$ rpki-client -vvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft File: E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft (raw, json) Hash identifier: CuKCnelyZPzy3pX3Bdc8nSxzD0wVAAblMKT/Y6eNTLU= Subject key identifier: D5:E6:EE:42:2C:19:31:0B:6C:6A:D8:08:78:E7:0E:A9:00:3E:26:4E Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C Certificate issuer: /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Certificate serial: 7D063040ECCFAC2314ACAF187ECBB71DD0566D33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:37:39 +0000 Manifest this update: Tue 16 Jun 2026 23:32:39 +0000 Manifest next update: Thu 18 Jun 2026 00:38:39 +0000 Files and hashes: 1: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: O71Jl4mqVIKRIDU7d2ujmnsBUwDFC83l2q24DcsCcFA=) 2: E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl (hash: qTcdGp14fEgopT0hEwdokYMLse/OTrs/xJ5KN+FQuaA=) 3: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: j+y6AXj1f3E3oHmAFOLhkBlzYepk37VPnp6D6mtPQkY=) 4: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: adRerI3tyaAoAsC9J+hV/5/qxos6XlWsLUCLBDHVCkI=) 5: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: O/24bYRJHwn8lGm4x/5IsjKHiRZPSA0Jbap1Vz4bsHo=) 6: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: fB2Vl1cIcPoBjN5rs9Ik+Eab2HMgRuDFWdtvrKSJoVw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:06:30:40:ec:cf:ac:23:14:ac:af:18:7e:cb:b7:1d:d0:56:6d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Validity Not Before: Jun 16 23:32:39 2026 GMT Not After : Jun 18 00:38:39 2026 GMT Subject: CN=D5E6EE422C19310B6C6AD80878E70EA9003E264E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:ca:ba:d8:69:2f:51:c1:91:60:48:93:c9: 6f:79:63:c0:95:a0:cc:7e:fe:7d:21:11:73:3e:ee: 2a:ee:a1:74:0f:f6:8c:98:6b:59:4e:19:fc:f2:70: d0:90:21:26:e4:f3:3e:a4:3b:04:63:4c:ed:46:be: 42:84:f3:3e:40:71:f6:ba:f4:b9:22:51:d4:eb:6e: 32:42:fa:bc:62:d6:ab:bc:05:8a:0b:51:69:1b:50: eb:09:25:37:c9:fb:fa:97:7e:3c:7e:c3:67:11:c0: 09:e7:84:19:04:6a:5b:db:4c:92:63:b4:6a:5f:a8: 2d:dc:10:b9:53:ca:b1:1f:be:4a:ae:4e:7e:a2:4e: 34:18:eb:61:ee:a9:80:9c:a3:21:a9:75:90:5c:d6: bd:b5:11:5e:c4:64:35:26:41:1e:aa:33:a8:22:0f: f9:ab:ff:e6:db:96:f4:f4:24:ce:20:01:7d:db:dd: 64:a6:30:a3:ae:d2:7a:3a:ae:a5:6f:ed:62:bb:a4: 0d:a1:8d:8f:1d:01:5c:10:cd:6c:f3:dc:54:0b:02: 18:43:8a:a8:2d:5e:23:7a:60:69:01:07:8f:a1:b3: 22:62:cc:df:89:1b:a8:32:6a:c6:eb:6a:0a:9f:43: e8:97:7c:cb:13:f4:30:9c:e6:7e:52:80:ec:77:1b: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E6:EE:42:2C:19:31:0B:6C:6A:D8:08:78:E7:0E:A9:00:3E:26:4E X509v3 Authority Key Identifier: keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:66:d5:23:c9:81:be:89:e8:f9:a7:28:14:c4:f0:d0:fe:f7: 62:30:c6:8a:18:ce:31:78:b2:e5:28:51:32:1f:f1:56:82:3e: 51:8a:5b:4e:eb:56:48:c9:fe:b5:56:25:e1:16:90:f2:e2:4b: 43:32:c0:c0:34:2a:2c:5f:f3:89:e1:c8:b9:c4:5f:f6:3b:1c: c1:ff:5c:4d:be:3c:48:69:66:7a:bb:bf:a4:d1:9c:ca:76:d9: a6:fe:16:75:4e:43:de:13:f1:b7:d6:5f:02:47:c4:28:bf:91: 0d:8b:a2:94:00:c3:ba:36:67:38:d4:90:b0:ee:80:c1:07:fe: 82:7e:ca:85:40:39:89:71:00:8b:73:a4:a2:a7:bd:8c:4a:85: 07:d6:ba:46:66:28:0e:cf:e1:04:70:23:15:a0:9e:ed:28:ff: a5:6c:77:eb:17:8a:fa:70:73:13:c2:68:fd:f5:96:96:42:92: ae:8c:78:0d:ba:7e:63:4c:cc:c4:0e:0f:33:16:20:e0:20:33: c3:7a:a7:f2:58:07:6b:91:ae:7e:7f:aa:ef:23:99:44:16:d6: be:9c:83:0d:b6:62:b4:f4:cf:b9:7a:fe:cc:0d:e0:58:b7:3d: 33:a5:a6:9a:86:5c:b9:06:fc:c6:6f:9f:bb:e8:92:52:dc:55: 29:01:7e:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQYwQOzPrCMUrK8Yfsu3HdBWbTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJE MDA1NjcyQzAeFw0yNjA2MTYyMzMyMzlaFw0yNjA2MTgwMDM4MzlaMDMxMTAvBgNV BAMTKEQ1RTZFRTQyMkMxOTMxMEI2QzZBRDgwODc4RTcwRUE5MDAzRTI2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4z8q62GkvUcGRYEiTyW95Y8CV oMx+/n0hEXM+7iruoXQP9oyYa1lOGfzycNCQISbk8z6kOwRjTO1GvkKE8z5Acfa6 9LkiUdTrbjJC+rxi1qu8BYoLUWkbUOsJJTfJ+/qXfjx+w2cRwAnnhBkEalvbTJJj tGpfqC3cELlTyrEfvkquTn6iTjQY62HuqYCcoyGpdZBc1r21EV7EZDUmQR6qM6gi D/mr/+bblvT0JM4gAX3b3WSmMKOu0no6rqVv7WK7pA2hjY8dAVwQzWzz3FQLAhhD iqgtXiN6YGkBB4+hsyJizN+JG6gyasbragqfQ+iXfMsT9DCc5n5SgOx3G9AlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ebuQiwZMQtsatgIeOcOqQA+Jk4wHwYDVR0j BBgwFoAU6e0HBZ6wH2G/apAusNlfktAFZywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAxYjFjMWItNjU2Yy00ODlkLTllZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5 RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJEMDA1NjcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOUVEMDcwNTlFQjAxRjYxQkY2QTkwMkVCMEQ5NUY5MkQwMDU2 NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVG OTJEMDA1NjcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRm1SPJgb6J6PmnKBTE8ND+92IwxooYzjF4 suUoUTIf8VaCPlGKW07rVkjJ/rVWJeEWkPLiS0MywMA0Kixf84nhyLnEX/Y7HMH/ XE2+PEhpZnq7v6TRnMp22ab+FnVOQ94T8bfWXwJHxCi/kQ2LopQAw7o2ZzjUkLDu gMEH/oJ+yoVAOYlxAItzpKKnvYxKhQfWukZmKA7P4QRwIxWgnu0o/6Vsd+sXivpw cxPCaP31lpZCkq6MeA26fmNMzMQODzMWIOAgM8N6p/JYB2uRrn5/qu8jmUQW1r6c gw22YrT0z7l6/swN4Fi3PTOlppqGXLkG/MZvn7voklLcVSkBflc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:14 2026 by rpki-client