$ rpki-client -vvvf rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft File: ED63844C4B15010EA3F230F69A770C2B1C84C105.mft (raw, json) Hash identifier: 6R/nZrySOT22FE0AsHAeEkWuX4UiJSzRQt3Wcx35b08= Subject key identifier: CA:52:6A:FB:E4:EB:55:97:31:B9:A7:57:92:3B:8A:4A:21:F9:03:C7 Authority key identifier: ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05 Certificate issuer: /CN=ED63844C4B15010EA3F230F69A770C2B1C84C105 Certificate serial: 6E1EB5BDEAC36DCDC87A0AE873A333BD29F8EFA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft Manifest number: BE Signing time: Mon 21 Sep 2026 19:15:19 +0000 Manifest this update: Mon 21 Sep 2026 19:10:19 +0000 Manifest next update: Tue 22 Sep 2026 20:52:19 +0000 Files and hashes: 1: ED63844C4B15010EA3F230F69A770C2B1C84C105.crl (hash: i/Ssr4DuR6R5vDV0U/hsxtgVoS7259ZRvQLhYDKjoPk=) 2: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: 1eOUv0Nol5QAajQql0Encer3ZT9+Up46jsqBzqDlEmA=) 3: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: AnDqHlidff5Ox0jt0yjx0uwvccFAfB7mH1oiPDPa4CY=) 4: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: NixEwf5mDvcBcm4WRaep6YCV7NZr3+VpuhyzC3KObpI=) 5: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: u/f9pBg0fHFgqAdliz0CbmpL4V+/eW84b3JUz0/QPns=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1e:b5:bd:ea:c3:6d:cd:c8:7a:0a:e8:73:a3:33:bd:29:f8:ef:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED63844C4B15010EA3F230F69A770C2B1C84C105 Validity Not Before: Sep 21 19:10:19 2026 GMT Not After : Sep 22 20:52:19 2026 GMT Subject: CN=CA526AFBE4EB559731B9A757923B8A4A21F903C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:c0:2e:70:c5:9e:7d:db:20:6a:15:2b:8f: c6:fc:6d:9f:d9:22:76:b6:8b:f7:13:9a:84:58:b2: 70:11:0a:c2:8a:d1:b7:b0:fd:8b:63:4f:b2:aa:47: 8c:81:31:ed:0a:ee:40:f6:bb:f8:94:fc:a8:66:73: 84:37:29:ee:09:54:13:6b:41:21:f5:04:9f:74:17: 49:bb:3e:da:fe:c2:c7:d3:a8:13:9e:49:39:60:6f: b5:53:02:6f:8c:5a:bb:a7:51:68:a0:02:9e:89:a6: f6:0f:a2:4c:55:88:f8:cd:4b:5f:c0:25:26:7c:4d: 35:be:37:94:11:00:f9:3d:8b:6d:42:5d:5c:65:0b: 5c:32:07:b6:4d:57:7b:5b:2e:15:0e:68:5c:6f:1c: f1:f9:01:d5:a3:2e:9a:eb:84:28:cf:1e:2e:9e:b1: f3:50:94:62:c0:58:09:b3:ce:b4:e2:8c:98:ba:ea: 80:21:12:42:1e:dc:4c:cc:e1:ed:21:86:0e:2c:6b: c4:2b:32:29:74:8b:8c:ed:0e:cb:5c:88:5f:7d:2d: ce:19:a0:7f:48:9d:4c:38:3a:50:53:9e:25:cc:76: 7b:58:82:ab:f8:6d:c7:04:73:0b:47:c9:fb:48:2e: 97:21:02:74:b2:e7:13:33:b5:76:7e:a2:c4:49:00: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:52:6A:FB:E4:EB:55:97:31:B9:A7:57:92:3B:8A:4A:21:F9:03:C7 X509v3 Authority Key Identifier: keyid:ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f1:fe:e5:30:47:16:df:3b:eb:8d:36:c4:fd:1d:8d:3c:2c: ea:d5:cd:e2:2d:e5:9a:f7:4c:5e:94:0b:51:68:05:48:79:58: 5e:f1:f9:5b:e7:3c:8f:35:27:fc:4b:7b:e1:11:05:7c:6e:26: 58:d2:f3:cc:d1:f2:da:38:77:fe:0a:5d:a9:03:91:35:7a:b9: 1b:66:0b:59:65:84:43:5b:fe:64:30:2e:86:a5:fe:28:cd:2b: 3e:71:c2:74:1e:d4:1b:29:52:eb:12:00:e5:20:55:6b:96:e4: b2:0f:a1:81:80:b4:61:53:bd:67:5b:47:9e:bd:4d:70:81:7b: 80:67:a5:28:3d:ef:bf:10:33:06:48:63:1e:b7:f5:64:c4:b1: 32:f5:6b:4f:a5:7f:3f:df:12:4c:5f:eb:eb:3a:30:33:38:25: b6:a1:35:c8:4f:5b:77:af:41:86:79:07:0d:d4:94:74:f6:03: e7:b7:eb:ee:7e:fb:b3:f2:e9:92:a3:d8:61:18:ea:1b:7a:04: 63:4d:63:59:19:fe:6a:36:ec:75:c2:1d:07:e6:18:99:ef:b9: 56:d9:6c:79:26:6f:bb:13:38:2a:6f:1c:99:48:70:f5:1b:7a: 4a:cb:2e:bc:ed:c2:89:13:c1:12:46:0a:19:a2:7e:44:87:b7: 0c:1a:74:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbh61verDbc3Iegroc6MzvSn476cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ2Mzg0NEM0QjE1MDEwRUEzRjIzMEY2OUE3NzBDMkIx Qzg0QzEwNTAeFw0yNjA5MjExOTEwMTlaFw0yNjA5MjIyMDUyMTlaMDMxMTAvBgNV BAMTKENBNTI2QUZCRTRFQjU1OTczMUI5QTc1NzkyM0I4QTRBMjFGOTAzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5AsAucMWefdsgahUrj8b8bZ/Z Ina2i/cTmoRYsnARCsKK0bew/YtjT7KqR4yBMe0K7kD2u/iU/Khmc4Q3Ke4JVBNr QSH1BJ90F0m7Ptr+wsfTqBOeSTlgb7VTAm+MWrunUWigAp6JpvYPokxViPjNS1/A JSZ8TTW+N5QRAPk9i21CXVxlC1wyB7ZNV3tbLhUOaFxvHPH5AdWjLprrhCjPHi6e sfNQlGLAWAmzzrTijJi66oAhEkIe3EzM4e0hhg4sa8QrMil0i4ztDstciF99Lc4Z oH9InUw4OlBTniXMdntYgqv4bccEcwtHyftILpchAnSy5xMztXZ+osRJACU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUylJq++TrVZcxuadXkjuKSiH5A8cwHwYDVR0j BBgwFoAU7WOETEsVAQ6j8jD2mncMKxyEwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZhNzY2NWEtYjUwYi00YTQ1LWE4ZjktMGQ2OWJkN2Q3NDNkLzAvRUQ2Mzg0NEM0 QjE1MDEwRUEzRjIzMEY2OUE3NzBDMkIxQzg0QzEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDYzODQ0QzRCMTUwMTBFQTNGMjMwRjY5QTc3MEMyQjFDODRD MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZhNzY2NWEtYjUwYi00YTQ1LWE4 ZjktMGQ2OWJkN2Q3NDNkLzAvRUQ2Mzg0NEM0QjE1MDEwRUEzRjIzMEY2OUE3NzBD MkIxQzg0QzEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbx/uUwRxbfO+uNNsT9HY08LOrVzeIt5Zr3 TF6UC1FoBUh5WF7x+VvnPI81J/xLe+ERBXxuJljS88zR8to4d/4KXakDkTV6uRtm C1llhENb/mQwLoal/ijNKz5xwnQe1BspUusSAOUgVWuW5LIPoYGAtGFTvWdbR569 TXCBe4BnpSg9778QMwZIYx639WTEsTL1a0+lfz/fEkxf6+s6MDM4JbahNchPW3ev QYZ5Bw3UlHT2A+e36+5++7Py6ZKj2GEY6ht6BGNNY1kZ/mo27HXCHQfmGJnvuVbZ bHkmb7sTOCpvHJlIcPUbekrLLrztwokTwRJGChmifkSHtwwadEQ= -----END CERTIFICATE-----Generated at Tue Sep 22 11:45:49 2026 by rpki-client