$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft File: ED8801C97D629F0D5149E3C88E72600C016E4712.mft (raw, json) Hash identifier: NmwOcJb55DqhqG99n9iohV+ZKTbBKEv4B78slf1BCDw= Subject key identifier: 89:27:EF:23:D9:61:A9:52:E4:88:3E:75:55:1D:5B:CA:39:4E:23:E0 Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 32B56940E93538694A8241E7E312D97099878F15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 08:37:37 +0000 Manifest this update: Thu 18 Jun 2026 08:32:37 +0000 Manifest next update: Fri 19 Jun 2026 08:59:37 +0000 Files and hashes: 1: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: 6b6QyTeKHzbwr02KTRyuHru/9K2YvXjeEcMAT+18bak=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: I+TsRodHPZi2sFygS9uUTvIPPJWZ6Ey7cdEpwFzA144=) 3: ED8801C97D629F0D5149E3C88E72600C016E4712.crl (hash: /QwreMveUefcehiUhpHX0i8BsLIC/j4CDcHR6kOjop8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b5:69:40:e9:35:38:69:4a:82:41:e7:e3:12:d9:70:99:87:8f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: Jun 18 08:32:37 2026 GMT Not After : Jun 19 08:59:37 2026 GMT Subject: CN=8927EF23D961A952E4883E75551D5BCA394E23E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:4c:d8:b3:e7:cd:70:aa:53:52:e7:8c:fc: 58:04:f6:b8:2d:8b:28:89:48:1c:13:f5:14:23:bb: 06:b1:3b:a4:2d:95:ac:a4:6d:44:0a:44:0c:a1:23: a0:c0:f2:1d:7f:24:8b:de:9b:cd:01:f7:87:24:a1: 06:82:b9:b4:6c:df:dd:6d:df:47:07:2f:be:c5:30: 6a:f5:87:93:88:9d:28:f8:2e:4e:6a:63:17:de:fc: 90:94:a5:74:be:3f:42:ef:86:ad:c5:25:d9:c9:33: fe:63:74:20:7d:e0:26:60:37:2c:51:61:25:22:eb: 84:75:b4:a3:c3:e5:04:2b:08:dc:44:5d:39:ab:0c: cc:1f:3f:31:45:16:27:75:49:71:4d:57:7b:69:d5: 84:d3:c1:6e:a4:44:b4:e2:42:40:86:14:e2:e0:83: 68:54:be:c5:65:1a:47:6c:99:ca:11:a9:64:e1:8b: db:c1:62:cc:aa:d4:21:64:3c:e9:0e:fd:0f:82:7e: 1f:1a:a0:5a:49:62:25:4c:91:a2:e6:93:15:75:55: 11:3a:0f:cf:fd:15:7d:67:82:6b:a4:2a:f4:99:d5: 70:13:f5:49:38:80:6a:00:23:89:69:f0:8d:c2:fd: 13:5a:44:f8:0b:d4:a0:5d:d0:eb:d1:95:ad:58:de: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:27:EF:23:D9:61:A9:52:E4:88:3E:75:55:1D:5B:CA:39:4E:23:E0 X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:af:e2:09:ec:b7:bd:68:af:a9:b8:c9:43:bf:84:11:09:79: 83:34:49:84:14:0c:5c:b3:bb:60:96:fe:b3:2e:ca:2b:46:67: 43:ea:bf:a0:1e:93:6f:9a:a3:1a:e3:b4:0f:26:d1:f9:6a:0e: 4e:64:ff:32:d3:1a:bb:7c:30:95:32:08:77:be:b2:8b:bd:87: 7b:ae:09:bc:1f:c5:22:c2:5e:21:da:ae:1f:f2:dc:05:0b:d3: c0:ea:4a:63:4d:fd:2d:69:99:1b:c8:16:32:b1:2d:45:80:51: be:5f:67:50:eb:db:f3:62:a8:b6:43:95:04:f6:9f:cc:8c:e1: ff:f0:c3:3d:94:0c:3b:8f:eb:48:99:a8:4e:4a:da:ef:0d:73: 2c:d6:c8:c8:3f:08:05:b7:21:09:09:74:14:30:d8:6d:b5:04: 42:b7:e8:e4:ca:d8:7b:cb:b3:ea:dc:29:a1:1f:49:6f:7f:27: 5c:b2:b3:1f:e4:0d:6f:dc:44:d2:b1:11:7e:11:39:df:2e:d3: d3:58:b8:a4:02:00:0f:9b:97:bd:75:af:02:c6:7e:79:d2:2e: 7e:29:11:1c:b4:a6:3c:41:4d:f0:af:77:86:95:99:f9:d3:5a: 0c:ca:d2:b6:6e:51:e4:dd:ec:33:40:75:ec:10:b9:45:1d:c5: 02:58:e7:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMrVpQOk1OGlKgkHn4xLZcJmHjxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjA2MTgwODMyMzdaFw0yNjA2MTkwODU5MzdaMDMxMTAvBgNV BAMTKDg5MjdFRjIzRDk2MUE5NTJFNDg4M0U3NTU1MUQ1QkNBMzk0RTIzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFn0zYs+fNcKpTUueM/FgE9rgt iyiJSBwT9RQjuwaxO6QtlaykbUQKRAyhI6DA8h1/JIvem80B94ckoQaCubRs391t 30cHL77FMGr1h5OInSj4Lk5qYxfe/JCUpXS+P0Lvhq3FJdnJM/5jdCB94CZgNyxR YSUi64R1tKPD5QQrCNxEXTmrDMwfPzFFFid1SXFNV3tp1YTTwW6kRLTiQkCGFOLg g2hUvsVlGkdsmcoRqWThi9vBYsyq1CFkPOkO/Q+Cfh8aoFpJYiVMkaLmkxV1VRE6 D8/9FX1ngmukKvSZ1XAT9Uk4gGoAI4lp8I3C/RNaRPgL1KBd0OvRla1Y3vztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiSfvI9lhqVLkiD51VR1byjlOI+AwHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYw MEMwMTZFNDcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOv4gnst71or6m4yUO/hBEJeYM0SYQUDFyz u2CW/rMuyitGZ0Pqv6Aek2+aoxrjtA8m0flqDk5k/zLTGrt8MJUyCHe+sou9h3uu CbwfxSLCXiHarh/y3AUL08DqSmNN/S1pmRvIFjKxLUWAUb5fZ1Dr2/NiqLZDlQT2 n8yM4f/wwz2UDDuP60iZqE5K2u8NcyzWyMg/CAW3IQkJdBQw2G21BEK36OTK2HvL s+rcKaEfSW9/J1yysx/kDW/cRNKxEX4ROd8u09NYuKQCAA+bl711rwLGfnnSLn4p ERy0pjxBTfCvd4aVmfnTWgzK0rZuUeTd7DNAdewQuUUdxQJY50M= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:58 2026 by rpki-client