$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft File: E029C9E3702797CC6083E1D4D891799F0F5AA144.mft (raw, json) Hash identifier: wzC4KPE0UaAM0e8763xe75TDNFOLPfgVQBkiPprV/bA= Subject key identifier: 10:4C:22:00:3A:7A:F4:2D:34:9A:AC:64:31:D8:8E:CF:3B:AE:5D:21 Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 Certificate issuer: /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Certificate serial: 69FE615A3F965DCDD8AA84913B92D0560A897D53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:43:28 +0000 Manifest this update: Tue 02 Jun 2026 22:38:28 +0000 Manifest next update: Thu 04 Jun 2026 02:17:28 +0000 Files and hashes: 1: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: DY6/Cy+Nw1dnpzSyQJvKM4XZv0DQUdJYanxa6KJ+Sng=) 2: E029C9E3702797CC6083E1D4D891799F0F5AA144.crl (hash: i48ACd08xwlhZ0NuL4Yx+QWGK5w5pRlBBDa9WYwPrfM=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: 8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fe:61:5a:3f:96:5d:cd:d8:aa:84:91:3b:92:d0:56:0a:89:7d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Validity Not Before: Jun 2 22:38:28 2026 GMT Not After : Jun 4 02:17:28 2026 GMT Subject: CN=104C22003A7AF42D349AAC6431D88ECF3BAE5D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:3c:61:10:0d:84:f4:90:0b:81:c2:d7:ce: 48:ad:93:27:c2:4c:a0:11:67:eb:fc:b8:b5:f3:b1: 5c:fd:77:85:5e:cc:36:6b:2e:ab:e8:25:57:3c:0d: 61:e3:18:48:6f:a4:70:43:9d:53:02:aa:05:57:26: 36:0a:e8:46:28:e0:47:ad:4d:95:c1:2a:e0:3e:9a: 1c:d9:4a:36:0c:1b:9c:a5:5c:ad:73:e6:02:42:ad: 91:39:d9:cf:eb:95:8e:aa:6d:5b:92:e8:b8:ca:0f: 6c:47:bb:a3:7e:d2:a7:ae:4d:fd:14:a2:28:e6:be: b5:01:75:05:ac:17:60:38:80:fa:78:5a:b4:a2:c6: dd:47:1f:48:cf:01:47:4f:fa:f9:90:db:a5:7a:c5: d7:7b:89:96:83:c5:7b:f0:f3:f7:42:13:ea:d2:8d: ce:9e:e1:59:ab:c8:c7:d7:75:42:de:78:d4:54:36: b3:b8:27:dc:8b:c6:3c:ec:d1:5e:2e:79:83:6f:08: e4:8b:47:07:2f:20:2b:af:d0:c3:57:9e:e8:9f:c9: b9:d4:bf:3b:a0:ef:8c:00:81:2c:86:73:4e:0d:ee: 68:b7:a0:40:4f:9f:23:e6:85:98:f1:66:b0:ed:5d: 1b:ea:c0:79:13:aa:75:33:ed:4f:7f:09:79:42:88: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4C:22:00:3A:7A:F4:2D:34:9A:AC:64:31:D8:8E:CF:3B:AE:5D:21 X509v3 Authority Key Identifier: keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2c:d1:69:95:8d:4d:0b:02:46:87:93:33:12:f0:88:e9:a8: a5:74:8a:15:71:b1:14:22:a4:83:d8:c0:d7:47:e3:a2:25:19: 56:f3:23:ab:1c:05:0b:cf:d6:6e:e8:33:92:a2:58:87:34:fe: af:35:97:9e:83:57:2a:a5:b4:d3:51:a8:51:1c:a6:2d:c3:28: 88:d2:db:33:5f:75:97:36:5b:66:df:60:72:a2:bc:32:1c:bc: 21:bc:ba:41:fa:e5:c0:93:0c:23:e3:a0:fa:80:52:a1:f3:82: a3:b5:f3:5b:d8:bc:cc:8b:6b:12:2f:aa:c4:da:a2:e7:6d:84: 96:fa:1f:fa:f5:ed:f5:8e:8e:96:91:91:9d:fb:7e:34:a6:b3: 41:b0:a2:65:94:a1:a8:bf:17:93:33:1f:0e:69:ab:b3:d4:86: 77:99:65:fd:a1:c7:ab:ca:c0:ec:bc:5f:1f:ed:4d:2b:07:13: 36:81:b7:2c:c2:ba:18:0b:19:b0:d1:93:a0:f6:4b:a2:2d:3f: 51:0c:15:62:20:49:48:9b:ae:c1:ab:57:6d:c2:33:bf:55:23: 9d:e7:6c:7b:2b:3d:7c:9c:1d:b6:d5:ed:95:7d:79:91:1e:ab: 41:a7:ea:f0:79:08:8d:1b:d1:d9:9c:6e:46:0e:07:29:3f:a3: 37:e3:12:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaf5hWj+WXc3YqoSRO5LQVgqJfVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYw RjVBQTE0NDAeFw0yNjA2MDIyMjM4MjhaFw0yNjA2MDQwMjE3MjhaMDMxMTAvBgNV BAMTKDEwNEMyMjAwM0E3QUY0MkQzNDlBQUM2NDMxRDg4RUNGM0JBRTVEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXszxhEA2E9JALgcLXzkitkyfC TKARZ+v8uLXzsVz9d4VezDZrLqvoJVc8DWHjGEhvpHBDnVMCqgVXJjYK6EYo4Eet TZXBKuA+mhzZSjYMG5ylXK1z5gJCrZE52c/rlY6qbVuS6LjKD2xHu6N+0qeuTf0U oijmvrUBdQWsF2A4gPp4WrSixt1HH0jPAUdP+vmQ26V6xdd7iZaDxXvw8/dCE+rS jc6e4VmryMfXdULeeNRUNrO4J9yLxjzs0V4ueYNvCOSLRwcvICuv0MNXnuifybnU vzug74wAgSyGc04N7mi3oEBPnyPmhZjxZrDtXRvqwHkTqnUz7U9/CXlCiLTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEwiADp69C00mqxkMdiOzzuuXSEwHwYDVR0j BBgwFoAU4CnJ43Anl8xgg+HU2JF5nw9aoUQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM4ODkyZWItZGRjMC00Y2I2LTk1N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3 MDI3OTdDQzYwODNFMUQ0RDg5MTc5OUYwRjVBQTE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDI5QzlFMzcwMjc5N0NDNjA4M0UxRDREODkxNzk5RjBGNUFB MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvRTAyOUM5RTM3MDI3OTdDQzYwODNFMUQ0RDg5MTc5 OUYwRjVBQTE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcs0WmVjU0LAkaHkzMS8IjpqKV0ihVxsRQi pIPYwNdH46IlGVbzI6scBQvP1m7oM5KiWIc0/q81l56DVyqltNNRqFEcpi3DKIjS 2zNfdZc2W2bfYHKivDIcvCG8ukH65cCTDCPjoPqAUqHzgqO181vYvMyLaxIvqsTa oudthJb6H/r17fWOjpaRkZ37fjSms0GwomWUoai/F5MzHw5pq7PUhneZZf2hx6vK wOy8Xx/tTSsHEzaBtyzCuhgLGbDRk6D2S6ItP1EMFWIgSUibrsGrV23CM79VI53n bHsrPXycHbbV7ZV9eZEeq0Gn6vB5CI0b0dmcbkYOByk/ozfjErE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:26:17 2026 by rpki-client