$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft File: E66029B9A162C470EEC1DFA42227448C5628C7C0.mft (raw, json) Hash identifier: STtv/Bg+wHq5H59q3cbEhb2gRZcv2uZBzupDGam9Ayo= Subject key identifier: 49:48:3B:F3:F4:51:85:80:65:96:C5:05:1E:0D:2A:5B:4B:29:81:B7 Authority key identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 Certificate issuer: /CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Certificate serial: 3FC7FAAC6B103C5684105E998AE8432AFF391EE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:10:21 +0000 Manifest this update: Wed 17 Jun 2026 06:05:21 +0000 Manifest next update: Thu 18 Jun 2026 09:52:21 +0000 Files and hashes: 1: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: JZURZX2DPzG8sUm6gWajmDbIZlI3PcawCAcX3o9QYgk=) 2: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: j2kFk/YVfgNkgWhXwbYb7FWRSsZvQgR1cjJdN6Wj8Os=) 3: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: 1O/1u/y7bw8tPk+iQAFMKxGZw0TRRYTTjU36vawpg/M=) 4: E66029B9A162C470EEC1DFA42227448C5628C7C0.crl (hash: 0s5UngUBQOCHgRrNpyYQE2kdeoyz+dNnxrCm0Yyfsb0=) 5: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: /DI2LBlO0iN+GBCylD6NdAgnYz8xW3+cA1gyspDRqj4=) 6: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: hA+ZmrATAmvRq+AW4JB/hKKoTjrXINAaVyYkBOTFDh0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c7:fa:ac:6b:10:3c:56:84:10:5e:99:8a:e8:43:2a:ff:39:1e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E66029B9A162C470EEC1DFA42227448C5628C7C0 Validity Not Before: Jun 17 06:05:21 2026 GMT Not After : Jun 18 09:52:21 2026 GMT Subject: CN=49483BF3F45185806596C5051E0D2A5B4B2981B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:1e:52:83:32:e5:1d:dd:f3:69:e6:d9:9d: 92:33:e8:ef:98:8f:b6:0f:03:12:d7:23:28:72:da: ad:d6:29:4f:a8:d5:ee:43:84:3a:9d:76:88:48:bb: 43:05:4e:99:63:fe:68:e3:dd:a1:72:fb:b0:1f:30: 5c:7b:ce:05:f0:92:e5:44:33:03:6f:27:20:48:ae: 6e:76:19:d8:43:bd:20:a1:ef:80:5d:40:95:f9:7c: c7:17:91:ee:a3:9e:81:62:6f:d8:2a:ed:b2:e4:32: 7b:92:52:00:02:08:a7:10:32:c3:f3:a9:a2:46:d6: 86:cb:e1:cf:ee:0f:1f:97:45:ef:b2:5d:53:63:87: f5:4c:24:bf:ee:cd:f6:0d:5d:16:26:e7:a8:62:6a: ef:b0:1b:1e:3a:99:9d:41:a4:0b:73:9f:63:cd:56: ec:11:dc:bb:4c:f1:2d:ff:e3:d1:cb:d3:59:68:b7: 18:a0:be:4d:37:38:f7:95:52:12:d1:ff:75:52:19: f4:d1:25:91:27:e5:da:bb:46:26:64:bc:3a:10:82: 71:3b:5f:de:b3:7e:5a:85:ca:7a:8d:04:cf:7d:ef: 24:16:90:a1:e4:d4:81:0d:1a:0a:e8:45:ec:24:d9: cd:f5:59:93:57:88:37:2e:6e:23:a0:61:cf:67:15: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:48:3B:F3:F4:51:85:80:65:96:C5:05:1E:0D:2A:5B:4B:29:81:B7 X509v3 Authority Key Identifier: keyid:E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:21:03:3a:c7:3d:c1:a3:bd:7b:ed:ed:c9:82:f8:e7:9a:54: 51:c7:bc:db:e8:5a:b2:f4:2c:0c:60:f3:db:a4:6e:1d:5f:4f: 7a:33:a1:5c:3c:08:be:1c:56:a9:1b:db:cc:92:f0:f8:f1:ac: 78:dc:83:0d:d7:cc:08:0d:f6:98:8a:a7:03:a5:a1:4c:39:3f: 71:e7:af:20:f6:88:87:5d:a0:e2:df:ae:fe:2b:4d:8b:00:85: be:23:05:90:ee:7e:32:d7:15:d9:03:48:75:e0:16:3b:f9:03: 89:7b:4e:2c:fd:b6:bf:ed:f9:2c:ec:22:58:01:b0:d2:11:d3: 69:69:ad:9e:ab:bf:70:80:d8:14:b3:18:16:4e:c8:71:71:64: 94:c1:9c:47:43:5e:03:0c:65:6f:ea:77:53:57:79:6a:f9:cc: 4f:5f:04:0c:b8:39:10:a3:27:0c:db:b9:e9:46:80:04:40:5a: 16:97:a8:af:a2:fb:6f:e5:5c:00:b1:9d:a1:96:ca:84:93:c2: 43:71:26:ee:5b:5c:06:42:41:0b:02:92:a4:33:ef:8c:fe:6b: 3f:9f:49:86:22:ca:28:90:3a:2a:ef:0e:2e:90:fe:c9:7c:09: 7c:ee:5a:67:f0:45:dc:ee:1e:27:20:ad:39:93:4a:76:2d:7b: 58:73:b0:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8f6rGsQPFaEEF6ZiuhDKv85HukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1 NjI4QzdDMDAeFw0yNjA2MTcwNjA1MjFaFw0yNjA2MTgwOTUyMjFaMDMxMTAvBgNV BAMTKDQ5NDgzQkYzRjQ1MTg1ODA2NTk2QzUwNTFFMEQyQTVCNEIyOTgxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkR5SgzLlHd3zaebZnZIz6O+Y j7YPAxLXIyhy2q3WKU+o1e5DhDqddohIu0MFTplj/mjj3aFy+7AfMFx7zgXwkuVE MwNvJyBIrm52GdhDvSCh74BdQJX5fMcXke6jnoFib9gq7bLkMnuSUgACCKcQMsPz qaJG1obL4c/uDx+XRe+yXVNjh/VMJL/uzfYNXRYm56hiau+wGx46mZ1BpAtzn2PN VuwR3LtM8S3/49HL01lotxigvk03OPeVUhLR/3VSGfTRJZEn5dq7RiZkvDoQgnE7 X96zflqFynqNBM997yQWkKHk1IENGgroRewk2c31WZNXiDcubiOgYc9nFbArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSUg78/RRhYBllsUFHg0qW0spgbcwHwYDVR0j BBgwFoAU5mApuaFixHDuwd+kIidEjFYox8AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQwZjFhNmUtODNiNi00NTM0LTk2N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlB MTYyQzQ3MEVFQzFERkE0MjIyNzQ0OEM1NjI4QzdDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNjYwMjlCOUExNjJDNDcwRUVDMURGQTQyMjI3NDQ4QzU2MjhD N0MwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvRTY2MDI5QjlBMTYyQzQ3MEVFQzFERkE0MjIyNzQ0 OEM1NjI4QzdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0hAzrHPcGjvXvt7cmC+OeaVFHHvNvoWrL0 LAxg89ukbh1fT3ozoVw8CL4cVqkb28yS8PjxrHjcgw3XzAgN9piKpwOloUw5P3Hn ryD2iIddoOLfrv4rTYsAhb4jBZDufjLXFdkDSHXgFjv5A4l7Tiz9tr/t+SzsIlgB sNIR02lprZ6rv3CA2BSzGBZOyHFxZJTBnEdDXgMMZW/qd1NXeWr5zE9fBAy4ORCj JwzbuelGgARAWhaXqK+i+2/lXACxnaGWyoSTwkNxJu5bXAZCQQsCkqQz74z+az+f SYYiyiiQOirvDi6Q/sl8CXzuWmfwRdzuHicgrTmTSnYte1hzsLc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:23 2026 by rpki-client