$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft File: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft (raw, json) Hash identifier: KRx3wx2mwNIF5mqRSMqKU9Tndc0KorOZGmnBgQcfiyU= Subject key identifier: 30:17:AC:42:5B:55:DB:B6:C4:B6:98:2E:3A:28:D1:66:9C:12:0E:44 Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Certificate serial: 2021ED875ECCCB8FE1AA655A3CD7A1F9694EFCD0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:36:22 +0000 Manifest this update: Thu 23 Jul 2026 21:31:22 +0000 Manifest next update: Fri 24 Jul 2026 21:37:22 +0000 Files and hashes: 1: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: 2KuqxGxxUoWsjT52nc8YqV6GIpta4WniQwIsnjhtsto=) 2: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=) 3: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl (hash: 9mNMazlF2pJMGIAjapzbB4cJ+7Py2ZAs/hQKlL0XVvA=) 4: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=) 5: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: CDdAgCCqdZ4eGgwg/DutRSkrLQoNO6bQnfQJc5Q/9rc=) 6: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:21:ed:87:5e:cc:cb:8f:e1:aa:65:5a:3c:d7:a1:f9:69:4e:fc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Validity Not Before: Jul 23 21:31:22 2026 GMT Not After : Jul 24 21:37:22 2026 GMT Subject: CN=3017AC425B55DBB6C4B6982E3A28D1669C120E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:71:71:f3:41:4f:e9:7c:e9:b8:92:8b:d3: 29:8c:1e:e9:53:51:b8:c0:ec:1d:20:13:e7:f9:e2: da:7b:cf:7c:92:c7:15:12:e5:7d:04:ca:84:a7:91: 22:d6:fe:30:e4:f6:00:69:b4:04:32:87:7f:f6:5c: 47:1c:42:eb:ef:d4:2f:54:26:6a:04:ec:c7:e8:4f: a8:3b:9a:d8:f7:ce:38:c9:2d:65:f8:a7:10:ac:6a: 7e:91:42:e5:46:60:fe:fb:d7:39:40:ac:b7:a9:f4: ab:d4:97:85:d0:c5:35:53:09:d9:4c:31:9c:d7:09: 95:69:bb:0c:a2:7a:7d:d9:05:3b:15:27:52:f1:f8: 98:10:64:58:3a:fc:70:94:45:fe:c0:ff:b9:3c:a7: a3:b8:10:a1:78:68:1b:6b:64:44:86:20:18:a3:25: 1a:6e:7f:eb:b4:60:33:38:d5:f9:cc:0c:07:c8:3d: 8a:28:88:0c:d1:0e:9a:5e:89:63:37:1a:09:33:a9: 5f:fb:aa:78:61:9e:bb:2d:3b:b7:62:2f:a9:da:aa: a2:ae:f0:db:25:ea:ff:dc:d5:e9:31:cd:9f:83:c6: f9:e9:0a:7f:e7:de:92:29:07:30:cf:b1:23:0a:cd: a2:e6:8d:f6:ac:06:f4:f9:7e:d5:a8:ef:cb:e5:00: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:17:AC:42:5B:55:DB:B6:C4:B6:98:2E:3A:28:D1:66:9C:12:0E:44 X509v3 Authority Key Identifier: keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:65:57:48:58:04:10:50:03:04:2a:77:d9:7e:f9:c4:00: c8:a7:32:5b:28:09:18:ed:10:05:44:15:5f:11:e9:9c:53:5c: b7:a7:f7:2d:e4:6c:4e:c9:a4:24:bb:aa:54:a3:fc:72:61:5e: 52:44:e2:91:7a:10:a1:2c:a3:2a:2e:b8:8d:91:51:d3:18:d0: 67:6c:1c:79:8f:13:46:82:46:8c:aa:4c:c3:d5:6a:07:7f:0c: 3f:e6:67:82:36:f8:aa:cf:d4:b6:58:60:60:63:95:86:05:ed: 44:d2:bd:fc:82:c3:71:3e:d6:ed:78:a2:80:37:fd:8c:dd:42: 65:db:4e:70:7c:6a:ba:92:2f:e5:9a:ce:fb:93:78:b8:85:3b: ca:6c:1c:48:5f:62:17:79:b3:3d:91:36:59:6d:6d:7a:ae:77: 4e:1d:47:5e:15:1f:09:3f:db:a6:47:38:e4:7c:f9:58:0b:9b: 41:c8:aa:30:fc:41:16:6f:cc:0b:b5:e3:44:82:10:f5:28:da: e4:19:8b:c8:5f:8b:29:d8:9f:d9:a5:ac:31:fd:4a:d3:e2:65: 97:3b:6c:83:58:89:54:08:45:3b:1b:63:00:bd:0a:a5:46:9d: 2d:0d:a8:82:15:e6:8c:63:60:93:94:ec:86:09:1d:ad:57:e0: e8:bd:1f:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICHth17My4/hqmVaPNeh+WlO/NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5 NTk4QThBMjAeFw0yNjA3MjMyMTMxMjJaFw0yNjA3MjQyMTM3MjJaMDMxMTAvBgNV BAMTKDMwMTdBQzQyNUI1NURCQjZDNEI2OTgyRTNBMjhEMTY2OUMxMjBFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsHFx80FP6XzpuJKL0ymMHulT UbjA7B0gE+f54tp7z3ySxxUS5X0EyoSnkSLW/jDk9gBptAQyh3/2XEccQuvv1C9U JmoE7MfoT6g7mtj3zjjJLWX4pxCsan6RQuVGYP771zlArLep9KvUl4XQxTVTCdlM MZzXCZVpuwyien3ZBTsVJ1Lx+JgQZFg6/HCURf7A/7k8p6O4EKF4aBtrZESGIBij JRpuf+u0YDM41fnMDAfIPYooiAzRDppeiWM3GgkzqV/7qnhhnrstO7diL6naqqKu 8Nsl6v/c1ekxzZ+DxvnpCn/n3pIpBzDPsSMKzaLmjfasBvT5ftWo78vlANsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMBesQltV27bEtpguOijRZpwSDkQwHwYDVR0j BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1 NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB OEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0Ey MEI5NTk4QThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZXZVdIWAQQUAMEKnfZfvnEAMinMlsoCRjt EAVEFV8R6ZxTXLen9y3kbE7JpCS7qlSj/HJhXlJE4pF6EKEsoyouuI2RUdMY0Gds HHmPE0aCRoyqTMPVagd/DD/mZ4I2+KrP1LZYYGBjlYYF7UTSvfyCw3E+1u14ooA3 /YzdQmXbTnB8arqSL+WazvuTeLiFO8psHEhfYhd5sz2RNlltbXqud04dR14VHwk/ 26ZHOOR8+VgLm0HIqjD8QRZvzAu140SCEPUo2uQZi8hfiynYn9mlrDH9StPiZZc7 bINYiVQIRTsbYwC9CqVGnS0NqIIV5oxjYJOU7IYJHa1X4Oi9H2c= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:24 2026 by rpki-client