$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft File: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft (raw, json) Hash identifier: dzPg+Mc9YZSC4XCavnbIVz7j8cn3XtkkBpPM7u8gRXA= Subject key identifier: 22:AA:3A:FE:CC:F1:BC:C9:3F:23:31:09:9C:F7:2B:8D:CF:D4:80:E1 Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Certificate serial: 5634EE219CF8EFF41F0E6ED92F8A4214693BB11E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 00:05:00 +0000 Manifest this update: Wed 03 Jun 2026 00:00:00 +0000 Manifest next update: Thu 04 Jun 2026 01:16:00 +0000 Files and hashes: 1: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0=) 2: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl (hash: zHlPVCDh/f5dJvG/Ay0uQkeiErQW7/ZbasvyEF9MIro=) 3: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:34:ee:21:9c:f8:ef:f4:1f:0e:6e:d9:2f:8a:42:14:69:3b:b1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Validity Not Before: Jun 3 00:00:00 2026 GMT Not After : Jun 4 01:16:00 2026 GMT Subject: CN=22AA3AFECCF1BCC93F2331099CF72B8DCFD480E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:b6:9e:10:df:e7:45:ab:d8:c0:e9:03:bf: c6:c3:e7:8c:7a:10:58:ac:f9:3b:61:d5:e0:40:08: 99:2e:a5:d9:d9:43:0f:8b:43:ca:74:00:0c:8b:a5: 10:f3:4c:f1:4f:67:4f:47:11:3f:0e:5b:1f:52:0f: da:60:d8:d8:2c:d8:4f:34:8f:97:49:7b:4e:a3:b5: 55:75:ff:00:81:ed:a2:a7:1a:05:96:08:4b:3c:35: 6c:5b:21:b0:1e:ec:6e:64:d3:92:bb:d9:8f:8a:9d: e6:97:55:d3:4e:23:9b:21:26:14:70:62:07:1b:e2: 1e:dd:60:2f:86:a8:47:a7:e4:1c:7c:f4:f2:4e:94: 2a:4e:3f:47:83:1c:4e:15:71:9b:88:53:53:00:84: bd:fd:dc:ff:f4:98:c2:c5:07:31:5f:95:0f:c1:84: 76:86:d7:5d:11:a9:a2:8b:18:19:87:1c:7e:af:76: 5f:17:1c:95:46:cf:37:61:19:59:d9:5a:44:e4:88: 57:63:75:9b:7c:21:5c:d2:cd:9f:df:8d:1e:58:d1: a8:9a:69:76:4f:bd:28:b5:8e:91:be:ad:b0:b8:2c: 17:94:a2:8f:0f:f3:94:b4:a9:3b:8e:7b:c4:89:e4: e6:07:8a:d5:81:4a:9f:52:0d:52:65:97:b4:cf:ca: ef:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AA:3A:FE:CC:F1:BC:C9:3F:23:31:09:9C:F7:2B:8D:CF:D4:80:E1 X509v3 Authority Key Identifier: keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b8:43:8a:4c:da:ad:3d:99:c1:1d:df:c4:38:c7:3f:cb:f9: 79:62:1a:86:44:d0:db:5e:18:cd:0e:2b:db:d8:a6:58:55:99: 2e:66:f5:67:b9:1e:2f:42:a1:d7:d8:d9:a3:91:d2:0e:eb:04: e7:2a:bc:6d:7a:6e:f2:27:88:4c:cd:ed:66:de:3e:88:b0:aa: b2:b9:90:11:02:2a:4f:0f:dc:37:25:1d:3f:4e:63:ee:35:03: b5:af:eb:fa:7d:f4:0d:3f:1c:73:5b:32:ae:90:a8:e9:e3:41: 4c:d8:0d:c0:9d:65:fd:b1:46:f6:21:d4:b5:e4:ef:28:35:f5: 4b:81:24:e7:7e:31:15:0f:b3:9d:31:3f:74:2b:39:ca:00:f8: 01:82:6a:f8:4e:d6:bf:a4:95:33:65:34:4f:fe:5e:ad:2a:e1: 40:ea:08:fc:ec:97:4f:ca:13:99:3b:f5:d7:be:b9:ba:8b:bb: b1:b8:d3:3e:ed:cf:54:be:6a:ff:33:12:e0:1c:28:70:9c:86: de:fc:dd:2c:3c:66:45:3b:13:ca:49:0c:83:c0:4b:09:78:5d: f6:38:ce:00:31:64:21:ea:d3:79:7d:19:da:87:7a:48:c0:8c: fb:5e:54:26:1b:b8:d2:36:fd:6f:42:17:97:ee:87:4a:c1:cc: aa:08:d7:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjTuIZz47/QfDm7ZL4pCFGk7sR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJD NUVBMzY4ODAeFw0yNjA2MDMwMDAwMDBaFw0yNjA2MDQwMTE2MDBaMDMxMTAvBgNV BAMTKDIyQUEzQUZFQ0NGMUJDQzkzRjIzMzEwOTlDRjcyQjhEQ0ZENDgwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwl7aeEN/nRavYwOkDv8bD54x6 EFis+Tth1eBACJkupdnZQw+LQ8p0AAyLpRDzTPFPZ09HET8OWx9SD9pg2Ngs2E80 j5dJe06jtVV1/wCB7aKnGgWWCEs8NWxbIbAe7G5k05K72Y+KneaXVdNOI5shJhRw Ygcb4h7dYC+GqEen5Bx89PJOlCpOP0eDHE4VcZuIU1MAhL393P/0mMLFBzFflQ/B hHaG110RqaKLGBmHHH6vdl8XHJVGzzdhGVnZWkTkiFdjdZt8IVzSzZ/fjR5Y0aia aXZPvSi1jpG+rbC4LBeUoo8P85S0qTuOe8SJ5OYHitWBSp9SDVJll7TPyu8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIqo6/szxvMk/IzEJnPcrjc/UgOEwHwYDVR0j BBgwFoAU4cvlcamzXlSIAlDzwDXjosXqNogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIwN2IzN2MtMDUwNy00OTEzLTgzMjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFB OUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJDNUVBMzY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUNCRTU3MUE5QjM1RTU0ODgwMjUwRjNDMDM1RTNBMkM1RUEz Njg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUz QTJDNUVBMzY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm4Q4pM2q09mcEd38Q4xz/L+XliGoZE0Nte GM0OK9vYplhVmS5m9We5Hi9CodfY2aOR0g7rBOcqvG16bvIniEzN7WbePoiwqrK5 kBECKk8P3DclHT9OY+41A7Wv6/p99A0/HHNbMq6QqOnjQUzYDcCdZf2xRvYh1LXk 7yg19UuBJOd+MRUPs50xP3QrOcoA+AGCavhO1r+klTNlNE/+Xq0q4UDqCPzsl0/K E5k79de+ubqLu7G40z7tz1S+av8zEuAcKHCcht783Sw8ZkU7E8pJDIPASwl4XfY4 zgAxZCHq03l9GdqHekjAjPteVCYbuNI2/W9CF5fuh0rBzKoI1yc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:56 2026 by rpki-client