$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft File: ED0555AA515B40985A93B902D748993DD2FE4B8F.mft (raw, json) Hash identifier: JyaydEbX00i72nP1JAp3ungVtnlAsNEgJ74bhAG7fYk= Subject key identifier: 84:64:D5:7C:57:BA:13:06:D0:62:8C:FF:C4:24:F7:65:01:F2:9E:CC Authority key identifier: ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F Certificate issuer: /CN=ED0555AA515B40985A93B902D748993DD2FE4B8F Certificate serial: 1264EF40ADF996C50C3400ADBBD53318E104183B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 12:20:50 +0000 Manifest this update: Fri 19 Jun 2026 12:15:50 +0000 Manifest next update: Sat 20 Jun 2026 15:12:50 +0000 Files and hashes: 1: ED0555AA515B40985A93B902D748993DD2FE4B8F.crl (hash: bLANy97qgIQf31mebfwJNyF+SeRdZn1G4jLhS0lm0lU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.crl rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:64:ef:40:ad:f9:96:c5:0c:34:00:ad:bb:d5:33:18:e1:04:18:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED0555AA515B40985A93B902D748993DD2FE4B8F Validity Not Before: Jun 19 12:15:50 2026 GMT Not After : Jun 20 15:12:50 2026 GMT Subject: CN=8464D57C57BA1306D0628CFFC424F76501F29ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:d1:a3:18:70:30:7d:35:e7:e7:0c:e6:b7: 73:af:5c:06:61:7d:d6:d9:94:de:a1:31:88:3e:8b: c1:f3:dd:0c:98:cb:6e:bd:2a:35:52:76:15:18:c1: 6a:17:41:66:b7:45:0e:a2:80:ee:2b:8c:04:7d:de: 83:7c:8d:6d:0a:da:d1:7c:7f:b2:37:cc:31:4d:1a: 4c:16:9a:b3:ae:52:5c:4b:43:be:93:96:b9:7d:53: 2b:3f:e7:08:26:13:30:0f:50:ca:c9:8e:d3:76:1d: 44:c1:4d:7d:bb:52:10:5b:9f:db:25:f7:88:8d:76: d6:f8:7c:52:2c:cd:e1:f7:48:40:59:10:be:5b:8c: 6f:aa:ee:f1:bb:31:a3:ba:6f:14:60:5b:1b:4e:ba: 31:ef:18:15:5f:d6:84:c3:fa:0e:c7:6c:cd:99:1b: bb:2b:89:3b:94:2b:57:b0:47:3a:7e:ff:e5:46:30: 41:f3:f5:74:1c:71:f5:aa:e3:69:fd:06:41:54:6d: ce:54:54:95:4e:5e:c5:23:55:85:8e:97:0a:21:40: 98:6b:e3:8e:ab:00:e0:4d:af:b9:31:46:b4:84:ea: ad:80:25:f9:b6:3f:10:29:96:9f:ea:73:23:14:94: 8d:b3:48:e6:8d:5b:0a:cc:35:20:b4:f1:1e:0c:36: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:D5:7C:57:BA:13:06:D0:62:8C:FF:C4:24:F7:65:01:F2:9E:CC X509v3 Authority Key Identifier: keyid:ED:05:55:AA:51:5B:40:98:5A:93:B9:02:D7:48:99:3D:D2:FE:4B:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED0555AA515B40985A93B902D748993DD2FE4B8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/ED0555AA515B40985A93B902D748993DD2FE4B8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1e:4c:a9:72:fc:1b:a7:0d:2e:49:8d:87:04:ed:91:a9:ae: bd:2c:8f:fd:37:5c:0e:d4:1d:b5:58:ad:4e:e3:22:7d:df:88: 3e:07:3d:1c:7d:97:c2:9d:c3:cd:2f:de:64:69:c4:3b:c4:5f: f7:29:55:1b:94:7b:f8:44:cb:04:11:97:c5:e5:75:9d:19:25: 72:3d:3f:e1:29:4d:b8:90:7c:b8:d1:d2:24:77:1f:9b:f5:6f: 0f:18:93:85:c3:22:6a:5d:65:cd:49:cf:a9:d7:81:27:02:a1: 4e:30:4c:70:95:78:b4:75:df:10:1a:0a:84:f1:bf:8f:e1:89: a4:72:84:c0:43:44:0e:40:af:02:2d:6a:ca:31:f9:d3:63:14: 47:94:64:81:57:20:59:bf:9b:ce:7d:ce:a8:23:95:80:86:ba: ea:74:3c:a7:2a:10:68:6c:61:77:9a:61:22:48:5a:09:e3:7d: 00:3f:10:1c:a1:90:da:5b:ae:a9:2c:30:38:20:46:11:3f:72: b7:33:e4:44:72:53:a8:d5:74:c4:7d:21:4e:ff:a1:66:d4:2c: ea:06:47:36:c5:dc:cb:18:bf:57:60:3e:6c:0f:57:c7:ad:11: 2f:77:f7:88:91:92:35:2b:56:4f:23:0b:dd:15:d0:9c:13:88: e6:16:97:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmTvQK35lsUMNACtu9UzGOEEGDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQwNTU1QUE1MTVCNDA5ODVBOTNCOTAyRDc0ODk5M0RE MkZFNEI4RjAeFw0yNjA2MTkxMjE1NTBaFw0yNjA2MjAxNTEyNTBaMDMxMTAvBgNV BAMTKDg0NjRENTdDNTdCQTEzMDZEMDYyOENGRkM0MjRGNzY1MDFGMjlFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mdGjGHAwfTXn5wzmt3OvXAZh fdbZlN6hMYg+i8Hz3QyYy269KjVSdhUYwWoXQWa3RQ6igO4rjAR93oN8jW0K2tF8 f7I3zDFNGkwWmrOuUlxLQ76Tlrl9Uys/5wgmEzAPUMrJjtN2HUTBTX27UhBbn9sl 94iNdtb4fFIszeH3SEBZEL5bjG+q7vG7MaO6bxRgWxtOujHvGBVf1oTD+g7HbM2Z G7sriTuUK1ewRzp+/+VGMEHz9XQccfWq42n9BkFUbc5UVJVOXsUjVYWOlwohQJhr 446rAOBNr7kxRrSE6q2AJfm2PxAplp/qcyMUlI2zSOaNWwrMNSC08R4MNu6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGTVfFe6EwbQYoz/xCT3ZQHynswwHwYDVR0j BBgwFoAU7QVVqlFbQJhak7kC10iZPdL+S48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiNzdkMWUtMTU4NS00NjA0LWI2YjEtMDcxZjBhMjk0MGM0LzAvRUQwNTU1QUE1 MTVCNDA5ODVBOTNCOTAyRDc0ODk5M0REMkZFNEI4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDA1NTVBQTUxNUI0MDk4NUE5M0I5MDJENzQ4OTkzREQyRkU0 QjhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvRUQwNTU1QUE1MTVCNDA5ODVBOTNCOTAyRDc0ODk5 M0REMkZFNEI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYeTKly/BunDS5JjYcE7ZGprr0sj/03XA7U HbVYrU7jIn3fiD4HPRx9l8Kdw80v3mRpxDvEX/cpVRuUe/hEywQRl8XldZ0ZJXI9 P+EpTbiQfLjR0iR3H5v1bw8Yk4XDImpdZc1Jz6nXgScCoU4wTHCVeLR13xAaCoTx v4/hiaRyhMBDRA5ArwItasox+dNjFEeUZIFXIFm/m859zqgjlYCGuup0PKcqEGhs YXeaYSJIWgnjfQA/EByhkNpbrqksMDggRhE/crcz5ERyU6jVdMR9IU7/oWbULOoG RzbF3MsYv1dgPmwPV8etES9394iRkjUrVk8jC90V0JwTiOYWl04= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:23 2026 by rpki-client