$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft File: ED8D01C73F80C3D77C261531F032760A254A0C33.mft (raw, json) Hash identifier: ar560aocnpTlXY2wTNFUZXKjYKoWAJK8/ePNVLHTiAo= Subject key identifier: 85:EC:45:C9:D1:8C:46:04:C1:00:42:B0:18:2F:31:DD:51:63:93:AA Authority key identifier: ED:8D:01:C7:3F:80:C3:D7:7C:26:15:31:F0:32:76:0A:25:4A:0C:33 Certificate issuer: /CN=ED8D01C73F80C3D77C261531F032760A254A0C33 Certificate serial: 1A6AC039C0B72025980057702DFE0EF9FB5CDF7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:30:56 +0000 Manifest this update: Tue 12 May 2026 05:25:56 +0000 Manifest next update: Wed 13 May 2026 06:06:56 +0000 Files and hashes: 1: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: GKO8zdtE5CxssueJt3Z36/7K9MSiC3xyGYv8jirDeyE=) 2: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: tjGhv+f3OyNAH/rInqaJjPy0RZlADPOgngZRxnhpidI=) 3: ED8D01C73F80C3D77C261531F032760A254A0C33.crl (hash: gFr8ImjCKMOAa2ODf30lM/pexLO1islc7fX/shGPhdw=) 4: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: OJ2yEQilrDM/Xg2aTHzxO6aZkpu5qjxVD1asbChN4Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.crl rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6a:c0:39:c0:b7:20:25:98:00:57:70:2d:fe:0e:f9:fb:5c:df:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8D01C73F80C3D77C261531F032760A254A0C33 Validity Not Before: May 12 05:25:56 2026 GMT Not After : May 13 06:06:56 2026 GMT Subject: CN=85EC45C9D18C4604C10042B0182F31DD516393AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:95:cc:f2:d3:00:fe:2b:7f:c2:ad:c4:2b: a5:47:42:92:c3:0f:ff:08:a6:ff:ff:c2:d4:40:d2: 33:c5:27:53:63:a0:a8:bf:00:ca:b9:01:51:4b:50: 82:3f:30:31:80:24:5f:3f:7d:89:9b:51:ba:32:64: 96:ee:91:ac:47:24:76:05:92:37:16:da:f8:ff:9f: 80:6f:b6:90:69:6c:31:e4:d3:d8:31:38:1a:b1:f3: c9:5e:ef:dc:06:9c:30:0c:d2:4e:51:ec:fd:28:7f: 31:fc:bf:ae:48:40:9d:72:e3:1f:b3:96:97:c3:e3: 11:ec:c0:21:c2:b8:fa:f5:3f:2a:0d:43:95:d6:0e: 57:40:8c:52:a5:69:b5:a0:0b:70:f1:1d:74:a8:b7: 97:33:54:67:3d:75:39:05:5f:8b:61:1f:03:e6:22: 9d:a4:79:fb:4d:1d:6c:de:fd:f1:59:70:eb:b8:e4: 7b:ef:12:8d:5e:d4:30:de:48:c7:79:1e:48:ac:31: aa:d0:81:6e:dd:7e:eb:7d:54:08:3a:01:65:f3:ed: 1a:a1:89:92:bc:fb:7b:e8:a2:97:e6:57:de:71:18: be:c9:d1:27:aa:b9:e9:b4:c5:63:fb:76:4e:34:38: a7:fb:24:ff:8e:c4:27:9a:1b:27:45:39:c3:54:58: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EC:45:C9:D1:8C:46:04:C1:00:42:B0:18:2F:31:DD:51:63:93:AA X509v3 Authority Key Identifier: keyid:ED:8D:01:C7:3F:80:C3:D7:7C:26:15:31:F0:32:76:0A:25:4A:0C:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5b:cf:9c:12:13:d9:1c:9e:10:fa:e5:3c:3f:e9:7d:b0:14: 64:62:55:c4:a5:10:2a:2c:cc:38:c0:ec:1a:da:b6:b9:8d:d9: 16:30:94:cc:89:7a:89:4e:3d:ff:56:3c:a4:37:90:e6:33:93: 83:3b:5b:98:5f:be:f6:8c:83:e5:85:8c:7d:3b:c7:44:3d:dc: b0:f6:75:3f:dd:aa:c5:d0:08:8f:b8:46:57:16:7c:cd:18:d9: a4:49:58:ea:b8:da:5b:64:e8:53:6b:11:db:b5:ca:12:84:f0: 80:17:e7:b5:91:27:5c:78:2e:65:92:92:2c:50:ed:1c:d4:e6: 84:f7:74:a7:82:30:70:9c:65:cf:e0:6c:c1:49:c9:27:29:75: bc:b3:8e:63:91:3d:2a:83:b2:cc:e9:cc:97:3e:ae:bc:82:3e: 1c:bf:87:92:bc:a5:3c:0f:e5:29:4e:30:06:1e:0b:55:74:05: 2a:b4:a8:00:9b:f0:67:c8:18:e6:21:0d:18:32:5f:4c:40:2b: 87:f5:69:f6:5d:69:a5:c9:62:59:42:61:f6:ae:d5:73:61:3a: 35:4b:58:24:1c:34:71:e3:6d:f8:bd:19:c8:10:8b:18:31:04: 71:0d:6b:76:45:ec:94:23:25:fa:89:eb:03:2f:12:5e:63:c7: fa:c5:2f:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmrAOcC3ICWYAFdwLf4O+ftc338wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4RDAxQzczRjgwQzNENzdDMjYxNTMxRjAzMjc2MEEy NTRBMEMzMzAeFw0yNjA1MTIwNTI1NTZaFw0yNjA1MTMwNjA2NTZaMDMxMTAvBgNV BAMTKDg1RUM0NUM5RDE4QzQ2MDRDMTAwNDJCMDE4MkYzMURENTE2MzkzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfJXM8tMA/it/wq3EK6VHQpLD D/8Ipv//wtRA0jPFJ1NjoKi/AMq5AVFLUII/MDGAJF8/fYmbUboyZJbukaxHJHYF kjcW2vj/n4BvtpBpbDHk09gxOBqx88le79wGnDAM0k5R7P0ofzH8v65IQJ1y4x+z lpfD4xHswCHCuPr1PyoNQ5XWDldAjFKlabWgC3DxHXSot5czVGc9dTkFX4thHwPm Ip2keftNHWze/fFZcOu45HvvEo1e1DDeSMd5HkisMarQgW7dfut9VAg6AWXz7Rqh iZK8+3voopfmV95xGL7J0Sequem0xWP7dk40OKf7JP+OxCeaGydFOcNUWE8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhexFydGMRgTBAEKwGC8x3VFjk6owHwYDVR0j BBgwFoAU7Y0Bxz+Aw9d8JhUx8DJ2CiVKDDMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U1YzczY2MtOTg1ZS00ZTkyLWJhNjktY2Q4YmZmZTRhNTNkLzAvRUQ4RDAxQzcz RjgwQzNENzdDMjYxNTMxRjAzMjc2MEEyNTRBMEMzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhEMDFDNzNGODBDM0Q3N0MyNjE1MzFGMDMyNzYwQTI1NEEw QzMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRUQ4RDAxQzczRjgwQzNENzdDMjYxNTMxRjAzMjc2 MEEyNTRBMEMzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJbz5wSE9kcnhD65Tw/6X2wFGRiVcSlECos zDjA7BratrmN2RYwlMyJeolOPf9WPKQ3kOYzk4M7W5hfvvaMg+WFjH07x0Q93LD2 dT/dqsXQCI+4RlcWfM0Y2aRJWOq42ltk6FNrEdu1yhKE8IAX57WRJ1x4LmWSkixQ 7RzU5oT3dKeCMHCcZc/gbMFJyScpdbyzjmORPSqDsszpzJc+rryCPhy/h5K8pTwP 5SlOMAYeC1V0BSq0qACb8GfIGOYhDRgyX0xAK4f1afZdaaXJYllCYfau1XNhOjVL WCQcNHHjbfi9GcgQixgxBHENa3ZF7JQjJfqJ6wMvEl5jx/rFL1g= -----END CERTIFICATE-----Generated at Tue May 12 22:13:37 2026 by rpki-client