$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft File: ED8DD7447C376181396EB62C759A6F26FB167CCA.mft (raw, json) Hash identifier: m7aEmVOfWMhTwMuh+Fr8Ee3upMJc2aH600USbhjYM6A= Subject key identifier: 80:1B:BF:45:66:72:EF:64:BF:20:09:EA:5D:21:8D:AE:72:37:58:00 Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA Certificate issuer: /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Certificate serial: 1D37FCD6B53CD129212F33397D494B7A9580AD3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 07:13:09 +0000 Manifest this update: Sun 15 Nov 2026 07:08:09 +0000 Manifest next update: Mon 16 Nov 2026 10:00:09 +0000 Files and hashes: 1: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=) 2: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=) 3: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=) 4: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=) 5: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=) 6: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: WD8rkoXkQTqnUe9DEQn99XMfFlR76Acc32DExkXvm/I=) 7: ED8DD7447C376181396EB62C759A6F26FB167CCA.crl (hash: wPpAgvd2Owg9gSEg1sgcdSkIJlzf6V1gR/WxIZcpx5I=) 8: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: ebvrnt2gfBGMuAXBfS5jxa2H91cp8yKz8AywyJ9Opto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:37:fc:d6:b5:3c:d1:29:21:2f:33:39:7d:49:4b:7a:95:80:ad:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Validity Not Before: Nov 15 07:08:09 2026 GMT Not After : Nov 16 10:00:09 2026 GMT Subject: CN=801BBF456672EF64BF2009EA5D218DAE72375800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:47:e4:4a:be:c0:74:e4:f0:30:4e:32:29: 1d:f3:6d:ce:27:d1:66:06:01:ee:73:29:cb:72:e3: af:51:c7:97:46:1f:91:e4:f7:47:b0:58:a0:37:c1: d7:a1:2e:f5:d0:0e:69:93:a6:34:1f:f5:08:42:d7: 29:83:17:bb:79:ea:9b:31:63:7b:65:c6:35:68:97: 93:42:ed:04:9a:1e:90:92:8c:a2:ae:9d:ba:08:a6: ea:4a:15:42:5f:f3:48:15:23:d8:df:4a:d3:36:15: 98:da:01:93:0d:33:7f:3d:fa:ca:13:a2:79:ef:22: 2c:af:94:df:a4:c9:7a:38:a0:0f:8f:fa:35:43:4c: 0a:98:0d:6c:24:05:7b:aa:6d:cc:46:f3:1c:82:23: 48:ea:2e:b9:60:e4:00:8a:86:f9:80:25:32:07:78: 8e:8e:b8:f5:ef:6a:e8:f7:e9:1e:68:2c:d3:c8:11: ac:f0:ca:49:bf:83:8c:ce:75:c5:4f:c5:03:f5:07: 44:37:ca:4d:60:4d:a8:65:5b:42:f3:f7:fd:4e:7f: 5a:4e:a4:32:91:d4:18:33:21:a4:a9:59:36:77:59: 93:3b:a0:b8:67:9f:83:11:aa:a2:72:2b:18:69:25: 0a:10:ca:a2:47:fa:44:fb:4a:ca:7d:b5:cd:6d:e0: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1B:BF:45:66:72:EF:64:BF:20:09:EA:5D:21:8D:AE:72:37:58:00 X509v3 Authority Key Identifier: keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:23:71:82:dd:71:59:66:e2:3e:02:13:3b:7c:7f:bc:09:d1: e3:5c:7e:01:af:7c:1c:a4:8b:fd:18:a9:e4:f3:75:28:e8:4f: 9b:15:64:40:e2:2a:9e:70:81:dc:46:e7:e2:0f:b1:f7:22:94: 97:d2:0e:9a:cf:b1:89:8c:cc:07:7f:11:84:f8:41:ff:1b:e0: 5d:c3:17:2e:59:5c:b9:e9:71:1c:dd:88:3a:31:83:44:5a:00: 1b:99:1d:a5:67:0d:a3:ab:80:38:32:95:1b:a8:e4:47:02:31: 11:24:01:e0:0d:68:11:b1:fd:71:2f:3c:f5:77:5c:fa:e5:59: 33:83:f7:b1:2d:9d:b9:0f:a1:ed:2c:00:a9:a8:78:8f:7d:71: 5e:d8:bb:81:8d:db:09:6f:f4:74:73:7d:a3:c0:6e:0f:6f:2f: 0d:a7:3a:f1:d8:46:75:b9:df:16:2c:94:3d:08:1d:7e:41:7a: 17:95:42:ae:0e:7d:13:33:ce:53:fc:d6:10:03:b7:5b:86:34: 05:bf:25:27:f1:a7:0d:27:ce:bc:53:88:0f:a3:07:83:bb:7e: 80:b0:2d:bc:f1:c4:bc:11:52:d4:fd:fb:d0:d0:0c:fd:a7:83: 16:e7:61:43:87:e7:43:e9:84:3e:37:e2:42:f1:63:ef:3e:37: 66:2f:a6:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTf81rU80SkhLzM5fUlLepWArT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG QjE2N0NDQTAeFw0yNjExMTUwNzA4MDlaFw0yNjExMTYxMDAwMDlaMDMxMTAvBgNV BAMTKDgwMUJCRjQ1NjY3MkVGNjRCRjIwMDlFQTVEMjE4REFFNzIzNzU4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdR0fkSr7AdOTwME4yKR3zbc4n 0WYGAe5zKcty469Rx5dGH5Hk90ewWKA3wdehLvXQDmmTpjQf9QhC1ymDF7t56psx Y3tlxjVol5NC7QSaHpCSjKKunboIpupKFUJf80gVI9jfStM2FZjaAZMNM389+soT onnvIiyvlN+kyXo4oA+P+jVDTAqYDWwkBXuqbcxG8xyCI0jqLrlg5ACKhvmAJTIH eI6OuPXvauj36R5oLNPIEazwykm/g4zOdcVPxQP1B0Q3yk1gTahlW0Lz9/1Of1pO pDKR1BgzIaSpWTZ3WZM7oLhnn4MRqqJyKxhpJQoQyqJH+kT7Ssp9tc1t4HF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgBu/RWZy72S/IAnqXSGNrnI3WAAwHwYDVR0j BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3 QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3 Q0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZG MjZGQjE2N0NDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQjcYLdcVlm4j4CEzt8f7wJ0eNcfgGvfByk i/0YqeTzdSjoT5sVZEDiKp5wgdxG5+IPsfcilJfSDprPsYmMzAd/EYT4Qf8b4F3D Fy5ZXLnpcRzdiDoxg0RaABuZHaVnDaOrgDgylRuo5EcCMREkAeANaBGx/XEvPPV3 XPrlWTOD97EtnbkPoe0sAKmoeI99cV7Yu4GN2wlv9HRzfaPAbg9vLw2nOvHYRnW5 3xYslD0IHX5BeheVQq4OfRMzzlP81hADt1uGNAW/JSfxpw0nzrxTiA+jB4O7foCw LbzxxLwRUtT9+9DQDP2ngxbnYUOH50PphD434kLxY+8+N2Yvpjg= -----END CERTIFICATE-----Generated at Sun Nov 15 10:09:51 2026 by rpki-client