$ rpki-client -vvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft File: ED174C0150D63525F5DB20F0992EDEECD70380E5.mft (raw, json) Hash identifier: GLrakPlzevlmku7lGat6HQGXdJte+RGvygmNR+0XRKk= Subject key identifier: 3D:9A:63:D4:3C:A7:28:20:AC:39:DC:01:6F:2A:CF:C4:D7:C5:E9:32 Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5 Certificate issuer: /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5 Certificate serial: 445236B6432324C08160360F9D2A411AE9C022A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:12:38 +0000 Manifest this update: Tue 12 May 2026 12:07:38 +0000 Manifest next update: Wed 13 May 2026 14:47:38 +0000 Files and hashes: 1: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=) 2: ED174C0150D63525F5DB20F0992EDEECD70380E5.crl (hash: IECZEKAQfz+fdM8w1LDLBPOKuXsXeZGUclhvgWXURlY=) 3: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: 3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=) 4: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=) 5: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: bfhOCogzMUQqHoQaSn812eSk7yOuSzPxVDD+Nz5nDsc=) 6: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: n4IkgoMW2u0zkFgXDHL0eZSUTKgr/z1ZRj5PZ9Dfmxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:52:36:b6:43:23:24:c0:81:60:36:0f:9d:2a:41:1a:e9:c0:22:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5 Validity Not Before: May 12 12:07:38 2026 GMT Not After : May 13 14:47:38 2026 GMT Subject: CN=3D9A63D43CA72820AC39DC016F2ACFC4D7C5E932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:9a:52:d7:ea:db:fd:ca:6a:e8:93:aa:cb: 6f:70:c4:29:e1:64:28:ff:80:4b:a3:79:c0:19:eb: f1:69:11:ac:d5:ce:b4:6a:89:48:67:65:57:2b:6d: 2c:7f:ec:60:8d:50:6e:a3:20:73:cd:3d:b3:5b:78: 3f:15:09:72:44:4d:d6:2a:0a:eb:2d:76:82:08:af: c6:b7:50:c5:be:ee:e0:d1:c7:f7:b3:06:3b:16:7c: 6b:1e:f4:1d:4a:19:d7:3a:64:8a:14:66:1d:a0:ed: 60:f2:31:68:aa:23:93:45:9f:01:3a:6e:b7:25:19: 76:32:1c:90:fd:ed:54:81:0a:c5:4a:90:41:8d:63: 4d:0b:ae:18:4e:d1:f4:62:b3:12:18:04:07:bd:3d: 12:73:c1:37:24:8b:89:a2:7f:aa:e7:43:1f:72:56: 35:26:b4:11:d1:ed:37:43:65:23:42:69:3c:c1:fd: c3:9e:93:eb:b7:14:89:99:e9:9e:56:4b:ec:e2:81: 0b:4c:99:89:bb:e6:8c:01:8e:f5:ee:1c:5a:d4:15: cb:e4:17:7d:80:68:51:f1:5d:22:5c:21:17:50:81: 3f:e1:fa:a6:a9:e5:fe:0d:8e:bf:36:72:2d:92:7c: 6a:2e:8d:6c:8e:c6:6c:d4:bd:36:4c:0d:67:32:29: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9A:63:D4:3C:A7:28:20:AC:39:DC:01:6F:2A:CF:C4:D7:C5:E9:32 X509v3 Authority Key Identifier: keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bf:34:43:6f:91:31:2d:d6:1b:f0:19:4e:e4:69:36:85:8e: a0:48:63:aa:ae:76:dd:28:57:dc:17:ca:5e:e2:f2:c3:9c:e9: eb:01:fe:04:45:84:5b:f8:cb:79:2c:1a:52:2a:3b:f6:8f:98: 56:08:7f:23:2b:3c:7c:f4:53:ab:31:fe:af:4b:9c:87:69:a4: 6d:8a:69:0a:9e:63:82:e5:07:6e:4c:74:52:90:3c:0d:06:b2: 20:33:01:3d:77:8a:2d:1b:73:f9:b4:9e:2b:66:97:12:80:43: 11:5d:f6:18:f5:02:73:da:95:ed:b7:d2:be:2b:2a:ba:af:d4: 98:08:5a:69:c1:c2:10:e5:86:b5:36:3f:ee:a2:cf:9f:48:5e: 43:dd:a9:a5:9f:b6:77:21:17:b1:cb:73:4c:86:d1:e0:20:52: bc:92:4b:7c:7b:d1:12:54:0f:23:e3:e7:81:d7:de:82:18:71: 21:56:f0:9b:7e:23:16:fc:15:d0:9f:c7:2f:d1:eb:a2:9f:a5: 82:89:0d:26:3d:e3:77:6e:ec:8b:39:b8:05:89:77:70:be:1c: 8b:e4:17:38:4e:76:ff:03:e3:be:fa:c6:ea:83:c7:bd:07:4a: 50:c2:da:17:23:6e:b0:54:31:25:2e:04:cd:64:66:94:17:5b: 83:a7:49:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFI2tkMjJMCBYDYPnSpBGunAIqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQxNzRDMDE1MEQ2MzUyNUY1REIyMEYwOTkyRURFRUNE NzAzODBFNTAeFw0yNjA1MTIxMjA3MzhaFw0yNjA1MTMxNDQ3MzhaMDMxMTAvBgNV BAMTKDNEOUE2M0Q0M0NBNzI4MjBBQzM5REMwMTZGMkFDRkM0RDdDNUU5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjU5pS1+rb/cpq6JOqy29wxCnh ZCj/gEujecAZ6/FpEazVzrRqiUhnZVcrbSx/7GCNUG6jIHPNPbNbeD8VCXJETdYq CustdoIIr8a3UMW+7uDRx/ezBjsWfGse9B1KGdc6ZIoUZh2g7WDyMWiqI5NFnwE6 brclGXYyHJD97VSBCsVKkEGNY00LrhhO0fRisxIYBAe9PRJzwTcki4mif6rnQx9y VjUmtBHR7TdDZSNCaTzB/cOek+u3FImZ6Z5WS+zigQtMmYm75owBjvXuHFrUFcvk F32AaFHxXSJcIRdQgT/h+qap5f4Njr82ci2SfGoujWyOxmzUvTZMDWcyKQ1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZpj1DynKCCsOdwBbyrPxNfF6TIwHwYDVR0j BBgwFoAU7RdMAVDWNSX12yDwmS7e7NcDgOUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRiZjA3Y2YtNTBhOS00MjhhLTkwZDItZDQ0ZDZiNzYyYjU1LzAvRUQxNzRDMDE1 MEQ2MzUyNUY1REIyMEYwOTkyRURFRUNENzAzODBFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDE3NEMwMTUwRDYzNTI1RjVEQjIwRjA5OTJFREVFQ0Q3MDM4 MEU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRiZjA3Y2YtNTBhOS00MjhhLTkw ZDItZDQ0ZDZiNzYyYjU1LzAvRUQxNzRDMDE1MEQ2MzUyNUY1REIyMEYwOTkyRURF RUNENzAzODBFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+/NENvkTEt1hvwGU7kaTaFjqBIY6qudt0o V9wXyl7i8sOc6esB/gRFhFv4y3ksGlIqO/aPmFYIfyMrPHz0U6sx/q9LnIdppG2K aQqeY4LlB25MdFKQPA0GsiAzAT13ii0bc/m0nitmlxKAQxFd9hj1AnPale230r4r Krqv1JgIWmnBwhDlhrU2P+6iz59IXkPdqaWftnchF7HLc0yG0eAgUrySS3x70RJU DyPj54HX3oIYcSFW8Jt+Ixb8FdCfxy/R66KfpYKJDSY943du7Is5uAWJd3C+HIvk FzhOdv8D4776xuqDx70HSlDC2hcjbrBUMSUuBM1kZpQXW4OnSVo= -----END CERTIFICATE-----Generated at Wed May 13 02:13:12 2026 by rpki-client