$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft File: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft (raw, json) Hash identifier: CHSSY14SzHGecFpMg2xb8pANQGoKSNoovoHQcCAVDP8= Subject key identifier: 39:FA:09:57:30:F0:B2:3A:15:59:FE:7B:A3:6F:FB:AF:8D:63:81:85 Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Certificate serial: 2A839E6F0B939C127F92BA47AF52F465159F0BCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:38 +0000 Manifest this update: Tue 12 May 2026 19:30:38 +0000 Manifest next update: Wed 13 May 2026 19:46:38 +0000 Files and hashes: 1: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=) 2: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl (hash: oYxdzBQa+BzSTE12yfnu9URckGv9em9Nnz87JLTbE9w=) 3: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=) 4: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: CDdAgCCqdZ4eGgwg/DutRSkrLQoNO6bQnfQJc5Q/9rc=) 5: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: 2KuqxGxxUoWsjT52nc8YqV6GIpta4WniQwIsnjhtsto=) 6: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:83:9e:6f:0b:93:9c:12:7f:92:ba:47:af:52:f4:65:15:9f:0b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Validity Not Before: May 12 19:30:38 2026 GMT Not After : May 13 19:46:38 2026 GMT Subject: CN=39FA095730F0B23A1559FE7BA36FFBAF8D638185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:1e:e9:72:e4:55:55:21:82:8a:64:3a:d6: 83:70:cf:15:c4:1c:f9:5f:e6:9f:1f:3d:23:0b:20: 92:e7:b4:77:4b:66:29:40:52:7e:ea:34:f7:6f:65: f1:1b:25:f5:a4:45:42:d5:37:ed:3d:6e:52:fc:b6: c1:b5:69:28:73:6d:d0:96:44:58:0c:74:92:b4:68: 1c:5e:1a:94:7f:bf:38:49:a7:37:e3:ef:74:9f:cf: 9f:4f:e6:e6:ee:08:cb:65:ea:4f:fe:81:74:ae:9d: ca:c9:41:3e:6c:ce:88:e8:d4:23:25:2e:fa:a9:a1: 73:1f:88:33:0a:3c:4c:de:77:fe:7b:c6:02:e5:db: c3:a3:5c:25:4a:7c:f2:36:be:1c:b4:2f:1a:5a:fe: 41:50:25:cc:4e:36:89:8f:35:f0:4e:f7:ae:83:03: 42:aa:ee:d7:76:04:0b:1a:e1:54:1e:f4:ea:71:72: c9:b4:a5:8e:73:bb:13:c1:b6:31:94:c2:bc:d3:58: 5c:a2:29:2c:bc:79:3e:54:64:34:55:31:eb:25:a2: 30:0d:b9:db:66:74:98:e2:c7:5b:b1:76:3e:be:2e: aa:e2:e0:93:01:68:4a:01:eb:b5:c1:b8:5e:75:81: 2e:8b:9f:dd:df:16:a7:4f:d5:a1:41:4a:3b:95:74: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:09:57:30:F0:B2:3A:15:59:FE:7B:A3:6F:FB:AF:8D:63:81:85 X509v3 Authority Key Identifier: keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ef:4b:e8:fa:24:bd:e9:ee:23:10:89:3b:38:1d:bf:66:c4: ec:c0:4a:e1:9a:8f:c9:9f:6c:be:32:42:95:fb:a0:b7:16:4b: 9f:dd:b1:e3:33:f1:fa:26:bd:be:2d:ec:d2:74:89:7d:ca:d1: 53:26:ca:12:3b:ca:e1:bc:4a:4f:db:b2:25:a5:55:02:13:8d: 98:3a:c5:b1:30:f5:8c:01:19:44:04:c3:11:5a:46:6b:1f:ab: 83:55:d0:8a:33:3a:80:a5:7a:5d:ec:b9:67:6f:ac:cf:5f:cf: 72:49:48:14:d1:0d:2a:56:68:a0:c6:c4:b9:d1:a7:03:3f:58: 07:07:5e:ec:3d:9e:2a:2c:91:dc:e2:e4:67:c8:4b:3c:db:5d: 7c:0d:2a:03:21:1d:85:cf:11:84:a6:3f:96:0a:5e:2c:2c:f7: f2:b2:75:4f:8a:b2:66:00:69:d5:21:2f:9b:09:8e:25:73:d3: 9e:f5:af:5d:13:1f:78:fd:36:3e:c6:1d:bf:cc:9a:aa:2e:70: 51:5c:f8:e8:22:41:4b:34:7b:b9:57:e7:b4:aa:ce:43:1f:b5: ca:0b:da:dd:61:55:df:71:51:eb:79:51:1a:2d:cd:40:5e:3a: 0e:09:8c:83:13:4f:c8:0a:c3:69:c7:31:a9:48:15:a6:16:d3: c5:d5:58:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKoOebwuTnBJ/krpHr1L0ZRWfC80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5 NTk4QThBMjAeFw0yNjA1MTIxOTMwMzhaFw0yNjA1MTMxOTQ2MzhaMDMxMTAvBgNV BAMTKDM5RkEwOTU3MzBGMEIyM0ExNTU5RkU3QkEzNkZGQkFGOEQ2MzgxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLh7pcuRVVSGCimQ61oNwzxXE HPlf5p8fPSMLIJLntHdLZilAUn7qNPdvZfEbJfWkRULVN+09blL8tsG1aShzbdCW RFgMdJK0aBxeGpR/vzhJpzfj73Sfz59P5ubuCMtl6k/+gXSuncrJQT5szojo1CMl LvqpoXMfiDMKPEzed/57xgLl28OjXCVKfPI2vhy0Lxpa/kFQJcxONomPNfBO966D A0Kq7td2BAsa4VQe9Opxcsm0pY5zuxPBtjGUwrzTWFyiKSy8eT5UZDRVMeslojAN udtmdJjix1uxdj6+Lqri4JMBaEoB67XBuF51gS6Ln93fFqdP1aFBSjuVdF+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfoJVzDwsjoVWf57o2/7r41jgYUwHwYDVR0j BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1 NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB OEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0Ey MEI5NTk4QThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7vS+j6JL3p7iMQiTs4Hb9mxOzASuGaj8mf bL4yQpX7oLcWS5/dseMz8fomvb4t7NJ0iX3K0VMmyhI7yuG8Sk/bsiWlVQITjZg6 xbEw9YwBGUQEwxFaRmsfq4NV0IozOoClel3suWdvrM9fz3JJSBTRDSpWaKDGxLnR pwM/WAcHXuw9nioskdzi5GfISzzbXXwNKgMhHYXPEYSmP5YKXiws9/KydU+KsmYA adUhL5sJjiVz0571r10TH3j9Nj7GHb/MmqoucFFc+OgiQUs0e7lX57SqzkMftcoL 2t1hVd9xUet5URotzUBeOg4JjIMTT8gKw2nHMalIFaYW08XVWJo= -----END CERTIFICATE-----Generated at Wed May 13 00:31:19 2026 by rpki-client