$ rpki-client -vvf rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft File: E48354BE9F141988ABFB54173029C4000CF9B18B.mft (raw, json) Hash identifier: mebVTWUMsWcTSI1DbQjbExUjnILmJ/ZeIg9INO6l4ag= Subject key identifier: 68:B1:91:67:68:0B:21:BC:E0:87:56:74:54:28:EF:51:83:FE:27:C6 Authority key identifier: E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B Certificate issuer: /CN=E48354BE9F141988ABFB54173029C4000CF9B18B Certificate serial: 3456FA0FBCB5094D340E23EAEC6C1DAE73DAB007 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft Manifest number: 29 Signing time: Tue 02 Jun 2026 01:01:21 +0000 Manifest this update: Tue 02 Jun 2026 00:56:21 +0000 Manifest next update: Wed 03 Jun 2026 05:00:21 +0000 Files and hashes: 1: 3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa (hash: F+YbRAk+0CxM0DS0hqXRpMyQpkrAk0n0dHGfND3TquE=) 2: 3130332e3132352e3130352e302f32342d3234203d3e20313338313030.roa (hash: stWnJUHdeZ0lpj6XHoDiqPJcFNoLD1Jb0lqEc/eqrQc=) 3: 3130332e3132352e3130372e302f32342d3234203d3e20313338313030.roa (hash: ojp9gB1BKHELPh6AJXnC9Qiad2EUw2t4WqRumYJpvoo=) 4: 3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa (hash: c0s6g/0N7Mpt32/FZfwmkqY2FOP2/z8Sv0VSvzKlGpQ=) 5: 3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa (hash: ORI8ZzHMIQWit79i41H+hRQktja+THpVFHQP7zI/W24=) 6: 3130332e3132352e3130342e302f32322d3232203d3e20323135373237.roa (hash: 03NYkPPLVfBPNGc3GX0j/D9a1kQon+xDAfJQkUY2WfI=) 7: E48354BE9F141988ABFB54173029C4000CF9B18B.crl (hash: jWq268/dLrPxojU89XTWnpKEtMoP+YajsJPl/MCgzTY=) 8: 3130332e3132352e3130342e302f32322d3232203d3e20313534343130.roa (hash: eCyAxg6TMb3y8UNuAa8VAwHZx8s/p2Q+nPiDr2+G5JM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 05:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:56:fa:0f:bc:b5:09:4d:34:0e:23:ea:ec:6c:1d:ae:73:da:b0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48354BE9F141988ABFB54173029C4000CF9B18B Validity Not Before: Jun 2 00:56:21 2026 GMT Not After : Jun 3 05:00:21 2026 GMT Subject: CN=68B19167680B21BCE08756745428EF5183FE27C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:d9:43:aa:3b:f7:fc:f5:59:6f:8b:18:9b: 2f:8f:35:4f:3e:24:62:9e:16:44:60:a5:4d:0d:07: 48:b6:94:77:42:a9:dc:06:cc:28:08:fa:a5:d4:c8: f0:6f:0d:d0:81:19:cf:2b:2c:64:59:03:d8:4b:37: 92:1c:89:ad:5d:d9:7d:a9:42:9b:ed:4d:18:82:c1: d3:d9:3b:ea:ed:da:61:65:47:cf:b9:66:5b:c3:b6: ce:d4:4d:71:84:80:54:4c:e6:f9:88:41:58:e5:5d: cc:3f:77:64:97:13:7f:b6:33:94:ac:62:e8:d3:1b: f2:5e:87:b4:43:e6:cf:b9:a2:b7:39:06:ae:c6:32: e0:09:6f:9b:e9:62:e7:cb:fc:80:f4:cc:05:a0:d7: e6:d1:ba:9b:10:b8:a5:ec:54:1f:f6:f7:6b:f5:b4: 88:30:e5:36:a2:f9:cd:5a:69:10:1d:0d:ee:be:cb: 83:3a:c3:65:9b:ae:e4:ab:5b:08:c4:58:b9:ea:e1: ef:8f:f1:be:86:63:14:d5:d9:da:22:2d:ac:30:c0: 96:b8:b4:d2:0f:8a:d5:4c:a8:a9:43:ce:a6:5e:93: 23:83:e2:96:41:35:ec:aa:c1:5f:7d:94:e4:e1:3f: 48:97:a8:20:4a:b6:2b:72:42:2a:43:a7:2e:29:42: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B1:91:67:68:0B:21:BC:E0:87:56:74:54:28:EF:51:83:FE:27:C6 X509v3 Authority Key Identifier: keyid:E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:6c:25:81:1d:34:b4:61:1b:c1:6b:48:b2:46:9b:8a:af:9b: 6a:b1:67:f2:72:bc:1b:e5:b4:d3:4c:94:4c:b1:63:8f:d0:7e: 2c:df:58:fc:63:8f:12:a3:cf:8f:dd:5e:5b:70:88:a7:04:24: b0:87:68:e5:f7:1b:fb:98:83:ef:82:10:d5:2a:bf:02:fa:22: 83:c2:45:2c:ff:a8:4d:e5:c0:a9:ad:0d:18:c4:e7:a6:b6:ef: df:46:9f:7d:b5:31:bc:6b:75:52:88:9e:2d:d2:be:b8:30:59: 9a:f3:81:37:7e:14:d4:31:a3:a0:ae:9f:b8:c7:1e:fc:14:39: 81:95:f4:67:87:ef:8b:bf:09:e1:fa:16:46:3a:1c:da:50:83: d7:96:67:44:a9:c7:3f:1e:a0:73:8f:bc:db:1f:dc:5b:f5:d5: 5f:78:52:9c:17:9e:ae:b9:66:dd:14:ec:ae:85:98:5b:6b:71: e8:ed:61:b9:b2:c5:64:c1:2f:92:18:bd:ec:c0:41:90:16:6b: 07:6f:65:b5:48:a0:10:1c:60:a3:ee:b9:76:17:1a:aa:e9:e1: 0a:27:51:63:c7:c9:3a:dc:22:38:62:1f:66:15:66:3c:c9:fd: fd:e9:ed:ba:40:a2:f0:d2:4d:59:fe:4c:8a:37:f3:50:b8:f6: db:ac:85:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFb6D7y1CU00DiPq7GwdrnPasAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MzU0QkU5RjE0MTk4OEFCRkI1NDE3MzAyOUM0MDAw Q0Y5QjE4QjAeFw0yNjA2MDIwMDU2MjFaFw0yNjA2MDMwNTAwMjFaMDMxMTAvBgNV BAMTKDY4QjE5MTY3NjgwQjIxQkNFMDg3NTY3NDU0MjhFRjUxODNGRTI3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0dlDqjv3/PVZb4sYmy+PNU8+ JGKeFkRgpU0NB0i2lHdCqdwGzCgI+qXUyPBvDdCBGc8rLGRZA9hLN5Icia1d2X2p QpvtTRiCwdPZO+rt2mFlR8+5ZlvDts7UTXGEgFRM5vmIQVjlXcw/d2SXE3+2M5Ss YujTG/Jeh7RD5s+5orc5Bq7GMuAJb5vpYufL/ID0zAWg1+bRupsQuKXsVB/292v1 tIgw5Tai+c1aaRAdDe6+y4M6w2WbruSrWwjEWLnq4e+P8b6GYxTV2doiLawwwJa4 tNIPitVMqKlDzqZekyOD4pZBNeyqwV99lOThP0iXqCBKtityQipDpy4pQpZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaLGRZ2gLIbzgh1Z0VCjvUYP+J8YwHwYDVR0j BBgwFoAU5INUvp8UGYir+1QXMCnEAAz5sYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhjYWMxNjEtZjg4MC00MjA2LThkMmMtZGFhNjA0ZmUwOTAyLzAvRTQ4MzU0QkU5 RjE0MTk4OEFCRkI1NDE3MzAyOUM0MDAwQ0Y5QjE4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDgzNTRCRTlGMTQxOTg4QUJGQjU0MTczMDI5QzQwMDBDRjlC MThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhjYWMxNjEtZjg4MC00MjA2LThk MmMtZGFhNjA0ZmUwOTAyLzAvRTQ4MzU0QkU5RjE0MTk4OEFCRkI1NDE3MzAyOUM0 MDAwQ0Y5QjE4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBsJYEdNLRhG8FrSLJGm4qvm2qxZ/JyvBvl tNNMlEyxY4/QfizfWPxjjxKjz4/dXltwiKcEJLCHaOX3G/uYg++CENUqvwL6IoPC RSz/qE3lwKmtDRjE56a2799Gn321MbxrdVKIni3SvrgwWZrzgTd+FNQxo6Cun7jH HvwUOYGV9GeH74u/CeH6FkY6HNpQg9eWZ0Spxz8eoHOPvNsf3Fv11V94UpwXnq65 Zt0U7K6FmFtrcejtYbmyxWTBL5IYvezAQZAWawdvZbVIoBAcYKPuuXYXGqrp4Qon UWPHyTrcIjhiH2YVZjzJ/f3p7bpAovDSTVn+TIo381C49tushe8= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:37 2026 by rpki-client