$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft (raw, json) Hash identifier: scwaqtb0bnfsOnNSHTZ12zu/v3/PlAPKBOLEa2dOuko= Subject key identifier: BF:1E:A8:3D:D0:1C:D6:69:04:57:1C:A6:64:05:D0:1A:35:CC:6F:86 Authority key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09 Certificate issuer: /CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409 Certificate serial: 265D6E5CFE4D077D32115F30141D2C8845B8A5FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:01:02 +0000 Manifest this update: Tue 02 Jun 2026 12:56:02 +0000 Manifest next update: Wed 03 Jun 2026 16:56:02 +0000 Files and hashes: 1: E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl (hash: N8MIT9KnGIe5UvfauPD1i6ohUhQ1YGepH0vLjd35mlE=) 2: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: UaaNiDpFBSvOxzLMpx1eGc8touUo5VTmZX/HVEAL/G4=) 3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: xCU5A2qMTm4OgALTP8opeqK/3efnC4H4bV18tfZlMHk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5d:6e:5c:fe:4d:07:7d:32:11:5f:30:14:1d:2c:88:45:b8:a5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409 Validity Not Before: Jun 2 12:56:02 2026 GMT Not After : Jun 3 16:56:02 2026 GMT Subject: CN=BF1EA83DD01CD66904571CA66405D01A35CC6F86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:a7:68:46:7b:d6:41:a7:ad:f7:51:12:b8: 39:02:a7:ee:89:d3:49:f6:50:a6:c0:46:0f:62:f0: af:56:cd:3d:6b:b1:c5:de:0e:f1:35:33:30:fb:b5: 0b:f8:76:50:dc:01:dc:54:45:ab:9e:09:b9:fc:37: 12:ec:fa:3a:30:a7:cf:e1:0d:c6:42:d6:a4:59:d9: fa:ed:ec:5d:ba:10:50:25:e5:f4:11:b1:a9:ae:09: 76:d5:97:96:4b:88:0b:d5:26:42:e9:5e:11:9e:b9: af:8b:c0:b3:49:60:ab:2c:84:bf:41:f9:b0:7a:3b: a1:01:f8:c6:f3:1e:ef:1e:ca:f0:08:11:8e:9f:c2: a8:15:ce:3e:44:0c:e0:fa:cd:47:fe:ab:07:f3:9c: 68:b9:f8:4b:d2:16:0e:2c:28:5f:49:74:04:0d:fc: f4:63:49:7e:e6:51:30:a2:c1:c7:67:94:4c:83:cc: 1f:de:a8:1a:29:b1:24:98:57:b8:67:75:58:08:49: 02:29:f2:ba:b5:d9:2e:e6:0c:9a:be:5c:48:62:38: 4d:9d:6c:42:f4:a1:fc:99:6b:5d:30:5f:47:ec:d2: f9:18:65:a7:a9:bf:0c:7c:c4:49:38:f9:73:78:28: d8:3b:94:9a:ae:a5:c0:2b:56:b8:25:35:94:16:2b: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1E:A8:3D:D0:1C:D6:69:04:57:1C:A6:64:05:D0:1A:35:CC:6F:86 X509v3 Authority Key Identifier: keyid:E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:84:96:00:99:73:bb:f4:6c:3f:da:2c:b9:64:51:0f:2e:61: 47:75:62:72:22:9f:ad:56:10:12:f8:c2:d2:f8:aa:66:31:54: 1a:9f:3a:b6:b4:4e:7d:2b:d6:2d:bd:95:9c:24:d1:da:fa:17: e5:fd:74:1b:a2:f6:63:f5:8b:c8:c7:53:4f:e4:20:e2:65:b9: e6:ab:0b:c6:14:28:9e:97:35:97:6e:e5:4e:97:13:47:0b:27: b6:2a:0a:1f:c0:28:75:98:80:ba:dc:74:95:34:9c:21:e8:10: 47:b6:42:93:aa:6e:77:ce:b5:40:46:5c:c9:d7:49:0b:55:c6: e5:8a:02:74:40:a4:0f:17:17:40:f4:5d:b5:cc:b8:9d:a1:40: 7a:8d:c3:f7:61:60:37:c5:21:6c:85:2e:7f:d9:0e:03:18:8a: e3:49:e6:fd:0a:89:17:46:70:e5:cd:d3:0b:0d:93:ee:eb:fb: aa:33:5e:a7:e7:b6:0a:6b:f0:c1:e6:ec:ab:15:de:c4:1d:06: b3:b2:00:91:8e:0d:ee:f1:d4:95:c0:f5:9a:7c:e2:98:7b:b5: 14:33:d7:31:44:a4:68:c8:be:e8:7e:0c:08:42:96:36:e7:10: c7:98:1a:97:7b:f2:92:59:16:bb:ca:4f:90:cc:a2:4d:0f:85: c6:a6:31:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJl1uXP5NB30yEV8wFB0siEW4pf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRUYwOEFBODM1NkQ3NjlCQTE2Qjk4MUZFNjlEQjVE RTIwMzQwOTAeFw0yNjA2MDIxMjU2MDJaFw0yNjA2MDMxNjU2MDJaMDMxMTAvBgNV BAMTKEJGMUVBODNERDAxQ0Q2NjkwNDU3MUNBNjY0MDVEMDFBMzVDQzZGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgKdoRnvWQaet91ESuDkCp+6J 00n2UKbARg9i8K9WzT1rscXeDvE1MzD7tQv4dlDcAdxURaueCbn8NxLs+jowp8/h DcZC1qRZ2frt7F26EFAl5fQRsamuCXbVl5ZLiAvVJkLpXhGeua+LwLNJYKsshL9B +bB6O6EB+MbzHu8eyvAIEY6fwqgVzj5EDOD6zUf+qwfznGi5+EvSFg4sKF9JdAQN /PRjSX7mUTCiwcdnlEyDzB/eqBopsSSYV7hndVgISQIp8rq12S7mDJq+XEhiOE2d bEL0ofyZa10wX0fs0vkYZaepvwx8xEk4+XN4KNg7lJqupcArVrglNZQWK57nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvx6oPdAc1mkEVxymZAXQGjXMb4YwHwYDVR0j BBgwFoAU6e7wiqg1bXaboWuYH+adtd4gNAkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWZkZTFmMGUtMjMxZi00NGNlLTkwYzMtMzJhY2RmOWQyNmMwLzAvRTlFRUYwOEFB ODM1NkQ3NjlCQTE2Qjk4MUZFNjlEQjVERTIwMzQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVFRjA4QUE4MzU2RDc2OUJBMTZCOTgxRkU2OURCNURFMjAz NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvRTlFRUYwOEFBODM1NkQ3NjlCQTE2Qjk4MUZFNjlE QjVERTIwMzQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSElgCZc7v0bD/aLLlkUQ8uYUd1YnIin61W EBL4wtL4qmYxVBqfOra0Tn0r1i29lZwk0dr6F+X9dBui9mP1i8jHU0/kIOJluear C8YUKJ6XNZdu5U6XE0cLJ7YqCh/AKHWYgLrcdJU0nCHoEEe2QpOqbnfOtUBGXMnX SQtVxuWKAnRApA8XF0D0XbXMuJ2hQHqNw/dhYDfFIWyFLn/ZDgMYiuNJ5v0KiRdG cOXN0wsNk+7r+6ozXqfntgpr8MHm7KsV3sQdBrOyAJGODe7x1JXA9Zp84ph7tRQz 1zFEpGjIvuh+DAhCljbnEMeYGpd78pJZFrvKT5DMok0PhcamMRM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:59 2026 by rpki-client