$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft File: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft (raw, json) Hash identifier: 4JtwrPODEJkLaoBJRBR0IRkzz+6s24ZRMiqSubtwgSc= Subject key identifier: A6:43:9C:26:E7:A9:1F:09:39:E1:A3:9D:B3:71:4A:0E:F1:4D:30:B7 Authority key identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6 Certificate issuer: /CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6 Certificate serial: 24A928F2B398834A6956834D65811D09339AE22C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 05:58:20 +0000 Manifest this update: Wed 23 Sep 2026 05:53:20 +0000 Manifest next update: Thu 24 Sep 2026 08:50:20 +0000 Files and hashes: 1: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: Zn62f1fBkgDvG3W52DfKvheKU31p9VTPEEMoYm0lHJA=) 2: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: 38bOTSe4cTdefI8PO7GN8RWELwk4anfmyd09536sUts=) 3: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl (hash: DrtFVF8iDhVfHS+5ap7+Eq++i4aI7APYQX55wyA4ens=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a9:28:f2:b3:98:83:4a:69:56:83:4d:65:81:1d:09:33:9a:e2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6 Validity Not Before: Sep 23 05:53:20 2026 GMT Not After : Sep 24 08:50:20 2026 GMT Subject: CN=A6439C26E7A91F0939E1A39DB3714A0EF14D30B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cf:77:ac:7c:b7:48:02:5b:ee:c6:91:bd:89: 89:35:ff:a2:fe:96:a9:ae:e5:8c:74:46:11:8f:23: c1:fc:72:aa:e1:f0:9d:db:3b:b0:a4:d0:4e:87:8f: 83:39:a6:a0:10:70:1f:91:13:05:63:eb:15:8e:9b: 73:be:a5:3b:c0:bf:8a:1d:c9:6d:a6:93:37:bd:76: cb:6d:fd:aa:bd:1e:05:bc:85:37:0d:55:54:cf:b5: 77:73:d8:f3:3e:49:fa:b1:2d:f0:8b:46:0f:f6:ec: 23:89:5c:8c:69:67:fe:29:a4:94:b3:0e:bf:71:e0: 21:cb:83:e0:69:91:ae:76:c4:8f:fd:42:89:45:8e: d3:cd:e2:2c:e9:c1:ee:4f:67:54:99:3e:6b:99:f8: 4a:7a:16:ce:03:8f:8a:47:54:f8:30:83:6d:60:0e: a7:4b:da:93:59:68:52:d4:f9:fb:82:24:d8:98:9f: 4a:ae:55:3c:ef:80:1d:6b:fa:12:36:39:14:d4:25: 7d:30:8d:50:10:0c:03:da:21:02:2f:9c:4b:87:e4: 82:3b:9a:eb:f2:60:e9:2a:c4:8f:1a:32:8b:00:14: 8a:e1:4c:e2:eb:2f:f6:38:28:a2:15:3e:5e:78:95: 24:61:bb:75:e4:51:24:9b:7b:a2:9d:19:df:8d:7e: 51:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:43:9C:26:E7:A9:1F:09:39:E1:A3:9D:B3:71:4A:0E:F1:4D:30:B7 X509v3 Authority Key Identifier: keyid:1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:01:9b:c5:6c:eb:93:43:82:76:50:dd:1a:d0:46:6b:c1:90: ea:d6:23:66:41:7a:40:83:4c:94:ee:d8:ee:26:7d:24:44:a3: 69:4e:2f:f4:23:e2:81:cb:1d:0c:1c:1c:6b:bc:cc:8b:1f:10: 9c:ca:03:f2:e8:43:48:82:64:87:6b:81:5b:3d:cd:79:fa:b6: 8b:3c:f3:b4:79:bb:a2:29:f2:74:22:d8:93:c5:47:ee:3d:15: b1:70:f3:dd:30:6a:75:79:4b:28:e5:7c:14:34:22:ef:d5:ea: dd:cf:72:8d:11:b8:cf:76:10:94:19:6d:c7:7e:76:b1:bb:dd: 24:5a:f6:e4:cc:da:7c:fe:c1:f5:b2:ae:e5:0e:e9:4f:67:03: 82:db:67:e9:3f:79:ae:1c:71:eb:61:2c:8c:f9:57:b9:a2:8f: a3:6d:93:37:d1:a5:ea:ff:25:04:28:1e:ba:d6:45:9f:56:b8: 9d:cf:6d:cc:31:94:a5:55:28:1d:99:46:68:0d:ad:e0:d9:5c: 0f:80:43:6a:5e:14:56:df:5a:fc:e8:94:91:29:a8:68:bf:db: e5:bd:dd:ea:c0:1e:3c:34:3e:35:26:f4:0a:b8:a2:fe:95:70: 74:a7:7e:6c:03:b4:05:cd:16:08:2c:e6:7a:c9:e8:3c:96:a1: 3c:88:b9:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKko8rOYg0ppVoNNZYEdCTOa4iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVERDFCNDJENDQzNjdFM0ZDREQxNjQ4RjY2QTEwNzZD OTUxMDVBNjAeFw0yNjA5MjMwNTUzMjBaFw0yNjA5MjQwODUwMjBaMDMxMTAvBgNV BAMTKEE2NDM5QzI2RTdBOTFGMDkzOUUxQTM5REIzNzE0QTBFRjE0RDMwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfz3esfLdIAlvuxpG9iYk1/6L+ lqmu5Yx0RhGPI8H8cqrh8J3bO7Ck0E6Hj4M5pqAQcB+REwVj6xWOm3O+pTvAv4od yW2mkze9dstt/aq9HgW8hTcNVVTPtXdz2PM+SfqxLfCLRg/27COJXIxpZ/4ppJSz Dr9x4CHLg+Bpka52xI/9QolFjtPN4izpwe5PZ1SZPmuZ+Ep6Fs4Dj4pHVPgwg21g DqdL2pNZaFLU+fuCJNiYn0quVTzvgB1r+hI2ORTUJX0wjVAQDAPaIQIvnEuH5II7 muvyYOkqxI8aMosAFIrhTOLrL/Y4KKIVPl54lSRhu3XkUSSbe6KdGd+NflGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkOcJuepHwk54aOds3FKDvFNMLcwHwYDVR0j BBgwFoAUHt0bQtRDZ+P83RZI9moQdslRBaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZiZDdjZjYtZjU1YS00Yjc4LWE1ODgtZDkyNjFmMTVmNzYzLzAvMUVERDFCNDJE NDQzNjdFM0ZDREQxNjQ4RjY2QTEwNzZDOTUxMDVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUREMUI0MkQ0NDM2N0UzRkNERDE2NDhGNjZBMTA3NkM5NTEw NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvMUVERDFCNDJENDQzNjdFM0ZDREQxNjQ4RjY2QTEw NzZDOTUxMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIBm8Vs65NDgnZQ3RrQRmvBkOrWI2ZBekCD TJTu2O4mfSREo2lOL/Qj4oHLHQwcHGu8zIsfEJzKA/LoQ0iCZIdrgVs9zXn6tos8 87R5u6Ip8nQi2JPFR+49FbFw890wanV5SyjlfBQ0Iu/V6t3Pco0RuM92EJQZbcd+ drG73SRa9uTM2nz+wfWyruUO6U9nA4LbZ+k/ea4ccethLIz5V7mij6NtkzfRper/ JQQoHrrWRZ9WuJ3PbcwxlKVVKB2ZRmgNreDZXA+AQ2peFFbfWvzolJEpqGi/2+W9 3erAHjw0PjUm9Aq4ov6VcHSnfmwDtAXNFggs5nrJ6DyWoTyIuWA= -----END CERTIFICATE-----Generated at Wed Sep 23 08:00:37 2026 by rpki-client