$ rpki-client -vvf rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft File: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft (raw, json) Hash identifier: FU03ITBhJbMTIdnYxtSXV4h9DJ7bM3//RcORb2rlTbc= Subject key identifier: 58:A5:2D:60:70:90:32:50:C1:E5:CD:93:F2:36:5D:4C:4A:17:2C:E4 Authority key identifier: 1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F Certificate issuer: /CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Certificate serial: 6A0AF1FBDDD3186F29A2F4BEDF9C5DF864E746A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 11:45:12 +0000 Manifest this update: Mon 15 Jun 2026 11:40:12 +0000 Manifest next update: Tue 16 Jun 2026 14:28:12 +0000 Files and hashes: 1: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl (hash: eQ7PIZZaYss3hgJ1roatmqR/Vs9+NXOUId8DGDqdvpI=) 2: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: B12SJCFtXXNNoUXjwCcqgBMFjVn7huHWD2lTe7WyRQA=) 3: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: jBCASy1F6Hwq7/RSM0DnwGAyM9nsMAfX8PewBvtkG60=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0a:f1:fb:dd:d3:18:6f:29:a2:f4:be:df:9c:5d:f8:64:e7:46:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Validity Not Before: Jun 15 11:40:12 2026 GMT Not After : Jun 16 14:28:12 2026 GMT Subject: CN=58A52D6070903250C1E5CD93F2365D4C4A172CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:cc:f2:5c:e2:74:5d:bd:e7:a6:2d:64:87: 65:1b:28:ce:bb:a3:7b:0f:52:11:f6:a7:35:93:fc: 8d:e0:26:d0:4b:27:9b:3c:01:2d:17:e0:e8:59:9a: 51:06:da:59:6e:d3:a2:65:6b:14:cb:ba:b9:fe:95: 6a:78:2e:61:06:d8:52:8a:5d:d8:7a:39:32:1e:df: 01:97:ae:2c:a2:dd:03:e0:43:79:66:8e:57:4d:fb: 8c:09:8d:0c:15:1f:cd:d1:d8:f2:d1:c5:81:d5:63: df:89:fd:3e:4b:ad:4f:dd:5c:fe:42:ba:46:6a:d5: b2:07:c3:a0:da:14:bb:75:ea:1b:4d:51:53:89:1c: fb:17:4f:81:67:82:55:c8:13:48:84:a4:c0:c9:3a: af:af:e3:db:35:12:59:14:b0:c5:aa:67:a5:36:2a: 04:ed:44:3e:84:f1:c5:40:0f:6c:02:0f:78:0e:dd: 28:67:39:d5:9e:f3:86:05:e8:7d:72:f6:74:0a:88: 17:15:fa:ad:58:53:b6:ab:b1:44:f1:1f:32:ef:79: 50:aa:09:65:0d:65:e4:75:f8:97:30:8d:0a:a7:68: bf:e6:2d:c4:23:f7:9a:65:13:c3:5a:3d:3c:29:84: 68:6e:90:f5:ea:7d:20:90:3f:a0:52:d2:e4:99:dc: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A5:2D:60:70:90:32:50:C1:E5:CD:93:F2:36:5D:4C:4A:17:2C:E4 X509v3 Authority Key Identifier: keyid:1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:07:92:65:60:3c:bc:b7:9e:fb:c7:4a:7f:12:19:2a:14:de: 62:98:31:ab:40:93:96:db:d0:18:92:69:97:41:95:f9:9b:69: 62:9f:07:e8:59:d9:37:e1:e5:40:79:e8:fd:61:ca:ff:a3:66: 2a:b3:82:46:77:ae:7a:9b:59:da:b5:fe:0b:e2:26:58:70:ff: ed:57:40:d7:57:85:a8:a1:e5:46:87:24:db:4b:6e:d4:69:ab: 71:8e:89:db:45:80:f0:47:57:6d:87:21:3d:56:be:a5:93:bc: 2f:8b:75:0a:6b:19:b5:6f:02:51:9c:dc:e3:38:9d:c0:7d:88: 16:f2:55:01:43:1c:2e:31:81:30:e9:12:cc:78:1e:b7:58:80: dd:82:cd:e6:73:00:97:d1:d9:1a:93:ab:7f:a6:86:dd:e0:b3: ff:b8:5d:8d:50:23:13:65:b3:04:30:ba:1f:37:9d:97:cf:52: c4:2f:83:2c:46:81:b8:fa:aa:57:25:6c:9a:d1:fe:cc:b7:ca: c0:22:d3:fc:61:63:bf:3f:2d:be:5b:14:c2:33:6a:8f:bf:76: 1d:d2:58:4a:4b:64:80:38:57:99:3d:b7:22:8f:5c:88:f1:ae: 6f:20:9d:87:a4:01:0b:5d:08:84:fc:ba:13:47:76:a0:5f:59: 2d:0d:fc:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUagrx+93TGG8povS+35xd+GTnRqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcy NTUyRUQzRjAeFw0yNjA2MTUxMTQwMTJaFw0yNjA2MTYxNDI4MTJaMDMxMTAvBgNV BAMTKDU4QTUyRDYwNzA5MDMyNTBDMUU1Q0Q5M0YyMzY1RDRDNEExNzJDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXczyXOJ0Xb3npi1kh2UbKM67 o3sPUhH2pzWT/I3gJtBLJ5s8AS0X4OhZmlEG2llu06JlaxTLurn+lWp4LmEG2FKK Xdh6OTIe3wGXriyi3QPgQ3lmjldN+4wJjQwVH83R2PLRxYHVY9+J/T5LrU/dXP5C ukZq1bIHw6DaFLt16htNUVOJHPsXT4FnglXIE0iEpMDJOq+v49s1ElkUsMWqZ6U2 KgTtRD6E8cVAD2wCD3gO3ShnOdWe84YF6H1y9nQKiBcV+q1YU7arsUTxHzLveVCq CWUNZeR1+JcwjQqnaL/mLcQj95plE8NaPTwphGhukPXqfSCQP6BS0uSZ3DuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKUtYHCQMlDB5c2T8jZdTEoXLOQwHwYDVR0j BBgwFoAUHrsjIgP9VDL0/19Qx8p/ZyVS7T8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc1ZDdkZWYtNWViOS00MDU0LWEzYWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIw M0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcyNTUyRUQzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUJCMjMyMjAzRkQ1NDMyRjRGRjVGNTBDN0NBN0Y2NzI1NTJF RDNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdG NjcyNTUyRUQzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoHkmVgPLy3nvvHSn8SGSoU3mKYMatAk5bb 0BiSaZdBlfmbaWKfB+hZ2Tfh5UB56P1hyv+jZiqzgkZ3rnqbWdq1/gviJlhw/+1X QNdXhaih5UaHJNtLbtRpq3GOidtFgPBHV22HIT1WvqWTvC+LdQprGbVvAlGc3OM4 ncB9iBbyVQFDHC4xgTDpEsx4HrdYgN2CzeZzAJfR2RqTq3+mht3gs/+4XY1QIxNl swQwuh83nZfPUsQvgyxGgbj6qlclbJrR/sy3ysAi0/xhY78/Lb5bFMIzao+/dh3S WEpLZIA4V5k9tyKPXIjxrm8gnYekAQtdCIT8uhNHdqBfWS0N/Dc= -----END CERTIFICATE-----Generated at Mon Jun 15 16:28:09 2026 by rpki-client