$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft File: ED8DD7447C376181396EB62C759A6F26FB167CCA.mft (raw, json) Hash identifier: i/AkrvfFNTps4YST0Tb8q57DF6He2pbEz8dA8fCO1Bs= Subject key identifier: 1E:97:B6:77:81:8B:E5:3C:8F:1A:CA:E8:DA:A0:53:71:5D:0C:86:CB Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA Certificate issuer: /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Certificate serial: 3F4CCEC177DAEF7C9FFE398479194AB2D00C6A46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:57:51 +0000 Manifest this update: Tue 02 Jun 2026 18:52:51 +0000 Manifest next update: Wed 03 Jun 2026 20:34:51 +0000 Files and hashes: 1: ED8DD7447C376181396EB62C759A6F26FB167CCA.crl (hash: vQHan16hhziWKf5S0Lkbn8LpQ+B2d72Z7mRjl5K8Wsk=) 2: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: ebvrnt2gfBGMuAXBfS5jxa2H91cp8yKz8AywyJ9Opto=) 3: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=) 4: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=) 5: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=) 6: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: WD8rkoXkQTqnUe9DEQn99XMfFlR76Acc32DExkXvm/I=) 7: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=) 8: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4c:ce:c1:77:da:ef:7c:9f:fe:39:84:79:19:4a:b2:d0:0c:6a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Validity Not Before: Jun 2 18:52:51 2026 GMT Not After : Jun 3 20:34:51 2026 GMT Subject: CN=1E97B677818BE53C8F1ACAE8DAA053715D0C86CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:cd:4f:8c:79:6e:a8:22:bb:b6:11:4a:46: 54:1e:ec:ce:6d:72:c1:82:81:9b:6d:bd:cb:50:c0: f7:71:6d:87:56:5b:17:75:31:82:49:8e:43:b6:52: 24:f2:65:ac:bb:64:b6:ef:52:d5:9d:b2:45:08:fa: 91:41:dd:cb:9c:70:0e:ed:f9:62:b4:8b:c8:f1:12: 99:70:d7:a1:0b:ba:dd:86:a0:dd:05:64:c2:7b:f5: 5f:df:43:07:89:e6:66:6f:26:c3:36:fc:3d:62:f7: 71:70:46:d0:5b:7c:1e:12:e5:8f:42:81:84:58:40: dd:a2:71:42:7b:2f:82:ca:d8:27:c7:61:28:0a:1d: 5f:e9:c8:a0:5c:11:82:6a:04:55:08:59:ac:10:6e: 64:fb:a8:7e:a7:9d:5e:f6:3c:df:44:64:9b:d9:7a: 77:e5:81:c7:b8:3d:fe:04:68:e3:4a:af:e9:28:13: d8:4f:93:ef:5a:d2:ae:25:83:7a:0d:3c:4f:68:80: f5:a4:01:e6:d8:5b:ec:80:1c:45:4a:78:06:89:e4: d9:2f:c8:43:b0:c3:fa:b3:66:0d:41:53:74:8d:4a: ba:2c:df:da:b0:38:4a:5f:5c:19:69:21:0c:87:23: de:99:22:ea:f5:fd:21:da:f0:ac:ba:5d:35:5d:1b: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:97:B6:77:81:8B:E5:3C:8F:1A:CA:E8:DA:A0:53:71:5D:0C:86:CB X509v3 Authority Key Identifier: keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:3e:0a:e7:c0:8c:48:23:89:ab:eb:39:76:9b:88:18:67:2e: 82:6f:da:32:52:8c:0d:4d:c9:0c:86:83:f5:8a:53:49:2f:a5: ef:9f:90:39:61:eb:5d:62:80:a7:f5:ae:ee:a0:73:17:52:81: fb:a3:81:c0:ca:8b:a7:e4:3e:cd:af:b3:33:ca:03:4c:d9:c9: 2e:4d:1b:d9:b1:8f:a3:e9:57:fb:a3:22:b8:5f:d7:ff:b1:e6: 50:47:c0:b3:f3:17:0f:40:1b:26:fb:2d:b5:63:a5:9f:06:00: c6:55:05:54:9c:b5:a8:e0:3f:45:5e:91:2d:44:00:81:b3:47: 66:39:6a:33:f5:e5:92:cf:41:fa:e5:42:c4:05:98:fc:c6:71: 55:00:a4:5e:03:d8:52:f1:b9:2b:08:e1:8f:a5:e1:fa:b5:a7: 2c:c5:2d:dc:99:cf:17:4a:2d:d8:96:df:b2:08:2e:6d:b3:73: 06:c5:ee:27:16:7d:62:ad:6a:48:96:53:87:67:ea:fe:0e:43: 84:77:78:b1:3e:44:26:c7:d9:e7:8c:98:dd:9b:9e:f2:85:2d: 53:8a:50:f8:de:d4:50:94:89:f5:c0:62:64:62:a3:44:f7:f2: 1b:36:79:e4:77:df:23:53:dd:74:1e:e7:1c:a7:bf:83:71:e0: 10:3f:2c:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0zOwXfa73yf/jmEeRlKstAMakYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG QjE2N0NDQTAeFw0yNjA2MDIxODUyNTFaFw0yNjA2MDMyMDM0NTFaMDMxMTAvBgNV BAMTKDFFOTdCNjc3ODE4QkU1M0M4RjFBQ0FFOERBQTA1MzcxNUQwQzg2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/TM1PjHluqCK7thFKRlQe7M5t csGCgZttvctQwPdxbYdWWxd1MYJJjkO2UiTyZay7ZLbvUtWdskUI+pFB3cuccA7t +WK0i8jxEplw16ELut2GoN0FZMJ79V/fQweJ5mZvJsM2/D1i93FwRtBbfB4S5Y9C gYRYQN2icUJ7L4LK2CfHYSgKHV/pyKBcEYJqBFUIWawQbmT7qH6nnV72PN9EZJvZ enflgce4Pf4EaONKr+koE9hPk+9a0q4lg3oNPE9ogPWkAebYW+yAHEVKeAaJ5Nkv yEOww/qzZg1BU3SNSros39qwOEpfXBlpIQyHI96ZIur1/SHa8Ky6XTVdG8rnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpe2d4GL5TyPGsro2qBTcV0MhsswHwYDVR0j BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3 QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3 Q0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZG MjZGQjE2N0NDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMw+CufAjEgjiavrOXabiBhnLoJv2jJSjA1N yQyGg/WKU0kvpe+fkDlh611igKf1ru6gcxdSgfujgcDKi6fkPs2vszPKA0zZyS5N G9mxj6PpV/ujIrhf1/+x5lBHwLPzFw9AGyb7LbVjpZ8GAMZVBVSctajgP0VekS1E AIGzR2Y5ajP15ZLPQfrlQsQFmPzGcVUApF4D2FLxuSsI4Y+l4fq1pyzFLdyZzxdK LdiW37IILm2zcwbF7icWfWKtakiWU4dn6v4OQ4R3eLE+RCbH2eeMmN2bnvKFLVOK UPje1FCUifXAYmRio0T38hs2eeR33yNT3XQe5xynv4Nx4BA/LGg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:36 2026 by rpki-client