$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft File: E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft (raw, json) Hash identifier: xfuKIfw0bxY/3EBQsDm+z+Lih7AsrKjP8A+49XbPraw= Subject key identifier: 52:1E:2E:CB:B3:F8:C0:65:E5:A4:1E:B6:C6:E2:D4:31:B0:DB:F4:ED Authority key identifier: E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E Certificate issuer: /CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E Certificate serial: 4682E2521961999669CB622E2EFC811975132464 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:08:47 +0000 Manifest this update: Tue 02 Jun 2026 11:03:47 +0000 Manifest next update: Wed 03 Jun 2026 11:41:47 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: 3K7HIaNZHq6siHJ1rjKjSGagB9KT2fdBKPyuyy2IpIc=) 2: E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl (hash: YnrXlzeiWuFCaBV/ux/6j2qKBEFIoNmuo/Et3vtXN8E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:82:e2:52:19:61:99:96:69:cb:62:2e:2e:fc:81:19:75:13:24:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E34C8E8E9B9B8D0D672DBA596B883531646A2C6E Validity Not Before: Jun 2 11:03:47 2026 GMT Not After : Jun 3 11:41:47 2026 GMT Subject: CN=521E2ECBB3F8C065E5A41EB6C6E2D431B0DBF4ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1d:95:3b:94:11:95:86:a7:4a:54:93:cd:ec: 6c:f5:a2:7f:59:9b:64:e0:b4:94:e5:3d:82:69:cd: c2:83:33:8f:59:aa:c6:78:20:bb:67:78:ed:55:19: 57:19:59:9b:db:a8:b1:ee:04:66:dd:4a:1b:1d:59: 60:e8:8b:cf:9d:09:58:03:b3:17:76:b9:61:10:7d: ed:8a:4e:2f:10:f0:3b:ad:49:87:09:55:17:6c:af: 57:4a:be:4e:d5:7b:ff:8e:9f:b2:d4:0f:a8:7b:b9: 77:66:26:5b:13:64:0a:29:3f:08:67:49:0e:e3:c4: 52:8b:25:54:dc:3d:17:c5:2f:78:47:fe:36:e1:8c: 7f:3e:fc:3e:ee:6f:d0:f6:76:4f:43:4d:4e:9d:da: 2f:94:22:da:5a:cd:b4:ab:e6:9b:57:70:5f:9f:95: b8:b0:94:53:c6:b7:c8:a9:e0:a3:9f:02:da:80:45: 98:10:52:e2:d4:9c:b0:d9:53:1a:ea:32:39:a3:3b: e8:6a:37:3a:ac:9a:0f:7d:0a:67:cd:29:45:f1:8b: d1:55:6c:ae:58:f3:10:b0:29:b5:4b:98:eb:2a:03: 3c:a1:eb:06:d0:9c:0d:14:48:48:fe:99:23:eb:e6: f0:65:c9:9f:c1:d5:b0:ae:e0:5b:e1:e0:5c:e0:a1: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:2E:CB:B3:F8:C0:65:E5:A4:1E:B6:C6:E2:D4:31:B0:DB:F4:ED X509v3 Authority Key Identifier: keyid:E3:4C:8E:8E:9B:9B:8D:0D:67:2D:BA:59:6B:88:35:31:64:6A:2C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/E34C8E8E9B9B8D0D672DBA596B883531646A2C6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2b:b4:86:79:32:7e:a3:72:4a:86:94:f0:15:fe:29:44:bd: d5:b5:78:7e:d8:8f:cf:8c:f8:78:1a:55:95:b6:f2:30:2f:0e: 29:30:99:ba:fb:e2:fe:92:9e:9c:0b:20:59:2b:cc:62:3e:1b: f4:c4:66:18:e2:d4:ce:76:0a:fb:c2:3d:cf:03:ca:48:e8:d6: f7:97:d6:b3:48:ae:4a:90:5f:d8:6a:ee:f6:e9:76:c9:33:e7: b3:ca:17:78:3b:f8:a7:70:e3:db:48:be:d8:d1:4f:ce:5b:63: 0a:be:61:d5:3e:ac:e4:d6:4a:3a:21:66:7b:78:d0:64:70:51: 58:3b:d1:cb:67:87:5b:8f:b3:32:32:b5:92:27:55:d6:69:4b: 6b:02:b0:e7:ac:13:98:f5:75:32:af:00:25:70:f2:47:95:92: 1e:e5:72:f4:63:ed:bf:7d:b6:f7:79:63:82:c8:39:52:44:8e: 6a:8c:ed:93:3a:08:ab:f9:4f:21:09:a8:c6:64:27:46:fe:59: 02:4c:57:2c:20:57:1d:3d:70:ff:6c:7f:d4:ea:5f:aa:44:e0: 83:c0:66:08:f7:ad:0b:61:d5:0a:b3:5a:c6:79:44:c7:4b:fc: 7d:a6:fc:1a:ad:82:28:29:be:70:ae:9d:3c:1d:42:7e:50:81: af:37:90:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURoLiUhlhmZZpy2IuLvyBGXUTJGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM0QzhFOEU5QjlCOEQwRDY3MkRCQTU5NkI4ODM1MzE2 NDZBMkM2RTAeFw0yNjA2MDIxMTAzNDdaFw0yNjA2MDMxMTQxNDdaMDMxMTAvBgNV BAMTKDUyMUUyRUNCQjNGOEMwNjVFNUE0MUVCNkM2RTJENDMxQjBEQkY0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLHZU7lBGVhqdKVJPN7Gz1on9Z m2TgtJTlPYJpzcKDM49ZqsZ4ILtneO1VGVcZWZvbqLHuBGbdShsdWWDoi8+dCVgD sxd2uWEQfe2KTi8Q8DutSYcJVRdsr1dKvk7Ve/+On7LUD6h7uXdmJlsTZAopPwhn SQ7jxFKLJVTcPRfFL3hH/jbhjH8+/D7ub9D2dk9DTU6d2i+UItpazbSr5ptXcF+f lbiwlFPGt8ip4KOfAtqARZgQUuLUnLDZUxrqMjmjO+hqNzqsmg99CmfNKUXxi9FV bK5Y8xCwKbVLmOsqAzyh6wbQnA0USEj+mSPr5vBlyZ/B1bCu4Fvh4FzgoeR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUh4uy7P4wGXlpB62xuLUMbDb9O0wHwYDVR0j BBgwFoAU40yOjpubjQ1nLbpZa4g1MWRqLG4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE1MTRkNjEtOTlmZi00MmE5LWJhOWEtNTk2MWRkNjhkYjY1LzAvRTM0QzhFOEU5 QjlCOEQwRDY3MkRCQTU5NkI4ODM1MzE2NDZBMkM2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzRDOEU4RTlCOUI4RDBENjcyREJBNTk2Qjg4MzUzMTY0NkEy QzZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvRTM0QzhFOEU5QjlCOEQwRDY3MkRCQTU5NkI4ODM1 MzE2NDZBMkM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4rtIZ5Mn6jckqGlPAV/ilEvdW1eH7Yj8+M +HgaVZW28jAvDikwmbr74v6SnpwLIFkrzGI+G/TEZhji1M52CvvCPc8Dykjo1veX 1rNIrkqQX9hq7vbpdskz57PKF3g7+Kdw49tIvtjRT85bYwq+YdU+rOTWSjohZnt4 0GRwUVg70ctnh1uPszIytZInVdZpS2sCsOesE5j1dTKvACVw8keVkh7lcvRj7b99 tvd5Y4LIOVJEjmqM7ZM6CKv5TyEJqMZkJ0b+WQJMVywgVx09cP9sf9TqX6pE4IPA Zgj3rQth1QqzWsZ5RMdL/H2m/BqtgigpvnCunTwdQn5Qga83kKk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:40 2026 by rpki-client