$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft File: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft (raw, json) Hash identifier: DSyeaymaardV7RQc0JYWl1UhcPXiqyUSv6Pzp3ADtck= Subject key identifier: BC:FF:81:5B:46:F1:CC:1E:3A:A2:F2:13:E7:9B:F0:A2:14:71:BD:12 Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB Certificate issuer: /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Certificate serial: 244F5ADA204C08363DDD1CC1F090F1D1F2500613 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:41:45 +0000 Manifest this update: Sat 20 Jun 2026 01:36:45 +0000 Manifest next update: Sun 21 Jun 2026 03:29:45 +0000 Files and hashes: 1: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: OK3H4Npcn6XOhpp51geVZ4Jq+X5gSteni67GraMNgZs=) 2: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: JI1QrINQKw3fjadw40FIbP+TVzkcpzaoVCD4jvQ/h04=) 3: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl (hash: tjH8Bh0rTJzis3F6LoXEzt04cgI3zVCig119LfaB4XU=) 4: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: iYftcLRKhDFwawem+AQ5tjTifMhYvu82o/DYOa4xV1U=) 5: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: 3GTJ9ASFLrepqsCMecKCsjwg26cUhjn00ThNjhDZtps=) 6: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: QnST8vjK8bFCBoNsPJhM5VHBI9hMH1UeN2aqQjcNdSs=) 7: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: ySpYECTdEpPiYQXcAvE+ScNUXGwRe6ThRPZGhAvNk2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4f:5a:da:20:4c:08:36:3d:dd:1c:c1:f0:90:f1:d1:f2:50:06:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Validity Not Before: Jun 20 01:36:45 2026 GMT Not After : Jun 21 03:29:45 2026 GMT Subject: CN=BCFF815B46F1CC1E3AA2F213E79BF0A21471BD12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:f3:ec:c2:65:61:31:b1:76:01:a5:16:19: d5:ab:da:34:56:cd:1f:29:58:0f:44:4d:3f:09:ab: ef:32:63:fc:74:16:6d:42:3e:c1:a8:75:2c:c4:6f: e6:4e:8f:49:15:e5:65:15:f8:f6:6e:39:b3:13:45: 86:74:1c:6d:d2:9e:a4:ed:84:0c:b4:6c:f6:53:a0: 08:f7:dc:12:2e:9e:d6:24:3a:54:bf:2c:c6:7f:d8: ef:46:3b:4b:e7:bf:b3:19:0a:b5:37:1f:ee:df:19: 4d:06:47:c0:99:eb:ca:08:5b:a5:eb:e7:c9:d6:2a: 60:1e:f3:ae:aa:1c:f0:82:24:28:00:de:78:21:6a: 5b:b8:52:ca:cc:96:02:1b:64:8b:e8:01:91:dc:af: 4f:98:41:e0:30:97:0f:9c:a3:0b:f8:0f:a7:c7:6f: 18:c3:47:08:2b:63:ca:4d:42:13:d4:4a:81:28:b9: b2:95:23:01:99:3b:09:02:85:d2:3f:90:16:18:30: c2:74:0b:f7:3d:7a:5e:7f:5f:b8:92:a1:b7:e4:66: e0:32:b7:bd:54:31:bb:0f:ce:89:ce:6b:02:18:64: e3:5c:1d:f0:ca:44:6f:3c:2d:31:7a:d1:cf:a9:c7: 3b:b8:52:94:3a:e6:63:36:a9:18:2f:d5:d3:e5:08: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FF:81:5B:46:F1:CC:1E:3A:A2:F2:13:E7:9B:F0:A2:14:71:BD:12 X509v3 Authority Key Identifier: keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:39:18:aa:5b:71:2e:bf:2e:b2:8a:87:f7:4a:5b:64:92:2b: 7f:7e:e3:72:90:69:92:70:03:a9:35:63:93:d6:27:88:5d:f5: 0b:ca:97:ab:c8:d2:b1:69:63:44:40:65:db:8b:24:d9:a2:55: 72:12:39:6c:c4:7b:0b:3b:ba:bb:81:c6:bc:1c:23:1c:19:23: 18:1a:fa:c8:56:1a:5f:d1:25:f3:05:54:3d:d6:d7:81:c8:3b: e9:ff:6a:a5:df:ab:fa:b0:ce:c1:41:12:ae:4b:78:3f:b6:67: a8:eb:56:cf:a3:1e:b3:51:ff:cd:ae:aa:2d:ac:f2:ad:e0:1d: 9c:a5:4e:fc:36:99:13:f9:56:9d:12:61:dc:41:54:c7:00:8a: 3c:c5:09:0d:f2:74:c6:e6:dc:88:9f:08:28:69:43:f0:20:d3: e4:49:b9:7e:2d:85:b9:23:ab:04:7b:40:a7:31:5b:1b:9b:6c: 33:67:0d:d1:27:ae:55:67:0f:51:11:c0:cf:fe:99:a5:bc:74: 4b:2d:b8:1f:72:01:68:dc:a0:19:66:91:f8:dc:43:19:67:1f: f2:f5:42:9d:b6:10:96:9b:5b:76:cb:71:10:09:75:7d:4a:63: 40:af:15:f2:ec:7f:f3:d0:0e:65:41:53:91:89:2c:b7:01:22: 57:05:af:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJE9a2iBMCDY93RzB8JDx0fJQBhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5 RkMyNTREQjAeFw0yNjA2MjAwMTM2NDVaFw0yNjA2MjEwMzI5NDVaMDMxMTAvBgNV BAMTKEJDRkY4MTVCNDZGMUNDMUUzQUEyRjIxM0U3OUJGMEEyMTQ3MUJEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQ/PswmVhMbF2AaUWGdWr2jRW zR8pWA9ETT8Jq+8yY/x0Fm1CPsGodSzEb+ZOj0kV5WUV+PZuObMTRYZ0HG3SnqTt hAy0bPZToAj33BIuntYkOlS/LMZ/2O9GO0vnv7MZCrU3H+7fGU0GR8CZ68oIW6Xr 58nWKmAe866qHPCCJCgA3nghalu4UsrMlgIbZIvoAZHcr0+YQeAwlw+cowv4D6fH bxjDRwgrY8pNQhPUSoEoubKVIwGZOwkChdI/kBYYMMJ0C/c9el5/X7iSobfkZuAy t71UMbsPzonOawIYZONcHfDKRG88LTF60c+pxzu4UpQ65mM2qRgv1dPlCNhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvP+BW0bxzB46ovIT55vwohRxvRIwHwYDVR0j BBgwFoAU5AKo/p1ua63c2UFMRST5+J/CVNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc1NDViODUtOTI3NC00NzBhLWFkMjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5 RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5RkMyNTREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDAyQThGRTlENkU2QkFERENEOTQxNEM0NTI0RjlGODlGQzI1 NERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5 Rjg5RkMyNTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg5GKpbcS6/LrKKh/dKW2SSK39+43KQaZJw A6k1Y5PWJ4hd9QvKl6vI0rFpY0RAZduLJNmiVXISOWzEews7uruBxrwcIxwZIxga +shWGl/RJfMFVD3W14HIO+n/aqXfq/qwzsFBEq5LeD+2Z6jrVs+jHrNR/82uqi2s 8q3gHZylTvw2mRP5Vp0SYdxBVMcAijzFCQ3ydMbm3IifCChpQ/Ag0+RJuX4thbkj qwR7QKcxWxubbDNnDdEnrlVnD1ERwM/+maW8dEstuB9yAWjcoBlmkfjcQxlnH/L1 Qp22EJabW3bLcRAJdX1KY0CvFfLsf/PQDmVBU5GJLLcBIlcFr4o= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:20 2026 by rpki-client