$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft File: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft (raw, json) Hash identifier: CQpAiyyK9+EIFhH3nJB8lt3WJTU38eSN2PNf5uwdqkQ= Subject key identifier: 7C:E1:ED:30:48:CD:2C:66:20:0E:FF:BC:FA:F5:45:E7:7D:F5:A8:37 Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Certificate serial: 045B1A1523463E8569D39F02A81E39124911FEE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:46:40 +0000 Manifest this update: Tue 16 Jun 2026 22:41:40 +0000 Manifest next update: Thu 18 Jun 2026 01:37:40 +0000 Files and hashes: 1: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=) 2: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: CDdAgCCqdZ4eGgwg/DutRSkrLQoNO6bQnfQJc5Q/9rc=) 3: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: 2KuqxGxxUoWsjT52nc8YqV6GIpta4WniQwIsnjhtsto=) 4: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=) 5: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl (hash: LtS7v0tzCvTETegIVdPSaN6/hD35ctEz0sUdkd6jQYc=) 6: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5b:1a:15:23:46:3e:85:69:d3:9f:02:a8:1e:39:12:49:11:fe:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Validity Not Before: Jun 16 22:41:40 2026 GMT Not After : Jun 18 01:37:40 2026 GMT Subject: CN=7CE1ED3048CD2C66200EFFBCFAF545E77DF5A837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:eb:a3:d2:b7:a5:a1:31:53:d2:f5:c7:95: c5:e7:3b:97:4d:d6:03:45:51:6b:3d:50:0d:36:b6: c2:4a:61:41:02:a8:e7:70:ad:c1:c3:79:6b:c0:b2: bc:8f:9e:1c:b7:2f:92:12:1a:74:7f:1b:28:e8:dd: 33:0e:b7:24:2f:b2:a1:87:ab:93:ee:97:ef:60:54: 69:2e:f6:d0:f5:68:b0:d1:a6:4c:8c:b6:a5:ef:76: 79:af:04:e5:53:79:5f:71:00:50:89:c0:4a:7c:57: 56:3f:45:b4:ff:50:43:94:50:b2:c6:43:41:83:1c: 21:00:0a:d4:a7:e9:8e:f3:fd:b5:47:b9:bc:14:2b: 44:43:58:29:6a:70:6b:79:a7:be:db:e3:66:ad:12: dc:de:5a:4b:82:25:b0:f1:58:73:fd:b3:ae:6c:f9: d7:51:b6:97:45:c1:a3:6e:76:e7:1c:d0:d5:c2:58: 76:37:61:b5:45:38:61:ab:4d:63:fb:b8:80:63:a5: 16:62:29:ae:0b:31:54:c1:f6:a0:80:0e:87:70:40: 5a:55:0c:ba:b2:fa:51:4f:fd:4a:7b:ed:bb:f2:5e: 5e:10:29:15:1d:65:d9:5a:01:7d:b3:db:90:2c:12: 9e:45:96:9a:83:fc:89:41:dc:53:30:1e:61:21:23: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E1:ED:30:48:CD:2C:66:20:0E:FF:BC:FA:F5:45:E7:7D:F5:A8:37 X509v3 Authority Key Identifier: keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:02:df:b0:a7:45:7e:96:68:1a:18:c6:36:9f:96:d7:1e:cf: 3a:af:9e:df:05:f3:63:f8:1e:b9:e1:51:84:2a:94:fd:3f:aa: b9:c6:71:91:8d:c2:a7:e5:fe:b3:bf:f5:b7:a0:2b:3c:5d:b5: 85:55:c5:b4:83:71:59:63:50:12:b6:e4:2f:e6:86:7e:ed:e5: ca:4a:12:8b:5a:9d:c5:2c:24:a1:02:a8:d4:7a:b4:15:cb:bc: 89:3a:92:59:e7:88:b9:c2:d1:75:41:cf:ac:83:26:fb:1f:31: f1:f0:15:85:c3:e1:a8:f9:c0:bb:71:c7:a3:42:00:45:6f:3c: 66:3f:ce:0f:a4:b4:e5:56:11:33:56:56:d9:9f:28:57:9a:c8: c5:7b:de:f3:77:42:80:79:69:1a:a5:58:44:a3:6e:c1:97:1c: 0a:ed:be:dc:20:d3:e9:d2:bf:28:38:4d:30:bd:74:2e:bc:63: 69:c5:bd:76:67:e9:ff:5e:2f:f8:14:f5:f1:8e:60:32:c6:e1: bd:7f:87:43:b4:8c:24:46:e6:ee:14:9b:96:a4:36:f6:85:5a: 37:20:0d:ac:26:5a:91:c8:5a:45:d0:b6:3b:30:41:e5:6a:42: f4:0e:12:22:06:0b:9c:3a:6f:61:bb:9c:ce:8d:3b:63:28:da: ba:2a:d6:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFsaFSNGPoVp058CqB45EkkR/ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5 NTk4QThBMjAeFw0yNjA2MTYyMjQxNDBaFw0yNjA2MTgwMTM3NDBaMDMxMTAvBgNV BAMTKDdDRTFFRDMwNDhDRDJDNjYyMDBFRkZCQ0ZBRjU0NUU3N0RGNUE4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/euj0reloTFT0vXHlcXnO5dN 1gNFUWs9UA02tsJKYUECqOdwrcHDeWvAsryPnhy3L5ISGnR/Gyjo3TMOtyQvsqGH q5Pul+9gVGku9tD1aLDRpkyMtqXvdnmvBOVTeV9xAFCJwEp8V1Y/RbT/UEOUULLG Q0GDHCEACtSn6Y7z/bVHubwUK0RDWClqcGt5p77b42atEtzeWkuCJbDxWHP9s65s +ddRtpdFwaNuducc0NXCWHY3YbVFOGGrTWP7uIBjpRZiKa4LMVTB9qCADodwQFpV DLqy+lFP/Up77bvyXl4QKRUdZdlaAX2z25AsEp5FlpqD/IlB3FMwHmEhI263AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfOHtMEjNLGYgDv+8+vVF5331qDcwHwYDVR0j BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1 NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB OEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0Ey MEI5NTk4QThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoC37CnRX6WaBoYxjafltcezzqvnt8F82P4 HrnhUYQqlP0/qrnGcZGNwqfl/rO/9begKzxdtYVVxbSDcVljUBK25C/mhn7t5cpK EotancUsJKECqNR6tBXLvIk6klnniLnC0XVBz6yDJvsfMfHwFYXD4aj5wLtxx6NC AEVvPGY/zg+ktOVWETNWVtmfKFeayMV73vN3QoB5aRqlWESjbsGXHArtvtwg0+nS vyg4TTC9dC68Y2nFvXZn6f9eL/gU9fGOYDLG4b1/h0O0jCRG5u4Um5akNvaFWjcg DawmWpHIWkXQtjswQeVqQvQOEiIGC5w6b2G7nM6NO2Mo2roq1sc= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:12 2026 by rpki-client