$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json) Hash identifier: DvIDkaTu6XC4DBek+qivd8ddYGDZz4sIoGKdv79o0Mo= Subject key identifier: 0C:5A:06:0C:99:1B:14:90:AF:BF:C3:B5:D1:CE:85:64:C2:07:92:04 Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Certificate serial: 3E08943AD3D2012181956D3728AB656B2D8E723F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft Manifest number: 0574 Signing time: Fri 17 Apr 2026 19:42:09 +0000 Manifest this update: Fri 17 Apr 2026 19:37:09 +0000 Manifest next update: Mon 20 Apr 2026 21:57:09 +0000 Files and hashes: 1: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: PpwdW1Sh67VcI29Rs6SsVeiTKG/TdkizTmZ0n4tpRMU=) 2: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: rLCScLKzGFju7S4gFkiQfxRRI0tsrqC8qK0r1YtiG6w=) 3: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: 8kKWUHzz3zsaht7nwecnfnkRiCcN2BwawIfqksKIHAY=) 4: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: NjtJ1CC/ayuYspNjOSdt72UOOqS/MPFaVp2BtroItRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:08:94:3a:d3:d2:01:21:81:95:6d:37:28:ab:65:6b:2d:8e:72:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Validity Not Before: Apr 17 19:37:09 2026 GMT Not After : Apr 20 21:57:09 2026 GMT Subject: CN=0C5A060C991B1490AFBFC3B5D1CE8564C2079204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3c:b9:ab:01:9c:e0:d4:dd:4b:79:d8:14:33: c2:f5:70:36:50:e2:f5:37:a7:77:e2:f6:ec:6d:ee: 33:5a:2d:7c:72:70:c6:4f:d2:f0:22:86:83:ed:06: 07:8d:c6:a8:3a:66:57:1f:26:23:61:b3:43:05:50: 7d:4e:71:f3:f2:13:dc:cc:8f:10:63:fa:f2:1b:21: f6:d3:24:15:5e:b4:2c:6f:da:4c:d3:d5:9f:16:32: 45:07:07:67:33:35:cb:a1:15:41:0b:0a:60:b2:25: b9:6c:fb:24:54:68:43:52:fb:c4:48:5d:87:e8:03: 3b:b1:44:f8:d6:7d:47:a8:41:a9:e5:15:e7:3f:cd: e1:1a:e8:d2:97:ce:05:78:b1:32:8d:b1:cd:db:16: 26:ae:e5:e6:31:a9:90:3c:50:5a:c7:ae:fc:31:19: 7e:62:6d:30:13:99:44:a1:0b:b8:fb:ee:7f:80:78: 4f:a0:49:39:51:81:22:4d:a8:9f:d4:ed:32:53:44: 26:bb:07:8f:cd:49:cb:7a:37:0d:fa:92:fb:d1:a4: 0e:80:d7:d9:d5:2b:e6:7a:39:a4:64:fe:57:b9:5c: 3b:0d:a8:cb:16:84:a7:17:6e:dc:71:23:5f:54:b2: b4:fb:c3:94:0d:44:25:2e:bd:d0:be:40:49:f7:91: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5A:06:0C:99:1B:14:90:AF:BF:C3:B5:D1:CE:85:64:C2:07:92:04 X509v3 Authority Key Identifier: keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d3:06:f7:b5:0d:16:12:4f:31:f4:a0:c9:61:10:be:c1:a3: ff:77:28:c5:83:88:3e:69:f0:bc:21:c6:ea:b1:d9:9f:0e:d6: 1c:dd:1f:2b:52:76:a1:d9:1a:27:c6:ad:f3:24:34:80:c7:ef: d2:b6:ee:5a:78:c1:d7:b2:d8:96:d8:26:71:b2:84:72:82:89: 6f:d0:1e:a4:8f:a7:e8:37:40:08:fc:a6:58:1a:ad:56:d3:ea: a7:7e:b6:91:8f:3f:ec:f7:6c:ee:62:1c:24:1c:db:10:7b:1f: 5e:d1:d8:2c:37:c7:d4:ad:c9:a8:15:2b:90:48:57:15:b6:b0: 80:37:d3:f5:f8:67:a2:1c:8a:3d:d3:8a:6e:f4:db:ab:f9:33: 94:03:32:7c:b2:38:cb:70:7b:ae:c5:82:6d:03:67:8d:cd:a1: 50:00:51:4d:75:aa:bd:40:19:c2:a6:66:83:c6:77:8e:e3:c6: 4b:ae:5c:6d:79:11:9e:5d:27:81:97:88:9a:ec:67:ff:6d:dd: 17:db:4b:78:41:1e:82:56:0b:c5:74:06:78:2b:83:ee:2a:dd: d1:12:29:52:c6:2e:4e:66:cc:eb:cf:fa:a0:9c:b3:ba:04:43: 44:e7:9f:d0:54:ef:47:39:04:af:af:97:4a:46:11:2f:64:71: d2:38:2c:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgiUOtPSASGBlW03KKtlay2Ocj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhC NjNGQ0M3NzAeFw0yNjA0MTcxOTM3MDlaFw0yNjA0MjAyMTU3MDlaMDMxMTAvBgNV BAMTKDBDNUEwNjBDOTkxQjE0OTBBRkJGQzNCNUQxQ0U4NTY0QzIwNzkyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmPLmrAZzg1N1LedgUM8L1cDZQ 4vU3p3fi9uxt7jNaLXxycMZP0vAihoPtBgeNxqg6ZlcfJiNhs0MFUH1OcfPyE9zM jxBj+vIbIfbTJBVetCxv2kzT1Z8WMkUHB2czNcuhFUELCmCyJbls+yRUaENS+8RI XYfoAzuxRPjWfUeoQanlFec/zeEa6NKXzgV4sTKNsc3bFiau5eYxqZA8UFrHrvwx GX5ibTATmUShC7j77n+AeE+gSTlRgSJNqJ/U7TJTRCa7B4/NSct6Nw36kvvRpA6A 19nVK+Z6OaRk/le5XDsNqMsWhKcXbtxxI19UsrT7w5QNRCUuvdC+QEn3kaVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDFoGDJkbFJCvv8O10c6FZMIHkgQwHwYDVR0j BBgwFoAU7b2EWpWX/sStkAMPkBjkuLY/zHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjMwMjgxMC01NjRjLTQ1YjctOGE3Mi1lZjZiOGY2MzA5YzAvMC9FREJEODQ1QTk1 OTdGRUM0QUQ5MDAzMEY5MDE4RTRCOEI2M0ZDQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhCNjNG Q0M3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzMDI4MTAtNTY0Yy00NWI3LThh NzItZWY2YjhmNjMwOWMwLzAvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0 QjhCNjNGQ0M3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzTBve1DRYSTzH0oMlhEL7Bo/93KMWDiD5p 8Lwhxuqx2Z8O1hzdHytSdqHZGifGrfMkNIDH79K27lp4wdey2JbYJnGyhHKCiW/Q HqSPp+g3QAj8plgarVbT6qd+tpGPP+z3bO5iHCQc2xB7H17R2Cw3x9StyagVK5BI VxW2sIA30/X4Z6Icij3Tim7026v5M5QDMnyyOMtwe67Fgm0DZ43NoVAAUU11qr1A GcKmZoPGd47jxkuuXG15EZ5dJ4GXiJrsZ/9t3RfbS3hBHoJWC8V0Bngrg+4q3dES KVLGLk5mzOvP+qCcs7oEQ0Tnn9BU70c5BK+vl0pGES9kcdI4LDM= -----END CERTIFICATE-----Generated at Sun Apr 19 14:07:36 2026 by rpki-client