$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft File: ED8801C97D629F0D5149E3C88E72600C016E4712.mft (raw, json) Hash identifier: rkqZqkoSIm4Pkgnkr29UDHzVFDE7gPpAAEUHdQ6CoWY= Subject key identifier: 39:9F:C1:28:B3:52:24:32:95:03:A9:3B:D4:BF:02:47:44:4B:C1:A6 Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 41F0762D80B9A7406A9D35DFAD5D84D4FDBE693F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:46:17 +0000 Manifest this update: Tue 12 May 2026 22:41:17 +0000 Manifest next update: Thu 14 May 2026 00:07:17 +0000 Files and hashes: 1: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: I+TsRodHPZi2sFygS9uUTvIPPJWZ6Ey7cdEpwFzA144=) 2: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: 6b6QyTeKHzbwr02KTRyuHru/9K2YvXjeEcMAT+18bak=) 3: ED8801C97D629F0D5149E3C88E72600C016E4712.crl (hash: fUgWShdvJA9hJwRWjw5CRp2/QAN0BupoHPFSq2HmAsE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f0:76:2d:80:b9:a7:40:6a:9d:35:df:ad:5d:84:d4:fd:be:69:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: May 12 22:41:17 2026 GMT Not After : May 14 00:07:17 2026 GMT Subject: CN=399FC128B35224329503A93BD4BF0247444BC1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:38:68:5a:49:17:ca:b7:df:81:07:6e:d4:94: d1:c8:45:36:b7:80:5d:f5:a6:f7:af:88:cc:51:42: 49:95:5b:e5:f8:5c:8c:dc:fa:fa:db:01:1d:9b:d2: 20:01:67:cc:91:62:29:b4:a3:10:85:5a:29:74:2d: 35:cc:39:9c:e5:1e:5c:57:ba:80:16:f5:f1:c0:60: 9e:03:e9:02:f2:c8:13:bd:7b:7a:f1:9a:6e:d1:2d: 6b:54:8a:c3:fb:ba:a9:6a:b8:84:6d:37:47:db:2f: a1:78:a3:48:93:c5:b8:cf:96:b8:54:5f:48:bc:8a: e4:3f:65:36:7f:41:5a:74:78:a5:2f:b2:2b:f9:90: 29:50:89:69:8c:05:36:08:b9:bd:5e:e9:78:d6:e0: 15:fa:d5:5b:15:8a:97:18:5e:9c:ec:90:31:69:bd: 1d:69:af:f8:92:41:f2:15:5d:17:cc:05:67:ad:96: 0d:11:27:23:9f:d8:24:8e:f6:e3:84:ed:48:88:00: 96:c2:0b:9a:2e:cf:f6:a4:ef:ea:fb:78:f6:13:88: 8f:47:eb:38:8d:75:fc:7c:3d:ab:98:70:b6:0f:99: 1e:d0:61:b1:c9:b0:93:f3:7a:64:f7:fc:9c:2b:57: f7:65:10:75:1f:77:0a:9e:fa:a4:93:72:a0:c9:40: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9F:C1:28:B3:52:24:32:95:03:A9:3B:D4:BF:02:47:44:4B:C1:A6 X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7f:6d:e8:d6:a1:59:e0:59:18:42:74:d3:64:b7:72:5e:62: 65:ed:a9:a1:85:de:3d:a7:ee:fc:fe:63:57:89:95:fc:a7:40: 3a:4b:51:94:35:89:6e:ed:ed:14:be:e0:d3:d9:ef:f6:4e:2a: f9:57:03:46:a2:83:88:10:75:5c:5a:f6:e8:40:ed:52:c1:54: 05:4e:5c:8b:ba:40:e6:5b:cd:d0:d2:72:df:80:d5:bb:0a:2f: 55:d4:d8:2d:63:cf:68:56:f0:b8:4f:59:ed:db:94:6f:10:56: 1f:5e:21:cd:9d:94:37:63:1f:2a:bb:9c:a4:21:c9:81:c8:62: 94:21:58:6e:d6:ff:8c:65:ec:37:82:de:85:21:2e:11:83:8b: 73:70:d4:f4:55:1f:f1:ed:dc:80:4c:a5:19:be:7f:5d:c9:88: 15:3b:c1:16:36:4b:07:e4:f7:ca:f3:15:48:b6:92:31:db:f2: 63:c9:75:76:60:4c:40:45:72:d3:7d:92:ce:6f:2a:98:6b:6b: 85:7d:93:fb:8a:12:26:96:17:cf:1d:3f:2f:f9:c3:c3:48:ab: 95:2e:78:6b:a8:31:55:a3:4f:63:46:63:75:62:d6:83:20:4c: e3:fd:cd:18:bc:cf:ef:f1:bd:ea:55:4d:95:0c:aa:18:c5:1a: 09:da:85:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfB2LYC5p0BqnTXfrV2E1P2+aT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjA1MTIyMjQxMTdaFw0yNjA1MTQwMDA3MTdaMDMxMTAvBgNV BAMTKDM5OUZDMTI4QjM1MjI0MzI5NTAzQTkzQkQ0QkYwMjQ3NDQ0QkMxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSOGhaSRfKt9+BB27UlNHIRTa3 gF31pveviMxRQkmVW+X4XIzc+vrbAR2b0iABZ8yRYim0oxCFWil0LTXMOZzlHlxX uoAW9fHAYJ4D6QLyyBO9e3rxmm7RLWtUisP7uqlquIRtN0fbL6F4o0iTxbjPlrhU X0i8iuQ/ZTZ/QVp0eKUvsiv5kClQiWmMBTYIub1e6XjW4BX61VsVipcYXpzskDFp vR1pr/iSQfIVXRfMBWetlg0RJyOf2CSO9uOE7UiIAJbCC5ouz/ak7+r7ePYTiI9H 6ziNdfx8PauYcLYPmR7QYbHJsJPzemT3/JwrV/dlEHUfdwqe+qSTcqDJQP+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZ/BKLNSJDKVA6k71L8CR0RLwaYwHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYw MEMwMTZFNDcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFp/bejWoVngWRhCdNNkt3JeYmXtqaGF3j2n 7vz+Y1eJlfynQDpLUZQ1iW7t7RS+4NPZ7/ZOKvlXA0aig4gQdVxa9uhA7VLBVAVO XIu6QOZbzdDSct+A1bsKL1XU2C1jz2hW8LhPWe3blG8QVh9eIc2dlDdjHyq7nKQh yYHIYpQhWG7W/4xl7DeC3oUhLhGDi3Nw1PRVH/Ht3IBMpRm+f13JiBU7wRY2Swfk 98rzFUi2kjHb8mPJdXZgTEBFctN9ks5vKphra4V9k/uKEiaWF88dPy/5w8NIq5Uu eGuoMVWjT2NGY3Vi1oMgTOP9zRi8z+/xvepVTZUMqhjFGgnahbo= -----END CERTIFICATE-----Generated at Wed May 13 07:45:56 2026 by rpki-client