$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: DHsuosa81INu3pIQVEA9JUS4QWz7SUKjYECqXhrpHQE= Subject key identifier: D2:10:23:56:58:6E:7F:60:F9:FC:16:28:CE:5E:DF:62:1B:CF:27:91 Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 2DD7E776A9878755ED2781D5AF916C8A997E28D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:38:14 +0000 Manifest this update: Tue 02 Jun 2026 22:33:14 +0000 Manifest next update: Thu 04 Jun 2026 01:16:14 +0000 Files and hashes: 1: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: PpaD0J4SL8bbs+/6zSHSw+gJuDu2wj43sfI0YCKqngw=) 2: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) 3: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) 4: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d7:e7:76:a9:87:87:55:ed:27:81:d5:af:91:6c:8a:99:7e:28:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: Jun 2 22:33:14 2026 GMT Not After : Jun 4 01:16:14 2026 GMT Subject: CN=D2102356586E7F60F9FC1628CE5EDF621BCF2791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:26:28:3e:b7:aa:41:5d:54:7c:96:9f:a7: c5:e1:d3:ff:90:77:08:1c:00:72:3f:d3:87:1b:36: 9d:b4:11:0c:eb:d0:a5:8a:b1:71:46:f3:a7:91:04: fd:f5:b7:70:e5:89:dd:72:7b:77:b2:24:f5:e7:b1: 4c:ad:d7:28:d7:fd:b4:a7:3f:ff:e6:4c:75:5a:58: 62:85:a2:39:9a:bd:86:bb:86:56:bb:0d:55:df:9c: 5a:e7:5a:46:57:50:37:e7:3c:c3:90:6e:7a:1e:99: 12:f1:10:3b:6d:3b:0d:ef:a7:b6:e3:30:be:91:74: 7f:b7:26:1f:3e:7e:bb:94:92:a7:c2:1b:ca:75:f3: 19:5d:0d:e0:18:3a:02:1b:90:96:14:17:cc:3e:93: d4:f9:83:41:a3:ba:96:43:53:a6:c0:73:89:f8:81: c6:0d:8e:7b:fc:19:ac:73:6d:50:3a:5d:7b:84:b8: 8d:2f:bb:b4:f3:f6:cf:9e:57:4e:36:34:a1:5a:2d: 7c:15:d4:f6:88:73:f2:25:f4:d2:f8:e7:fc:d5:cd: 75:dc:50:b2:b7:dc:f4:e4:8d:a2:eb:3b:5b:60:bd: 6b:c7:0e:7c:29:e1:38:c1:3c:38:61:12:90:f1:d4: 35:1a:0f:9d:83:d4:cd:e3:e5:85:13:93:29:88:24: 3c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:10:23:56:58:6E:7F:60:F9:FC:16:28:CE:5E:DF:62:1B:CF:27:91 X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:49:a4:de:68:97:8e:6d:2d:99:d6:a7:1f:c9:88:ad:5a: f5:33:05:a4:17:af:0e:b7:83:ec:c3:4a:c9:85:8a:cf:0b:6e: 79:08:a1:08:7d:88:f3:8e:10:0e:13:2e:4c:56:08:7b:a0:c3: 0e:29:2b:94:84:5d:15:5e:da:4b:e4:b3:c2:a3:4e:c0:e4:43: fd:f5:9a:a5:a9:a8:e2:a2:85:e6:92:18:66:12:12:97:16:88: f2:47:2b:c4:a8:1a:30:b4:77:b2:ec:df:b1:cb:b7:24:85:74: 5d:05:c5:ab:56:e7:fb:70:2f:77:a8:51:79:2b:a9:af:42:df: 78:57:71:42:ef:6b:fb:36:4d:39:19:7c:88:49:9e:a6:6d:b7: 0d:5e:b1:5a:b1:f6:52:35:7b:0a:cf:14:40:6f:65:31:c0:73: 99:b7:cd:ac:be:59:53:92:10:eb:10:4d:39:50:a9:74:26:2b: 1f:c9:bc:ed:56:cc:33:da:f0:c6:76:77:3d:dc:01:17:32:b7: 0e:9f:7c:21:1e:62:0b:c2:d7:e3:2e:e3:56:ab:09:24:3d:1b: d2:7d:9a:51:dd:2e:8d:dd:ad:53:80:76:ff:8e:7d:b6:dd:1b: 74:3d:e6:ac:b1:a4:97:81:be:4f:ff:b7:05:d2:dc:68:d9:8f: 23:4d:cf:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdfndqmHh1XtJ4HVr5Fsipl+KNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjA2MDIyMjMzMTRaFw0yNjA2MDQwMTE2MTRaMDMxMTAvBgNV BAMTKEQyMTAyMzU2NTg2RTdGNjBGOUZDMTYyOENFNUVERjYyMUJDRjI3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtiYoPreqQV1UfJafp8Xh0/+Q dwgcAHI/04cbNp20EQzr0KWKsXFG86eRBP31t3Dlid1ye3eyJPXnsUyt1yjX/bSn P//mTHVaWGKFojmavYa7hla7DVXfnFrnWkZXUDfnPMOQbnoemRLxEDttOw3vp7bj ML6RdH+3Jh8+fruUkqfCG8p18xldDeAYOgIbkJYUF8w+k9T5g0GjupZDU6bAc4n4 gcYNjnv8GaxzbVA6XXuEuI0vu7Tz9s+eV042NKFaLXwV1PaIc/Il9NL45/zVzXXc ULK33PTkjaLrO1tgvWvHDnwp4TjBPDhhEpDx1DUaD52D1M3j5YUTkymIJDzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0hAjVlhuf2D5/BYozl7fYhvPJ5EwHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkZSaTeaJeObS2Z1qcfyYitWvUzBaQXrw63 g+zDSsmFis8LbnkIoQh9iPOOEA4TLkxWCHugww4pK5SEXRVe2kvks8KjTsDkQ/31 mqWpqOKiheaSGGYSEpcWiPJHK8SoGjC0d7Ls37HLtySFdF0FxatW5/twL3eoUXkr qa9C33hXcULva/s2TTkZfIhJnqZttw1esVqx9lI1ewrPFEBvZTHAc5m3zay+WVOS EOsQTTlQqXQmKx/JvO1WzDPa8MZ2dz3cARcytw6ffCEeYgvC1+Mu41arCSQ9G9J9 mlHdLo3drVOAdv+OfbbdG3Q95qyxpJeBvk//twXS3GjZjyNNz6g= -----END CERTIFICATE-----Generated at Wed Jun 3 03:56:58 2026 by rpki-client