$ rpki-client -vvf rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.mft File: E037136E2AAC9F6693BBACBC3C65801649522C3C.mft (raw, json) Hash identifier: CWXsQ2xrVq5kNn0gjQcVxy2zwE1mQMLmc2QLbpTbk8k= Subject key identifier: F6:45:C7:CB:A9:61:11:D6:33:54:B2:CA:28:11:1F:1B:6D:0C:3E:12 Authority key identifier: E0:37:13:6E:2A:AC:9F:66:93:BB:AC:BC:3C:65:80:16:49:52:2C:3C Certificate issuer: /CN=E037136E2AAC9F6693BBACBC3C65801649522C3C Certificate serial: 6FBFD202434317FD629852FE2410F15782A587D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:51:29 +0000 Manifest this update: Tue 02 Jun 2026 17:46:29 +0000 Manifest next update: Wed 03 Jun 2026 21:20:29 +0000 Files and hashes: 1: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (hash: AwTGpje5OvZyeG0dVADqikHcYsYI9aBFVd0A0oH8r8I=) 2: E037136E2AAC9F6693BBACBC3C65801649522C3C.crl (hash: QMG8ti+EkMWCAEHS5f39eXoQZyS1h9LSYLYvNXeZNrE=) 3: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: snuRd2FLKphVUDvlFnX09PH6IwbbuDmn+rzInTKTCXg=) 4: 3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (hash: DkGliUWM5XR773EPw61tub5dc+L/Xx/dukDzVXnnxcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.crl rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bf:d2:02:43:43:17:fd:62:98:52:fe:24:10:f1:57:82:a5:87:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E037136E2AAC9F6693BBACBC3C65801649522C3C Validity Not Before: Jun 2 17:46:29 2026 GMT Not After : Jun 3 21:20:29 2026 GMT Subject: CN=F645C7CBA96111D63354B2CA28111F1B6D0C3E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:15:36:b8:6f:d3:6e:7f:8d:dc:af:11:fe: 17:44:5f:7a:4a:18:1d:b4:8f:2d:20:37:1a:d8:b1: 60:5b:e8:7a:3a:30:ba:77:e3:d4:f0:60:7c:ac:20: 10:e2:d0:91:16:44:46:48:10:f2:9b:83:27:40:7d: d1:ad:9d:3e:37:df:48:3c:e7:c6:76:22:62:7c:48: 5e:b3:15:f5:26:59:c1:19:e4:ff:fa:37:98:8b:84: 10:e2:42:37:4d:2f:73:1d:b1:51:13:fa:3a:ee:59: 55:95:72:59:73:57:61:90:0e:40:c3:7b:34:dd:97: 85:10:4c:f4:7d:c8:ac:11:1c:53:ba:ce:31:6d:ca: 4b:a4:ca:69:41:6d:37:4c:61:4d:42:ef:2f:74:8e: 2b:31:18:49:d0:0e:4e:73:48:15:de:80:3a:34:66: cd:e3:66:d2:6b:d2:64:82:a5:46:a8:7d:ec:58:d8: 4a:ed:64:b7:4e:50:58:4c:0f:cb:94:49:27:9a:36: 0d:6c:ec:98:91:3d:88:6c:8c:a5:21:4f:5d:07:27: 41:45:6e:15:4c:49:d3:50:42:b6:1e:69:a7:5f:1f: ba:f4:ab:42:cd:f7:1b:0e:ad:c7:e8:5d:5b:8b:f6: af:32:68:b5:35:e8:50:b1:f4:65:03:19:6b:45:80: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:45:C7:CB:A9:61:11:D6:33:54:B2:CA:28:11:1F:1B:6D:0C:3E:12 X509v3 Authority Key Identifier: keyid:E0:37:13:6E:2A:AC:9F:66:93:BB:AC:BC:3C:65:80:16:49:52:2C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:64:fb:35:3e:ca:3f:a2:88:05:5a:a3:8f:3d:35:24:68:82: 8b:e2:0d:56:56:19:69:83:55:d2:c6:21:47:16:ef:09:de:bb: 0f:64:71:cf:1c:ce:41:bd:ba:83:e7:cc:11:56:ff:b9:a7:b7: ba:9e:a9:2d:59:d0:99:03:6c:fa:73:20:1f:00:a0:52:35:8b: d1:3c:12:cf:d4:26:a9:47:de:ba:05:13:79:a7:fb:63:f8:4f: a3:bd:5a:40:fe:bf:82:38:d7:be:5e:e2:09:04:f7:e6:56:e1: 5a:7a:f8:08:60:0b:56:ac:a3:c3:37:97:91:c3:68:47:45:08: ba:7d:da:9e:09:de:17:e5:a9:29:ed:22:6c:89:97:5c:57:4b: 54:66:00:bb:ee:27:dc:dd:94:8f:94:a1:d9:2e:94:23:ac:7a: d0:c1:07:de:7f:2d:fd:54:37:43:db:00:17:9f:a1:4d:8b:7d: 3f:c4:34:ea:58:88:95:6f:d5:2f:5b:81:9e:97:8a:0c:67:f2: 5e:ca:36:55:d0:25:83:e4:d2:41:dc:2e:9d:2c:3a:25:6a:b0: d8:c0:d7:a2:d9:51:e1:9f:7b:ea:22:dd:93:3b:6f:35:b0:c6: 55:1a:cf:94:19:cf:56:ec:c1:ca:eb:27:17:d8:93:d1:fc:ee: b0:9f:86:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7/SAkNDF/1imFL+JBDxV4Klh9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAzNzEzNkUyQUFDOUY2NjkzQkJBQ0JDM0M2NTgwMTY0 OTUyMkMzQzAeFw0yNjA2MDIxNzQ2MjlaFw0yNjA2MDMyMTIwMjlaMDMxMTAvBgNV BAMTKEY2NDVDN0NCQTk2MTExRDYzMzU0QjJDQTI4MTExRjFCNkQwQzNFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofRU2uG/Tbn+N3K8R/hdEX3pK GB20jy0gNxrYsWBb6Ho6MLp349TwYHysIBDi0JEWREZIEPKbgydAfdGtnT4330g8 58Z2ImJ8SF6zFfUmWcEZ5P/6N5iLhBDiQjdNL3MdsVET+jruWVWVcllzV2GQDkDD ezTdl4UQTPR9yKwRHFO6zjFtykukymlBbTdMYU1C7y90jisxGEnQDk5zSBXegDo0 Zs3jZtJr0mSCpUaofexY2ErtZLdOUFhMD8uUSSeaNg1s7JiRPYhsjKUhT10HJ0FF bhVMSdNQQrYeaadfH7r0q0LN9xsOrcfoXVuL9q8yaLU16FCx9GUDGWtFgGkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9kXHy6lhEdYzVLLKKBEfG20MPhIwHwYDVR0j BBgwFoAU4DcTbiqsn2aTu6y8PGWAFklSLDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdjZDFkMmQtNzM2NC00ODFiLTk3OGUtMGE4NTRhOWNmZjRmLzAvRTAzNzEzNkUy QUFDOUY2NjkzQkJBQ0JDM0M2NTgwMTY0OTUyMkMzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDM3MTM2RTJBQUM5RjY2OTNCQkFDQkMzQzY1ODAxNjQ5NTIy QzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvRTAzNzEzNkUyQUFDOUY2NjkzQkJBQ0JDM0M2NTgw MTY0OTUyMkMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJk+zU+yj+iiAVao489NSRogoviDVZWGWmD VdLGIUcW7wneuw9kcc8czkG9uoPnzBFW/7mnt7qeqS1Z0JkDbPpzIB8AoFI1i9E8 Es/UJqlH3roFE3mn+2P4T6O9WkD+v4I4175e4gkE9+ZW4Vp6+AhgC1aso8M3l5HD aEdFCLp92p4J3hflqSntImyJl1xXS1RmALvuJ9zdlI+UodkulCOsetDBB95/Lf1U N0PbABefoU2LfT/ENOpYiJVv1S9bgZ6Xigxn8l7KNlXQJYPk0kHcLp0sOiVqsNjA 16LZUeGfe+oi3ZM7bzWwxlUaz5QZz1bswcrrJxfYk9H87rCfhgE= -----END CERTIFICATE-----Generated at Tue Jun 2 21:39:28 2026 by rpki-client