$ rpki-client -vvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft (raw, json) Hash identifier: dUBNWgae55W1dAshPIJtYRh+b8oq9/u+VXYGQSAfkFU= Subject key identifier: 3E:57:1E:FC:D9:F2:2B:36:91:B8:C1:E4:9B:18:FB:CF:70:0F:CB:DE Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Certificate serial: 03B572647B8E2A2616ABD7F70AA2B2CBF14EB03E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:07:32 +0000 Manifest this update: Tue 02 Jun 2026 10:02:32 +0000 Manifest next update: Wed 03 Jun 2026 13:58:32 +0000 Files and hashes: 1: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl (hash: H0s4wvOtQ/4/75+iy7YnQGL7t/DVxl2fbb1YWSuvsvk=) 2: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: rmdjm7QqoJ2GS17azzOS2oUqFKYvi6CMQRKzm3faQVA=) 3: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=) 4: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b5:72:64:7b:8e:2a:26:16:ab:d7:f7:0a:a2:b2:cb:f1:4e:b0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Validity Not Before: Jun 2 10:02:32 2026 GMT Not After : Jun 3 13:58:32 2026 GMT Subject: CN=3E571EFCD9F22B3691B8C1E49B18FBCF700FCBDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:ea:3d:3e:76:9f:d1:a2:15:44:27:28:6a: 82:66:57:53:bc:a8:0c:dc:24:0c:a6:12:28:db:43: d6:69:77:ac:95:ce:1e:dd:b1:79:f3:91:11:a6:98: 4c:7e:ce:00:4a:d9:2a:22:9b:5e:78:06:6b:85:8b: 85:6e:2d:d7:ae:84:1e:6a:ac:3f:eb:29:14:a3:a4: 62:54:f8:17:62:06:f8:17:6f:de:2b:24:b3:98:ec: bb:9a:cf:c2:6a:ad:5f:af:7c:b6:9d:b5:88:89:4b: 3a:6d:63:a4:93:ad:73:75:0d:ba:8c:ee:79:3b:c3: e6:b2:46:ce:8a:d1:46:b5:21:4c:f3:95:7a:47:83: 3b:8b:c9:ef:e0:ad:b6:60:31:ea:9f:c7:31:65:2d: 17:36:90:69:33:2d:9c:79:73:bd:db:41:2b:23:9f: 61:b4:8f:da:61:ca:fc:24:d4:e6:9f:6a:fe:99:3c: 2e:ae:c6:d8:69:31:89:cf:db:f7:ee:8c:d0:48:fe: a2:94:af:70:95:93:b4:ac:67:ad:8b:96:b2:84:45: 69:f0:dd:37:73:61:eb:5f:48:35:18:8b:29:e7:77: 44:1e:f8:4f:99:d8:1d:c4:de:6f:f4:78:62:0a:26: 79:97:db:af:36:a8:99:f8:f5:eb:a3:70:76:b7:4d: 8f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:1E:FC:D9:F2:2B:36:91:B8:C1:E4:9B:18:FB:CF:70:0F:CB:DE X509v3 Authority Key Identifier: keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:96:c3:57:79:03:82:e1:c1:2e:c8:40:09:b3:4a:1f:61:06: 00:7e:bd:f0:87:07:a4:6e:9b:2d:ba:43:c8:3f:db:69:a9:f2: e8:92:5f:ed:b7:4a:6b:dd:e3:b9:79:65:e5:c0:2d:ee:15:51: 5d:97:d3:2b:5b:38:72:cb:f8:ba:7a:20:cf:5c:b8:05:a0:f3: fd:3a:a5:90:2e:c0:f8:4a:d8:37:f4:fd:a3:de:41:79:f6:fe: 1d:3c:4d:03:1f:28:fa:9e:2d:56:45:ee:b3:3a:72:10:6a:46: 7d:b5:07:2d:d7:f9:cd:6c:1f:fa:0c:9b:44:4a:99:80:9c:1e: f1:51:ed:bf:a1:09:fe:66:93:9b:99:15:03:cf:ce:cf:3b:39: 0b:39:6c:98:2f:1d:59:9b:96:45:74:bc:89:20:3c:4b:bd:45: ed:5d:3e:40:86:77:98:69:4a:6a:41:08:be:31:66:33:41:bc: 44:88:3f:cb:2d:62:2a:90:43:99:6c:be:70:95:05:dd:cd:f0: 51:61:70:62:fa:1d:17:06:2c:00:a8:03:01:7c:c0:a5:69:c5: 32:f5:9c:91:0a:38:5e:f4:cd:5a:3e:f3:4a:b6:c6:45:92:b6: a1:e9:ea:5f:34:c0:b7:9f:20:47:41:54:e4:58:05:a7:99:d9: 57:12:aa:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7VyZHuOKiYWq9f3CqKyy/FOsD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4 NjNFMjlGNDAeFw0yNjA2MDIxMDAyMzJaFw0yNjA2MDMxMzU4MzJaMDMxMTAvBgNV BAMTKDNFNTcxRUZDRDlGMjJCMzY5MUI4QzFFNDlCMThGQkNGNzAwRkNCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4puo9Pnaf0aIVRCcoaoJmV1O8 qAzcJAymEijbQ9Zpd6yVzh7dsXnzkRGmmEx+zgBK2Soim154BmuFi4VuLdeuhB5q rD/rKRSjpGJU+BdiBvgXb94rJLOY7Luaz8JqrV+vfLadtYiJSzptY6STrXN1DbqM 7nk7w+ayRs6K0Ua1IUzzlXpHgzuLye/grbZgMeqfxzFlLRc2kGkzLZx5c73bQSsj n2G0j9phyvwk1Oafav6ZPC6uxthpMYnP2/fujNBI/qKUr3CVk7SsZ62LlrKERWnw 3TdzYetfSDUYiynnd0Qe+E+Z2B3E3m/0eGIKJnmX2682qJn49eujcHa3TY+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPlce/NnyKzaRuMHkmxj7z3APy94wHwYDVR0j BBgwFoAU7XtZRCesuAoesuTpLV5rpoY+KfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5NGQzNzUtZmM3ZC00ZGM3LWExZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQy N0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4NjNFMjlGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDdCNTk0NDI3QUNCODBBMUVCMkU0RTkyRDVFNkJBNjg2M0Uy OUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZC QTY4NjNFMjlGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaWw1d5A4LhwS7IQAmzSh9hBgB+vfCHB6Ru my26Q8g/22mp8uiSX+23Smvd47l5ZeXALe4VUV2X0ytbOHLL+Lp6IM9cuAWg8/06 pZAuwPhK2Df0/aPeQXn2/h08TQMfKPqeLVZF7rM6chBqRn21By3X+c1sH/oMm0RK mYCcHvFR7b+hCf5mk5uZFQPPzs87OQs5bJgvHVmblkV0vIkgPEu9Re1dPkCGd5hp SmpBCL4xZjNBvESIP8stYiqQQ5lsvnCVBd3N8FFhcGL6HRcGLACoAwF8wKVpxTL1 nJEKOF70zVo+80q2xkWStqHp6l80wLefIEdBVORYBaeZ2VcSqpI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:20 2026 by rpki-client