$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: jed5BC6gdS4TkdgIZs9BjOlujYXOcF741ZicikLr28k= Subject key identifier: 19:D7:98:5B:A3:E3:E3:11:74:8B:93:BD:C4:46:A6:AB:70:DB:9A:D7 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 3C648C5534DB28D2CEA31A6E5DB593E0235C1D1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:36:04 +0000 Manifest this update: Tue 02 Jun 2026 17:31:04 +0000 Manifest next update: Wed 03 Jun 2026 18:29:04 +0000 Files and hashes: 1: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) 2: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) 3: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: GNRJDNsp+rIEzH+NtNoKmyT+5xdpN9Pj4LiA+Q+nkfg=) 4: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:64:8c:55:34:db:28:d2:ce:a3:1a:6e:5d:b5:93:e0:23:5c:1d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Jun 2 17:31:04 2026 GMT Not After : Jun 3 18:29:04 2026 GMT Subject: CN=19D7985BA3E3E311748B93BDC446A6AB70DB9AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:b4:57:bd:61:10:7b:ca:5f:8a:84:b5:fd: 90:f8:42:59:12:bf:2f:40:72:32:6c:2b:8d:c5:ca: 72:ae:a3:a6:96:18:83:d5:45:d3:a5:ba:bf:1d:d2: be:e0:4a:5f:8d:15:84:56:17:af:55:ad:c4:85:65: 8c:86:76:64:fa:02:3b:bd:d2:f2:38:5d:3a:8b:07: 92:90:56:2f:63:c3:df:ae:97:9b:b7:8c:36:9e:37: 79:77:88:96:34:42:7c:b2:61:67:1f:99:25:c9:91: 2f:07:f5:54:e4:6c:3a:93:93:26:66:ab:cc:de:a7: 46:6a:53:07:fe:a9:aa:6d:ce:5b:05:2a:54:eb:1b: 55:7e:88:5a:49:fd:c6:3a:86:ab:65:aa:4a:d6:05: 8a:5a:d1:06:61:da:76:67:58:89:ea:b6:b1:25:bb: 6b:d0:01:18:3e:ef:e4:eb:79:de:31:60:7e:bd:e7: df:4f:2e:a9:bc:61:16:9d:52:8f:13:f5:6f:64:a2: f2:ff:89:7d:e1:5a:87:cb:30:f4:13:cc:ab:f6:1e: c3:f3:9f:33:36:f8:3a:4b:26:d1:02:6b:22:a3:47: c9:68:ba:dd:a5:cc:2d:97:65:95:88:01:96:2f:1f: 85:c4:d9:1b:23:22:41:0b:e9:ec:9b:33:1b:df:31: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D7:98:5B:A3:E3:E3:11:74:8B:93:BD:C4:46:A6:AB:70:DB:9A:D7 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:f5:1c:90:8d:84:10:49:37:5a:ea:32:51:a6:c3:75:97:09: a9:17:8c:3d:34:48:96:3f:9e:bf:34:3b:80:1e:f3:5d:3a:bd: 55:99:2c:92:e2:19:e3:03:14:4e:96:2d:b1:c0:6b:27:35:7a: 82:e9:58:0b:7d:b8:e3:5e:d2:29:49:fb:20:1a:37:c0:43:4f: 22:5c:8b:23:84:87:28:35:4c:29:90:2f:93:d3:2d:db:a8:5b: 33:e2:31:7d:78:b7:55:57:1e:6e:b2:b2:eb:95:fd:c1:7e:0e: 41:59:b3:f5:5f:9e:64:f2:47:7c:22:bf:19:1d:f5:74:07:6f: 7d:a9:3c:94:86:b8:ff:5f:89:74:96:a6:f3:f4:91:f1:d2:6b: a6:5b:67:2c:a8:8b:9a:d3:97:f0:3d:9a:53:4c:2e:7f:d0:e4: 9f:26:82:cf:8f:97:9b:9e:ef:6f:e1:10:61:3f:32:03:e2:46: 8c:28:94:ff:d0:db:91:53:59:54:6b:16:fa:0a:41:ba:59:e3: ea:54:52:d1:d9:35:60:53:0a:a6:df:74:8e:96:77:2c:e9:80: 35:46:93:30:b3:97:56:3e:ec:1e:e3:10:d5:40:ce:e4:06:6d: bd:30:af:b7:17:b6:22:a1:33:72:36:37:9e:84:37:4c:d8:07: 8f:1f:34:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGSMVTTbKNLOoxpuXbWT4CNcHRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA2MDIxNzMxMDRaFw0yNjA2MDMxODI5MDRaMDMxMTAvBgNV BAMTKDE5RDc5ODVCQTNFM0UzMTE3NDhCOTNCREM0NDZBNkFCNzBEQjlBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXD7RXvWEQe8pfioS1/ZD4QlkS vy9AcjJsK43FynKuo6aWGIPVRdOlur8d0r7gSl+NFYRWF69VrcSFZYyGdmT6Aju9 0vI4XTqLB5KQVi9jw9+ul5u3jDaeN3l3iJY0QnyyYWcfmSXJkS8H9VTkbDqTkyZm q8zep0ZqUwf+qaptzlsFKlTrG1V+iFpJ/cY6hqtlqkrWBYpa0QZh2nZnWInqtrEl u2vQARg+7+Tred4xYH69599PLqm8YRadUo8T9W9kovL/iX3hWofLMPQTzKv2HsPz nzM2+DpLJtECayKjR8lout2lzC2XZZWIAZYvH4XE2RsjIkEL6eybMxvfMbx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdeYW6Pj4xF0i5O9xEamq3DbmtcwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/1HJCNhBBJN1rqMlGmw3WXCakXjD00SJY/ nr80O4Ae8106vVWZLJLiGeMDFE6WLbHAayc1eoLpWAt9uONe0ilJ+yAaN8BDTyJc iyOEhyg1TCmQL5PTLduoWzPiMX14t1VXHm6ysuuV/cF+DkFZs/VfnmTyR3wivxkd 9XQHb32pPJSGuP9fiXSWpvP0kfHSa6ZbZyyoi5rTl/A9mlNMLn/Q5J8mgs+Pl5ue 72/hEGE/MgPiRowolP/Q25FTWVRrFvoKQbpZ4+pUUtHZNWBTCqbfdI6WdyzpgDVG kzCzl1Y+7B7jENVAzuQGbb0wr7cXtiKhM3I2N56EN0zYB48fNIo= -----END CERTIFICATE-----Generated at Tue Jun 2 22:08:03 2026 by rpki-client