$ rpki-client -vvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft (raw, json) Hash identifier: 2zBjd+wR6TcN2LnzEshF9xEAa/62ufqF6rftuFButAM= Subject key identifier: ED:0E:58:87:83:C1:04:6F:24:79:F4:4C:85:6B:3B:A2:11:1B:36:1C Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Certificate serial: 45F77188ACF066B7CB2B26FB78907836F84542EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 00:39:53 +0000 Manifest this update: Fri 24 Jul 2026 00:34:53 +0000 Manifest next update: Sat 25 Jul 2026 01:46:53 +0000 Files and hashes: 1: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=) 2: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl (hash: s0V15dhaNKp1YoEpTJEPtNwMvd6dX4047x3UV3aBCgw=) 3: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: rmdjm7QqoJ2GS17azzOS2oUqFKYvi6CMQRKzm3faQVA=) 4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f7:71:88:ac:f0:66:b7:cb:2b:26:fb:78:90:78:36:f8:45:42:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Validity Not Before: Jul 24 00:34:53 2026 GMT Not After : Jul 25 01:46:53 2026 GMT Subject: CN=ED0E588783C1046F2479F44C856B3BA2111B361C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:f5:17:4d:87:5f:78:6e:a5:63:e4:60:39: 72:f9:51:59:13:a7:cf:90:da:0d:40:8d:98:fc:57: 51:48:6f:47:4f:44:bf:50:d5:60:da:b6:98:bb:60: 7c:ed:1d:5e:83:90:6b:e7:ee:0c:b6:b1:08:84:12: 52:aa:c9:40:d6:57:9a:86:8b:4b:db:16:6d:b2:7d: f0:c6:e7:49:a9:e0:6d:8c:cf:9a:d0:41:7d:78:89: 02:13:63:c1:75:14:ac:f6:a2:68:0c:9a:e4:82:b0: 9a:ed:15:0f:af:e5:52:60:f6:7c:04:07:53:f3:1d: a9:07:b0:b1:e2:e2:0f:f1:f3:46:ec:8c:24:10:96: 22:62:5b:30:74:1c:bf:8c:43:80:ce:01:98:77:67: 33:73:bd:8c:ac:9d:e0:cc:99:21:97:fb:42:bb:1f: 52:28:d4:2b:05:a7:c1:95:22:5c:cb:1c:1d:80:7c: fd:59:97:a0:4d:d8:e2:b5:be:bc:c0:20:5c:dd:2f: a1:9a:81:56:09:f0:4c:84:dc:30:9d:5c:65:b0:93: 9f:49:bf:8d:34:5c:91:92:67:33:b3:c1:c1:28:2d: 0f:b0:52:dc:42:d5:c3:38:41:a9:f3:63:14:08:d0: df:bf:d0:e5:b9:d2:9e:5d:e9:a5:24:0b:09:37:82: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0E:58:87:83:C1:04:6F:24:79:F4:4C:85:6B:3B:A2:11:1B:36:1C X509v3 Authority Key Identifier: keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:14:94:4e:53:ad:ba:f6:36:da:f7:5f:1c:67:42:d2:37: 81:48:30:55:c5:fc:6e:d5:0e:45:89:ea:ff:58:88:52:ce:1c: 3f:d2:92:ca:90:47:58:44:10:ad:5e:e7:b4:e4:56:d7:32:65: 97:6f:2a:fe:d3:5b:14:66:43:02:78:fc:31:ce:50:57:86:73: b5:28:bf:22:06:77:ba:28:5d:6e:d5:d8:f4:19:5e:e6:86:46: 45:e2:3a:f4:c3:83:0a:9d:04:c4:52:a1:00:26:09:b2:aa:40: 5d:f1:66:6a:83:64:a0:91:40:85:a3:12:c7:ad:43:45:c0:71: 0d:4f:4a:0f:48:f8:8a:23:85:ca:c3:10:95:02:9a:ae:74:01: a6:be:3f:85:0d:83:0d:5f:40:86:72:b2:53:64:56:91:6b:5a: 37:84:ee:63:9a:6f:4d:62:d0:3c:91:e0:ce:f0:39:b6:c0:51: 3a:fc:f3:02:85:24:4a:81:95:6f:c5:00:c0:4e:29:fe:0f:12: e0:86:e7:cb:a4:ee:1c:11:20:96:01:d5:ea:fc:f0:85:d7:70: 00:c9:90:eb:b0:0d:15:1c:bc:97:3f:07:a9:f3:60:72:7f:0b: 44:ef:06:bb:1a:66:74:f7:09:0d:bf:34:d7:ba:19:70:44:ab: 9e:9e:55:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfdxiKzwZrfLKyb7eJB4NvhFQu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4 NjNFMjlGNDAeFw0yNjA3MjQwMDM0NTNaFw0yNjA3MjUwMTQ2NTNaMDMxMTAvBgNV BAMTKEVEMEU1ODg3ODNDMTA0NkYyNDc5RjQ0Qzg1NkIzQkEyMTExQjM2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPfUXTYdfeG6lY+RgOXL5UVkT p8+Q2g1AjZj8V1FIb0dPRL9Q1WDatpi7YHztHV6DkGvn7gy2sQiEElKqyUDWV5qG i0vbFm2yffDG50mp4G2Mz5rQQX14iQITY8F1FKz2omgMmuSCsJrtFQ+v5VJg9nwE B1PzHakHsLHi4g/x80bsjCQQliJiWzB0HL+MQ4DOAZh3ZzNzvYysneDMmSGX+0K7 H1Io1CsFp8GVIlzLHB2AfP1Zl6BN2OK1vrzAIFzdL6GagVYJ8EyE3DCdXGWwk59J v400XJGSZzOzwcEoLQ+wUtxC1cM4QanzYxQI0N+/0OW50p5d6aUkCwk3gvZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Q5Yh4PBBG8kefRMhWs7ohEbNhwwHwYDVR0j BBgwFoAU7XtZRCesuAoesuTpLV5rpoY+KfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5NGQzNzUtZmM3ZC00ZGM3LWExZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQy N0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4NjNFMjlGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDdCNTk0NDI3QUNCODBBMUVCMkU0RTkyRDVFNkJBNjg2M0Uy OUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZC QTY4NjNFMjlGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrWFJROU6269jba918cZ0LSN4FIMFXF/G7V DkWJ6v9YiFLOHD/SksqQR1hEEK1e57TkVtcyZZdvKv7TWxRmQwJ4/DHOUFeGc7Uo vyIGd7ooXW7V2PQZXuaGRkXiOvTDgwqdBMRSoQAmCbKqQF3xZmqDZKCRQIWjEset Q0XAcQ1PSg9I+IojhcrDEJUCmq50Aaa+P4UNgw1fQIZyslNkVpFrWjeE7mOab01i 0DyR4M7wObbAUTr88wKFJEqBlW/FAMBOKf4PEuCG58uk7hwRIJYB1er88IXXcADJ kOuwDRUcvJc/B6nzYHJ/C0TvBrsaZnT3CQ2/NNe6GXBEq56eVZw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:16 2026 by rpki-client