2YFUaDSLaL35RRXBM2/Pk8HYHKcct8eM96592AH9tUhB4 2QpJN8FGYlyyGS77oefbbi21yOJFPW7kPRyHAJ/ROMHy3LIz567l9jIiSKCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9zb4YTsQONqwWE1cV7mup+efkswHwYDVR0j BBgwFoAU6Y1rZB6UP344MQY0xf7ornyKpu4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU2MWY4NmUtMDdmMC00YzYwLWFkYzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQx RTk0M0Y3RTM4MzEwNjM0QzVGRUU4QUU3QzhBQTZFRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOThENkI2NDFFOTQzRjdFMzgzMTA2MzRDNUZFRThBRTdDOEFB NkVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvRTk4RDZCNjQxRTk0M0Y3RTM4MzEwNjM0QzVGRUU4 QUU3QzhBQTZFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNYPXsWO3W6nKGw/eEp3gT71GsoBLT3Vw+X ewIY/vDyyW7xdYE2j0/JsPVGi7GS4Kk3MNPAbh+6r5rhzv4QVxCmfSPEj9EQ59SI G0PgQhkXXSsBsXLWnpm8SA7GWR5aLt8+YmJyXyOJgZtwOxwhBgH3jKccgMr74iHL JjK7dLRpDa73Mr8W+b5LwZ8KMH7L4hg4b6jkV2x7ASDe26dQcP/LQBFWP6CJ9T7b 6Xukq1joUoUt263JEt7ndnlkTAXNUNh4K/LGqBubkFjzSmfXkcrs0DpU4zCHifN1 AOsvnTVmGKMXTWXbtlOtZi0cGHvDwgEPSrL0BS6dzWephXd3Tvk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:53 2026 by rpki-client