$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft File: ED8D01C73F80C3D77C261531F032760A254A0C33.mft (raw, json) Hash identifier: 7aHE2j2Iy4eRpCkAUgkEIRtLuLAUIoMc9vxy+fpvxFo= Subject key identifier: 03:D9:73:DC:3A:FD:75:D8:56:2B:41:8D:3C:DD:11:6D:F3:6A:B3:DD Authority key identifier: ED:8D:01:C7:3F:80:C3:D7:7C:26:15:31:F0:32:76:0A:25:4A:0C:33 Certificate issuer: /CN=ED8D01C73F80C3D77C261531F032760A254A0C33 Certificate serial: 3E92A35D0627C384BDA5897E8A4345A630B81494 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft Manifest number: BC Signing time: Sun 20 Sep 2026 19:20:44 +0000 Manifest this update: Sun 20 Sep 2026 19:15:44 +0000 Manifest next update: Mon 21 Sep 2026 21:10:44 +0000 Files and hashes: 1: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: tjGhv+f3OyNAH/rInqaJjPy0RZlADPOgngZRxnhpidI=) 2: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: GKO8zdtE5CxssueJt3Z36/7K9MSiC3xyGYv8jirDeyE=) 3: ED8D01C73F80C3D77C261531F032760A254A0C33.crl (hash: 2X/XnZ/NqjXNICtK5BcehaW56DKEexZG5DJJRpc77fg=) 4: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: OJ2yEQilrDM/Xg2aTHzxO6aZkpu5qjxVD1asbChN4Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.crl rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:92:a3:5d:06:27:c3:84:bd:a5:89:7e:8a:43:45:a6:30:b8:14:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8D01C73F80C3D77C261531F032760A254A0C33 Validity Not Before: Sep 20 19:15:44 2026 GMT Not After : Sep 21 21:10:44 2026 GMT Subject: CN=03D973DC3AFD75D8562B418D3CDD116DF36AB3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:e2:8a:1c:d7:b8:07:59:62:29:5a:2f:8c: 5c:b8:96:ec:a9:30:8d:c9:7f:25:ef:c6:73:21:67: e2:39:bf:4d:42:df:df:81:2d:a1:bf:e7:da:1d:4a: b3:2b:ad:30:ec:4e:09:3a:6c:4b:27:93:e3:93:61: f2:68:cc:56:4a:dd:64:78:55:ce:33:cc:88:63:8f: a9:16:28:97:84:94:ca:37:5e:ff:a1:3e:7a:8f:12: 02:e9:6b:8e:23:f9:9b:a3:df:51:6a:32:b6:91:ea: e9:45:07:9c:69:17:53:09:e5:2c:70:a6:6d:ab:80: bf:f9:52:78:34:96:21:22:b6:d5:2b:20:7a:8d:49: a2:e9:03:29:c7:8e:01:6a:b1:61:81:40:30:d4:cc: 7d:c2:25:a0:e6:95:a0:a5:ec:21:4f:03:f5:b2:5f: 3b:c9:44:ce:5d:79:c7:ce:67:ee:d7:9a:04:81:a8: 34:9b:08:95:8a:ad:14:d7:57:0c:80:c7:34:a5:43: f5:11:1b:23:c7:fb:f5:48:81:ca:4f:48:c6:7d:6e: 8d:ec:e7:64:68:00:27:68:c9:2b:da:b8:3c:22:aa: 69:3c:73:4c:b4:93:97:9d:1d:06:fe:bd:f6:6f:e4: ae:b1:30:52:80:77:e8:57:4f:15:1c:fb:f5:b6:8b: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D9:73:DC:3A:FD:75:D8:56:2B:41:8D:3C:DD:11:6D:F3:6A:B3:DD X509v3 Authority Key Identifier: keyid:ED:8D:01:C7:3F:80:C3:D7:7C:26:15:31:F0:32:76:0A:25:4A:0C:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:d9:b0:18:62:b5:0a:69:23:b4:79:ac:be:5d:9b:cd:8d:5f: 75:48:87:06:b0:b1:ec:75:f8:75:30:20:af:76:dc:91:74:51: cb:c5:2e:2c:23:be:f4:c3:c9:1f:da:ae:dd:45:18:b1:14:16: da:02:eb:b9:33:3d:c8:17:4f:70:ad:c3:3c:92:85:2d:56:2e: 32:d0:f6:f3:2c:88:b3:38:3d:80:0c:07:44:dc:13:64:c7:16: a6:ad:d6:d0:b8:79:a0:18:5c:d7:06:22:75:14:e6:51:33:f5: c3:8d:08:31:49:7d:2e:23:0a:e8:aa:98:05:93:2f:f8:9a:e2: 73:d4:6b:15:a6:7a:dc:d6:df:5d:82:ea:97:0b:51:4f:f6:6e: 5e:b7:b5:af:30:39:90:1a:9b:96:2c:a2:a5:52:85:40:a2:20: a7:45:97:3e:2f:20:59:22:8f:79:ec:3e:c5:e2:da:88:7f:ed: da:fa:86:4d:d7:29:f6:43:d7:fd:89:62:12:90:f6:b8:81:f0: f9:e4:45:1a:46:7b:4b:56:1f:77:49:a2:4d:a8:01:c5:1f:ae: ca:f9:b0:da:9a:3d:93:0e:2f:bf:4c:d7:18:68:dd:68:aa:a2: 01:95:bd:fc:6c:29:32:81:ea:71:ce:c6:21:82:37:b9:a3:92: e7:44:34:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpKjXQYnw4S9pYl+ikNFpjC4FJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4RDAxQzczRjgwQzNENzdDMjYxNTMxRjAzMjc2MEEy NTRBMEMzMzAeFw0yNjA5MjAxOTE1NDRaFw0yNjA5MjEyMTEwNDRaMDMxMTAvBgNV BAMTKDAzRDk3M0RDM0FGRDc1RDg1NjJCNDE4RDNDREQxMTZERjM2QUIzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFuKKHNe4B1liKVovjFy4luyp MI3JfyXvxnMhZ+I5v01C39+BLaG/59odSrMrrTDsTgk6bEsnk+OTYfJozFZK3WR4 Vc4zzIhjj6kWKJeElMo3Xv+hPnqPEgLpa44j+Zuj31FqMraR6ulFB5xpF1MJ5Sxw pm2rgL/5Ung0liEittUrIHqNSaLpAynHjgFqsWGBQDDUzH3CJaDmlaCl7CFPA/Wy XzvJRM5decfOZ+7XmgSBqDSbCJWKrRTXVwyAxzSlQ/URGyPH+/VIgcpPSMZ9bo3s 52RoACdoySvauDwiqmk8c0y0k5edHQb+vfZv5K6xMFKAd+hXTxUc+/W2i+JvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9lz3Dr9ddhWK0GNPN0RbfNqs90wHwYDVR0j BBgwFoAU7Y0Bxz+Aw9d8JhUx8DJ2CiVKDDMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U1YzczY2MtOTg1ZS00ZTkyLWJhNjktY2Q4YmZmZTRhNTNkLzAvRUQ4RDAxQzcz RjgwQzNENzdDMjYxNTMxRjAzMjc2MEEyNTRBMEMzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhEMDFDNzNGODBDM0Q3N0MyNjE1MzFGMDMyNzYwQTI1NEEw QzMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRUQ4RDAxQzczRjgwQzNENzdDMjYxNTMxRjAzMjc2 MEEyNTRBMEMzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLZsBhitQppI7R5rL5dm82NX3VIhwawsex1 +HUwIK923JF0UcvFLiwjvvTDyR/art1FGLEUFtoC67kzPcgXT3CtwzyShS1WLjLQ 9vMsiLM4PYAMB0TcE2THFqat1tC4eaAYXNcGInUU5lEz9cONCDFJfS4jCuiqmAWT L/ia4nPUaxWmetzW312C6pcLUU/2bl63ta8wOZAam5YsoqVShUCiIKdFlz4vIFki j3nsPsXi2oh/7dr6hk3XKfZD1/2JYhKQ9riB8PnkRRpGe0tWH3dJok2oAcUfrsr5 sNqaPZMOL79M1xho3WiqogGVvfxsKTKB6nHOxiGCN7mjkudENKc= -----END CERTIFICATE-----Generated at Sun Sep 20 22:16:56 2026 by rpki-client