$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft File: ED8D01C73F80C3D77C261531F032760A254A0C33.mft (raw, json) Hash identifier: dPl0S3ZiNDh+LdsrexB0XA5DLNRBevyckuZWFMdHr3M= Subject key identifier: BF:55:27:6A:57:47:B5:15:77:23:89:52:44:4C:21:56:8B:79:A5:5A Authority key identifier: ED:8D:01:C7:3F:80:C3:D7:7C:26:15:31:F0:32:76:0A:25:4A:0C:33 Certificate issuer: /CN=ED8D01C73F80C3D77C261531F032760A254A0C33 Certificate serial: 6CFB0DEE8B1C615D253CBEE364A684A50F735396 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft Manifest number: FE Signing time: Tue 10 Nov 2026 00:41:26 +0000 Manifest this update: Tue 10 Nov 2026 00:36:26 +0000 Manifest next update: Wed 11 Nov 2026 03:10:26 +0000 Files and hashes: 1: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: GKO8zdtE5CxssueJt3Z36/7K9MSiC3xyGYv8jirDeyE=) 2: ED8D01C73F80C3D77C261531F032760A254A0C33.crl (hash: nQPs+1Xw+Z7c5Og6vOut6r6b5Ok1pPelehambLljnK0=) 3: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: tjGhv+f3OyNAH/rInqaJjPy0RZlADPOgngZRxnhpidI=) 4: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: OJ2yEQilrDM/Xg2aTHzxO6aZkpu5qjxVD1asbChN4Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.crl rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 03:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:fb:0d:ee:8b:1c:61:5d:25:3c:be:e3:64:a6:84:a5:0f:73:53:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8D01C73F80C3D77C261531F032760A254A0C33 Validity Not Before: Nov 10 00:36:26 2026 GMT Not After : Nov 11 03:10:26 2026 GMT Subject: CN=BF55276A5747B51577238952444C21568B79A55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bc:bc:4b:a8:54:7b:35:68:30:5b:f6:46:32: fc:d9:b5:ca:71:67:48:99:2c:4b:8a:b3:46:16:2b: fd:3d:ff:25:90:6b:4c:40:08:d3:ec:68:fe:63:47: 3a:ca:56:9e:b3:20:7a:99:ff:1c:44:e4:fb:6d:34: b8:9b:ac:5d:28:27:b8:08:87:a6:90:28:a0:54:84: a8:fb:41:a7:bd:66:3b:7c:32:4d:2d:aa:9d:19:02: 41:7a:ac:6c:91:39:27:3f:83:fa:27:6d:1f:72:c3: 35:ce:bc:af:30:32:ba:b6:2b:91:51:7e:c6:22:9a: 33:86:77:42:6d:2d:c1:3b:5c:13:d0:c0:f1:99:7e: 01:8e:b1:98:ec:68:32:98:62:6a:17:9f:53:df:e7: 2e:ab:e4:46:3c:63:5b:e9:6f:bb:3c:53:a4:ad:8c: 44:f6:92:be:e9:b6:82:7b:60:16:95:79:cf:3d:f8: a4:2f:74:ab:c3:e3:7c:5b:6e:7e:38:5a:d3:0d:f5: 06:31:67:f4:78:c1:ce:21:fb:88:65:30:a7:e3:48: c0:83:94:fd:79:12:78:2e:17:55:45:14:27:29:7d: 80:8d:8f:be:42:8e:39:43:d6:8b:14:2f:11:de:4d: d1:c2:82:98:2e:1f:bf:46:43:c2:dc:5f:0e:13:b5: e5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:55:27:6A:57:47:B5:15:77:23:89:52:44:4C:21:56:8B:79:A5:5A X509v3 Authority Key Identifier: keyid:ED:8D:01:C7:3F:80:C3:D7:7C:26:15:31:F0:32:76:0A:25:4A:0C:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d9:0f:1c:dc:20:10:6f:54:8a:83:28:32:22:3c:97:5c:8e: 5e:c5:f1:06:89:28:78:26:fc:f4:be:46:3e:37:c1:27:fe:9a: 3e:de:86:aa:84:c9:fc:65:8e:06:ea:68:d7:a9:4a:70:56:07: 84:e4:26:67:18:fc:5c:0a:47:c6:24:c0:7e:76:d1:81:f8:83: cb:45:ed:07:44:dd:8f:cb:7e:9a:be:89:97:92:0a:bd:4c:10: ba:c2:1b:17:65:d0:3a:62:d4:e6:45:8c:db:71:0b:78:40:fb: d8:ae:cd:30:33:07:b1:99:b1:89:88:17:17:d4:1d:38:d5:d7: f6:a2:86:35:80:0c:1f:f5:b7:4e:02:88:5c:c5:76:4c:48:dc: f3:24:4a:e5:67:ad:02:e4:8d:8e:5f:9a:12:69:d0:33:f8:ec: 88:e2:c8:b0:f1:fe:75:8e:22:06:6f:1f:f4:9f:48:5e:f4:1b: a3:48:95:a2:e0:32:16:8c:91:15:32:cb:19:66:9d:e3:16:b9: 17:bc:38:c5:6e:13:78:ae:01:00:36:2e:82:5f:37:c2:f3:50: 46:ac:58:f0:17:8c:43:40:f1:6e:be:aa:33:ab:b9:6c:43:22: 9b:78:7f:c5:07:73:97:41:c8:eb:49:e8:be:2a:d4:c4:26:82: f4:02:9e:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPsN7oscYV0lPL7jZKaEpQ9zU5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4RDAxQzczRjgwQzNENzdDMjYxNTMxRjAzMjc2MEEy NTRBMEMzMzAeFw0yNjExMTAwMDM2MjZaFw0yNjExMTEwMzEwMjZaMDMxMTAvBgNV BAMTKEJGNTUyNzZBNTc0N0I1MTU3NzIzODk1MjQ0NEMyMTU2OEI3OUE1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKvLxLqFR7NWgwW/ZGMvzZtcpx Z0iZLEuKs0YWK/09/yWQa0xACNPsaP5jRzrKVp6zIHqZ/xxE5PttNLibrF0oJ7gI h6aQKKBUhKj7Qae9Zjt8Mk0tqp0ZAkF6rGyROSc/g/onbR9ywzXOvK8wMrq2K5FR fsYimjOGd0JtLcE7XBPQwPGZfgGOsZjsaDKYYmoXn1Pf5y6r5EY8Y1vpb7s8U6St jET2kr7ptoJ7YBaVec89+KQvdKvD43xbbn44WtMN9QYxZ/R4wc4h+4hlMKfjSMCD lP15EnguF1VFFCcpfYCNj75CjjlD1osULxHeTdHCgpguH79GQ8LcXw4TteVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1UnaldHtRV3I4lSREwhVot5pVowHwYDVR0j BBgwFoAU7Y0Bxz+Aw9d8JhUx8DJ2CiVKDDMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U1YzczY2MtOTg1ZS00ZTkyLWJhNjktY2Q4YmZmZTRhNTNkLzAvRUQ4RDAxQzcz RjgwQzNENzdDMjYxNTMxRjAzMjc2MEEyNTRBMEMzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhEMDFDNzNGODBDM0Q3N0MyNjE1MzFGMDMyNzYwQTI1NEEw QzMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRUQ4RDAxQzczRjgwQzNENzdDMjYxNTMxRjAzMjc2 MEEyNTRBMEMzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnZDxzcIBBvVIqDKDIiPJdcjl7F8QaJKHgm /PS+Rj43wSf+mj7ehqqEyfxljgbqaNepSnBWB4TkJmcY/FwKR8YkwH520YH4g8tF 7QdE3Y/Lfpq+iZeSCr1MELrCGxdl0Dpi1OZFjNtxC3hA+9iuzTAzB7GZsYmIFxfU HTjV1/aihjWADB/1t04CiFzFdkxI3PMkSuVnrQLkjY5fmhJp0DP47IjiyLDx/nWO IgZvH/SfSF70G6NIlaLgMhaMkRUyyxlmneMWuRe8OMVuE3iuAQA2LoJfN8LzUEas WPAXjENA8W6+qjOruWxDIpt4f8UHc5dByOtJ6L4q1MQmgvQCnpc= -----END CERTIFICATE-----Generated at Tue Nov 10 16:49:50 2026 by rpki-client