$ rpki-client -vvf rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft File: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft (raw, json) Hash identifier: wIPNbBWAUmvVxSHC6tkPEmbZjsWLICsqgNkiksmFlW0= Subject key identifier: A2:0B:18:5C:8A:0A:7D:A6:24:AC:13:30:87:92:B8:AB:06:96:D7:5C Authority key identifier: E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 Certificate issuer: /CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Certificate serial: 5DD1185AD786911C575C8C374B3A828F016960CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 15:03:59 +0000 Manifest this update: Fri 19 Jun 2026 14:58:59 +0000 Manifest next update: Sat 20 Jun 2026 15:45:59 +0000 Files and hashes: 1: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: oYW4sdySDReabIUJh8DtwbQ7r9wux6oX5lpHgcktZMY=) 2: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl (hash: qYWJpf4oJJYR4WFeDcQwms68MpTL02e/++gPA4Zm0+g=) 3: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: lQVIlc5Ok7o6clRzLcj2IsYBHTzNzicGxWqDtjOXTeQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d1:18:5a:d7:86:91:1c:57:5c:8c:37:4b:3a:82:8f:01:69:60:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Validity Not Before: Jun 19 14:58:59 2026 GMT Not After : Jun 20 15:45:59 2026 GMT Subject: CN=A20B185C8A0A7DA624AC13308792B8AB0696D75C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:fc:3d:ce:f8:51:d6:ec:20:8f:10:b6:61: 18:9d:7f:9a:dd:5f:2d:c0:ee:2c:73:89:16:64:dd: 9f:a2:f2:f3:16:b4:1b:21:51:01:68:16:5b:ee:f9: f0:ef:20:cd:f3:ae:60:6e:5b:99:a0:43:42:e6:95: 87:45:fd:a1:72:3b:61:95:c8:d8:45:33:4f:cb:01: be:df:06:32:54:f6:49:ce:3d:a7:64:15:d4:96:73: d7:31:33:b7:04:96:01:43:7f:5e:31:e1:3a:93:ef: 73:b0:9e:27:6b:7a:68:38:be:8f:c0:d2:bf:81:27: 32:2a:72:2d:dc:86:66:42:4f:24:d1:5e:93:66:8b: 9c:c9:01:af:34:4a:ba:64:b0:df:8a:e8:ba:72:63: 48:de:75:6a:8b:c3:d7:c7:35:50:eb:17:99:d5:fa: c8:e0:d7:97:29:0d:ac:45:f5:47:d0:44:9c:e9:b5: d1:cd:f0:73:5c:86:77:7d:63:a7:10:63:17:dd:43: 5e:08:cf:10:95:9e:71:67:a4:7c:1b:fd:25:db:62: 37:d5:ef:a7:9c:12:88:80:9a:3e:a6:01:ad:e4:f2: 03:2a:5e:d9:32:b8:7d:97:18:e0:e6:1a:98:84:a6: 17:91:49:a0:5b:da:57:38:d3:39:81:9f:1b:f1:5f: b9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0B:18:5C:8A:0A:7D:A6:24:AC:13:30:87:92:B8:AB:06:96:D7:5C X509v3 Authority Key Identifier: keyid:E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1f:0a:2e:03:70:cc:cc:a7:01:0a:28:b9:27:d9:dc:dc:71: 02:0b:4f:b2:f1:77:d9:ad:d9:bf:2e:8d:00:0b:9a:14:d7:1a: a8:0f:07:f9:10:1e:96:f7:5a:aa:24:1e:cb:71:8b:83:08:03: d8:f2:90:6a:46:95:c8:b5:df:11:c1:7a:b1:68:57:35:b3:bb: 9e:cf:25:a7:a0:d3:49:e3:e8:db:74:f2:5a:2f:1f:bf:81:5c: ae:39:7d:1f:bd:96:c0:bf:4c:16:e5:96:8b:6a:c5:8b:7b:2e: e9:16:c7:4a:2e:73:67:e6:1d:f4:04:1e:34:b6:c3:ef:d0:8f: c4:7c:bb:5c:9a:91:ab:fe:6f:f8:d3:27:46:ad:b0:b3:78:93: 75:d9:84:9b:68:23:a4:6a:9f:fe:bf:10:79:91:db:f4:d8:9d: bf:59:e4:7e:0f:e4:c3:8a:7c:cf:b6:40:45:2d:61:89:4d:6e: 79:39:74:14:9c:ef:e3:e4:0d:2f:9e:9a:97:9f:b0:9a:a8:a9: 64:8c:e5:86:89:38:c8:33:20:e8:79:0d:7f:2b:be:89:69:37: 56:b3:6e:b6:de:71:96:1f:eb:e7:81:9f:ab:8a:a3:3d:41:f7: da:0c:01:c7:c7:e9:52:83:16:a0:e7:9d:c8:37:da:60:e4:4e: 5a:11:10:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdEYWteGkRxXXIw3SzqCjwFpYMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5 QTZDQzgwODAeFw0yNjA2MTkxNDU4NTlaFw0yNjA2MjAxNTQ1NTlaMDMxMTAvBgNV BAMTKEEyMEIxODVDOEEwQTdEQTYyNEFDMTMzMDg3OTJCOEFCMDY5NkQ3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJfw9zvhR1uwgjxC2YRidf5rd Xy3A7ixziRZk3Z+i8vMWtBshUQFoFlvu+fDvIM3zrmBuW5mgQ0LmlYdF/aFyO2GV yNhFM0/LAb7fBjJU9knOPadkFdSWc9cxM7cElgFDf14x4TqT73Ownidremg4vo/A 0r+BJzIqci3chmZCTyTRXpNmi5zJAa80SrpksN+K6LpyY0jedWqLw9fHNVDrF5nV +sjg15cpDaxF9UfQRJzptdHN8HNchnd9Y6cQYxfdQ14IzxCVnnFnpHwb/SXbYjfV 76ecEoiAmj6mAa3k8gMqXtkyuH2XGODmGpiEpheRSaBb2lc40zmBnxvxX7njAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogsYXIoKfaYkrBMwh5K4qwaW11wwHwYDVR0j BBgwFoAU5doh23bOkdbvckgv/f4CFppsyAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI5Zjg5MDItMWEwNi00NWE4LWE5OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3 NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5QTZDQzgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNURBMjFEQjc2Q0U5MUQ2RUY3MjQ4MkZGREZFMDIxNjlBNkND ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAy MTY5QTZDQzgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQfCi4DcMzMpwEKKLkn2dzccQILT7Lxd9mt 2b8ujQALmhTXGqgPB/kQHpb3WqokHstxi4MIA9jykGpGlci13xHBerFoVzWzu57P Jaeg00nj6Nt08lovH7+BXK45fR+9lsC/TBbllotqxYt7LukWx0ouc2fmHfQEHjS2 w+/Qj8R8u1yakav+b/jTJ0atsLN4k3XZhJtoI6Rqn/6/EHmR2/TYnb9Z5H4P5MOK fM+2QEUtYYlNbnk5dBSc7+PkDS+empefsJqoqWSM5YaJOMgzIOh5DX8rvolpN1az brbecZYf6+eBn6uKoz1B99oMAcfH6VKDFqDnncg32mDkTloREB0= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:08 2026 by rpki-client