$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft (raw, json) Hash identifier: luDeT06kQLomTkqUoz6mQ3efHFNsU2nAjZlA91qJZ+U= Subject key identifier: DC:5E:20:57:75:EA:70:90:DB:EA:B1:9B:E9:0F:4B:FC:1C:A8:55:3F Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Certificate serial: 07FA34661E9101EF93641DE7DF1FAB00F7DA0040 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft Manifest number: BD Signing time: Mon 21 Sep 2026 11:00:04 +0000 Manifest this update: Mon 21 Sep 2026 10:55:04 +0000 Manifest next update: Tue 22 Sep 2026 13:52:04 +0000 Files and hashes: 1: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl (hash: vv5VjKH9QW2kHIUqonTs9EmlFlpPbqg8wgOjCaQje3A=) 2: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=) 3: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=) 4: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: rmdjm7QqoJ2GS17azzOS2oUqFKYvi6CMQRKzm3faQVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fa:34:66:1e:91:01:ef:93:64:1d:e7:df:1f:ab:00:f7:da:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Validity Not Before: Sep 21 10:55:04 2026 GMT Not After : Sep 22 13:52:04 2026 GMT Subject: CN=DC5E205775EA7090DBEAB19BE90F4BFC1CA8553F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:93:a0:d5:7a:4a:b8:d9:b8:66:71:ca:e3:9f: e3:f9:25:58:aa:fa:28:fc:25:9c:73:19:35:aa:db: cd:4c:a1:48:1d:86:ae:da:68:65:62:1a:27:1a:1a: 66:c8:1f:46:bd:3f:86:0a:c2:35:cf:de:35:8f:8b: 65:98:e3:b6:28:88:ca:98:7b:8f:95:b9:ec:4d:de: 2c:35:43:0b:a2:b8:b9:12:f6:63:db:ff:9b:c8:a8: 04:08:8a:82:89:b3:91:b9:fc:30:d0:13:db:de:d7: 81:5d:35:fe:26:d5:94:c4:8c:a0:1b:4e:bb:f3:f4: 60:5b:f1:29:45:d9:82:89:5c:aa:dc:e5:0e:29:f6: 05:b1:e6:7f:ca:9d:50:22:3e:80:93:77:eb:66:5d: 70:66:3c:a7:71:6f:e0:f7:a0:31:a9:f2:74:82:3a: 73:10:80:89:0c:48:9b:fe:92:92:a0:e2:8f:8f:3a: f8:ef:dd:05:f6:64:e2:9f:58:3e:c3:52:2e:38:f2: af:63:d4:b4:58:3d:9b:13:bf:4c:70:40:3d:13:6a: 54:cc:99:3f:85:0a:82:69:29:2e:ed:7d:9a:2d:3f: 8c:36:6b:50:c9:de:09:a1:81:de:69:06:13:f6:43: df:c2:0e:fe:7a:6d:e2:d6:72:c9:bd:ca:f1:07:1c: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5E:20:57:75:EA:70:90:DB:EA:B1:9B:E9:0F:4B:FC:1C:A8:55:3F X509v3 Authority Key Identifier: keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9d:90:74:3e:03:3d:f6:5f:e8:4f:f1:30:cc:65:78:72:69: ed:e1:ff:20:1c:d7:97:59:91:b2:0c:69:4e:45:9a:a8:55:78: 57:42:21:95:6a:2b:ce:f9:d7:a3:09:a8:19:d5:9c:8b:39:16: 36:dd:e5:cb:99:8a:36:d1:1a:d1:04:46:a0:1f:ac:f3:f6:86: 88:e3:42:6b:53:f6:1e:7b:21:33:e2:39:d4:6a:9f:cd:97:e0: 84:1c:bf:cd:13:6b:a5:57:3f:55:fe:d1:91:9d:c0:07:56:22: 12:ae:3e:29:bd:c1:a6:30:14:2c:52:a1:57:f0:8a:a4:1b:33: de:54:47:5b:1b:96:4b:95:06:58:83:79:74:07:f2:2b:ab:19: 95:8c:ae:19:61:c5:8d:8a:0c:62:19:17:74:9f:24:ec:0e:61: 7e:05:22:d9:89:0a:9e:43:9c:53:12:3d:1c:b5:4d:c4:0e:28: f1:0d:44:7a:5b:f0:54:7f:1b:f3:5f:01:41:8a:5e:d7:54:26: d2:86:3a:86:ae:5f:6c:aa:38:a4:96:94:9c:1e:8c:8c:de:2e: 07:3f:e5:01:d4:16:c1:9e:a2:5a:03:c6:d1:60:53:db:e6:a6: 42:92:57:dc:37:9f:29:44:a7:2e:20:81:9e:27:0c:76:a5:d2: 7a:38:d4:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/o0Zh6RAe+TZB3n3x+rAPfaAEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4 NjNFMjlGNDAeFw0yNjA5MjExMDU1MDRaFw0yNjA5MjIxMzUyMDRaMDMxMTAvBgNV BAMTKERDNUUyMDU3NzVFQTcwOTBEQkVBQjE5QkU5MEY0QkZDMUNBODU1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7k6DVekq42bhmccrjn+P5JViq +ij8JZxzGTWq281MoUgdhq7aaGViGicaGmbIH0a9P4YKwjXP3jWPi2WY47YoiMqY e4+VuexN3iw1QwuiuLkS9mPb/5vIqAQIioKJs5G5/DDQE9ve14FdNf4m1ZTEjKAb Trvz9GBb8SlF2YKJXKrc5Q4p9gWx5n/KnVAiPoCTd+tmXXBmPKdxb+D3oDGp8nSC OnMQgIkMSJv+kpKg4o+POvjv3QX2ZOKfWD7DUi448q9j1LRYPZsTv0xwQD0TalTM mT+FCoJpKS7tfZotP4w2a1DJ3gmhgd5pBhP2Q9/CDv56beLWcsm9yvEHHD35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3F4gV3XqcJDb6rGb6Q9L/ByoVT8wHwYDVR0j BBgwFoAU7XtZRCesuAoesuTpLV5rpoY+KfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5NGQzNzUtZmM3ZC00ZGM3LWExZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQy N0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4NjNFMjlGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDdCNTk0NDI3QUNCODBBMUVCMkU0RTkyRDVFNkJBNjg2M0Uy OUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZC QTY4NjNFMjlGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACudkHQ+Az32X+hP8TDMZXhyae3h/yAc15dZ kbIMaU5FmqhVeFdCIZVqK87516MJqBnVnIs5Fjbd5cuZijbRGtEERqAfrPP2hojj QmtT9h57ITPiOdRqn82X4IQcv80Ta6VXP1X+0ZGdwAdWIhKuPim9waYwFCxSoVfw iqQbM95UR1sblkuVBliDeXQH8iurGZWMrhlhxY2KDGIZF3SfJOwOYX4FItmJCp5D nFMSPRy1TcQOKPENRHpb8FR/G/NfAUGKXtdUJtKGOoauX2yqOKSWlJwejIzeLgc/ 5QHUFsGeoloDxtFgU9vmpkKSV9w3nylEpy4ggZ4nDHal0no41LQ= -----END CERTIFICATE-----Generated at Tue Sep 22 01:11:38 2026 by rpki-client