$ rpki-client -vvf rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft File: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft (raw, json) Hash identifier: gKDfecPSCEI9Ff19ud7y/L9+9//DOM+s3dxDY2L1m+M= Subject key identifier: DB:74:0B:78:F6:5C:5E:17:A0:4E:91:A1:B7:4C:88:88:65:7E:2B:D0 Authority key identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32 Certificate issuer: /CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132 Certificate serial: 10A492DCDFD12A7884B6F61F3B79D15F9DCC9644 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:53:32 +0000 Manifest this update: Tue 02 Jun 2026 10:48:32 +0000 Manifest next update: Wed 03 Jun 2026 12:56:32 +0000 Files and hashes: 1: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: 5XEDOOrbyLaQ3rvBerNKeMoDupncLVY5Kqo+4A1sTYY=) 2: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl (hash: hWh3S4tFhta0jxmNjpAV+zVpYjMoW4K6OlhtF40ZBp8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a4:92:dc:df:d1:2a:78:84:b6:f6:1f:3b:79:d1:5f:9d:cc:96:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132 Validity Not Before: Jun 2 10:48:32 2026 GMT Not After : Jun 3 12:56:32 2026 GMT Subject: CN=DB740B78F65C5E17A04E91A1B74C8888657E2BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:27:18:2e:73:f5:0a:37:90:30:80:c4:8b: cd:4e:66:d1:e1:da:d2:a8:87:fd:3a:0c:a9:73:68: 82:d5:4f:30:3e:a9:7b:bc:ce:a7:77:03:d4:db:21: eb:52:91:73:0e:d2:db:3a:99:32:16:53:00:37:78: 16:ba:63:fd:50:ef:2d:08:af:f4:31:55:8b:82:27: c9:c9:aa:da:bf:2c:7a:27:5a:27:4b:57:7b:4c:63: 0a:b8:c4:33:56:76:ec:95:e6:88:a2:fa:05:86:e9: 19:f9:4e:cc:19:d9:a7:07:ee:35:5b:ef:fd:68:6c: 12:56:a0:f8:fe:67:93:6c:40:38:49:c5:d3:90:8f: 93:65:bc:d4:ed:9f:20:80:2a:ab:1b:db:e4:76:25: 87:96:15:2d:f5:48:f8:45:12:a7:b3:0b:3a:10:63: da:db:fe:3f:ed:bc:c6:36:7f:31:7e:c8:9a:a0:e6: 33:e7:ab:35:23:b3:c3:7a:b6:9e:bd:c6:eb:99:86: 44:7a:c0:f1:15:b5:80:e5:ef:9a:7c:71:ad:e3:47: 62:f9:e3:70:81:52:56:33:64:10:5b:92:15:b6:dd: 97:aa:7c:c1:a3:48:a9:34:b6:1e:12:6f:e1:1e:de: 9a:a4:f7:1e:2f:3d:d0:7c:fb:f5:3e:13:78:03:42: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:74:0B:78:F6:5C:5E:17:A0:4E:91:A1:B7:4C:88:88:65:7E:2B:D0 X509v3 Authority Key Identifier: keyid:E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1b:8a:4e:25:cc:3c:34:3c:1c:d6:ed:ac:42:1b:1c:90:24: 23:92:99:41:47:4f:a9:db:c6:18:4f:5c:bb:09:ca:8c:60:7e: a2:76:01:12:63:11:a5:6d:a4:7c:26:6b:e8:c4:ba:00:1e:5f: 85:be:c6:7f:c3:46:04:73:a3:bd:6b:6f:35:5c:69:c8:67:6f: 54:3c:81:54:1e:ab:77:73:67:d9:1f:51:33:4b:cb:79:48:4f: 5f:8f:84:e7:3f:3e:f0:25:a1:94:fc:52:b5:a2:6e:de:ab:19: 5c:ad:47:69:a1:d2:34:d3:04:0b:ea:ca:38:79:59:4c:12:8f: ff:17:7f:26:48:59:1b:a4:8e:71:6a:9c:8f:50:ce:2a:f3:f3: 3d:dd:49:17:89:56:39:c7:78:1e:18:1a:b8:cc:bd:3e:34:0a: 78:14:c6:91:92:7c:94:cd:c1:79:23:22:4a:8c:24:07:bd:cd: 7a:e5:f1:d2:e6:f7:0b:07:52:da:b7:6f:69:4e:50:4e:48:f6: 28:0b:fd:90:12:74:73:83:73:ca:8f:7f:85:17:68:1a:7d:b2: d7:48:22:78:e4:48:07:e9:6e:1b:c0:72:32:bc:7b:2a:e9:cf: 16:9d:d6:1c:ed:15:d0:62:42:8e:69:72:ec:91:7d:f1:6b:67: 34:1f:06:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKSS3N/RKniEtvYfO3nRX53MlkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBOEE2QjlFMDhEMDI2NjczNjMwREMxQTI2REJFNzNE RkExNjEzMjAeFw0yNjA2MDIxMDQ4MzJaFw0yNjA2MDMxMjU2MzJaMDMxMTAvBgNV BAMTKERCNzQwQjc4RjY1QzVFMTdBMDRFOTFBMUI3NEM4ODg4NjU3RTJCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmycYLnP1CjeQMIDEi81OZtHh 2tKoh/06DKlzaILVTzA+qXu8zqd3A9TbIetSkXMO0ts6mTIWUwA3eBa6Y/1Q7y0I r/QxVYuCJ8nJqtq/LHonWidLV3tMYwq4xDNWduyV5oii+gWG6Rn5TswZ2acH7jVb 7/1obBJWoPj+Z5NsQDhJxdOQj5NlvNTtnyCAKqsb2+R2JYeWFS31SPhFEqezCzoQ Y9rb/j/tvMY2fzF+yJqg5jPnqzUjs8N6tp69xuuZhkR6wPEVtYDl75p8ca3jR2L5 43CBUlYzZBBbkhW23ZeqfMGjSKk0th4Sb+Ee3pqk9x4vPdB8+/U+E3gDQo5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23QLePZcXhegTpGht0yIiGV+K9AwHwYDVR0j BBgwFoAU6aimueCNAmZzYw3Bom2+c9+hYTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzg0NmZlZDctZjg4ZS00OGVhLWE2ZDEtNmY3NTZiY2Y4ZGI2LzAvRTlBOEE2QjlF MDhEMDI2NjczNjMwREMxQTI2REJFNzNERkExNjEzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUE4QTZCOUUwOEQwMjY2NzM2MzBEQzFBMjZEQkU3M0RGQTE2 MTMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvRTlBOEE2QjlFMDhEMDI2NjczNjMwREMxQTI2REJF NzNERkExNjEzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMbik4lzDw0PBzW7axCGxyQJCOSmUFHT6nb xhhPXLsJyoxgfqJ2ARJjEaVtpHwma+jEugAeX4W+xn/DRgRzo71rbzVcachnb1Q8 gVQeq3dzZ9kfUTNLy3lIT1+PhOc/PvAloZT8UrWibt6rGVytR2mh0jTTBAvqyjh5 WUwSj/8XfyZIWRukjnFqnI9Qzirz8z3dSReJVjnHeB4YGrjMvT40CngUxpGSfJTN wXkjIkqMJAe9zXrl8dLm9wsHUtq3b2lOUE5I9igL/ZASdHODc8qPf4UXaBp9stdI InjkSAfpbhvAcjK8eyrpzxad1hztFdBiQo5pcuyRffFrZzQfBuU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:56 2026 by rpki-client