$ rpki-client -vvf rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft File: EA69EE1870C74C4198176D679D2040962AA65EE5.mft (raw, json) Hash identifier: NFhpY786wYOgMwVG4potJU1BJo32/erhrc2Kbno0eaw= Subject key identifier: 53:C6:6B:CF:EA:75:7B:98:E8:ED:D3:30:71:F2:14:6E:7E:C8:37:04 Authority key identifier: EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5 Certificate issuer: /CN=EA69EE1870C74C4198176D679D2040962AA65EE5 Certificate serial: 5CE731E081EAD90188C7EFAF92297128BFA9937C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:25:24 +0000 Manifest this update: Wed 03 Jun 2026 00:20:24 +0000 Manifest next update: Thu 04 Jun 2026 02:16:24 +0000 Files and hashes: 1: EA69EE1870C74C4198176D679D2040962AA65EE5.crl (hash: HptyY2IID7eA3Eo1K2OQIc8nwqugfNqBehQ5F4GSh44=) 2: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 27RMiTZ9x6jfj6rn7+g1KMgItqjflbCMRzo3ncDyIag=) 3: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: xmNTgE8NlEgdxtkyZzmV8vhuvBfxhNKdp0Qma8cQHQ4=) 4: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: JdS3onh/UNwTa6fbUAQVIX7szlwvK4Q8vIPtVeKS+NU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e7:31:e0:81:ea:d9:01:88:c7:ef:af:92:29:71:28:bf:a9:93:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA69EE1870C74C4198176D679D2040962AA65EE5 Validity Not Before: Jun 3 00:20:24 2026 GMT Not After : Jun 4 02:16:24 2026 GMT Subject: CN=53C66BCFEA757B98E8EDD33071F2146E7EC83704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:4c:d2:b6:62:c7:2c:9f:93:80:b1:cc:58: d9:d0:6e:a7:cc:6a:d0:ea:47:34:21:ea:ef:c6:f5: 22:c7:f9:0b:99:7a:4a:c1:3c:4e:8e:03:a5:ef:3b: c8:37:2a:1e:37:96:fd:4b:d6:ec:7f:d4:0d:03:6d: f6:c3:bd:28:a7:73:64:52:34:f2:9b:63:7c:b8:6d: f9:84:54:16:56:5f:9d:83:f0:a3:74:c2:6e:7c:b5: 33:98:31:ac:27:cb:5a:23:aa:2b:98:7d:81:c7:ca: 51:ce:b7:32:41:12:8c:b7:db:5e:28:c5:05:2d:fb: 80:25:b6:7a:a2:d6:c4:f8:5d:7b:f9:60:0a:67:01: d7:95:f3:66:91:a8:6d:22:d0:ae:36:56:a4:0c:ab: 17:19:99:a0:67:e9:58:9b:bb:ca:5c:9e:a9:00:fe: bf:a6:95:6a:a9:4e:ff:fb:2e:43:1b:6c:e9:1a:3f: ba:ab:53:db:2c:ea:52:44:8f:d8:fd:e5:47:0f:d0: db:d9:2e:a8:ce:4e:8c:55:89:f1:53:40:53:78:a1: a8:98:4a:27:ab:f2:9a:45:3b:53:95:ce:7a:23:c2: 50:3a:36:b8:94:f6:43:77:53:79:57:d6:50:72:e4: ba:17:aa:90:10:fd:76:fb:aa:3a:25:28:45:37:e9: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C6:6B:CF:EA:75:7B:98:E8:ED:D3:30:71:F2:14:6E:7E:C8:37:04 X509v3 Authority Key Identifier: keyid:EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:da:a6:08:1e:9a:1f:66:03:f3:ef:60:a8:86:7c:7f:4a:45: 91:06:cd:46:60:b6:f4:2a:c7:23:7f:b3:c1:c5:ae:55:8a:48: 4c:5a:56:97:df:60:55:3a:bd:55:d0:27:40:30:45:6c:b5:6f: 4b:87:f5:5c:19:26:d9:90:30:3e:c0:e2:45:34:1b:5b:2b:21: 7c:7d:37:58:a0:30:26:2a:96:a2:69:13:c9:b5:e8:b3:2f:7f: c1:93:f2:e7:4d:98:18:dd:dc:ef:3f:12:f5:7b:fa:1a:39:fd: 0f:21:e5:71:ab:1f:06:39:db:61:ac:f0:b2:94:be:a2:e4:9b: f2:9d:45:14:f6:9a:3d:d1:f5:ed:f0:2a:5f:40:6b:74:24:a4: da:42:7b:4d:fb:44:bb:2c:a6:f5:12:f9:a3:0a:fc:82:28:a0: be:84:5b:14:6e:53:7d:f5:44:c1:d1:f4:7b:01:7e:f2:77:ca: 3f:4a:66:80:9b:2d:31:05:b8:c5:14:92:5a:89:51:e9:41:82: 78:40:59:d0:d3:05:21:50:1b:d3:69:ff:8b:ad:db:22:69:31: 28:dd:3b:af:2c:e7:c9:60:95:5d:50:aa:2b:43:1a:46:7f:6d: a5:eb:df:7f:fa:20:62:7e:f1:6d:03:35:b6:c4:96:8e:7b:d1: 96:a6:0a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOcx4IHq2QGIx++vkilxKL+pk3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE2OUVFMTg3MEM3NEM0MTk4MTc2RDY3OUQyMDQwOTYy QUE2NUVFNTAeFw0yNjA2MDMwMDIwMjRaFw0yNjA2MDQwMjE2MjRaMDMxMTAvBgNV BAMTKDUzQzY2QkNGRUE3NTdCOThFOEVERDMzMDcxRjIxNDZFN0VDODM3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBUzStmLHLJ+TgLHMWNnQbqfM atDqRzQh6u/G9SLH+QuZekrBPE6OA6XvO8g3Kh43lv1L1ux/1A0DbfbDvSinc2RS NPKbY3y4bfmEVBZWX52D8KN0wm58tTOYMawny1ojqiuYfYHHylHOtzJBEoy3214o xQUt+4Altnqi1sT4XXv5YApnAdeV82aRqG0i0K42VqQMqxcZmaBn6Vibu8pcnqkA /r+mlWqpTv/7LkMbbOkaP7qrU9ss6lJEj9j95UcP0NvZLqjOToxVifFTQFN4oaiY Sier8ppFO1OVznojwlA6NriU9kN3U3lX1lBy5LoXqpAQ/Xb7qjolKEU36bJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU8Zrz+p1e5jo7dMwcfIUbn7INwQwHwYDVR0j BBgwFoAU6mnuGHDHTEGYF21nnSBAliqmXuUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQyYWEwYTktNDU4OC00Zjg3LWFiODktZjNiOWRjNjEwN2I2LzAvRUE2OUVFMTg3 MEM3NEM0MTk4MTc2RDY3OUQyMDQwOTYyQUE2NUVFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTY5RUUxODcwQzc0QzQxOTgxNzZENjc5RDIwNDA5NjJBQTY1 RUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRUE2OUVFMTg3MEM3NEM0MTk4MTc2RDY3OUQyMDQw OTYyQUE2NUVFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/apggemh9mA/PvYKiGfH9KRZEGzUZgtvQq xyN/s8HFrlWKSExaVpffYFU6vVXQJ0AwRWy1b0uH9VwZJtmQMD7A4kU0G1srIXx9 N1igMCYqlqJpE8m16LMvf8GT8udNmBjd3O8/EvV7+ho5/Q8h5XGrHwY522Gs8LKU vqLkm/KdRRT2mj3R9e3wKl9Aa3QkpNpCe037RLsspvUS+aMK/IIooL6EWxRuU331 RMHR9HsBfvJ3yj9KZoCbLTEFuMUUklqJUelBgnhAWdDTBSFQG9Np/4ut2yJpMSjd O68s58lglV1QqitDGkZ/baXr33/6IGJ+8W0DNbbElo570ZamCv0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:24:07 2026 by rpki-client