$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft File: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft (raw, json) Hash identifier: FBTOHmMyozHp3E2LgueHMsd9AACVo7sSou5Y++oC6h8= Subject key identifier: 61:6E:91:CF:1A:80:D5:72:DF:0C:FF:41:DB:EB:F9:99:21:F4:F9:66 Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Certificate serial: 47579AD99984B237946CD830857AFFEE705776C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:16:18 +0000 Manifest this update: Tue 02 Jun 2026 13:11:18 +0000 Manifest next update: Wed 03 Jun 2026 15:06:18 +0000 Files and hashes: 1: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: CDdAgCCqdZ4eGgwg/DutRSkrLQoNO6bQnfQJc5Q/9rc=) 2: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=) 3: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: 2KuqxGxxUoWsjT52nc8YqV6GIpta4WniQwIsnjhtsto=) 4: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=) 5: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=) 6: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl (hash: SvkgatSpGQkymEbXMWqGLkDyrSwOTZqcyJTR8/WDC5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:57:9a:d9:99:84:b2:37:94:6c:d8:30:85:7a:ff:ee:70:57:76:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Validity Not Before: Jun 2 13:11:18 2026 GMT Not After : Jun 3 15:06:18 2026 GMT Subject: CN=616E91CF1A80D572DF0CFF41DBEBF99921F4F966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:43:46:31:3a:bf:c7:b3:a2:57:bc:e9:d9:49: 1d:cf:22:46:24:83:ae:7a:fe:bf:57:a4:53:30:7a: b2:46:05:a9:e8:be:f6:aa:35:00:71:97:fe:53:2f: b8:a9:c2:8c:b2:cf:14:fb:76:dc:7d:54:0a:0c:da: e1:bc:3c:74:8a:79:45:39:ce:fd:f0:98:d1:38:b5: 22:dc:37:01:da:b6:87:40:53:85:d7:c4:18:9b:23: 47:bf:59:15:aa:5c:3c:5b:95:50:44:34:5b:de:db: e9:99:24:d5:dd:84:63:25:ad:46:11:6a:ac:63:9d: 6d:6e:21:4e:f9:7a:39:d9:e6:59:68:70:7b:0b:9c: 9c:41:05:a6:21:03:37:7b:af:04:72:1f:9c:bf:c2: a0:f1:f0:81:24:91:49:35:2f:ef:f3:da:84:0f:ba: 20:ad:ae:5b:d2:79:7a:5b:d7:70:7f:23:28:7e:aa: 43:84:06:7f:47:19:96:a8:6c:73:39:9c:03:67:45: 81:ff:a6:30:79:83:b6:74:5b:5f:67:59:43:38:fd: 57:15:fd:87:5c:3f:2c:aa:f7:68:96:af:59:9e:0e: 49:5d:a1:56:1c:e2:5c:de:44:39:a3:cf:84:64:95: e8:a6:53:27:c2:8d:f0:8f:ca:db:7c:b4:d4:9f:a9: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6E:91:CF:1A:80:D5:72:DF:0C:FF:41:DB:EB:F9:99:21:F4:F9:66 X509v3 Authority Key Identifier: keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:06:88:fb:95:ec:8a:53:90:a1:28:58:99:86:ca:9e:03:29: c7:c4:3d:84:74:f6:92:0a:ca:8b:f6:02:a9:ee:f8:60:e5:52: a8:7d:f5:b1:2c:3b:cb:24:5d:9d:c0:cf:52:1c:02:09:33:dc: 37:d6:3c:25:73:c3:72:e9:91:81:1b:d1:c4:fd:1d:12:fc:59: 11:cf:ad:f9:a8:18:77:f1:38:3d:08:93:8a:b2:9d:50:e8:b0: 16:0e:6b:39:ac:20:dd:72:7e:70:04:49:05:ef:42:d7:a9:01: 47:93:ab:60:f8:06:33:5b:2c:15:58:34:c4:83:4d:cf:d9:47: 18:8e:7a:fc:b6:62:1a:ff:b2:d4:0a:13:f7:fa:9a:73:f1:26: 2e:26:ae:db:06:e8:69:f4:82:2e:ad:c3:a0:c5:51:d7:90:1f: c4:1d:e2:66:04:12:2d:bd:62:f2:51:5b:36:fc:0b:eb:64:22: 4c:1b:80:d8:62:3f:c1:65:37:f9:21:40:70:7e:2a:4e:ac:23: d0:a6:4b:3a:0a:54:ec:05:26:b3:fb:cf:32:70:4b:9b:13:b6: 56:c5:8e:13:de:50:41:01:b2:a7:d8:5c:e3:db:ad:cb:52:11: ab:5c:8f:ff:09:68:d0:01:ea:c9:60:95:7d:71:38:5a:fd:b8: d3:32:70:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1ea2ZmEsjeUbNgwhXr/7nBXdsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5 NTk4QThBMjAeFw0yNjA2MDIxMzExMThaFw0yNjA2MDMxNTA2MThaMDMxMTAvBgNV BAMTKDYxNkU5MUNGMUE4MEQ1NzJERjBDRkY0MURCRUJGOTk5MjFGNEY5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQ0YxOr/Hs6JXvOnZSR3PIkYk g656/r9XpFMwerJGBanovvaqNQBxl/5TL7ipwoyyzxT7dtx9VAoM2uG8PHSKeUU5 zv3wmNE4tSLcNwHatodAU4XXxBibI0e/WRWqXDxblVBENFve2+mZJNXdhGMlrUYR aqxjnW1uIU75ejnZ5llocHsLnJxBBaYhAzd7rwRyH5y/wqDx8IEkkUk1L+/z2oQP uiCtrlvSeXpb13B/Iyh+qkOEBn9HGZaobHM5nANnRYH/pjB5g7Z0W19nWUM4/VcV /YdcPyyq92iWr1meDkldoVYc4lzeRDmjz4RkleimUyfCjfCPytt8tNSfqSBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYW6RzxqA1XLfDP9B2+v5mSH0+WYwHwYDVR0j BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1 NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB OEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0Ey MEI5NTk4QThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIGiPuV7IpTkKEoWJmGyp4DKcfEPYR09pIK yov2Aqnu+GDlUqh99bEsO8skXZ3Az1IcAgkz3DfWPCVzw3LpkYEb0cT9HRL8WRHP rfmoGHfxOD0Ik4qynVDosBYOazmsIN1yfnAESQXvQtepAUeTq2D4BjNbLBVYNMSD Tc/ZRxiOevy2Yhr/stQKE/f6mnPxJi4mrtsG6Gn0gi6tw6DFUdeQH8Qd4mYEEi29 YvJRWzb8C+tkIkwbgNhiP8FlN/khQHB+Kk6sI9CmSzoKVOwFJrP7zzJwS5sTtlbF jhPeUEEBsqfYXOPbrctSEatcj/8JaNAB6slglX1xOFr9uNMycEY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:34 2026 by rpki-client