$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft File: ED8DD7447C376181396EB62C759A6F26FB167CCA.mft (raw, json) Hash identifier: Y63D3rxk7Xe1gC/Oh/m2Ru0xKKl7o5mS3OeGhCMVuog= Subject key identifier: E8:DB:C8:5D:B9:4D:4D:E1:4D:E2:6F:1A:A9:A4:4C:38:AC:51:79:82 Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA Certificate issuer: /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Certificate serial: 47CB50B4E11EAEA4B9AE444DE80A42F56AEDC172 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:44:47 +0000 Manifest this update: Mon 20 Jul 2026 14:39:47 +0000 Manifest next update: Tue 21 Jul 2026 16:17:47 +0000 Files and hashes: 1: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=) 2: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=) 3: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=) 4: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: WD8rkoXkQTqnUe9DEQn99XMfFlR76Acc32DExkXvm/I=) 5: ED8DD7447C376181396EB62C759A6F26FB167CCA.crl (hash: sPuwdmZVPW98jgOwHHKIfgkogzz94Idj+BZ5E2ePmyw=) 6: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=) 7: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=) 8: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: ebvrnt2gfBGMuAXBfS5jxa2H91cp8yKz8AywyJ9Opto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cb:50:b4:e1:1e:ae:a4:b9:ae:44:4d:e8:0a:42:f5:6a:ed:c1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Validity Not Before: Jul 20 14:39:47 2026 GMT Not After : Jul 21 16:17:47 2026 GMT Subject: CN=E8DBC85DB94D4DE14DE26F1AA9A44C38AC517982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:b7:e5:a8:30:64:39:b6:ba:22:fb:9a:c7: 78:17:c5:91:0e:3d:60:93:22:89:4a:5e:2e:af:c7: bf:89:4a:ac:6c:1f:22:42:dd:18:54:18:cc:d1:36: 76:da:c1:c3:73:d0:4b:c2:6b:00:e7:f1:b1:29:23: 2f:f1:7e:20:3e:a1:41:fe:2b:52:ce:62:a0:52:80: 56:68:cd:2d:92:0f:21:c0:d8:59:36:5e:44:fe:ad: a9:f4:95:26:12:17:ef:41:53:37:fc:d0:0b:95:84: f3:4f:97:05:c6:f7:da:b6:e6:89:75:97:17:f5:33: 69:d5:45:a5:ef:e0:a7:6a:bb:ce:14:11:02:b4:7f: bb:5f:22:46:43:1b:4b:4f:c0:d1:c9:29:14:ff:30: 3b:a6:61:30:dd:28:c1:42:47:bf:7c:d2:70:8a:40: 51:87:39:a8:3c:f2:6e:5d:d3:4f:69:01:0b:b4:39: 34:21:ad:57:8b:62:7e:3f:34:16:92:b7:ed:32:0f: 3f:9d:76:22:c4:fe:57:6f:4e:aa:bd:68:cd:97:ba: 99:1f:0a:98:a2:56:51:30:65:d8:87:95:da:f4:b6: 91:2d:1b:e9:d0:c4:79:7a:c3:26:75:7c:77:24:ed: 1b:82:d0:05:64:c9:8c:c1:c0:56:d1:ea:e6:f9:a8: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DB:C8:5D:B9:4D:4D:E1:4D:E2:6F:1A:A9:A4:4C:38:AC:51:79:82 X509v3 Authority Key Identifier: keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:23:7e:94:dc:fc:ef:a4:5f:cc:53:e4:b3:b0:7e:ad:a8:5c: e1:97:fa:d6:53:d2:05:15:67:ac:6c:bd:81:f6:ff:61:5c:4a: d1:bd:23:68:8d:b3:0e:02:da:f1:bd:c0:00:2c:9d:9d:9c:1d: ec:9b:08:72:1e:d7:d7:41:44:23:2f:06:79:3c:9a:f1:b2:dc: 72:c7:53:2c:ea:f7:39:c4:3c:0d:4f:9a:2a:55:2e:2d:3d:79: d6:79:48:cb:14:28:7d:36:7f:f4:f9:58:6a:1e:87:cd:4e:14: f7:02:37:b8:51:cd:c8:b5:df:e4:fa:6c:de:eb:f9:01:ed:83: ef:e5:5d:59:c9:9f:dd:f1:be:b9:00:38:27:8f:54:05:59:5f: 5a:68:4a:f1:0a:51:1f:e8:83:43:b3:55:4b:81:4a:31:a7:52: 56:3c:81:7a:1d:13:33:35:1b:06:3e:89:04:4c:24:c4:47:b5: 8d:98:6c:2b:22:9f:b0:d5:cf:b0:bd:80:3d:a8:ac:30:0c:82: 7c:1c:b9:86:51:d5:63:7a:e0:b7:c2:94:4c:cc:7a:cc:74:a2: 3a:d6:34:d3:4a:b5:24:d3:b6:85:4b:c9:85:85:3e:ed:3e:12: f6:1b:d2:35:7e:c2:c2:49:ee:eb:09:d5:6b:59:37:0d:f5:89: 54:2e:0a:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8tQtOEerqS5rkRN6ApC9WrtwXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG QjE2N0NDQTAeFw0yNjA3MjAxNDM5NDdaFw0yNjA3MjExNjE3NDdaMDMxMTAvBgNV BAMTKEU4REJDODVEQjk0RDRERTE0REUyNkYxQUE5QTQ0QzM4QUM1MTc5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjbflqDBkOba6Ivuax3gXxZEO PWCTIolKXi6vx7+JSqxsHyJC3RhUGMzRNnbawcNz0EvCawDn8bEpIy/xfiA+oUH+ K1LOYqBSgFZozS2SDyHA2Fk2XkT+ran0lSYSF+9BUzf80AuVhPNPlwXG99q25ol1 lxf1M2nVRaXv4Kdqu84UEQK0f7tfIkZDG0tPwNHJKRT/MDumYTDdKMFCR7980nCK QFGHOag88m5d009pAQu0OTQhrVeLYn4/NBaSt+0yDz+ddiLE/ldvTqq9aM2Xupkf CpiiVlEwZdiHldr0tpEtG+nQxHl6wyZ1fHck7RuC0AVkyYzBwFbR6ub5qPT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NvIXblNTeFN4m8aqaRMOKxReYIwHwYDVR0j BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3 QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3 Q0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZG MjZGQjE2N0NDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMjfpTc/O+kX8xT5LOwfq2oXOGX+tZT0gUV Z6xsvYH2/2FcStG9I2iNsw4C2vG9wAAsnZ2cHeybCHIe19dBRCMvBnk8mvGy3HLH Uyzq9znEPA1PmipVLi09edZ5SMsUKH02f/T5WGoeh81OFPcCN7hRzci13+T6bN7r +QHtg+/lXVnJn93xvrkAOCePVAVZX1poSvEKUR/og0OzVUuBSjGnUlY8gXodEzM1 GwY+iQRMJMRHtY2YbCsin7DVz7C9gD2orDAMgnwcuYZR1WN64LfClEzMesx0ojrW NNNKtSTTtoVLyYWFPu0+EvYb0jV+wsJJ7usJ1WtZNw31iVQuChM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:32:22 2026 by rpki-client