$ rpki-client -vvf rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft File: E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft (raw, json) Hash identifier: dIrPBOxSK7PR91CMdG4GU/ItbdQ2BKq8m4E4XjGFKUo= Subject key identifier: EA:CC:85:68:60:CB:80:60:BC:4C:15:BE:25:00:0F:63:2C:3C:ED:A3 Authority key identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D Certificate issuer: /CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Certificate serial: 777B2C8C8CB0F23AF4AFA109D0F7C655D767E8A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 05:31:31 +0000 Manifest this update: Sat 20 Jun 2026 05:26:31 +0000 Manifest next update: Sun 21 Jun 2026 06:34:31 +0000 Files and hashes: 1: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: alqTQlTJJckhtW2N9aw/g6aRbRRoD+/QvIdNlTJVbT8=) 2: E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl (hash: I0GcI9BtbkuQy0r5ogS4q285CNswUpW+kupjRtO4mpE=) 3: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: 2NfEf/tbZtwHV+2PFzn79NkNRnQSkFLyDYFjiAxOlwQ=) 4: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: Tts8f+N485CFXeqo33btYWO7LgUOuaCh8Px0kKwHoiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7b:2c:8c:8c:b0:f2:3a:f4:af:a1:09:d0:f7:c6:55:d7:67:e8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Validity Not Before: Jun 20 05:26:31 2026 GMT Not After : Jun 21 06:34:31 2026 GMT Subject: CN=EACC856860CB8060BC4C15BE25000F632C3CEDA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:88:b1:16:cb:07:0e:7f:9b:c7:84:b6:e7: f8:e3:1c:97:17:b4:47:79:68:3e:62:0c:bb:b5:f9: 54:bf:a2:4e:49:aa:c4:fa:d7:f2:f8:d1:77:a7:2c: f6:8d:33:63:f1:9d:9a:9c:fa:bc:8e:0f:b3:be:25: f1:fb:c9:50:b9:67:6f:28:c6:d5:43:e7:bf:b6:0b: 2a:ac:5c:08:c5:cd:06:d1:cf:74:c6:22:20:17:3e: 59:56:bc:c1:55:01:ac:00:6e:b6:54:17:5f:6e:30: 43:07:33:25:38:3d:5c:2e:d1:be:a9:49:1f:97:63: ec:8a:1a:77:e4:bb:ff:75:de:60:6a:aa:91:24:23: c2:ab:5e:5e:78:d7:83:f2:2c:6d:d3:b9:0a:39:b4: 08:da:53:3e:c3:50:19:3a:27:02:7b:bc:5e:f7:5e: 56:0f:51:bc:70:a0:b1:71:e2:62:b8:20:12:a5:a1: 91:50:00:20:f2:b2:98:3a:79:68:ee:aa:c8:6c:c3: 8f:95:62:91:1d:8c:69:d9:62:84:99:a2:24:03:16: b4:2d:13:cf:0f:93:b5:df:5b:c6:4c:d3:81:dc:59: ff:53:17:0b:c3:9a:f0:0b:c3:c9:6e:ae:c0:a9:db: 3c:84:d4:d8:63:aa:6e:26:65:df:e1:41:44:2f:b6: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CC:85:68:60:CB:80:60:BC:4C:15:BE:25:00:0F:63:2C:3C:ED:A3 X509v3 Authority Key Identifier: keyid:E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:b9:a7:eb:58:62:6e:96:57:20:e7:80:c8:ca:1d:94:78:f1: 27:b1:08:4c:6c:c3:a6:fe:94:f2:95:45:fe:80:65:8f:81:64: 81:2d:fb:00:3d:51:6e:11:36:e0:02:3d:4d:71:76:0e:0b:7b: 9a:57:72:1f:ed:be:ee:5b:3b:cd:e4:f7:66:da:d6:87:28:4e: 0d:86:c2:c9:1d:04:fc:9e:72:6f:df:1f:7c:f9:6f:b3:55:ad: 24:87:6b:88:f9:6a:3f:cc:c0:31:4c:a1:0f:47:7d:05:85:44: 89:38:12:fb:ae:37:18:c5:e6:e6:27:f1:1f:55:24:71:6e:c5: 69:15:94:f3:7a:c4:41:7a:5f:8c:56:cf:4d:78:30:b1:e9:d3: a2:b8:98:a1:62:73:b3:f0:7a:4b:c6:13:6e:45:68:8f:f6:70: ba:4d:0b:d5:6f:8f:8c:c9:a1:56:62:b0:cf:b0:0e:b7:32:f3: 25:6c:c2:38:ec:7b:5a:d7:5a:41:fd:c8:8d:5a:39:35:40:35: 1a:be:fb:e4:da:7b:f2:93:30:38:4a:88:e1:8d:de:37:78:b0: 97:71:63:11:fe:57:82:23:e7:72:f2:e5:01:4f:e5:8a:6b:b8: 36:0e:a3:df:8c:f9:1c:0c:db:19:36:b5:b1:c9:18:a9:91:18: 4a:b8:1a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3ssjIyw8jr0r6EJ0PfGVddn6KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1 RUNGMTk2RDAeFw0yNjA2MjAwNTI2MzFaFw0yNjA2MjEwNjM0MzFaMDMxMTAvBgNV BAMTKEVBQ0M4NTY4NjBDQjgwNjBCQzRDMTVCRTI1MDAwRjYzMkMzQ0VEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTIixFssHDn+bx4S25/jjHJcX tEd5aD5iDLu1+VS/ok5JqsT61/L40XenLPaNM2PxnZqc+ryOD7O+JfH7yVC5Z28o xtVD57+2CyqsXAjFzQbRz3TGIiAXPllWvMFVAawAbrZUF19uMEMHMyU4PVwu0b6p SR+XY+yKGnfku/913mBqqpEkI8KrXl5414PyLG3TuQo5tAjaUz7DUBk6JwJ7vF73 XlYPUbxwoLFx4mK4IBKloZFQACDyspg6eWjuqshsw4+VYpEdjGnZYoSZoiQDFrQt E88Pk7XfW8ZM04HcWf9TFwvDmvALw8lursCp2zyE1Nhjqm4mZd/hQUQvttDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6syFaGDLgGC8TBW+JQAPYyw87aMwHwYDVR0j BBgwFoAU4DXV9dcCBnSNPAh7ML+80V7PGW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiMjA1MTUtOGQ3Yy00NDVjLWJmZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVE NzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1RUNGMTk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDM1RDVGNUQ3MDIwNjc0OEQzQzA4N0IzMEJGQkNEMTVFQ0Yx OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJD RDE1RUNGMTk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMG5p+tYYm6WVyDngMjKHZR48SexCExsw6b+ lPKVRf6AZY+BZIEt+wA9UW4RNuACPU1xdg4Le5pXch/tvu5bO83k92ba1ocoTg2G wskdBPyecm/fH3z5b7NVrSSHa4j5aj/MwDFMoQ9HfQWFRIk4EvuuNxjF5uYn8R9V JHFuxWkVlPN6xEF6X4xWz014MLHp06K4mKFic7PwekvGE25FaI/2cLpNC9Vvj4zJ oVZisM+wDrcy8yVswjjse1rXWkH9yI1aOTVANRq+++Tae/KTMDhKiOGN3jd4sJdx YxH+V4Ij53Ly5QFP5YpruDYOo9+M+RwM2xk2tbHJGKmRGEq4GkI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:05 2026 by rpki-client