$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft File: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft (raw, json) Hash identifier: T3NRY143VtDPGr8HDS3P+OXh0JLrsMwfEUgBoWn8Htk= Subject key identifier: B3:BA:B4:31:74:06:20:1E:06:DB:45:9B:84:F4:80:9A:40:53:39:51 Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D Certificate issuer: /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D Certificate serial: 376ACD2278F40D6ABA5DD0115F86D6339926FDAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:30:01 +0000 Manifest this update: Thu 23 Jul 2026 20:25:01 +0000 Manifest next update: Fri 24 Jul 2026 23:50:01 +0000 Files and hashes: 1: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: boDuLeGcrulC4Uynp3CHSUapz3xB3GO6CYNItPeHTs4=) 2: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: y23ei7JhisKDcrmLs/IfTlddxIuJqQ3o+RaQBaZ//Ws=) 3: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: d2NngQ1ClG3KccosIUCvHr+xZx4Rn0+Y8+h4km4ecJk=) 4: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: JgYuRVVLY5uhLSJE/sZQYEOvK74P7yfUZ3Eo+U6PjCs=) 5: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl (hash: ZbL0xFxiihiO2SAYYH7usPXEGT6BI98VNqONY+NtGY0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6a:cd:22:78:f4:0d:6a:ba:5d:d0:11:5f:86:d6:33:99:26:fd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D Validity Not Before: Jul 23 20:25:01 2026 GMT Not After : Jul 24 23:50:01 2026 GMT Subject: CN=B3BAB4317406201E06DB459B84F4809A40533951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:44:f3:84:85:a3:14:31:fb:21:49:6f:c1: fe:29:d3:3b:4e:7f:ad:d1:13:ee:6a:19:f7:90:1b: a7:bb:ea:49:f4:74:c9:48:63:47:c5:46:4a:a8:13: e2:85:f1:fd:84:d5:7c:f6:5b:7f:cb:58:95:fd:45: 51:2b:eb:58:c2:28:93:2f:5d:82:1a:fb:72:71:dd: a0:1d:f7:2a:c0:15:df:eb:10:98:06:68:8d:d0:0c: ea:71:f2:6f:82:5d:f5:15:ee:ea:4c:f5:6a:ae:02: 9f:0f:27:69:29:3a:9e:4b:53:da:3a:95:5b:2d:85: 40:f3:aa:73:a8:e2:ff:82:30:c2:4a:ca:1d:3e:bc: 0a:45:7f:48:48:e1:1b:a3:45:92:3e:dc:74:a3:a5: 19:fb:4e:e3:a2:6d:33:f3:9f:64:85:90:9b:91:7f: 7f:fb:84:99:7e:91:05:ea:8b:60:e2:a8:3a:28:33: 75:7d:c1:4e:40:1c:ac:29:92:75:bc:0a:6f:c8:9c: e3:49:cc:ef:8f:fd:fb:5a:7b:e7:23:4a:1a:48:91: 19:c9:31:76:6e:3a:d3:f0:47:16:7f:29:56:ba:2e: 89:f1:ad:97:c8:4d:16:cd:59:a6:70:d6:d7:75:90: 46:25:33:27:db:e2:cc:8c:57:6a:ac:c3:09:9b:9c: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BA:B4:31:74:06:20:1E:06:DB:45:9B:84:F4:80:9A:40:53:39:51 X509v3 Authority Key Identifier: keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:87:7d:0e:40:44:00:4c:27:88:0c:78:9d:1d:25:be:26:6a: 69:1b:33:a2:fa:83:4a:37:e1:7e:ec:c8:61:8a:45:49:79:7d: 71:06:be:de:8a:b0:61:2e:80:01:22:ee:24:a1:74:fb:36:51: 90:5c:fe:5f:c0:44:af:b9:69:dd:37:14:28:61:7a:5e:67:32: 0e:c4:c3:79:2b:c8:51:ce:5a:67:ca:e3:72:54:a2:40:9d:dc: 7b:f4:bc:ea:71:18:d5:e2:7f:bf:37:54:f0:e8:26:a8:f1:51: c4:f8:30:eb:76:64:c4:d5:bf:fc:9f:e0:5e:8f:00:b2:15:7a: 70:91:6d:c5:b4:36:f8:17:a4:31:84:5e:ac:c5:cc:40:e4:9c: 0a:18:b5:1d:41:2b:f0:2e:91:65:42:da:06:c4:56:28:d7:bb: 3f:e4:75:52:65:9a:c5:08:ea:94:06:fa:bc:32:3d:64:18:2f: 2e:db:2b:af:db:12:09:aa:e8:f9:b9:ff:88:46:5f:dc:25:fb: 96:4f:41:03:0c:b8:c3:b1:9c:88:c5:e2:18:a2:86:a8:15:af: f0:db:4f:c5:bf:5f:a1:56:64:ad:8f:38:b8:f2:09:e1:df:9e: c5:56:80:8e:df:45:b5:67:66:86:44:fa:87:00:f3:2f:a0:86: 7e:f8:e0:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2rNInj0DWq6XdARX4bWM5km/aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzMDU3RUVERUY5Rjk5RDZEMTBFQUEwRjQ3RTREMTA5 OTdDMUU2RDAeFw0yNjA3MjMyMDI1MDFaFw0yNjA3MjQyMzUwMDFaMDMxMTAvBgNV BAMTKEIzQkFCNDMxNzQwNjIwMUUwNkRCNDU5Qjg0RjQ4MDlBNDA1MzM5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTkTzhIWjFDH7IUlvwf4p0ztO f63RE+5qGfeQG6e76kn0dMlIY0fFRkqoE+KF8f2E1Xz2W3/LWJX9RVEr61jCKJMv XYIa+3Jx3aAd9yrAFd/rEJgGaI3QDOpx8m+CXfUV7upM9WquAp8PJ2kpOp5LU9o6 lVsthUDzqnOo4v+CMMJKyh0+vApFf0hI4RujRZI+3HSjpRn7TuOibTPzn2SFkJuR f3/7hJl+kQXqi2DiqDooM3V9wU5AHKwpknW8Cm/InONJzO+P/ftae+cjShpIkRnJ MXZuOtPwRxZ/KVa6LonxrZfITRbNWaZw1td1kEYlMyfb4syMV2qswwmbnOxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs7q0MXQGIB4G20WbhPSAmkBTOVEwHwYDVR0j BBgwFoAU7TBX7t75+Z1tEOqg9H5NEJl8Hm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGUxOGQtYTA0Ny00NTkwLTllNTYtNDY0YTczZTIzYzZjLzAvRUQzMDU3RUVE RUY5Rjk5RDZEMTBFQUEwRjQ3RTREMTA5OTdDMUU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDMwNTdFRURFRjlGOTlENkQxMEVBQTBGNDdFNEQxMDk5N0Mx RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvRUQzMDU3RUVERUY5Rjk5RDZEMTBFQUEwRjQ3RTRE MTA5OTdDMUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeHfQ5ARABMJ4gMeJ0dJb4mamkbM6L6g0o3 4X7syGGKRUl5fXEGvt6KsGEugAEi7iShdPs2UZBc/l/ARK+5ad03FChhel5nMg7E w3kryFHOWmfK43JUokCd3Hv0vOpxGNXif783VPDoJqjxUcT4MOt2ZMTVv/yf4F6P ALIVenCRbcW0NvgXpDGEXqzFzEDknAoYtR1BK/AukWVC2gbEVijXuz/kdVJlmsUI 6pQG+rwyPWQYLy7bK6/bEgmq6Pm5/4hGX9wl+5ZPQQMMuMOxnIjF4hiihqgVr/Db T8W/X6FWZK2POLjyCeHfnsVWgI7fRbVnZoZE+ocA8y+ghn744CY= -----END CERTIFICATE-----Generated at Fri Jul 24 07:41:42 2026 by rpki-client