$ rpki-client -vvf rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft File: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft (raw, json) Hash identifier: FEN61OCPShdp4iQfJUMPlCmAqR+vuUCj6LTU1v6GT98= Subject key identifier: BE:F2:00:B6:AE:FC:D4:1B:8B:44:89:3D:A0:AF:98:DB:A8:0D:54:08 Authority key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 Certificate issuer: /CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Certificate serial: 1BBC4086AB57B48178B06164BE6127E6F27B5591 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft Manifest number: 3C Signing time: Mon 15 Jun 2026 00:11:33 +0000 Manifest this update: Mon 15 Jun 2026 00:06:33 +0000 Manifest next update: Tue 16 Jun 2026 01:45:33 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: OU9KpCVaFyFqRPmbCa6ZHBE8msf8iFpD0/BG/bOi1fc=) 2: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: G9l0N/5Yff3x6/dE83tqKmpystb7dUXqvchJKY01Vfc=) 3: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: PIAfDzknn9MyXCe2w271kJi6m07dYGdxpQ/h99WENdo=) 4: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: SLypnwrf3BxVH5EVMKZIAtA3FLjbxPQy2OlEBbQP8b8=) 5: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl (hash: MpLgStGMNZ2OQpbqxy8KoKQtS3y6jHefO+GNiYJtakU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 01:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bc:40:86:ab:57:b4:81:78:b0:61:64:be:61:27:e6:f2:7b:55:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Validity Not Before: Jun 15 00:06:33 2026 GMT Not After : Jun 16 01:45:33 2026 GMT Subject: CN=BEF200B6AEFCD41B8B44893DA0AF98DBA80D5408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:f3:57:ca:24:db:52:70:8e:e8:2b:22:15: ed:3f:32:fd:e5:d5:e7:26:86:ca:d1:e7:f3:d4:4f: b0:61:a4:82:49:e3:ba:ba:bc:a2:2f:53:5e:a5:08: 09:76:1c:20:7c:16:66:b0:1d:6e:e2:bc:b4:79:4b: 58:10:4c:63:99:93:63:eb:2f:8a:00:1d:b3:e3:0e: ba:5d:79:b7:64:14:31:47:55:d7:94:c4:1b:f5:eb: 84:8d:45:4e:ee:2a:13:c8:65:b4:ef:33:7e:64:a8: bf:2a:30:c8:09:e5:61:2a:04:4b:72:be:a8:a6:ae: 26:70:ab:93:03:84:8c:bb:79:25:cd:79:4d:7c:45: f0:bd:b2:0b:cf:6a:7c:68:c5:27:ca:3b:08:42:ea: 45:0d:e0:77:25:a9:8a:f5:05:28:64:a9:01:3f:1a: a8:c2:e5:be:4b:6a:bf:a8:10:2c:79:56:49:06:1d: 07:bc:00:a9:9a:52:92:a7:58:94:36:a7:04:d6:ce: e1:01:e8:ca:c3:37:72:0f:e9:66:21:0e:c8:5f:7d: 0d:33:60:f6:5c:e3:58:3f:45:9a:cd:04:d9:9e:2c: fa:2a:09:cc:d4:73:f2:36:39:d8:29:1b:bc:01:72: 3c:f7:a6:32:13:f7:1e:06:c5:33:f2:e1:df:df:00: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F2:00:B6:AE:FC:D4:1B:8B:44:89:3D:A0:AF:98:DB:A8:0D:54:08 X509v3 Authority Key Identifier: keyid:E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:68:00:0f:f8:2b:94:96:87:a4:d6:12:d8:6d:54:66:26:2a: 89:7e:28:15:74:fe:a3:c5:df:18:20:16:58:e4:62:7c:3f:d5: 78:8e:4d:67:8a:7a:c8:c0:be:1e:88:9d:e7:c3:40:e6:77:af: 11:fe:5f:c9:3b:58:06:f9:48:c9:b8:b1:2c:17:0b:a7:22:5c: e4:c3:08:db:59:c3:db:76:8c:5d:77:34:3d:5d:b4:e4:c7:da: b4:f4:7e:3b:cc:ee:11:61:61:01:5c:49:e8:8f:1f:c8:01:71: c9:ee:2a:44:f2:bd:1b:f6:b3:36:b9:55:ee:85:db:5b:db:71: 94:70:e8:a4:5d:f2:af:7c:82:92:65:d3:30:6d:14:1d:29:22: f2:bf:02:c2:eb:13:19:ae:ce:aa:91:c4:8b:fb:6e:89:4d:ce: e7:2b:bd:b7:e5:cd:2a:9f:7d:5d:a7:02:5e:60:9e:b1:5f:74: 0f:25:f8:a6:d7:b5:5a:42:31:35:f1:6f:e7:64:05:60:e1:18: cb:64:bc:a1:45:8a:e5:e0:44:aa:f4:e2:63:8e:81:a3:f6:6a: c6:14:b3:33:a3:03:bd:26:fa:47:f3:3a:d5:6c:7d:57:da:bd: 70:40:a4:15:ee:05:24:3b:f2:34:7d:15:21:ed:f8:e4:0c:10: 04:e0:21:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7xAhqtXtIF4sGFkvmEn5vJ7VZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdC ODBGOUVEMjAeFw0yNjA2MTUwMDA2MzNaFw0yNjA2MTYwMTQ1MzNaMDMxMTAvBgNV BAMTKEJFRjIwMEI2QUVGQ0Q0MUI4QjQ0ODkzREEwQUY5OERCQTgwRDU0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxh/NXyiTbUnCO6CsiFe0/Mv3l 1ecmhsrR5/PUT7BhpIJJ47q6vKIvU16lCAl2HCB8FmawHW7ivLR5S1gQTGOZk2Pr L4oAHbPjDrpdebdkFDFHVdeUxBv164SNRU7uKhPIZbTvM35kqL8qMMgJ5WEqBEty vqimriZwq5MDhIy7eSXNeU18RfC9sgvPanxoxSfKOwhC6kUN4HclqYr1BShkqQE/ GqjC5b5Lar+oECx5VkkGHQe8AKmaUpKnWJQ2pwTWzuEB6MrDN3IP6WYhDshffQ0z YPZc41g/RZrNBNmeLPoqCczUc/I2OdgpG7wBcjz3pjIT9x4GxTPy4d/fAOAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvvIAtq781BuLRIk9oK+Y26gNVAgwHwYDVR0j BBgwFoAU4wp4KU0aa2pj0n433W/G57gPntIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTYxY2Y3NzctOGFkZi00ZWYxLThkNmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0 RDFBNkI2QTYzRDI3RTM3REQ2RkM2RTdCODBGOUVEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMzBBNzgyOTREMUE2QjZBNjNEMjdFMzdERDZGQzZFN0I4MEY5 RUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvRTMwQTc4Mjk0RDFBNkI2QTYzRDI3RTM3REQ2RkM2 RTdCODBGOUVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFoAA/4K5SWh6TWEthtVGYmKol+KBV0/qPF 3xggFljkYnw/1XiOTWeKesjAvh6InefDQOZ3rxH+X8k7WAb5SMm4sSwXC6ciXOTD CNtZw9t2jF13ND1dtOTH2rT0fjvM7hFhYQFcSeiPH8gBccnuKkTyvRv2sza5Ve6F 21vbcZRw6KRd8q98gpJl0zBtFB0pIvK/AsLrExmuzqqRxIv7bolNzucrvbflzSqf fV2nAl5gnrFfdA8l+KbXtVpCMTXxb+dkBWDhGMtkvKFFiuXgRKr04mOOgaP2asYU szOjA70m+kfzOtVsfVfavXBApBXuBSQ78jR9FSHt+OQMEATgIcI= -----END CERTIFICATE-----Generated at Mon Jun 15 16:30:37 2026 by rpki-client