$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: KXgQlm7r2wZUigLEzmSAMnG0eq+lxjFC3XHkdLyfxjA= Subject key identifier: 93:7D:CF:C5:26:3E:04:A2:6F:E3:5B:C7:E9:D0:3A:37:21:1E:C0:5D Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 38AAF89A9C140A1A6D96A803F443096129F55B19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:10:44 +0000 Manifest this update: Thu 18 Jun 2026 03:05:44 +0000 Manifest next update: Fri 19 Jun 2026 05:07:44 +0000 Files and hashes: 1: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) 2: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: DrAYOZsCHkAwDLiQG9Izu7RS9RttUk7JQM9qsnQ9n8I=) 3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:aa:f8:9a:9c:14:0a:1a:6d:96:a8:03:f4:43:09:61:29:f5:5b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Jun 18 03:05:44 2026 GMT Not After : Jun 19 05:07:44 2026 GMT Subject: CN=937DCFC5263E04A26FE35BC7E9D03A37211EC05D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:91:6c:a5:50:02:ce:4d:08:9e:93:11:72: 80:18:f7:70:c3:57:c9:dc:c1:05:5a:ee:36:c3:1c: ac:e4:d1:86:d8:99:b9:ad:94:fb:14:c7:40:e1:35: 03:26:ec:ba:f3:91:44:97:b1:67:70:50:cc:fe:62: bf:28:d8:cd:d9:69:49:8d:6d:7a:24:e2:d4:20:7c: 2a:68:7e:f8:5b:cc:ac:5b:10:09:77:16:c5:7f:6e: 49:09:0f:2e:b1:13:a5:5e:a5:96:85:d9:86:f2:43: 70:bd:ad:c6:94:4e:59:ce:ba:a1:61:b7:2a:0a:57: e9:23:d3:26:15:2b:b2:11:e6:0a:f6:7d:db:cc:48: ca:95:10:da:13:11:dc:0b:82:e2:fe:d3:e3:c9:5e: 70:b2:9f:87:00:fe:de:d4:6f:f5:f7:38:30:06:b3: e8:46:2c:2a:44:20:4f:d9:12:c1:91:f9:22:8b:4e: a7:fe:0a:b8:ea:40:03:92:a9:9f:fb:bb:11:f4:4b: ab:93:58:5b:a2:1f:ef:b9:34:44:67:db:fe:5b:36: 83:c9:2c:e5:12:c6:76:e2:3f:ec:f4:cb:b6:2b:88: f4:4f:96:9f:5c:91:14:5b:19:a8:20:c3:71:94:ed: 5a:70:d0:cb:be:09:0a:20:aa:a4:5f:4b:12:05:b0: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7D:CF:C5:26:3E:04:A2:6F:E3:5B:C7:E9:D0:3A:37:21:1E:C0:5D X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0b:3e:f4:27:16:9d:62:40:f2:f5:35:75:be:02:9a:e0:a0: 8c:3d:38:63:37:1d:d6:16:21:d9:2a:0a:fb:c3:2f:f0:78:19: 11:86:2d:ae:fc:72:e1:28:22:90:2f:b5:82:bc:37:30:4d:ab: 63:f2:48:6e:4b:db:e5:48:ad:66:cb:6b:85:2e:60:de:ec:e6: 38:fc:66:dc:50:41:4f:27:97:a3:a8:8e:17:a3:b4:bd:0a:76: 5d:62:20:d3:47:47:bb:12:59:6c:e6:3b:df:cd:c7:d0:a7:97: a3:72:a4:9c:47:1b:aa:73:c5:6a:b9:7b:46:c2:b2:31:91:18: ce:2a:5c:75:37:37:7d:af:d1:b8:ec:5b:fc:d1:01:96:df:18: 09:e6:8f:1a:fc:48:86:44:2e:3a:6e:44:a7:d1:98:02:c4:77: c1:16:82:c6:61:fc:c6:0e:07:2c:d1:bc:c5:7e:35:6d:33:ee: c3:c9:c0:e9:0e:c7:39:09:4b:1a:4a:ab:1c:df:67:6d:e7:4a: 67:93:bf:19:4d:81:72:f9:90:62:27:d0:a5:4c:a1:52:16:ba: dd:3c:3a:38:89:5d:2f:31:e0:42:e7:e7:b5:b5:32:44:15:3a: 38:f2:58:41:2d:1c:80:b3:f3:b3:12:c4:a9:56:88:75:3f:d7: bb:26:12:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKr4mpwUChptlqgD9EMJYSn1WxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA2MTgwMzA1NDRaFw0yNjA2MTkwNTA3NDRaMDMxMTAvBgNV BAMTKDkzN0RDRkM1MjYzRTA0QTI2RkUzNUJDN0U5RDAzQTM3MjExRUMwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNXZFspVACzk0InpMRcoAY93DD V8ncwQVa7jbDHKzk0YbYmbmtlPsUx0DhNQMm7LrzkUSXsWdwUMz+Yr8o2M3ZaUmN bXok4tQgfCpofvhbzKxbEAl3FsV/bkkJDy6xE6VepZaF2YbyQ3C9rcaUTlnOuqFh tyoKV+kj0yYVK7IR5gr2fdvMSMqVENoTEdwLguL+0+PJXnCyn4cA/t7Ub/X3ODAG s+hGLCpEIE/ZEsGR+SKLTqf+CrjqQAOSqZ/7uxH0S6uTWFuiH++5NERn2/5bNoPJ LOUSxnbiP+z0y7YriPRPlp9ckRRbGaggw3GU7Vpw0Mu+CQogqqRfSxIFsDFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk33PxSY+BKJv41vH6dA6NyEewF0wHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAILPvQnFp1iQPL1NXW+AprgoIw9OGM3HdYW IdkqCvvDL/B4GRGGLa78cuEoIpAvtYK8NzBNq2PySG5L2+VIrWbLa4UuYN7s5jj8 ZtxQQU8nl6OojhejtL0Kdl1iINNHR7sSWWzmO9/Nx9Cnl6NypJxHG6pzxWq5e0bC sjGRGM4qXHU3N32v0bjsW/zRAZbfGAnmjxr8SIZELjpuRKfRmALEd8EWgsZh/MYO ByzRvMV+NW0z7sPJwOkOxzkJSxpKqxzfZ23nSmeTvxlNgXL5kGIn0KVMoVIWut08 OjiJXS8x4ELn57W1MkQVOjjyWEEtHICz87MSxKlWiHU/17smEr0= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:14 2026 by rpki-client