$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft File: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft (raw, json) Hash identifier: wpBRDHWnHkHBbD8jcuirkDdGRSU4goeYH7wE45y3leo= Subject key identifier: 2D:11:77:E8:44:52:E9:3E:B0:5D:64:CC:91:18:3D:EE:A9:0C:7A:04 Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Certificate serial: 33219D290740EBD9673FACC6ADF73C438CEDE528 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 20:40:03 +0000 Manifest this update: Tue 02 Jun 2026 20:35:03 +0000 Manifest next update: Wed 03 Jun 2026 21:28:03 +0000 Files and hashes: 1: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl (hash: aylE3BJaMQEHQGeKxAczOHKbb5U0L0Q5F7S/iYovmyo=) 2: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: R27uG9wLK3XnlCddZVxdbbwrtPpS8ZSeb7rGWZG6Ph4=) 3: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: GFz+TTDbnW2nztXcZjgib7laNHpvzTT0hcf+2L3G+7o=) 4: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: EhQ7R7hv9ww9SVAVibUO5OafRSJMymQa0QNdea7zNE0=) 5: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: IBqjxLNXqSTykZaxJEDmSDLPjTO+m3MiFe7W+kVNa1Q=) 6: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: a9SdeOZSphcGVgljZg1tnbLWdBiFIVD0GygHfLT2ZLs=) 7: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: mf3IPyVMZfES2LPj/qKW1uxRQxXFsgdbVk4fq7bhazg=) 8: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: 2Vf+pTFqJv7XrQMn75awWPNpommC6ezf5Mi4NO6m5ug=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:21:9d:29:07:40:eb:d9:67:3f:ac:c6:ad:f7:3c:43:8c:ed:e5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Validity Not Before: Jun 2 20:35:03 2026 GMT Not After : Jun 3 21:28:03 2026 GMT Subject: CN=2D1177E84452E93EB05D64CC91183DEEA90C7A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:3c:c1:82:21:42:ca:ad:62:0c:46:9a:31: 86:c9:76:4b:99:cd:73:d0:43:01:e2:a6:33:19:ba: 17:a9:4a:68:51:f6:b1:5f:5e:c7:75:32:ab:32:f6: 4f:1c:8a:81:3f:3a:2e:53:ba:3a:30:63:f5:26:af: f5:28:41:d9:bb:4d:59:44:06:c0:e5:96:09:a4:1c: 9d:cc:51:4a:d4:46:e5:62:ca:fc:62:00:5f:40:05: 17:39:34:d8:67:63:f3:28:4b:04:ef:f7:25:84:0b: a9:a2:a2:a4:2a:02:24:66:30:cc:01:ae:13:00:c4: 9f:5c:d2:8a:d9:f6:c1:ec:a6:d8:f7:b7:51:1a:07: b4:05:6f:48:03:11:5c:6c:b5:a0:22:ad:5e:fe:c4: 13:e5:4a:41:95:cf:f4:e5:62:74:0a:7f:93:5f:ea: 74:c2:fd:fe:66:9a:c5:d7:bf:bb:a5:e1:43:be:8c: 3b:f0:d3:2f:ae:d9:5b:38:04:fa:25:b1:c7:63:a0: a2:31:19:72:ff:a2:df:a6:84:57:a8:f9:61:53:fe: 6b:9c:f3:44:f2:c6:70:e3:b0:b6:fb:6d:f1:a1:c8: 5e:cb:13:aa:19:4d:04:e6:f4:64:1a:5b:4d:e4:d9: e8:5d:88:8b:a4:b9:c6:3d:48:e7:1b:a4:72:86:f3: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:11:77:E8:44:52:E9:3E:B0:5D:64:CC:91:18:3D:EE:A9:0C:7A:04 X509v3 Authority Key Identifier: keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:69:0d:45:98:a7:e6:9e:49:c8:5c:f7:a1:c4:2d:45:de:f6: 8c:a5:39:8f:88:e7:5d:55:c4:1d:21:ef:05:3e:f8:9f:0e:7d: d5:2f:0e:12:35:b1:c9:42:fa:fd:4c:d1:50:e5:11:ee:1f:cb: 02:c2:90:a7:81:eb:b7:29:06:e2:2f:4b:51:4f:6d:9a:37:b8: 0a:e4:f7:c2:24:0d:68:15:f3:d7:d8:58:f7:d4:1a:96:de:43: 85:a9:20:96:62:3e:a9:d4:c9:93:89:30:a3:b5:d5:a8:88:3a: 2b:2a:2f:16:8c:69:9a:18:03:8f:86:56:62:07:08:4c:23:ed: a3:68:45:80:75:55:07:f2:8e:b8:a5:01:b2:3f:39:18:3a:dc: 26:f3:62:b3:a8:60:64:da:21:9a:d6:28:23:99:96:33:02:c1: 5a:45:aa:ef:d7:9b:14:f3:0a:73:b2:61:43:8c:4c:62:71:df: 21:77:40:57:34:55:44:99:70:86:02:8f:13:c5:45:aa:0f:77: 2f:57:d0:ff:3d:36:b0:7d:2b:ec:e7:a7:f0:d6:5e:aa:d9:9c: 21:5b:3d:0d:27:92:fc:92:8d:63:1e:ce:2b:d7:5f:db:bc:75: d3:75:49:af:47:d7:b3:15:96:12:3a:b2:b1:f1:b9:64:57:c8: 53:9e:ad:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyGdKQdA69lnP6zGrfc8Q4zt5SgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1QTNB RTBGNUVDMTAeFw0yNjA2MDIyMDM1MDNaFw0yNjA2MDMyMTI4MDNaMDMxMTAvBgNV BAMTKDJEMTE3N0U4NDQ1MkU5M0VCMDVENjRDQzkxMTgzREVFQTkwQzdBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNDzBgiFCyq1iDEaaMYbJdkuZ zXPQQwHipjMZuhepSmhR9rFfXsd1Mqsy9k8cioE/Oi5TujowY/Umr/UoQdm7TVlE BsDllgmkHJ3MUUrURuViyvxiAF9ABRc5NNhnY/MoSwTv9yWEC6mioqQqAiRmMMwB rhMAxJ9c0orZ9sHsptj3t1EaB7QFb0gDEVxstaAirV7+xBPlSkGVz/TlYnQKf5Nf 6nTC/f5mmsXXv7ul4UO+jDvw0y+u2Vs4BPolscdjoKIxGXL/ot+mhFeo+WFT/muc 80TyxnDjsLb7bfGhyF7LE6oZTQTm9GQaW03k2ehdiIukucY9SOcbpHKG89qTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRF36ERS6T6wXWTMkRg97qkMegQwHwYDVR0j BBgwFoAU6X0kBi4+gJE4jg4m3+glo64PXsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkYzFiMDUtMmE2OS00NWIwLThjNDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYy RTNFODA5MTM4OEUwRTI2REZFODI1QTNBRTBGNUVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdEMjQwNjJFM0U4MDkxMzg4RTBFMjZERkU4MjVBM0FFMEY1 RUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1 QTNBRTBGNUVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExpDUWYp+aeSchc96HELUXe9oylOY+I511V xB0h7wU++J8OfdUvDhI1sclC+v1M0VDlEe4fywLCkKeB67cpBuIvS1FPbZo3uArk 98IkDWgV89fYWPfUGpbeQ4WpIJZiPqnUyZOJMKO11aiIOisqLxaMaZoYA4+GVmIH CEwj7aNoRYB1VQfyjrilAbI/ORg63CbzYrOoYGTaIZrWKCOZljMCwVpFqu/XmxTz CnOyYUOMTGJx3yF3QFc0VUSZcIYCjxPFRaoPdy9X0P89NrB9K+znp/DWXqrZnCFb PQ0nkvySjWMezivXX9u8ddN1Sa9H17MVlhI6srHxuWRXyFOerQ8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:07 2026 by rpki-client