$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft File: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft (raw, json) Hash identifier: XcC77V6z12a3Oj6Jo9aJc+P8mibmWWprU1eOW5PZs1k= Subject key identifier: 0B:3F:45:0A:6B:67:5A:21:D1:46:4A:20:6F:46:A5:78:B0:B0:00:F1 Authority key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 Certificate issuer: /CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Certificate serial: 5BFE54AD9A358F897C96640CA557926736D92F19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:41:50 +0000 Manifest this update: Sat 20 Jun 2026 01:36:50 +0000 Manifest next update: Sun 21 Jun 2026 05:15:50 +0000 Files and hashes: 1: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: zvVBOICq5pKD2ig8o0wI4pJml9B5+zqomhS6S0vqWcI=) 2: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: 3fZAI9UVM7/UZBavMAQaA62u0fyHX83Z/pKamnkzV24=) 3: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl (hash: lSmsEUZqumVFQlo8ZdUwKsGmdqj5AzthjW14uWVEMZM=) 4: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: h7oJXK+AgIlPZVwTrPckQLETitJhhEg1pMAjxm6/Vyw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fe:54:ad:9a:35:8f:89:7c:96:64:0c:a5:57:92:67:36:d9:2f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Validity Not Before: Jun 20 01:36:50 2026 GMT Not After : Jun 21 05:15:50 2026 GMT Subject: CN=0B3F450A6B675A21D1464A206F46A578B0B000F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:04:f9:47:70:3e:37:35:8c:32:90:01:e7: 68:ce:1a:ef:f7:58:31:ac:2f:19:c7:61:2f:68:a0: 12:76:15:1e:ec:00:2b:f2:6f:0b:68:33:01:7a:47: 55:60:6b:4d:c5:46:f7:2a:9d:30:00:4a:17:00:b0: 2e:1f:9d:85:ad:a3:91:fd:c0:88:21:89:3b:52:e5: 12:d6:5d:67:77:4b:33:78:2b:13:54:c3:e2:a7:90: ce:dc:be:32:4f:be:6c:56:3f:37:27:43:48:a4:92: 76:59:6b:df:85:1b:0d:85:52:0f:b2:c2:80:db:2d: aa:9c:bd:16:b1:16:00:76:fa:28:cd:ab:66:34:52: e0:8b:62:d3:31:bb:14:ff:33:51:84:2a:9b:d6:9e: 2b:b7:f1:ba:79:52:43:7c:0f:ce:33:bc:1d:bd:b9: 45:b2:d2:38:61:86:17:91:a4:bc:d5:38:d9:f4:4e: 31:b3:c6:6f:6b:bd:14:0b:04:a5:6d:25:21:c5:b4: 20:d1:9c:9d:78:a6:a7:f7:dc:4b:43:8a:ef:7a:51: 9b:26:87:9a:b3:69:f6:5c:11:23:a4:53:7f:45:4d: e5:0e:e1:e1:19:82:8f:f6:f6:ad:8c:fb:f4:e5:5c: 47:8d:b2:b0:18:0c:c5:ba:ca:0f:43:65:f5:41:fb: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3F:45:0A:6B:67:5A:21:D1:46:4A:20:6F:46:A5:78:B0:B0:00:F1 X509v3 Authority Key Identifier: keyid:E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:70:57:89:63:0a:53:5f:bb:36:bd:d9:8d:f1:b7:13:70:04: ec:e0:4b:50:8c:fe:62:26:52:83:f6:87:b3:16:35:a4:0b:14: f2:5e:6f:5a:0f:24:99:78:8b:f1:c4:f6:6a:74:d2:40:db:8f: 5a:be:b0:6c:a7:c5:4c:6f:c5:a8:c0:16:66:f7:47:ba:87:b0: a3:94:a0:1e:55:fe:eb:b4:98:82:64:c6:f6:f8:e9:25:13:ca: 57:df:48:05:2d:2c:b2:0b:f0:c7:d0:77:6c:23:a9:1e:3f:0b: 6a:27:d1:33:cf:d1:64:d3:65:09:b9:59:97:c8:7d:87:6a:8c: b4:9b:93:9c:e6:13:69:db:df:ce:5b:59:1b:b8:67:2e:27:eb: bf:1e:2e:a8:2b:46:91:4a:70:de:40:e0:40:bf:9b:a1:fc:9d: 0f:d8:1a:ca:dd:c7:30:e8:71:0a:45:14:34:dc:16:53:49:bd: cd:0d:de:d5:d2:93:2b:9f:c7:4b:f3:20:cf:c9:c4:83:12:73: 48:39:87:8b:b3:01:65:37:5a:2c:25:8a:11:f1:bc:4c:6e:42: fe:48:74:40:41:7a:b6:ca:62:0d:86:c0:4c:24:62:d7:ae:df: 7f:ef:29:47:10:19:fa:08:77:57:40:8a:16:d7:40:6e:e9:6b: 48:12:8c:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/5UrZo1j4l8lmQMpVeSZzbZLxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFE N0RBODAwNzAeFw0yNjA2MjAwMTM2NTBaFw0yNjA2MjEwNTE1NTBaMDMxMTAvBgNV BAMTKDBCM0Y0NTBBNkI2NzVBMjFEMTQ2NEEyMDZGNDZBNTc4QjBCMDAwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgwT5R3A+NzWMMpAB52jOGu/3 WDGsLxnHYS9ooBJ2FR7sACvybwtoMwF6R1Vga03FRvcqnTAAShcAsC4fnYWto5H9 wIghiTtS5RLWXWd3SzN4KxNUw+KnkM7cvjJPvmxWPzcnQ0ikknZZa9+FGw2FUg+y woDbLaqcvRaxFgB2+ijNq2Y0UuCLYtMxuxT/M1GEKpvWniu38bp5UkN8D84zvB29 uUWy0jhhhheRpLzVONn0TjGzxm9rvRQLBKVtJSHFtCDRnJ14pqf33EtDiu96UZsm h5qzafZcESOkU39FTeUO4eEZgo/29q2M+/TlXEeNsrAYDMW6yg9DZfVB+1XFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCz9FCmtnWiHRRkogb0aleLCwAPEwHwYDVR0j BBgwFoAU4N4i9Xe0JE7LMyuHtYMdStfagAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJjMWFiNzEtOTFkMC00ZjBiLWJiMjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3 N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFEN0RBODAwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMERFMjJGNTc3QjQyNDRFQ0IzMzJCODdCNTgzMUQ0QUQ3REE4 MDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFE NEFEN0RBODAwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtwV4ljClNfuza92Y3xtxNwBOzgS1CM/mIm UoP2h7MWNaQLFPJeb1oPJJl4i/HE9mp00kDbj1q+sGynxUxvxajAFmb3R7qHsKOU oB5V/uu0mIJkxvb46SUTylffSAUtLLIL8MfQd2wjqR4/C2on0TPP0WTTZQm5WZfI fYdqjLSbk5zmE2nb385bWRu4Zy4n678eLqgrRpFKcN5A4EC/m6H8nQ/YGsrdxzDo cQpFFDTcFlNJvc0N3tXSkyufx0vzIM/JxIMSc0g5h4uzAWU3WiwlihHxvExuQv5I dEBBerbKYg2GwEwkYteu33/vKUcQGfoId1dAihbXQG7pa0gSjL0= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:15 2026 by rpki-client