$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: WgpPO50MVphp3PPhV3KCPyLDDQXWWXzcatIGUObP6Ag= Subject key identifier: ED:6E:88:AB:AC:51:95:D6:DC:24:9A:87:5A:7D:0F:55:74:BC:DC:73 Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: 618FD5348CA67F7D15261871A83F799DF39F83FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:13:57 +0000 Manifest this update: Tue 16 Jun 2026 16:08:57 +0000 Manifest next update: Wed 17 Jun 2026 17:55:57 +0000 Files and hashes: 1: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) 2: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: LNsjfj71IwQtqJATzqY70Q1rTqR5zn2LX80No2d37jI=) 3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) 4: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) 5: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8f:d5:34:8c:a6:7f:7d:15:26:18:71:a8:3f:79:9d:f3:9f:83:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: Jun 16 16:08:57 2026 GMT Not After : Jun 17 17:55:57 2026 GMT Subject: CN=ED6E88ABAC5195D6DC249A875A7D0F5574BCDC73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:19:54:91:4e:0b:97:8a:eb:a1:3a:a8:64: 94:fb:97:c6:ab:a6:6a:1d:71:4c:ff:f0:97:ba:ff: 06:90:34:bf:4e:ca:3f:42:a8:d5:27:8b:ba:9f:ed: 39:a4:f0:5e:13:60:6b:04:c9:3b:e6:e6:fd:19:d5: 3b:3e:58:3b:05:65:4b:c4:ed:c9:19:b8:3e:a2:d7: e6:11:88:03:36:09:b6:e8:35:fb:e1:21:14:1d:4c: a6:8c:1b:08:23:0b:4c:14:3a:9a:ce:3b:0a:8d:e3: c7:52:9f:fd:d6:c1:20:11:47:45:65:93:d0:ab:15: df:2a:2b:e2:68:4d:44:9f:86:b0:79:98:e3:43:64: d1:7d:02:c1:5f:45:b2:cc:86:4b:42:a2:02:9d:35: 6e:fc:9b:2d:bb:41:10:6e:55:5f:09:b9:1f:29:6f: 1d:a8:05:23:4a:da:e3:b1:6b:c0:c8:33:38:7f:8f: 3c:34:56:d8:9d:14:be:b2:79:7a:10:2d:b2:da:d1: aa:5d:81:f7:0f:94:62:1b:75:57:ec:3b:48:20:3c: 19:7a:b7:24:ca:26:e0:43:02:d4:5e:fa:df:9c:3a: 04:77:31:7a:c8:c4:55:65:47:db:d6:79:44:9d:bf: ef:36:63:4b:7f:cd:00:29:54:68:af:62:bf:b6:d7: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6E:88:AB:AC:51:95:D6:DC:24:9A:87:5A:7D:0F:55:74:BC:DC:73 X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6b:6c:a1:c2:37:aa:a8:fc:ec:7a:c0:29:72:a8:06:68:63: 2b:fa:2d:83:ee:a4:9a:14:44:81:44:6f:5a:17:5c:56:2f:0c: 4f:03:b6:a2:43:63:22:84:15:45:45:8e:a1:cf:05:1f:c5:7d: 47:f2:cd:c9:5a:76:6f:9a:d4:bd:ff:68:9b:d0:4d:49:f7:35: 39:ba:27:7d:42:2e:79:db:ad:24:af:2a:ff:bf:d3:3b:4b:d2: c3:20:f3:ef:8b:85:bb:45:24:be:18:69:cf:e2:5e:50:2a:6f: a8:33:02:05:80:5c:c8:38:b0:f1:d9:aa:2f:98:12:44:53:1e: 32:42:52:cf:ea:e8:e6:71:98:15:b1:80:46:ed:35:f0:43:48: 3e:ce:91:2e:44:01:50:7e:06:08:5a:d4:a0:19:0e:c9:b2:c6: 0a:c9:ad:ff:e4:50:ba:97:a3:a1:b1:ef:69:3c:df:59:b8:cb: 2f:e6:0a:0f:56:cd:04:8a:26:45:f8:d6:7b:5c:71:03:73:f0: 98:d6:94:14:6a:0a:c8:b5:db:bf:d9:4d:ee:68:0b:eb:d9:79: fb:ff:0f:32:ee:27:62:38:cd:f2:71:5e:bf:f1:c1:14:af:75: 5b:b1:07:34:6a:42:b6:fc:23:93:73:cb:2f:47:aa:bf:3e:ec: 29:66:90:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYY/VNIymf30VJhhxqD95nfOfg/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjA2MTYxNjA4NTdaFw0yNjA2MTcxNzU1NTdaMDMxMTAvBgNV BAMTKEVENkU4OEFCQUM1MTk1RDZEQzI0OUE4NzVBN0QwRjU1NzRCQ0RDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3xlUkU4Ll4rroTqoZJT7l8ar pmodcUz/8Je6/waQNL9Oyj9CqNUni7qf7Tmk8F4TYGsEyTvm5v0Z1Ts+WDsFZUvE 7ckZuD6i1+YRiAM2CbboNfvhIRQdTKaMGwgjC0wUOprOOwqN48dSn/3WwSARR0Vl k9CrFd8qK+JoTUSfhrB5mONDZNF9AsFfRbLMhktCogKdNW78my27QRBuVV8JuR8p bx2oBSNK2uOxa8DIMzh/jzw0VtidFL6yeXoQLbLa0apdgfcPlGIbdVfsO0ggPBl6 tyTKJuBDAtRe+t+cOgR3MXrIxFVlR9vWeUSdv+82Y0t/zQApVGivYr+217obAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7W6Iq6xRldbcJJqHWn0PVXS83HMwHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5rbKHCN6qo/Ox6wClyqAZoYyv6LYPupJoU RIFEb1oXXFYvDE8DtqJDYyKEFUVFjqHPBR/FfUfyzcladm+a1L3/aJvQTUn3NTm6 J31CLnnbrSSvKv+/0ztL0sMg8++LhbtFJL4Yac/iXlAqb6gzAgWAXMg4sPHZqi+Y EkRTHjJCUs/q6OZxmBWxgEbtNfBDSD7OkS5EAVB+Bgha1KAZDsmyxgrJrf/kULqX o6Gx72k831m4yy/mCg9WzQSKJkX41ntccQNz8JjWlBRqCsi127/ZTe5oC+vZefv/ DzLuJ2I4zfJxXr/xwRSvdVuxBzRqQrb8I5Nzyy9Hqr8+7ClmkBg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:58 2026 by rpki-client