$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft File: ED8801C97D629F0D5149E3C88E72600C016E4712.mft (raw, json) Hash identifier: 2Svt+OuyU0JmGLZxzMqQJ4NLoY69j8UT7SfxDPBpXgA= Subject key identifier: B5:9A:F7:7F:00:E5:7E:05:FA:72:34:1A:82:45:8D:12:76:A2:29:8E Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 33993AF17C313EF3F149F80695B0BB627E57A4BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft Manifest number: C8 Signing time: Tue 22 Sep 2026 02:50:06 +0000 Manifest this update: Tue 22 Sep 2026 02:45:06 +0000 Manifest next update: Wed 23 Sep 2026 04:15:06 +0000 Files and hashes: 1: 3136302e32322e3230342e302f32342d3234203d3e20313531353832.roa (hash: FG7A9MU7fb9tdKd7oBxqaGhx29fl+O14KDwowo1B/f0=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313531353832.roa (hash: V03YYLB7n64oWFaNCyRjfBxyGau7JMeXMeEWbhh6cZk=) 3: ED8801C97D629F0D5149E3C88E72600C016E4712.crl (hash: s6SsYSzXbbafq3132BblCIDr2+H5yovbLLzuuZWr0sE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:99:3a:f1:7c:31:3e:f3:f1:49:f8:06:95:b0:bb:62:7e:57:a4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: Sep 22 02:45:06 2026 GMT Not After : Sep 23 04:15:06 2026 GMT Subject: CN=B59AF77F00E57E05FA72341A82458D1276A2298E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:83:2f:c6:4f:47:65:ea:e8:eb:b1:48:b0: 74:e3:31:4d:08:b9:9e:82:b0:01:6d:fe:96:95:11: 8b:e0:da:ba:42:e6:4a:f8:d1:53:1f:77:61:3f:63: 71:35:e7:55:ef:bb:b9:2d:bb:a9:ce:02:b9:82:64: 06:ee:78:3a:12:7c:0a:82:5d:ac:59:d7:dc:47:d1: 29:fd:ce:5c:5d:8a:0e:9e:1b:3f:4a:f3:ba:79:03: 3d:05:ca:91:26:80:48:ac:42:42:91:2d:8d:1f:7a: 5e:ce:f8:87:6d:60:66:32:02:f9:ee:a2:ac:3c:74: 6d:46:2c:d6:3f:f1:67:fe:8c:95:91:04:a0:ed:45: 91:e5:be:cc:e5:92:30:c0:df:5c:e5:e9:71:ca:89: 27:18:30:8e:7a:2c:25:d2:e5:a9:1f:84:a4:90:60: 3f:b2:e0:b1:2e:0b:8e:24:44:cf:5c:fc:97:a7:bc: 81:8c:d8:97:a5:89:c0:4a:9a:83:da:c4:e2:58:72: ee:20:b3:8e:40:c0:4b:9c:6f:f9:9a:4c:48:ee:5a: 30:f8:b2:a5:00:9c:24:40:90:8c:40:53:31:b5:3a: 17:87:ee:cd:78:ad:fc:9e:70:aa:79:3a:70:1b:7c: 79:c3:08:d9:97:bd:bc:09:72:8d:fb:02:3d:9b:7e: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9A:F7:7F:00:E5:7E:05:FA:72:34:1A:82:45:8D:12:76:A2:29:8E X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d8:f6:67:fe:50:8c:ab:f4:e5:2c:70:40:be:f7:72:f9:db: 60:be:d2:d9:82:89:3c:7b:7d:64:c4:a1:3a:1d:d8:e2:4b:42: 17:3d:75:47:f4:36:a7:ec:4c:35:a5:f2:37:58:e3:ec:c5:20: a7:81:e8:23:c0:41:e6:67:df:c7:3a:f5:2c:a5:7c:19:ed:b3: eb:d2:6c:96:95:c2:f2:ea:b8:9d:91:f7:6e:00:4b:73:a9:6d: cb:af:af:24:8e:bc:33:c6:77:d0:ef:34:18:6c:4d:26:81:fa: 16:d3:a6:1f:a9:3a:24:5a:dc:42:ff:80:d8:b3:fb:c6:41:19: e2:25:a9:39:cb:16:d1:4c:26:1e:7b:20:44:44:9d:1f:96:bb: eb:8a:c5:cc:63:9f:fe:2d:61:91:01:5e:85:cf:69:a3:e1:2b: 86:1c:69:00:04:bb:14:88:9d:29:4e:c5:c7:aa:1c:b0:78:b9: 8b:8a:29:56:79:25:91:4b:e6:de:3d:aa:1d:51:5b:34:91:68: cb:ac:9d:06:61:50:10:86:a3:93:93:ee:06:c2:c8:29:05:d4: b1:4c:83:7f:0d:8d:c1:bb:09:a7:8d:7e:49:21:f0:11:e7:e9: 25:c8:47:2e:d9:d7:f4:c9:5a:8a:7a:ae:05:c7:12:0b:dc:1a: 25:80:22:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5k68XwxPvPxSfgGlbC7Yn5XpLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjA5MjIwMjQ1MDZaFw0yNjA5MjMwNDE1MDZaMDMxMTAvBgNV BAMTKEI1OUFGNzdGMDBFNTdFMDVGQTcyMzQxQTgyNDU4RDEyNzZBMjI5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnToMvxk9HZero67FIsHTjMU0I uZ6CsAFt/paVEYvg2rpC5kr40VMfd2E/Y3E151Xvu7ktu6nOArmCZAbueDoSfAqC XaxZ19xH0Sn9zlxdig6eGz9K87p5Az0FypEmgEisQkKRLY0fel7O+IdtYGYyAvnu oqw8dG1GLNY/8Wf+jJWRBKDtRZHlvszlkjDA31zl6XHKiScYMI56LCXS5akfhKSQ YD+y4LEuC44kRM9c/JenvIGM2JelicBKmoPaxOJYcu4gs45AwEucb/maTEjuWjD4 sqUAnCRAkIxAUzG1OheH7s14rfyecKp5OnAbfHnDCNmXvbwJco37Aj2bftXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZr3fwDlfgX6cjQagkWNEnaiKY4wHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYw MEMwMTZFNDcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfY9mf+UIyr9OUscEC+93L522C+0tmCiTx7 fWTEoTod2OJLQhc9dUf0NqfsTDWl8jdY4+zFIKeB6CPAQeZn38c69SylfBnts+vS bJaVwvLquJ2R924AS3OpbcuvrySOvDPGd9DvNBhsTSaB+hbTph+pOiRa3EL/gNiz +8ZBGeIlqTnLFtFMJh57IEREnR+Wu+uKxcxjn/4tYZEBXoXPaaPhK4YcaQAEuxSI nSlOxceqHLB4uYuKKVZ5JZFL5t49qh1RWzSRaMusnQZhUBCGo5OT7gbCyCkF1LFM g38NjcG7CaeNfkkh8BHn6SXIRy7Z1/TJWop6rgXHEgvcGiWAIts= -----END CERTIFICATE-----Generated at Tue Sep 22 17:06:47 2026 by rpki-client