$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft File: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft (raw, json) Hash identifier: wvZOs71EkFIHhNQeyx4D6rcaMtpLpZbLRBICfsE65mk= Subject key identifier: CB:7E:42:0F:8B:FF:FE:D2:74:81:DC:F5:60:CB:1C:A0:D0:DA:EE:81 Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Certificate serial: 430912D71E9C702493AD815D0C214B8157559216 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:00:58 +0000 Manifest this update: Mon 20 Jul 2026 19:55:58 +0000 Manifest next update: Tue 21 Jul 2026 23:01:58 +0000 Files and hashes: 1: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl (hash: 9ztZGrRbDHa9kKrC0BXQLTQ2JQWWQuE2giUgQTF6i2s=) 2: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=) 3: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=) 4: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: 2KuqxGxxUoWsjT52nc8YqV6GIpta4WniQwIsnjhtsto=) 5: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: CDdAgCCqdZ4eGgwg/DutRSkrLQoNO6bQnfQJc5Q/9rc=) 6: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:09:12:d7:1e:9c:70:24:93:ad:81:5d:0c:21:4b:81:57:55:92:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Validity Not Before: Jul 20 19:55:58 2026 GMT Not After : Jul 21 23:01:58 2026 GMT Subject: CN=CB7E420F8BFFFED27481DCF560CB1CA0D0DAEE81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:c8:f0:86:b4:8d:ec:52:e3:97:fb:17:d3: 10:8b:33:f6:3b:23:59:07:8a:76:67:bc:b2:6c:3c: 2b:42:99:3f:bc:7d:f6:73:67:85:f5:d9:a5:7e:59: 84:ae:38:b6:ba:5d:d4:4e:ac:e2:be:53:a5:31:f0: ea:a9:e9:78:e4:50:9a:81:0f:34:d2:ed:84:e0:1e: 2c:17:5d:c8:5e:af:b5:a2:f7:96:bb:7f:4f:7d:00: ba:21:06:8a:8e:69:2d:49:ca:11:68:c5:ec:df:8c: ae:0a:c8:4d:6b:62:14:f5:ff:89:30:d3:46:15:b1: fe:8f:13:ad:05:d5:f8:bd:ef:04:30:50:76:a9:d0: c0:1f:6f:ff:60:31:94:ea:03:7b:56:dc:45:04:c3: 9f:03:18:a5:01:57:2d:06:d5:c6:ca:b3:d7:9e:c9: 1a:2a:8c:c8:89:bd:d5:49:08:60:e8:4e:d4:e2:71: 08:d6:8c:b2:d5:3f:37:d8:c8:fc:5b:e0:88:d6:3b: 70:da:6c:42:3a:16:0a:a9:8f:66:e1:5c:6e:27:9a: d7:54:12:d2:ed:c3:f6:05:9e:ba:a0:cd:a0:23:1b: d2:37:a7:f1:3c:9e:af:41:17:2b:a2:1f:28:51:03: 05:b2:26:a4:d6:99:0f:ce:82:60:fa:c6:1b:63:0c: ad:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7E:42:0F:8B:FF:FE:D2:74:81:DC:F5:60:CB:1C:A0:D0:DA:EE:81 X509v3 Authority Key Identifier: keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:fb:fb:64:9c:24:98:43:54:0c:e9:6f:55:80:85:d7:43:01: af:47:60:54:bc:f0:b1:6c:45:92:c9:5f:41:c3:34:16:e9:00: 76:ad:92:00:f9:fe:d7:42:ef:56:c2:47:b7:a9:d9:01:36:ea: 46:50:15:f2:ed:e5:b6:1b:c6:48:32:f8:96:00:77:f5:18:30: d9:8e:40:82:49:d9:3e:ca:81:8a:3c:3e:40:36:d8:24:3e:a7: 87:ba:9d:28:da:95:51:40:a0:8c:95:30:76:a0:82:29:26:31: 0a:75:91:08:65:7c:72:15:cf:f3:6c:b8:33:b9:d2:04:f6:38: 15:d4:43:03:fb:c9:01:52:87:fd:7a:88:23:41:2f:56:e5:f7: 94:3b:c8:77:da:61:20:15:9c:3d:c7:b3:b1:05:3e:3b:aa:be: 84:4f:b4:2a:e8:86:48:56:fb:84:fc:53:b8:24:96:f1:11:18: 80:61:c0:2f:26:1e:53:b7:7c:23:59:8c:cc:a5:91:b6:cf:53: 3c:2b:54:c2:84:c5:cd:7f:8d:1f:65:b6:27:df:77:2c:f2:c2: f1:41:36:31:24:c2:36:cd:76:0f:41:bb:21:f2:e6:ad:8c:80: f2:f3:d6:2a:f2:e2:52:7e:40:57:de:05:0c:82:7d:92:06:1a: 52:6c:01:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwkS1x6ccCSTrYFdDCFLgVdVkhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5 NTk4QThBMjAeFw0yNjA3MjAxOTU1NThaFw0yNjA3MjEyMzAxNThaMDMxMTAvBgNV BAMTKENCN0U0MjBGOEJGRkZFRDI3NDgxRENGNTYwQ0IxQ0EwRDBEQUVFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wcjwhrSN7FLjl/sX0xCLM/Y7 I1kHinZnvLJsPCtCmT+8ffZzZ4X12aV+WYSuOLa6XdROrOK+U6Ux8Oqp6XjkUJqB DzTS7YTgHiwXXcher7Wi95a7f099ALohBoqOaS1JyhFoxezfjK4KyE1rYhT1/4kw 00YVsf6PE60F1fi97wQwUHap0MAfb/9gMZTqA3tW3EUEw58DGKUBVy0G1cbKs9ee yRoqjMiJvdVJCGDoTtTicQjWjLLVPzfYyPxb4IjWO3DabEI6Fgqpj2bhXG4nmtdU EtLtw/YFnrqgzaAjG9I3p/E8nq9BFyuiHyhRAwWyJqTWmQ/OgmD6xhtjDK05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy35CD4v//tJ0gdz1YMscoNDa7oEwHwYDVR0j BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1 NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB OEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0Ey MEI5NTk4QThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKP7+2ScJJhDVAzpb1WAhddDAa9HYFS88LFs RZLJX0HDNBbpAHatkgD5/tdC71bCR7ep2QE26kZQFfLt5bYbxkgy+JYAd/UYMNmO QIJJ2T7KgYo8PkA22CQ+p4e6nSjalVFAoIyVMHaggikmMQp1kQhlfHIVz/NsuDO5 0gT2OBXUQwP7yQFSh/16iCNBL1bl95Q7yHfaYSAVnD3Hs7EFPjuqvoRPtCrohkhW +4T8U7gklvERGIBhwC8mHlO3fCNZjMylkbbPUzwrVMKExc1/jR9ltiffdyzywvFB NjEkwjbNdg9BuyHy5q2MgPLz1iry4lJ+QFfeBQyCfZIGGlJsAWQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:29 2026 by rpki-client