$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft File: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft (raw, json) Hash identifier: 0E3dOg0Ezc/9CGBumYgAGxJv8V4xTwLM3S/4Q70VUqg= Subject key identifier: 43:04:34:53:7F:93:06:64:9D:EB:20:CF:85:1F:8A:E0:13:C4:C9:2C Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 1D70A00BF7350A1B71EFCD88BBB8D1F5500D9C25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 12:24:41 +0000 Manifest this update: Sat 13 Jun 2026 12:19:41 +0000 Manifest next update: Sun 14 Jun 2026 16:02:41 +0000 Files and hashes: 1: E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl (hash: 3n40nkx+VDeK6njCiFafkq+Qr4DoRPL0q3uNRKYXml4=) 2: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=) 3: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:70:a0:0b:f7:35:0a:1b:71:ef:cd:88:bb:b8:d1:f5:50:0d:9c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: Jun 13 12:19:41 2026 GMT Not After : Jun 14 16:02:41 2026 GMT Subject: CN=430434537F9306649DEB20CF851F8AE013C4C92C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:f4:cd:f0:74:38:aa:c7:4c:c8:13:cd:33: e7:76:8a:bc:3f:18:25:1c:b6:fc:f9:b4:72:93:f4: 00:26:f2:07:a7:4e:0e:8e:25:60:97:4b:d8:94:d8: 9d:cf:cc:bd:86:aa:ac:07:42:7c:76:47:f3:d2:f1: c9:6e:d9:07:61:11:26:e0:80:70:8b:85:72:ce:23: 46:2f:7b:c6:37:f6:cb:f6:70:c2:85:f0:53:0f:19: 56:f3:0d:c4:13:fa:fe:c3:3f:43:d2:2e:2d:81:5c: 3d:6f:76:f1:0c:8b:e1:2b:4a:bc:99:13:6d:36:86: 1b:53:8c:23:44:37:5f:0b:1a:53:c6:fb:8a:c9:d2: 9b:d2:99:2f:0d:2b:0e:69:7d:38:dc:e5:4e:9c:ba: 96:aa:73:23:88:3b:fb:fe:18:e9:ad:4e:98:30:af: 6b:48:cf:ab:30:06:bd:58:3c:f5:75:da:34:6e:e6: da:e7:19:b8:65:a8:ae:cf:15:16:2f:23:e0:4c:7f: 7d:98:52:79:9c:58:b9:4c:3a:a0:45:c6:40:99:3a: 6c:bd:5f:c9:dc:e3:08:6f:30:e5:45:73:a4:f6:21: fb:2d:8e:46:06:ea:f3:04:68:8d:47:b1:fd:ab:12: 90:fc:09:ec:cd:15:69:12:8d:0d:27:f9:40:5b:7c: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:34:53:7F:93:06:64:9D:EB:20:CF:85:1F:8A:E0:13:C4:C9:2C X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:aa:82:28:a8:03:ea:25:1d:9a:69:31:00:f5:68:8f:f2:4a: 54:36:d7:4a:da:3b:2a:20:3a:4a:28:41:17:42:52:71:73:63: 1a:62:59:fb:72:6a:dd:b0:cd:74:a4:d1:d1:e3:3b:0b:2c:d9: 66:61:f7:9b:a1:f1:a8:79:d0:48:4f:dc:69:04:78:b6:1d:59: 7e:c9:85:24:29:5e:bd:29:77:a4:19:3c:29:e4:68:02:8f:7e: 82:3d:0f:8a:0c:92:20:c3:e6:43:c1:c2:e4:43:4c:cb:cd:33: d8:5a:93:cf:38:6d:de:99:c1:57:28:13:0c:98:1c:2a:63:34: 69:60:4c:04:a9:ef:01:52:83:ee:61:02:76:61:5b:55:11:f7: f6:e8:65:17:65:03:0b:1e:48:62:31:f6:10:52:a9:43:5f:a5: d6:6f:39:91:d8:aa:42:62:47:a7:20:d8:82:6a:f6:95:a2:39: d9:79:73:36:a1:25:bb:13:15:06:74:02:50:49:87:5d:36:6b: 23:d9:10:ae:61:9a:d3:80:97:ae:15:0d:cc:ad:cf:2e:df:28: 18:d2:2f:0d:0a:90:ba:57:88:84:a5:cd:f2:2e:1b:0e:9d:f1: aa:96:33:e2:2a:11:e9:49:ca:70:d6:85:ce:91:56:fe:d3:ae: c0:2e:10:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXCgC/c1Chtx782Iu7jR9VANnCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA2MTMxMjE5NDFaFw0yNjA2MTQxNjAyNDFaMDMxMTAvBgNV BAMTKDQzMDQzNDUzN0Y5MzA2NjQ5REVCMjBDRjg1MUY4QUUwMTNDNEM5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bPTN8HQ4qsdMyBPNM+d2irw/ GCUctvz5tHKT9AAm8genTg6OJWCXS9iU2J3PzL2GqqwHQnx2R/PS8clu2QdhESbg gHCLhXLOI0Yve8Y39sv2cMKF8FMPGVbzDcQT+v7DP0PSLi2BXD1vdvEMi+ErSryZ E202hhtTjCNEN18LGlPG+4rJ0pvSmS8NKw5pfTjc5U6cupaqcyOIO/v+GOmtTpgw r2tIz6swBr1YPPV12jRu5trnGbhlqK7PFRYvI+BMf32YUnmcWLlMOqBFxkCZOmy9 X8nc4whvMOVFc6T2IfstjkYG6vMEaI1Hsf2rEpD8CezNFWkSjQ0n+UBbfEWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQwQ0U3+TBmSd6yDPhR+K4BPEySwwHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1 RURCQkZCRTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmqgiioA+olHZppMQD1aI/ySlQ210raOyog OkooQRdCUnFzYxpiWftyat2wzXSk0dHjOwss2WZh95uh8ah50EhP3GkEeLYdWX7J hSQpXr0pd6QZPCnkaAKPfoI9D4oMkiDD5kPBwuRDTMvNM9hak884bd6ZwVcoEwyY HCpjNGlgTASp7wFSg+5hAnZhW1UR9/boZRdlAwseSGIx9hBSqUNfpdZvOZHYqkJi R6cg2IJq9pWiOdl5czahJbsTFQZ0AlBJh102ayPZEK5hmtOAl64VDcytzy7fKBjS Lw0KkLpXiISlzfIuGw6d8aqWM+IqEelJynDWhc6RVv7TrsAuEHI= -----END CERTIFICATE-----Generated at Sat Jun 13 15:00:10 2026 by rpki-client