$ rpki-client -vvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft File: E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft (raw, json) Hash identifier: uS2Y3S3NE4AtKSoBLFFPg7YcsU4JWCUUedMhDuuLXIU= Subject key identifier: 34:89:1A:A0:E7:F3:C7:AE:EB:5E:82:A0:8C:13:C6:7B:36:61:5D:37 Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Certificate issuer: /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Certificate serial: 33A54F4E774700B9D261AE96BB79F484E3FE31E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 10:43:22 +0000 Manifest this update: Tue 02 Jun 2026 10:38:22 +0000 Manifest next update: Wed 03 Jun 2026 12:07:22 +0000 Files and hashes: 1: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: b2H2J9oU1FTem9NxnIqJBxJ6q92fSr/bX1QAdywuSTE=) 2: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: IjEzO4J4/DAGMp7yw/Fv4jYmilXWlJ5CggUFR3MkMwg=) 3: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: BkJTNl2EaGlXKx/0oxL6MDW8bV/3huXeq9qOcksMrJo=) 4: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: MQJVRwYJnTX2QpJhcgqI//Yd9f8cE6OV9xHlB/+R9PA=) 5: E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl (hash: aH6q0eHpymo2Uerj0srp27Y1IQleEWIpkK9KkSWxmok=) 6: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: b/Ogd32BhDs9RrIQse7X4kUyjngtFlmzyV/u5hkoU2o=) 7: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: z3UTfjn7LsK1eLHAQE8Fe9WFM0g5YMcTUPNSeasibaA=) 8: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: YESQQe584DxGo0SLuNik4wkwCQuVf9tDli0g7fG2mUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a5:4f:4e:77:47:00:b9:d2:61:ae:96:bb:79:f4:84:e3:fe:31:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Validity Not Before: Jun 2 10:38:22 2026 GMT Not After : Jun 3 12:07:22 2026 GMT Subject: CN=34891AA0E7F3C7AEEB5E82A08C13C67B36615D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:04:31:4b:bb:6b:40:2d:f0:47:47:4a:e7: b2:1d:5c:3c:e7:32:26:e0:08:21:97:dc:e3:cc:ec: 2a:6d:db:6a:e8:95:f8:63:71:3f:83:57:52:45:72: 68:98:d6:b9:a9:87:17:4e:2b:42:7c:e1:83:90:4d: 27:1f:f1:af:92:e7:5c:27:f9:9f:d3:cd:5d:8d:f6: dc:5b:3d:ea:ca:c1:14:b8:89:07:a6:d6:10:22:15: bb:1b:c2:61:e7:20:b2:7e:77:3a:8d:2b:99:25:42: 9c:da:f9:02:92:c7:38:f5:7b:67:5a:f4:bc:d2:81: 0e:c1:96:42:5e:1e:f6:ce:b8:5d:02:d1:0f:3a:93: bc:a3:47:57:af:1e:13:41:20:ea:e8:4b:e9:c6:0c: 4c:01:3a:80:49:d1:cc:07:b2:11:ae:90:4e:c7:77: 27:69:eb:81:44:df:c3:e3:bd:5f:07:3f:ca:8c:83: 64:be:a8:80:bf:67:cf:3a:5a:1a:03:1b:c3:57:dd: 44:06:cb:59:69:52:ad:07:85:f7:3b:7c:fe:a4:78: c7:16:50:6d:17:7e:45:54:c6:39:0c:0c:28:8d:ae: f6:62:89:0c:93:f4:ec:fb:5d:1f:34:50:0b:37:86: 72:39:13:c2:95:da:ad:ef:70:05:0c:3a:62:af:67: cb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:89:1A:A0:E7:F3:C7:AE:EB:5E:82:A0:8C:13:C6:7B:36:61:5D:37 X509v3 Authority Key Identifier: keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:68:71:c5:fd:c4:05:86:48:3f:b6:9b:58:55:71:bc:1b:e6: ea:e7:27:23:25:82:58:4d:b9:f1:f0:3b:24:c2:64:68:1c:60: f0:24:72:53:40:77:f0:ed:3d:0e:fe:f0:0c:9f:d4:e7:77:ff: 01:9f:dd:4b:fb:76:89:7b:bc:92:17:df:d9:74:5c:4b:4c:03: f8:99:33:df:2e:91:23:87:e6:f2:3f:b8:6d:ee:49:a5:e7:d9: cf:39:ea:b4:cd:3a:f0:a3:a5:fb:d0:46:9c:20:14:00:db:aa: 2b:80:89:e1:9e:13:c3:2f:1f:ee:3e:d3:77:51:ed:38:a4:5a: a3:c6:33:8c:4c:61:ab:90:58:5d:97:18:27:a0:97:a7:55:5d: 0b:2d:b3:81:a0:a0:a3:b7:8a:a7:90:5e:ba:87:d9:61:20:e2: a6:d9:1c:24:63:1c:d5:6e:97:53:98:a9:9a:59:ad:95:70:58: f8:72:08:52:63:c1:e3:82:c9:d9:98:c2:44:21:10:c6:57:99: d7:7f:a2:0b:3f:96:ea:45:5d:c1:db:48:6a:3e:e9:f8:31:84: c2:11:40:91:f2:a8:c3:50:a9:76:d7:63:5c:ef:72:b9:c9:d7: 7f:1d:7c:21:b9:63:dc:8e:09:6a:15:3a:d3:04:cb:59:e3:8d: a3:aa:79:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6VPTndHALnSYa6Wu3n0hOP+MeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC ODAwNDlCNTAeFw0yNjA2MDIxMDM4MjJaFw0yNjA2MDMxMjA3MjJaMDMxMTAvBgNV BAMTKDM0ODkxQUEwRTdGM0M3QUVFQjVFODJBMDhDMTNDNjdCMzY2MTVEMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWgQxS7trQC3wR0dK57IdXDzn MibgCCGX3OPM7Cpt22rolfhjcT+DV1JFcmiY1rmphxdOK0J84YOQTScf8a+S51wn +Z/TzV2N9txbPerKwRS4iQem1hAiFbsbwmHnILJ+dzqNK5klQpza+QKSxzj1e2da 9LzSgQ7BlkJeHvbOuF0C0Q86k7yjR1evHhNBIOroS+nGDEwBOoBJ0cwHshGukE7H dydp64FE38PjvV8HP8qMg2S+qIC/Z886WhoDG8NX3UQGy1lpUq0Hhfc7fP6keMcW UG0XfkVUxjkMDCiNrvZiiQyT9Oz7XR80UAs3hnI5E8KV2q3vcAUMOmKvZ8tbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNIkaoOfzx67rXoKgjBPGezZhXTcwHwYDVR0j BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0 OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRG N0NCODAwNDlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpoccX9xAWGSD+2m1hVcbwb5urnJyMlglhN ufHwOyTCZGgcYPAkclNAd/DtPQ7+8Ayf1Od3/wGf3Uv7dol7vJIX39l0XEtMA/iZ M98ukSOH5vI/uG3uSaXn2c856rTNOvCjpfvQRpwgFADbqiuAieGeE8MvH+4+03dR 7TikWqPGM4xMYauQWF2XGCegl6dVXQsts4GgoKO3iqeQXrqH2WEg4qbZHCRjHNVu l1OYqZpZrZVwWPhyCFJjweOCydmYwkQhEMZXmdd/ogs/lupFXcHbSGo+6fgxhMIR QJHyqMNQqXbXY1zvcrnJ138dfCG5Y9yOCWoVOtMEy1njjaOqeWs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:22 2026 by rpki-client