$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft File: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft (raw, json) Hash identifier: j4zxcC9plGcW5VuI0NgSGWCE5cHo8g+4vWkTWD2Fz34= Subject key identifier: CE:7A:DB:3D:D2:27:58:57:5D:1B:F2:D5:83:8B:9F:16:B3:2E:C1:80 Authority key identifier: D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC Certificate issuer: /CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Certificate serial: 19AF978EB6B42815B7F9D7A65B162A3702C18FE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:21:38 +0000 Manifest this update: Tue 02 Jun 2026 09:16:38 +0000 Manifest next update: Wed 03 Jun 2026 10:20:38 +0000 Files and hashes: 1: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: Zd8dKndrIl4VSQfqixAyA/TOWCY5DaeyRMvOby+h3uw=) 2: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: c5ycRdkZmzicMcHlVxH8DNqWq6vMY1pMgkNwLRJ1u08=) 3: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: RqUjB86YVPgt7tRWRmn7/EkRMj2UXiSSsOWSw1LcnVs=) 4: D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl (hash: x/hoaMIh4Jh/2PDSWKAzzwNEP22TmpLS6eoo4Y/C4Wk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:af:97:8e:b6:b4:28:15:b7:f9:d7:a6:5b:16:2a:37:02:c1:8f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC Validity Not Before: Jun 2 09:16:38 2026 GMT Not After : Jun 3 10:20:38 2026 GMT Subject: CN=CE7ADB3DD22758575D1BF2D5838B9F16B32EC180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:72:6c:cf:b5:71:d5:6e:2f:cf:74:1f:ee:7b: 81:9b:92:ae:10:bb:d2:61:69:b5:8d:67:e2:bb:5c: 14:c9:35:6b:a1:7e:91:ae:d5:35:97:08:bd:33:91: cb:19:5c:cf:d9:ca:b6:76:cb:b3:9a:85:b0:c5:8c: 48:c9:53:33:18:72:a2:b4:2a:ed:7c:be:87:87:31: da:eb:f9:79:35:75:e2:e6:97:5b:94:ef:02:da:79: e5:f8:cf:30:0f:00:3b:7c:94:56:10:8d:70:fd:66: 50:1f:13:88:84:32:a0:8e:1c:02:58:12:f2:75:63: 92:b5:5c:c5:b9:ea:45:bc:1b:37:8e:7c:e1:e9:07: 46:04:ab:c9:45:56:d1:06:fd:18:37:f8:f2:de:3d: ec:8b:db:cb:67:25:1f:73:b6:ae:72:ce:6f:7c:d6: 0c:8a:50:ca:b9:17:9d:c2:c5:a9:3e:55:da:b7:5c: a4:26:6f:98:bc:00:11:fc:c7:30:c4:ad:38:e2:de: b1:67:05:e5:8f:36:cc:88:fd:61:8f:eb:72:60:f9: 27:e9:60:52:7f:7f:35:84:89:5f:7e:9c:1a:6e:da: c1:e6:77:13:6c:3b:fc:cf:41:d2:e1:0f:83:b1:7d: 64:23:82:a1:89:ab:88:12:97:24:e3:c9:a7:53:79: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7A:DB:3D:D2:27:58:57:5D:1B:F2:D5:83:8B:9F:16:B3:2E:C1:80 X509v3 Authority Key Identifier: keyid:D5:CE:8C:4E:21:EC:81:F4:95:8C:F6:07:42:0F:1E:EB:48:B2:E5:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/D5CE8C4E21EC81F4958CF607420F1EEB48B2E5EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6a:e9:22:f9:98:b5:02:86:12:44:bc:4f:e8:c0:c9:12:7d: 01:b4:39:93:0c:ae:65:bb:81:2f:76:3b:19:1e:1f:4e:ea:b6: 7e:f7:0d:46:85:78:e3:a0:2c:32:f9:fc:f0:70:a0:d0:42:59: 81:99:b5:d2:3a:6f:ee:97:6c:2d:be:9f:95:28:16:17:4d:30: 1e:db:cd:8f:0f:a9:e9:ae:6c:6a:16:a9:3d:ce:c7:2a:dd:f4: 5d:03:1a:40:7c:94:d4:a3:90:1f:69:bb:70:92:cb:2a:55:ea: 8c:c7:5d:d2:42:56:73:7a:62:8d:13:95:cd:58:fa:80:53:9f: 0d:1d:ce:c7:94:b8:ce:52:db:78:a1:8e:c4:f2:1c:e2:21:37: 31:72:f9:4b:2c:8f:d7:2f:9a:5d:2e:89:5a:fc:35:29:47:36: 59:25:b0:71:3f:44:e0:48:ae:bb:32:50:7b:24:3d:20:ba:c0: 26:33:8a:0c:97:bc:c5:b2:51:8c:e3:aa:c2:db:7a:3c:1f:7d: 23:27:6d:1d:29:9a:75:22:60:8c:ea:ff:41:8b:0b:c1:24:84: 05:07:32:ba:1b:12:a0:81:27:7c:3a:e7:a0:3f:b7:fb:30:98: 35:32:0c:7f:c1:34:b0:68:a0:99:11:2b:06:77:2b:f2:c3:a1: 53:1f:86:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGa+Xjra0KBW3+demWxYqNwLBj+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFFRUI0 OEIyRTVFQzAeFw0yNjA2MDIwOTE2MzhaFw0yNjA2MDMxMDIwMzhaMDMxMTAvBgNV BAMTKENFN0FEQjNERDIyNzU4NTc1RDFCRjJENTgzOEI5RjE2QjMyRUMxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYcmzPtXHVbi/PdB/ue4Gbkq4Q u9JhabWNZ+K7XBTJNWuhfpGu1TWXCL0zkcsZXM/ZyrZ2y7OahbDFjEjJUzMYcqK0 Ku18voeHMdrr+Xk1deLml1uU7wLaeeX4zzAPADt8lFYQjXD9ZlAfE4iEMqCOHAJY EvJ1Y5K1XMW56kW8GzeOfOHpB0YEq8lFVtEG/Rg3+PLePeyL28tnJR9ztq5yzm98 1gyKUMq5F53Cxak+Vdq3XKQmb5i8ABH8xzDErTji3rFnBeWPNsyI/WGP63Jg+Sfp YFJ/fzWEiV9+nBpu2sHmdxNsO/zPQdLhD4OxfWQjgqGJq4gSlyTjyadTedw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUznrbPdInWFddG/LVg4ufFrMuwYAwHwYDVR0j BBgwFoAU1c6MTiHsgfSVjPYHQg8e60iy5ewwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVjOGI5ZTMtYjQ0Zi00OTBiLWJmNTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUy MUVDODFGNDk1OENGNjA3NDIwRjFFRUI0OEIyRTVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUNFOEM0RTIxRUM4MUY0OTU4Q0Y2MDc0MjBGMUVFQjQ4QjJF NUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvRDVDRThDNEUyMUVDODFGNDk1OENGNjA3NDIwRjFF RUI0OEIyRTVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZq6SL5mLUChhJEvE/owMkSfQG0OZMMrmW7 gS92OxkeH07qtn73DUaFeOOgLDL5/PBwoNBCWYGZtdI6b+6XbC2+n5UoFhdNMB7b zY8PqemubGoWqT3Oxyrd9F0DGkB8lNSjkB9pu3CSyypV6ozHXdJCVnN6Yo0Tlc1Y +oBTnw0dzseUuM5S23ihjsTyHOIhNzFy+Ussj9cvml0uiVr8NSlHNlklsHE/ROBI rrsyUHskPSC6wCYzigyXvMWyUYzjqsLbejwffSMnbR0pmnUiYIzq/0GLC8EkhAUH MrobEqCBJ3w656A/t/swmDUyDH/BNLBooJkRKwZ3K/LDoVMfhg0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:43 2026 by rpki-client