$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft File: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft (raw, json) Hash identifier: U9QTWvP7Xb0rLS7bpULcleeM46Yz3FrmlTiKj+zwJMs= Subject key identifier: BD:86:DE:20:EA:03:FE:20:EA:64:36:39:E8:79:A4:32:11:62:25:70 Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB Certificate issuer: /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Certificate serial: 260D78CE88864FECE331F5424841B6896FE3B46E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:56:54 +0000 Manifest this update: Tue 16 Jun 2026 22:51:54 +0000 Manifest next update: Thu 18 Jun 2026 02:40:54 +0000 Files and hashes: 1: E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl (hash: HusB+NvgWSLPYfyWtg5FyCcCZBgXk/9GF76xfkVfuns=) 2: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: JI1QrINQKw3fjadw40FIbP+TVzkcpzaoVCD4jvQ/h04=) 3: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: ySpYECTdEpPiYQXcAvE+ScNUXGwRe6ThRPZGhAvNk2s=) 4: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: OK3H4Npcn6XOhpp51geVZ4Jq+X5gSteni67GraMNgZs=) 5: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: 3GTJ9ASFLrepqsCMecKCsjwg26cUhjn00ThNjhDZtps=) 6: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: iYftcLRKhDFwawem+AQ5tjTifMhYvu82o/DYOa4xV1U=) 7: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: QnST8vjK8bFCBoNsPJhM5VHBI9hMH1UeN2aqQjcNdSs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0d:78:ce:88:86:4f:ec:e3:31:f5:42:48:41:b6:89:6f:e3:b4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB Validity Not Before: Jun 16 22:51:54 2026 GMT Not After : Jun 18 02:40:54 2026 GMT Subject: CN=BD86DE20EA03FE20EA643639E879A43211622570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:6a:6b:22:26:5e:d5:70:0c:ef:98:a2:db: 80:25:8f:2b:40:c5:0a:ac:b6:29:87:de:1e:b6:9f: 44:a6:bb:56:a3:ff:85:0e:6a:fa:ef:dd:40:64:d3: f6:a3:51:a0:6c:92:61:82:f8:6b:f3:55:5d:b6:1f: 8c:2f:47:38:47:59:05:34:94:8d:35:cc:1d:97:57: f5:34:79:b8:6c:86:9f:a0:a6:a6:62:91:cb:43:f2: 8e:3c:36:35:89:0b:3f:f0:26:ee:57:0a:e0:83:45: 6e:41:c3:33:74:9b:d7:cc:29:8e:db:3a:59:16:0f: 79:dc:bc:93:e1:4d:9e:6d:e5:43:40:2a:14:eb:0f: 48:0c:bb:32:2d:e4:ab:e0:97:7b:92:b7:bf:fa:9f: 33:61:6c:e8:e7:13:5c:c8:c4:04:54:31:3f:27:3b: a4:86:f5:85:27:7b:56:01:45:00:ec:b4:a2:1c:03: 7a:7e:68:c3:5a:05:12:ad:69:37:ba:06:eb:ab:80: f3:41:6f:8b:18:14:8e:d5:c7:27:e0:65:47:2d:9b: 74:83:c7:3d:df:24:54:80:d8:39:03:d9:a6:92:04: cc:35:3a:51:4d:5b:41:e8:84:9f:15:ff:fe:3f:58: 73:0e:6d:c4:76:c4:82:78:1e:05:b1:d7:29:20:d8: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:86:DE:20:EA:03:FE:20:EA:64:36:39:E8:79:A4:32:11:62:25:70 X509v3 Authority Key Identifier: keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f4:aa:cf:07:eb:f0:13:7e:d7:c4:7b:c9:7d:39:a8:bc:a8: c7:d7:d9:1e:cf:39:6a:b2:3b:33:2d:61:17:6e:40:72:72:92: 7d:f6:b7:2b:19:de:74:af:0b:6a:f3:2e:4e:3c:de:67:c4:90: b6:79:85:11:04:21:48:4d:90:10:1b:22:cd:52:e8:c4:d4:23: ab:49:8d:e9:f7:b3:35:42:65:b9:d6:22:b0:4f:93:c6:1a:39: 51:ad:1d:2b:8a:48:48:cd:e8:1f:bb:58:fa:a2:0b:bf:a1:1c: 4c:98:2b:63:c6:88:9b:47:0f:f3:dd:08:a4:36:f1:8d:3f:bd: 4f:b2:67:f0:0f:3d:18:29:a2:60:67:3e:23:b4:aa:4b:3b:39: 63:19:bb:c2:69:bb:71:d1:86:78:61:70:e9:88:48:88:5b:1f: 52:d9:ca:d4:06:ff:ef:38:23:91:40:d2:4d:57:26:49:71:93: 1c:97:66:bc:77:ca:12:e4:32:3c:31:3f:93:dc:95:d9:cd:3b: e2:c5:00:e2:6b:85:ff:51:c7:01:70:63:46:13:fb:1b:ab:b8: 63:46:2e:cd:a1:2f:53:69:7e:e6:b6:2e:ac:2e:d8:9f:4e:86: 52:30:3b:c8:1b:bf:d1:69:61:96:ae:64:93:d8:b6:33:db:8c: 03:bb:89:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJg14zoiGT+zjMfVCSEG2iW/jtG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5 RkMyNTREQjAeFw0yNjA2MTYyMjUxNTRaFw0yNjA2MTgwMjQwNTRaMDMxMTAvBgNV BAMTKEJEODZERTIwRUEwM0ZFMjBFQTY0MzYzOUU4NzlBNDMyMTE2MjI1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74GprIiZe1XAM75ii24AljytA xQqstimH3h62n0Smu1aj/4UOavrv3UBk0/ajUaBskmGC+GvzVV22H4wvRzhHWQU0 lI01zB2XV/U0ebhshp+gpqZikctD8o48NjWJCz/wJu5XCuCDRW5BwzN0m9fMKY7b OlkWD3ncvJPhTZ5t5UNAKhTrD0gMuzIt5Kvgl3uSt7/6nzNhbOjnE1zIxARUMT8n O6SG9YUne1YBRQDstKIcA3p+aMNaBRKtaTe6BuurgPNBb4sYFI7VxyfgZUctm3SD xz3fJFSA2DkD2aaSBMw1OlFNW0HohJ8V//4/WHMObcR2xIJ4HgWx1ykg2GznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvYbeIOoD/iDqZDY56HmkMhFiJXAwHwYDVR0j BBgwFoAU5AKo/p1ua63c2UFMRST5+J/CVNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjc1NDViODUtOTI3NC00NzBhLWFkMjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5 RDZFNkJBRERDRDk0MTRDNDUyNEY5Rjg5RkMyNTREQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNDAyQThGRTlENkU2QkFERENEOTQxNEM0NTI0RjlGODlGQzI1 NERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvRTQwMkE4RkU5RDZFNkJBRERDRDk0MTRDNDUyNEY5 Rjg5RkMyNTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHX0qs8H6/ATftfEe8l9Oai8qMfX2R7POWqy OzMtYRduQHJykn32tysZ3nSvC2rzLk483mfEkLZ5hREEIUhNkBAbIs1S6MTUI6tJ jen3szVCZbnWIrBPk8YaOVGtHSuKSEjN6B+7WPqiC7+hHEyYK2PGiJtHD/PdCKQ2 8Y0/vU+yZ/APPRgpomBnPiO0qks7OWMZu8Jpu3HRhnhhcOmISIhbH1LZytQG/+84 I5FA0k1XJklxkxyXZrx3yhLkMjwxP5PcldnNO+LFAOJrhf9RxwFwY0YT+xuruGNG Ls2hL1Npfua2Lqwu2J9OhlIwO8gbv9FpYZauZJPYtjPbjAO7iY4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:32 2026 by rpki-client