$ rpki-client -vvf rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft File: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft (raw, json) Hash identifier: ZLiQ+fJFJm8ZLpo/5tl8B0FrAeWVU8ONE2jEM3yzOrY= Subject key identifier: 16:86:66:BA:80:42:93:31:F7:38:04:66:FF:EC:16:85:9F:DA:59:FC Authority key identifier: E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 Certificate issuer: /CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Certificate serial: 04B43AF27053E885C3933FF31E35374DF3162AE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 14:47:07 +0000 Manifest this update: Tue 16 Jun 2026 14:42:07 +0000 Manifest next update: Wed 17 Jun 2026 18:27:07 +0000 Files and hashes: 1: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: lQVIlc5Ok7o6clRzLcj2IsYBHTzNzicGxWqDtjOXTeQ=) 2: E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl (hash: wmOCeIld6Hh3JhJIYzW3gkZq1bBGauo7HbD/6xQnAOI=) 3: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: oYW4sdySDReabIUJh8DtwbQ7r9wux6oX5lpHgcktZMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b4:3a:f2:70:53:e8:85:c3:93:3f:f3:1e:35:37:4d:f3:16:2a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5DA21DB76CE91D6EF72482FFDFE02169A6CC808 Validity Not Before: Jun 16 14:42:07 2026 GMT Not After : Jun 17 18:27:07 2026 GMT Subject: CN=168666BA80429331F7380466FFEC16859FDA59FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:55:5b:ab:10:2e:4a:da:fa:af:c1:89:bb: 1e:cf:7f:04:92:07:ff:d7:a9:07:99:fe:a1:c7:f7: 03:28:aa:46:8d:09:7a:fd:51:1e:98:d4:92:3a:ba: 6e:f1:50:48:11:e3:93:05:2b:52:1d:ba:42:66:87: 34:d1:fb:37:92:b9:86:4d:d0:db:83:c2:d5:38:5a: a3:9d:08:e7:a7:3a:43:35:78:d2:9f:16:64:88:4e: fa:8d:3e:41:02:2d:6f:d5:c4:e4:87:a4:39:8c:a8: ed:9f:ac:81:e2:07:c7:8d:85:de:95:41:ce:d8:b6: 2c:f9:37:c1:15:5a:ae:4e:51:03:b8:9a:bd:ec:2f: 37:c6:0a:ba:11:2f:29:7b:bc:5e:77:08:61:d3:4a: 2c:03:29:28:91:23:d5:9c:28:40:55:c3:b9:ab:61: 0a:d2:7d:14:27:7b:fd:f6:d1:3e:14:b2:34:a7:4f: ab:fe:1d:6e:19:5e:5d:ba:44:46:c8:a3:fe:97:9f: 70:95:fb:b1:17:86:71:92:2f:99:bc:39:4e:9d:85: 9c:24:b1:93:cd:66:de:70:c2:00:fa:74:1a:51:7c: 9d:fe:51:79:36:87:e5:a8:17:a8:0c:ea:68:75:aa: d3:c5:82:fa:e1:f3:31:45:9e:b6:bf:46:c0:94:0d: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:86:66:BA:80:42:93:31:F7:38:04:66:FF:EC:16:85:9F:DA:59:FC X509v3 Authority Key Identifier: keyid:E5:DA:21:DB:76:CE:91:D6:EF:72:48:2F:FD:FE:02:16:9A:6C:C8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/E5DA21DB76CE91D6EF72482FFDFE02169A6CC808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:78:f2:26:d4:cf:b8:15:b5:9c:a4:7c:18:b9:3a:b2:81:df: 36:5f:d4:7c:57:19:1a:b1:84:71:b6:b0:ff:68:93:7c:24:4e: 2b:35:84:75:91:14:7c:94:d4:03:c6:d5:8f:0c:fe:da:4b:00: 6e:dd:45:3c:02:45:4e:46:ab:4b:fc:60:ba:f2:f2:1d:52:63: 02:b4:c1:a2:a6:cc:36:80:fc:26:17:62:18:d8:b7:a5:a5:91: 91:14:8e:a9:2d:75:d3:8e:64:a9:55:ac:12:c5:1d:94:4f:bc: 3c:dc:7d:d5:c0:8b:fe:79:f5:d2:eb:ee:c6:1a:f4:3f:02:1c: 75:ac:04:44:dd:37:04:9e:c0:86:3b:87:6d:2e:8a:48:a5:14: f3:1e:32:79:f8:a6:87:03:ff:39:67:be:f6:10:6e:0b:af:5b: 4f:97:16:0c:88:29:5d:33:1d:f8:83:62:f6:51:6e:72:ea:62: fb:26:a1:eb:42:23:72:4f:52:3a:9f:81:ad:b1:1d:f5:47:2b: ea:e0:e7:8a:81:90:69:af:cc:37:7e:c8:ac:53:64:f1:4b:ed: 6e:ed:1d:5b:87:ae:c6:21:dc:b3:84:33:c2:52:e1:3e:af:4e: a0:25:c4:54:ea:85:94:cf:b7:00:56:ea:94:73:3d:ec:17:b2: a1:f3:e4:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLQ68nBT6IXDkz/zHjU3TfMWKuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5 QTZDQzgwODAeFw0yNjA2MTYxNDQyMDdaFw0yNjA2MTcxODI3MDdaMDMxMTAvBgNV BAMTKDE2ODY2NkJBODA0MjkzMzFGNzM4MDQ2NkZGRUMxNjg1OUZEQTU5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCij1VbqxAuStr6r8GJux7PfwSS B//XqQeZ/qHH9wMoqkaNCXr9UR6Y1JI6um7xUEgR45MFK1IdukJmhzTR+zeSuYZN 0NuDwtU4WqOdCOenOkM1eNKfFmSITvqNPkECLW/VxOSHpDmMqO2frIHiB8eNhd6V Qc7Ytiz5N8EVWq5OUQO4mr3sLzfGCroRLyl7vF53CGHTSiwDKSiRI9WcKEBVw7mr YQrSfRQne/320T4UsjSnT6v+HW4ZXl26REbIo/6Xn3CV+7EXhnGSL5m8OU6dhZwk sZPNZt5wwgD6dBpRfJ3+UXk2h+WoF6gM6mh1qtPFgvrh8zFFnra/RsCUDUU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFoZmuoBCkzH3OARm/+wWhZ/aWfwwHwYDVR0j BBgwFoAU5doh23bOkdbvckgv/f4CFppsyAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI5Zjg5MDItMWEwNi00NWE4LWE5OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3 NkNFOTFENkVGNzI0ODJGRkRGRTAyMTY5QTZDQzgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNURBMjFEQjc2Q0U5MUQ2RUY3MjQ4MkZGREZFMDIxNjlBNkND ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvRTVEQTIxREI3NkNFOTFENkVGNzI0ODJGRkRGRTAy MTY5QTZDQzgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAV48ibUz7gVtZykfBi5OrKB3zZf1HxXGRqx hHG2sP9ok3wkTis1hHWRFHyU1APG1Y8M/tpLAG7dRTwCRU5Gq0v8YLry8h1SYwK0 waKmzDaA/CYXYhjYt6WlkZEUjqktddOOZKlVrBLFHZRPvDzcfdXAi/559dLr7sYa 9D8CHHWsBETdNwSewIY7h20uikilFPMeMnn4pocD/zlnvvYQbguvW0+XFgyIKV0z HfiDYvZRbnLqYvsmoetCI3JPUjqfga2xHfVHK+rg54qBkGmvzDd+yKxTZPFL7W7t HVuHrsYh3LOEM8JS4T6vTqAlxFTqhZTPtwBW6pRzPewXsqHz5P8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:17 2026 by rpki-client