$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft File: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft (raw, json) Hash identifier: dkUTuNwTn1iuTaCg2zA3u1//I2/Sm3VHRPyuOtVXWmQ= Subject key identifier: C7:60:7F:F7:1B:65:7D:DD:44:64:53:49:8E:E5:6A:32:C1:D5:C1:9F Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D Certificate issuer: /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D Certificate serial: 0DAD4C04FB124DF6A40B417A57A7E2F15F9DE2C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:10:21 +0000 Manifest this update: Tue 12 May 2026 22:05:21 +0000 Manifest next update: Wed 13 May 2026 23:34:21 +0000 Files and hashes: 1: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: y23ei7JhisKDcrmLs/IfTlddxIuJqQ3o+RaQBaZ//Ws=) 2: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl (hash: E4jNvrW4JJ8KeWd7WnBSgXX8ZmXRKmjd65eAILr3bKY=) 3: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: d2NngQ1ClG3KccosIUCvHr+xZx4Rn0+Y8+h4km4ecJk=) 4: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: JgYuRVVLY5uhLSJE/sZQYEOvK74P7yfUZ3Eo+U6PjCs=) 5: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: boDuLeGcrulC4Uynp3CHSUapz3xB3GO6CYNItPeHTs4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ad:4c:04:fb:12:4d:f6:a4:0b:41:7a:57:a7:e2:f1:5f:9d:e2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D Validity Not Before: May 12 22:05:21 2026 GMT Not After : May 13 23:34:21 2026 GMT Subject: CN=C7607FF71B657DDD446453498EE56A32C1D5C19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:94:2e:68:3a:91:68:b4:e2:79:a8:d0:62: 98:bc:f1:bb:58:41:de:42:43:12:19:df:bb:8e:00: b1:f0:f7:f9:d8:18:4a:7a:46:86:61:79:10:c6:b7: 62:f7:52:cb:41:a9:c9:7a:d3:17:9b:c3:47:b8:c8: 40:24:f2:94:a0:77:b9:ab:52:91:67:e5:9c:b2:63: ed:f3:21:92:ba:1e:16:fa:27:5b:ad:67:71:cc:2a: ca:99:c2:64:08:15:45:4b:d5:fc:00:82:4f:e7:24: 1c:47:37:ab:15:aa:f4:b7:fe:a4:c7:33:71:93:8f: 2e:3d:77:bf:fc:d0:cf:94:e7:1c:40:cd:cd:f2:70: a8:c2:19:c5:7c:c5:f9:88:d5:c1:ad:d0:6d:f7:8f: 1e:be:03:50:58:ea:94:9a:e7:90:6e:2e:e0:04:e1: d2:a3:a9:fa:44:22:9f:41:21:d1:59:95:e6:c2:99: a3:f6:92:34:c9:a0:74:d1:6c:fd:c4:a9:07:c9:74: 1f:26:eb:16:4b:33:3a:25:69:a2:d1:57:42:cd:68: 01:42:98:32:f7:2f:b6:c1:16:6c:7e:5a:44:2a:e2: 3e:bd:df:08:f5:d6:9c:d2:6e:38:ba:f0:dd:8d:f0: c7:2f:2f:35:da:6a:1b:d5:48:e4:51:04:ba:48:4e: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:60:7F:F7:1B:65:7D:DD:44:64:53:49:8E:E5:6A:32:C1:D5:C1:9F X509v3 Authority Key Identifier: keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e9:fc:05:fd:8b:a8:41:67:64:33:01:ce:6c:53:be:1f:29: 4c:10:3b:c2:86:71:03:da:74:c9:dd:01:6c:32:6b:90:88:cc: 70:da:8d:76:10:8d:f0:a3:a9:9c:9e:d2:f7:a0:a9:45:d0:bc: 97:13:72:8b:4f:58:b6:27:1d:b6:86:cc:55:a4:c3:e5:30:8a: 28:04:8d:3f:e5:d8:91:24:ec:28:ef:be:20:6f:dc:d4:7f:6e: 45:5d:df:ab:d7:bf:5d:fa:a1:a1:e0:20:3f:50:76:c8:5d:ea: 4b:62:fc:e3:71:5d:4f:e3:c6:1e:92:08:9b:cf:47:d0:58:d5: ab:61:ba:2a:03:ee:82:83:52:c5:54:c2:ec:cb:3d:ca:ff:7d: 52:a6:1b:6a:ec:80:e6:d2:c6:89:38:54:40:2e:08:f8:8c:3a: 47:f2:c7:f7:cc:cd:19:76:18:49:af:d5:ac:9b:55:d2:61:0a: 94:25:b9:cd:d1:0f:47:fb:29:76:f3:f9:5f:31:e9:fc:5f:d7: 47:25:b2:26:b5:bf:4f:80:fb:37:5c:41:d1:4d:08:da:19:9d: 56:e3:48:40:98:9a:90:92:9b:dd:38:a6:da:c4:8b:69:28:65: 06:4c:09:1b:93:67:d4:2c:e0:1b:f4:0f:bb:fa:76:18:94:dc: 68:ca:8d:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDa1MBPsSTfakC0F6V6fi8V+d4sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzMDU3RUVERUY5Rjk5RDZEMTBFQUEwRjQ3RTREMTA5 OTdDMUU2RDAeFw0yNjA1MTIyMjA1MjFaFw0yNjA1MTMyMzM0MjFaMDMxMTAvBgNV BAMTKEM3NjA3RkY3MUI2NTdEREQ0NDY0NTM0OThFRTU2QTMyQzFENUMxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPP5QuaDqRaLTieajQYpi88btY Qd5CQxIZ37uOALHw9/nYGEp6RoZheRDGt2L3UstBqcl60xebw0e4yEAk8pSgd7mr UpFn5ZyyY+3zIZK6Hhb6J1utZ3HMKsqZwmQIFUVL1fwAgk/nJBxHN6sVqvS3/qTH M3GTjy49d7/80M+U5xxAzc3ycKjCGcV8xfmI1cGt0G33jx6+A1BY6pSa55BuLuAE 4dKjqfpEIp9BIdFZlebCmaP2kjTJoHTRbP3EqQfJdB8m6xZLMzolaaLRV0LNaAFC mDL3L7bBFmx+WkQq4j693wj11pzSbji68N2N8McvLzXaahvVSORRBLpITk3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx2B/9xtlfd1EZFNJjuVqMsHVwZ8wHwYDVR0j BBgwFoAU7TBX7t75+Z1tEOqg9H5NEJl8Hm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGUxOGQtYTA0Ny00NTkwLTllNTYtNDY0YTczZTIzYzZjLzAvRUQzMDU3RUVE RUY5Rjk5RDZEMTBFQUEwRjQ3RTREMTA5OTdDMUU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDMwNTdFRURFRjlGOTlENkQxMEVBQTBGNDdFNEQxMDk5N0Mx RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvRUQzMDU3RUVERUY5Rjk5RDZEMTBFQUEwRjQ3RTRE MTA5OTdDMUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLp/AX9i6hBZ2QzAc5sU74fKUwQO8KGcQPa dMndAWwya5CIzHDajXYQjfCjqZye0vegqUXQvJcTcotPWLYnHbaGzFWkw+UwiigE jT/l2JEk7CjvviBv3NR/bkVd36vXv136oaHgID9Qdshd6kti/ONxXU/jxh6SCJvP R9BY1athuioD7oKDUsVUwuzLPcr/fVKmG2rsgObSxok4VEAuCPiMOkfyx/fMzRl2 GEmv1aybVdJhCpQluc3RD0f7KXbz+V8x6fxf10clsia1v0+A+zdcQdFNCNoZnVbj SECYmpCSm904ptrEi2koZQZMCRuTZ9Qs4Bv0D7v6dhiU3GjKjX0= -----END CERTIFICATE-----Generated at Wed May 13 02:15:35 2026 by rpki-client