$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft File: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft (raw, json) Hash identifier: E/OB0vNitZ2Wm7kx8P0h3o3FovrZ0UzGSjy9z7ugHNw= Subject key identifier: 3E:E8:BD:06:55:85:0E:51:C5:97:C1:96:57:3F:10:63:47:49:ED:76 Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Certificate serial: 6F84522D66E115FA8AE9638A4E8A3016299E6022 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 05:14:16 +0000 Manifest this update: Wed 17 Jun 2026 05:09:16 +0000 Manifest next update: Thu 18 Jun 2026 05:48:16 +0000 Files and hashes: 1: E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl (hash: JFL1Vbs23MYSQd46qtEFUZI44qqDDj6vi5YBqpn6olc=) 2: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: GFz+TTDbnW2nztXcZjgib7laNHpvzTT0hcf+2L3G+7o=) 3: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: EhQ7R7hv9ww9SVAVibUO5OafRSJMymQa0QNdea7zNE0=) 4: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: a9SdeOZSphcGVgljZg1tnbLWdBiFIVD0GygHfLT2ZLs=) 5: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: IBqjxLNXqSTykZaxJEDmSDLPjTO+m3MiFe7W+kVNa1Q=) 6: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: mf3IPyVMZfES2LPj/qKW1uxRQxXFsgdbVk4fq7bhazg=) 7: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: R27uG9wLK3XnlCddZVxdbbwrtPpS8ZSeb7rGWZG6Ph4=) 8: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: 2Vf+pTFqJv7XrQMn75awWPNpommC6ezf5Mi4NO6m5ug=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:84:52:2d:66:e1:15:fa:8a:e9:63:8a:4e:8a:30:16:29:9e:60:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1 Validity Not Before: Jun 17 05:09:16 2026 GMT Not After : Jun 18 05:48:16 2026 GMT Subject: CN=3EE8BD0655850E51C597C196573F10634749ED76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:ae:84:e9:41:b8:b3:df:3e:e2:a4:13:da: 51:77:70:5a:9a:08:69:36:8c:6f:cf:1a:85:d5:44: 0d:8a:81:6c:52:33:87:da:35:f1:4f:7f:b4:88:0f: b2:f2:6c:89:b8:23:ed:4c:94:a3:be:59:6e:01:31: f6:c1:67:60:70:9a:44:30:9c:8a:12:a3:ac:2f:fe: 2e:b9:f8:c2:94:9e:43:01:91:94:7e:1f:49:e7:cd: ad:b9:03:53:b1:cb:d0:45:89:c7:34:67:e8:0f:de: 6a:4e:3e:a6:e6:18:dc:84:f3:68:14:79:ca:c4:4a: 82:02:fd:8e:63:73:2f:f8:7f:1e:01:06:39:c2:5e: 9d:bf:f8:f1:8c:f1:ed:1e:5c:00:41:9d:25:ee:3b: 6e:20:7c:2e:43:7c:a3:53:e0:41:c7:99:2b:d0:d2: 2e:df:4a:cc:67:88:a8:4d:67:a3:b9:90:7d:b0:25: 25:f2:c1:68:2b:5a:0e:52:67:b5:c0:27:62:45:45: 39:02:b5:55:09:89:3d:62:e3:f3:ee:56:14:ff:ed: 14:1d:99:c3:3a:ec:4b:e9:83:b8:b5:df:85:df:ed: 89:74:56:e9:57:b3:95:04:71:e3:49:28:47:8a:ea: b3:ed:bc:1d:7f:c0:fd:be:b1:f9:f0:73:68:46:d8: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:BD:06:55:85:0E:51:C5:97:C1:96:57:3F:10:63:47:49:ED:76 X509v3 Authority Key Identifier: keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a5:ec:23:b0:aa:f0:83:46:93:44:1f:33:b2:a7:6d:ec:95: 4a:1d:31:ce:c5:99:cf:e5:f2:fb:a9:c4:f6:b4:81:71:01:10: 3a:d8:ad:c4:d7:55:49:28:ec:e6:80:68:52:0c:29:39:53:60: 41:3b:e7:e9:98:46:65:9b:7c:8b:c2:60:29:b9:ce:dd:85:b6: 67:2b:c9:33:78:29:97:49:3d:9a:e0:e9:fa:e5:96:32:9b:53: 46:6a:58:e4:45:4e:b3:71:18:49:fe:34:eb:60:19:7c:04:f5: 0d:f5:90:a4:a2:da:4f:2f:9a:6e:a1:6d:7a:73:2b:3b:87:b1: a4:03:fc:12:3d:9f:02:44:b1:03:b0:26:a4:c9:5f:73:30:49: ae:e4:d3:0c:bf:2a:89:8a:f8:c5:d3:26:02:64:23:b7:2c:2d: 54:92:d7:36:ab:f1:c4:1b:d7:14:b7:f1:e2:23:79:aa:aa:b3: 4e:c2:45:fa:7d:45:c8:12:f5:18:3f:f8:96:98:a7:ed:04:e6: b2:91:21:c2:25:9e:92:07:93:38:39:aa:e8:6a:1a:50:11:b8: 4a:d9:5f:6b:4d:1d:52:09:d6:d2:91:3a:bb:77:0a:c2:ac:85: 6b:90:cb:45:fe:eb:dd:42:b9:20:f6:94:cd:f6:5d:fd:7b:8c: d9:3f:6b:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4RSLWbhFfqK6WOKToowFimeYCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1QTNB RTBGNUVDMTAeFw0yNjA2MTcwNTA5MTZaFw0yNjA2MTgwNTQ4MTZaMDMxMTAvBgNV BAMTKDNFRThCRDA2NTU4NTBFNTFDNTk3QzE5NjU3M0YxMDYzNDc0OUVENzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qa6E6UG4s98+4qQT2lF3cFqa CGk2jG/PGoXVRA2KgWxSM4faNfFPf7SID7LybIm4I+1MlKO+WW4BMfbBZ2BwmkQw nIoSo6wv/i65+MKUnkMBkZR+H0nnza25A1Oxy9BFicc0Z+gP3mpOPqbmGNyE82gU ecrESoIC/Y5jcy/4fx4BBjnCXp2/+PGM8e0eXABBnSXuO24gfC5DfKNT4EHHmSvQ 0i7fSsxniKhNZ6O5kH2wJSXywWgrWg5SZ7XAJ2JFRTkCtVUJiT1i4/PuVhT/7RQd mcM67Evpg7i134Xf7Yl0VulXs5UEceNJKEeK6rPtvB1/wP2+sfnwc2hG2F4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPui9BlWFDlHFl8GWVz8QY0dJ7XYwHwYDVR0j BBgwFoAU6X0kBi4+gJE4jg4m3+glo64PXsEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNkYzFiMDUtMmE2OS00NWIwLThjNDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYy RTNFODA5MTM4OEUwRTI2REZFODI1QTNBRTBGNUVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdEMjQwNjJFM0U4MDkxMzg4RTBFMjZERkU4MjVBM0FFMEY1 RUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvRTk3RDI0MDYyRTNFODA5MTM4OEUwRTI2REZFODI1 QTNBRTBGNUVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKl7COwqvCDRpNEHzOyp23slUodMc7Fmc/l 8vupxPa0gXEBEDrYrcTXVUko7OaAaFIMKTlTYEE75+mYRmWbfIvCYCm5zt2Ftmcr yTN4KZdJPZrg6frlljKbU0ZqWORFTrNxGEn+NOtgGXwE9Q31kKSi2k8vmm6hbXpz KzuHsaQD/BI9nwJEsQOwJqTJX3MwSa7k0wy/KomK+MXTJgJkI7csLVSS1zar8cQb 1xS38eIjeaqqs07CRfp9RcgS9Rg/+JaYp+0E5rKRIcIlnpIHkzg5quhqGlARuErZ X2tNHVIJ1tKROrt3CsKshWuQy0X+691CuSD2lM32Xf17jNk/a2w= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:37 2026 by rpki-client