$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft File: ED8DD7447C376181396EB62C759A6F26FB167CCA.mft (raw, json) Hash identifier: xpJWly2EkQfCZ0YXT+mlMm3biW9UQXvDKwL2O/6GzOQ= Subject key identifier: E5:6B:F8:02:E5:A0:85:51:3A:A0:99:EA:CA:D0:BA:27:AD:BA:EF:CF Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA Certificate issuer: /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Certificate serial: 6FA3F34628FF6E8094165059743699481427FB66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:18:30 +0000 Manifest this update: Tue 12 May 2026 07:13:30 +0000 Manifest next update: Wed 13 May 2026 08:39:30 +0000 Files and hashes: 1: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=) 2: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=) 3: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=) 4: ED8DD7447C376181396EB62C759A6F26FB167CCA.crl (hash: iN7Y6QTBAuLk87aQy1fFEN1+obH435XcmS05yG3XpZk=) 5: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=) 6: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: WD8rkoXkQTqnUe9DEQn99XMfFlR76Acc32DExkXvm/I=) 7: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=) 8: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: ebvrnt2gfBGMuAXBfS5jxa2H91cp8yKz8AywyJ9Opto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:f3:46:28:ff:6e:80:94:16:50:59:74:36:99:48:14:27:fb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Validity Not Before: May 12 07:13:30 2026 GMT Not After : May 13 08:39:30 2026 GMT Subject: CN=E56BF802E5A085513AA099EACAD0BA27ADBAEFCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:80:3b:c3:30:2e:29:c9:9a:6d:88:83:d3: 50:96:2d:e8:a5:f0:56:a3:18:27:c7:eb:84:9c:e0: 59:45:6c:28:1b:b3:40:19:f6:c2:12:d2:63:35:cc: e6:31:4b:a0:cd:d3:e6:a4:77:50:f7:05:35:b7:ce: bf:2f:70:c9:8f:5b:d5:fd:f0:9b:9e:93:f2:2f:62: fd:94:4a:77:55:9b:f1:df:1b:13:a1:ff:d0:af:45: 55:e5:8d:f8:a4:68:52:9e:a7:bc:5a:1d:5c:41:cc: f7:35:6b:7b:ee:60:62:95:23:08:51:cf:77:73:ed: 0f:e6:05:24:30:44:a0:79:23:dd:d5:c9:e0:78:dc: b1:c6:0e:1b:c6:7a:13:d8:fa:46:6c:1e:fd:b3:49: 2c:fe:cd:3d:76:75:c6:a6:f7:59:52:34:34:52:ac: 40:b5:f3:05:47:ec:d3:91:e2:a0:f6:9e:71:1f:e5: 3f:b0:13:d7:62:4e:8d:14:e8:03:a4:52:4e:25:fc: a8:36:73:40:10:70:8d:03:80:d5:30:a6:2d:93:5d: f4:7c:36:35:5a:12:30:8f:ec:b9:ce:3d:14:23:04: a0:ef:37:db:3d:6b:56:0c:81:a2:72:f5:c2:3d:9c: ac:1a:f0:f2:6d:c0:40:58:69:bd:cc:7d:7f:89:8d: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6B:F8:02:E5:A0:85:51:3A:A0:99:EA:CA:D0:BA:27:AD:BA:EF:CF X509v3 Authority Key Identifier: keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b4:26:59:f7:f8:3f:28:77:77:60:22:cd:b2:e1:11:4c:c6: 83:c0:87:94:b5:d7:f8:2e:bd:5b:cb:92:6d:15:6b:49:d8:34: 2d:94:66:0d:3d:d8:27:9c:a6:57:c3:79:7f:f5:be:b2:3f:c9: 17:b1:48:ac:93:e9:aa:b6:3b:4b:32:25:b0:de:1c:85:de:fd: 99:a7:46:6c:6b:27:23:ba:68:c1:98:03:9b:3a:57:c1:34:17: 80:4b:93:6e:b8:4b:a4:3f:c9:80:3e:2e:e1:8b:c5:d3:7d:29: a2:b2:f4:aa:b1:47:7b:8f:fe:95:91:e4:a7:97:08:91:d8:87: 6d:d4:75:c7:02:46:61:ad:c5:af:56:ae:ae:b7:91:bf:70:02: c9:cd:6f:41:48:c2:3c:16:fa:43:4a:cc:5d:9c:0c:02:22:4e: a4:38:da:88:7f:82:97:c7:ff:5c:9c:ae:05:72:04:ec:10:26: a2:ad:02:fe:2f:94:2c:a6:f3:23:62:04:4b:f0:66:80:20:b1: 4c:7c:66:40:97:37:e4:bf:31:43:99:33:ee:be:f7:81:fe:9c: d2:3d:cc:26:2d:79:8f:0e:91:98:4c:60:0a:fd:9a:a9:45:df: c7:ad:d0:c9:fb:46:71:64:d9:5a:ec:17:20:2e:e8:06:87:0a: 05:38:a7:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6PzRij/boCUFlBZdDaZSBQn+2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG QjE2N0NDQTAeFw0yNjA1MTIwNzEzMzBaFw0yNjA1MTMwODM5MzBaMDMxMTAvBgNV BAMTKEU1NkJGODAyRTVBMDg1NTEzQUEwOTlFQUNBRDBCQTI3QURCQUVGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR34A7wzAuKcmabYiD01CWLeil 8FajGCfH64Sc4FlFbCgbs0AZ9sIS0mM1zOYxS6DN0+akd1D3BTW3zr8vcMmPW9X9 8Juek/IvYv2USndVm/HfGxOh/9CvRVXljfikaFKep7xaHVxBzPc1a3vuYGKVIwhR z3dz7Q/mBSQwRKB5I93VyeB43LHGDhvGehPY+kZsHv2zSSz+zT12dcam91lSNDRS rEC18wVH7NOR4qD2nnEf5T+wE9diTo0U6AOkUk4l/Kg2c0AQcI0DgNUwpi2TXfR8 NjVaEjCP7LnOPRQjBKDvN9s9a1YMgaJy9cI9nKwa8PJtwEBYab3MfX+JjfwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Wv4AuWghVE6oJnqytC6J626788wHwYDVR0j BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3 QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3 Q0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZG MjZGQjE2N0NDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJm0Jln3+D8od3dgIs2y4RFMxoPAh5S11/gu vVvLkm0Va0nYNC2UZg092CecplfDeX/1vrI/yRexSKyT6aq2O0syJbDeHIXe/Zmn RmxrJyO6aMGYA5s6V8E0F4BLk264S6Q/yYA+LuGLxdN9KaKy9KqxR3uP/pWR5KeX CJHYh23UdccCRmGtxa9Wrq63kb9wAsnNb0FIwjwW+kNKzF2cDAIiTqQ42oh/gpfH /1ycrgVyBOwQJqKtAv4vlCym8yNiBEvwZoAgsUx8ZkCXN+S/MUOZM+6+94H+nNI9 zCYteY8OkZhMYAr9mqlF38et0Mn7RnFk2VrsFyAu6AaHCgU4pz4= -----END CERTIFICATE-----Generated at Wed May 13 00:44:20 2026 by rpki-client