$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft File: ED8DD7447C376181396EB62C759A6F26FB167CCA.mft (raw, json) Hash identifier: 7IVs9RKyP7og1FxWqwQVek2/4lqEOJSbRUFQRbrGheM= Subject key identifier: 86:30:F5:32:65:14:0D:30:30:63:81:3F:37:E1:49:AD:45:4C:13:A4 Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA Certificate issuer: /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Certificate serial: 2027C2E7BBD5BBD9C01463D9D227FA311C03646A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:17:56 +0000 Manifest this update: Mon 21 Sep 2026 13:12:56 +0000 Manifest next update: Tue 22 Sep 2026 13:48:56 +0000 Files and hashes: 1: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=) 2: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=) 3: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=) 4: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=) 5: ED8DD7447C376181396EB62C759A6F26FB167CCA.crl (hash: R991HOXAEQe7c558BOJ0E8naMh5O1PIlbQbVeC0q6/c=) 6: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=) 7: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: ebvrnt2gfBGMuAXBfS5jxa2H91cp8yKz8AywyJ9Opto=) 8: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: WD8rkoXkQTqnUe9DEQn99XMfFlR76Acc32DExkXvm/I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:27:c2:e7:bb:d5:bb:d9:c0:14:63:d9:d2:27:fa:31:1c:03:64:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Validity Not Before: Sep 21 13:12:56 2026 GMT Not After : Sep 22 13:48:56 2026 GMT Subject: CN=8630F53265140D303063813F37E149AD454C13A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:81:1a:93:3c:67:d7:bd:05:89:4b:5c:52: 95:e3:69:16:4d:14:ed:8f:00:32:0b:2b:45:ce:c1: 45:16:47:3f:3b:56:b3:0d:13:d7:df:7c:00:83:40: c7:67:8f:86:5b:2c:9b:44:3a:69:1c:fa:5c:e9:e8: ea:bb:47:22:2a:bb:bb:26:87:75:cb:dd:b7:8c:f0: ca:b4:2e:47:1a:7e:99:da:2b:77:b5:5d:4c:89:44: f1:3e:de:c8:c7:70:b6:23:5c:4e:c0:f7:e3:b4:97: 4b:56:e5:ef:42:51:0d:d3:4e:52:64:07:95:40:80: 8a:ca:8a:8d:a9:5a:60:2e:10:a6:1c:c8:2a:c9:15: b8:3b:12:54:75:10:fc:5b:2d:07:3e:eb:fb:cf:48: 8e:31:7f:72:6d:65:85:b4:69:b1:12:d8:b8:e6:5d: 1e:f8:44:5e:82:e3:40:5a:b7:2b:88:1e:84:c8:48: d3:ae:bb:6c:31:8b:2b:f7:5b:4b:08:53:8c:ac:bd: 27:d7:6c:39:ab:bb:4e:3e:8b:06:66:c2:9f:d4:50: 95:2e:92:84:a7:8a:b8:b0:f5:5e:39:54:09:39:bf: dc:b4:c1:47:5b:d3:4c:5e:33:58:1d:01:b0:3f:9d: 62:2d:bd:7f:4a:55:ef:da:a6:66:40:3d:69:d1:7e: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:30:F5:32:65:14:0D:30:30:63:81:3F:37:E1:49:AD:45:4C:13:A4 X509v3 Authority Key Identifier: keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f2:61:ff:56:21:7e:82:51:e1:95:31:aa:0a:8f:1f:0c:f4: 42:98:f3:d7:3a:61:aa:da:5f:4d:a8:92:20:c3:52:3c:81:83: b5:04:e5:de:b0:98:7b:67:82:ef:d4:8a:d3:d2:a5:ad:16:87: 8b:0e:91:25:45:58:9a:a0:08:b0:90:93:d6:68:1c:c5:1d:60: f2:9a:84:71:1f:19:c5:d6:50:57:5d:7f:77:b6:af:4c:4e:42: e7:a1:fe:5d:f5:9a:d0:02:4f:61:5d:70:be:b1:83:cc:86:a4: 73:e5:46:37:97:21:03:13:2d:6b:96:cb:3d:b2:d2:f5:e4:70: e7:5a:4d:31:6e:65:01:12:6d:08:9f:ab:ca:1f:49:7e:b7:fa: 50:66:f6:e9:73:e9:ad:74:6e:6d:a9:c3:ef:20:d6:b6:fc:7c: 31:d9:20:bd:ba:68:35:9f:9b:1e:94:09:a8:6e:80:5b:ae:92: 5d:7f:f6:bd:68:54:5c:15:6b:16:7a:9e:ce:c7:ae:60:ac:ca: fa:06:8b:f3:6b:63:37:b8:07:ed:21:fd:19:e0:25:87:4b:a5: b4:bc:a8:26:9d:b8:5d:23:d5:aa:3b:e5:3e:82:a7:fc:5f:f8: 28:ac:7b:01:94:8a:d1:08:06:36:21:32:d9:41:8b:8c:a0:6f: 79:66:79:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICfC57vVu9nAFGPZ0if6MRwDZGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG QjE2N0NDQTAeFw0yNjA5MjExMzEyNTZaFw0yNjA5MjIxMzQ4NTZaMDMxMTAvBgNV BAMTKDg2MzBGNTMyNjUxNDBEMzAzMDYzODEzRjM3RTE0OUFENDU0QzEzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QoEakzxn170FiUtcUpXjaRZN FO2PADILK0XOwUUWRz87VrMNE9fffACDQMdnj4ZbLJtEOmkc+lzp6Oq7RyIqu7sm h3XL3beM8Mq0LkcafpnaK3e1XUyJRPE+3sjHcLYjXE7A9+O0l0tW5e9CUQ3TTlJk B5VAgIrKio2pWmAuEKYcyCrJFbg7ElR1EPxbLQc+6/vPSI4xf3JtZYW0abES2Ljm XR74RF6C40BatyuIHoTISNOuu2wxiyv3W0sIU4ysvSfXbDmru04+iwZmwp/UUJUu koSniriw9V45VAk5v9y0wUdb00xeM1gdAbA/nWItvX9KVe/apmZAPWnRflA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjD1MmUUDTAwY4E/N+FJrUVME6QwHwYDVR0j BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3 QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3 Q0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZG MjZGQjE2N0NDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvyYf9WIX6CUeGVMaoKjx8M9EKY89c6Yara X02okiDDUjyBg7UE5d6wmHtngu/UitPSpa0Wh4sOkSVFWJqgCLCQk9ZoHMUdYPKa hHEfGcXWUFddf3e2r0xOQueh/l31mtACT2FdcL6xg8yGpHPlRjeXIQMTLWuWyz2y 0vXkcOdaTTFuZQESbQifq8ofSX63+lBm9ulz6a10bm2pw+8g1rb8fDHZIL26aDWf mx6UCahugFuukl1/9r1oVFwVaxZ6ns7HrmCsyvoGi/NrYze4B+0h/RngJYdLpbS8 qCaduF0j1ao75T6Cp/xf+CisewGUitEIBjYhMtlBi4ygb3lmeW0= -----END CERTIFICATE-----Generated at Tue Sep 22 01:02:12 2026 by rpki-client