$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: J8F2uAEFT4cXY+0IOnJbNSSYQM9Fontn6YhYsQLjkyI= Subject key identifier: BE:66:BD:5A:A5:53:32:EF:C4:16:10:B3:CA:B8:DE:F5:FF:42:D8:F8 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 7133A063CC01F50E624697F058F67881D07B9330 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 19:43:09 +0000 Manifest this update: Sat 13 Jun 2026 19:38:09 +0000 Manifest next update: Sun 14 Jun 2026 20:31:09 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 2: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: ChWOeyfRj7KCcvj1SE5XEhzrrX3lLT9pWBVHBVzTRIc=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) 5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 6: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:33:a0:63:cc:01:f5:0e:62:46:97:f0:58:f6:78:81:d0:7b:93:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Jun 13 19:38:09 2026 GMT Not After : Jun 14 20:31:09 2026 GMT Subject: CN=BE66BD5AA55332EFC41610B3CAB8DEF5FF42D8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:9d:2f:b4:5c:4d:7c:e1:e1:d9:78:cc:9f: a1:0a:4d:88:37:96:96:3c:38:30:81:05:92:2e:c8: 2f:3a:9f:64:4c:1d:45:54:f1:69:22:e4:43:8f:bf: fb:c1:ed:6c:24:88:e0:10:16:86:81:3d:ce:fb:bb: ff:e9:2c:64:7f:62:62:48:7b:ba:49:ac:69:5b:74: cc:a2:08:e7:56:81:53:2a:8f:5f:02:47:e8:06:f1: ff:42:49:4f:a2:95:9e:18:f4:b9:1e:a7:c7:61:36: 07:dc:ab:8a:ec:2e:d5:6e:ba:92:0f:df:9f:df:6c: df:d1:eb:a8:4e:c7:f1:1b:86:ab:f5:12:53:fc:c7: 45:6e:7b:8c:32:07:09:bf:34:d9:97:dc:09:e0:3c: 3d:8b:64:d4:a9:48:97:87:ca:a5:3a:df:55:81:03: ca:58:73:45:4b:55:68:34:54:8f:d2:6c:ac:7f:7d: bb:f5:c9:c7:5c:2d:51:c7:d7:c4:cb:e4:50:36:88: 76:3c:f9:1d:37:dc:92:36:02:cb:c3:71:cd:ae:ca: e3:11:b3:4d:12:8a:4f:3f:17:30:df:67:4d:00:05: 94:36:0c:20:cd:2e:22:81:c4:d4:7f:8c:bb:9a:15: 69:96:a9:0a:8b:12:b3:36:18:fa:5e:5e:0f:35:31: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:66:BD:5A:A5:53:32:EF:C4:16:10:B3:CA:B8:DE:F5:FF:42:D8:F8 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:48:26:07:d1:1e:a0:06:66:30:c4:c8:59:9a:18:93:c0:e6: 6d:fd:ab:e8:ea:b0:47:4d:ca:2d:42:01:65:5c:7a:47:fe:48: b6:85:86:0c:74:9a:84:a5:23:b9:97:c0:53:ec:24:d1:d8:53: bd:7d:54:55:98:79:6b:ff:08:c1:42:d7:eb:52:68:8e:54:03: a6:04:73:0c:45:bb:11:b6:61:c0:de:ac:f1:f1:09:22:ad:80: 1a:22:e7:e2:a4:e3:0a:04:29:41:69:27:4a:27:8d:2b:95:0e: 19:65:d0:52:e2:d9:c4:4e:61:e9:30:f5:b1:36:67:d6:ba:ab: ba:d2:64:ed:c2:62:df:8a:52:3c:ba:7b:3b:88:a4:c7:7c:e1: 07:c0:5f:1a:26:ba:2d:38:cd:93:d6:6e:77:93:0e:d0:70:54: 00:a2:6d:9f:23:4c:fc:e3:1f:7a:2f:a2:f5:7b:cf:c4:c0:f5: dc:86:9f:15:6e:9d:1b:52:81:72:cd:bd:f2:90:ab:16:87:a0: ee:e4:d5:87:13:88:16:1b:86:40:0e:00:bc:41:46:20:97:c3: 09:ed:cc:18:a5:0c:6e:c7:b2:13:95:b4:9a:85:1e:23:60:db: 25:88:34:ee:8e:cd:b8:9c:0f:c2:ce:c2:6d:3d:7b:90:2b:da: 3f:e2:ac:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTOgY8wB9Q5iRpfwWPZ4gdB7kzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA2MTMxOTM4MDlaFw0yNjA2MTQyMDMxMDlaMDMxMTAvBgNV BAMTKEJFNjZCRDVBQTU1MzMyRUZDNDE2MTBCM0NBQjhERUY1RkY0MkQ4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+p0vtFxNfOHh2XjMn6EKTYg3 lpY8ODCBBZIuyC86n2RMHUVU8Wki5EOPv/vB7WwkiOAQFoaBPc77u//pLGR/YmJI e7pJrGlbdMyiCOdWgVMqj18CR+gG8f9CSU+ilZ4Y9Lkep8dhNgfcq4rsLtVuupIP 35/fbN/R66hOx/Ebhqv1ElP8x0Vue4wyBwm/NNmX3AngPD2LZNSpSJeHyqU631WB A8pYc0VLVWg0VI/SbKx/fbv1ycdcLVHH18TL5FA2iHY8+R033JI2AsvDcc2uyuMR s00Sik8/FzDfZ00ABZQ2DCDNLiKBxNR/jLuaFWmWqQqLErM2GPpeXg81MSRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvma9WqVTMu/EFhCzyrje9f9C2PgwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChIJgfRHqAGZjDEyFmaGJPA5m39q+jqsEdN yi1CAWVcekf+SLaFhgx0moSlI7mXwFPsJNHYU719VFWYeWv/CMFC1+tSaI5UA6YE cwxFuxG2YcDerPHxCSKtgBoi5+Kk4woEKUFpJ0onjSuVDhll0FLi2cROYekw9bE2 Z9a6q7rSZO3CYt+KUjy6ezuIpMd84QfAXxomui04zZPWbneTDtBwVACibZ8jTPzj H3ovovV7z8TA9dyGnxVunRtSgXLNvfKQqxaHoO7k1YcTiBYbhkAOALxBRiCXwwnt zBilDG7HshOVtJqFHiNg2yWINO6OzbicD8LOwm09e5Ar2j/irEA= -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:21 2026 by rpki-client