$ rpki-client -vvvf rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft File: EDE74DB94791A93866EC7291214CFE17A2E8847C.mft (raw, json) Hash identifier: 3OoHZ3kx8f7SW+Nednhd8gty4cbL5nDMhswvVm1Y8hk= Subject key identifier: CF:C2:D8:7E:F6:6D:AD:7B:58:50:44:07:2F:C5:4A:2A:AD:B9:9F:7D Authority key identifier: ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C Certificate issuer: /CN=EDE74DB94791A93866EC7291214CFE17A2E8847C Certificate serial: 287D274AE4C431B29F007DDB124E825C7A7023FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:49:54 +0000 Manifest this update: Tue 22 Sep 2026 06:44:54 +0000 Manifest next update: Wed 23 Sep 2026 08:48:54 +0000 Files and hashes: 1: EDE74DB94791A93866EC7291214CFE17A2E8847C.crl (hash: d4xlSTURMm+Ftl5Qs8gEZ4em/AJFXKIZ1Y0ETPP3fXI=) 2: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: 8iN/CyAnWulsiAeIh9OXGEEjvzE7Yu0Mej0akYbb1wk=) 3: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 4l+iqPdBiSlCoKQVmREPhK2V683AQV+EJjvlxdf5bAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 08:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7d:27:4a:e4:c4:31:b2:9f:00:7d:db:12:4e:82:5c:7a:70:23:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDE74DB94791A93866EC7291214CFE17A2E8847C Validity Not Before: Sep 22 06:44:54 2026 GMT Not After : Sep 23 08:48:54 2026 GMT Subject: CN=CFC2D87EF66DAD7B585044072FC54A2AADB99F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:01:8c:30:3a:83:ff:2a:f7:67:1d:1c:a1: b6:c4:a8:6d:dc:87:6a:b6:4d:cf:3b:1c:7e:9c:c6: 44:80:d9:94:53:f4:2d:69:c7:2d:bc:9a:b8:1b:93: d0:e6:51:84:30:4b:26:1b:c5:3b:a7:d4:ea:7c:4b: a4:57:c2:7f:ca:fa:14:0a:ae:da:dc:e3:b8:14:2a: 43:f8:d9:71:92:3b:d9:af:5c:13:6d:2b:30:00:92: 5d:82:16:a1:73:6b:76:21:26:ae:5a:24:b3:49:ce: 2a:8e:43:64:d8:6e:44:0c:70:5f:e1:f7:d5:d5:91: 04:f6:3b:32:08:3a:6d:83:cb:4e:90:f6:05:04:92: dd:44:7b:6f:0d:87:6e:41:c0:6d:90:35:ee:cc:46: 14:d1:15:75:a3:fd:82:3a:fe:b2:e2:6c:80:e1:77: a5:09:b5:08:ef:8b:e8:d8:de:2b:32:9b:41:3c:4a: 36:c8:99:91:59:cd:74:c3:46:9b:be:08:2e:7a:9c: c0:b2:fd:b5:55:06:ae:6d:d6:16:c7:e6:ba:22:8f: 42:bc:f2:13:7c:da:9c:af:67:14:47:76:76:a5:fb: 85:36:f2:21:14:e9:8e:fa:68:96:d5:a6:75:ec:1a: 03:9e:d3:78:53:49:3b:dc:b8:df:a3:cf:f7:12:88: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C2:D8:7E:F6:6D:AD:7B:58:50:44:07:2F:C5:4A:2A:AD:B9:9F:7D X509v3 Authority Key Identifier: keyid:ED:E7:4D:B9:47:91:A9:38:66:EC:72:91:21:4C:FE:17:A2:E8:84:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EDE74DB94791A93866EC7291214CFE17A2E8847C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/EDE74DB94791A93866EC7291214CFE17A2E8847C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1e:a6:68:e5:8a:c5:81:bc:0d:c1:9a:58:33:54:b1:59:86: 83:47:8d:ef:d9:25:a1:a4:3e:aa:c1:44:e0:f9:0f:ad:85:bf: 0c:90:29:f7:5b:7e:7b:91:24:80:86:ce:aa:eb:ab:51:fa:fc: 4f:b6:55:b9:5f:c7:ff:38:d5:38:b8:e9:49:5a:6f:c7:f5:41: 49:29:3c:b3:4e:34:9f:de:7f:44:6f:8d:e3:37:ff:4c:e7:6f: 09:f7:d4:59:2a:ec:73:b8:45:e0:d6:26:84:b9:74:dc:7a:8e: 47:5e:75:d9:d5:4b:66:29:76:bc:48:01:e6:31:2f:f9:e8:02: 4b:c8:41:42:0e:11:03:61:47:2f:3d:c9:8e:ce:ac:b4:3e:d5: dc:2d:86:55:a3:d4:de:b6:61:e6:08:bf:4c:58:f8:19:bc:50: 1d:79:ee:0f:e0:e7:5a:21:10:d4:8a:9b:8c:dd:43:d4:7d:c6: 74:10:63:25:25:c5:16:0e:5e:db:68:99:10:5d:c4:7d:89:93: 6c:f4:75:5a:0d:24:33:48:95:4f:83:7f:6b:6e:48:15:e3:d3: ab:e5:4b:84:ea:bf:85:3f:92:f0:36:75:a4:e7:58:9d:60:f0: 8d:e3:9a:ef:0b:e7:9e:0f:81:6a:e2:57:6b:98:25:f1:f0:53: b2:5a:30:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKH0nSuTEMbKfAH3bEk6CXHpwI/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURFNzREQjk0NzkxQTkzODY2RUM3MjkxMjE0Q0ZFMTdB MkU4ODQ3QzAeFw0yNjA5MjIwNjQ0NTRaFw0yNjA5MjMwODQ4NTRaMDMxMTAvBgNV BAMTKENGQzJEODdFRjY2REFEN0I1ODUwNDQwNzJGQzU0QTJBQURCOTlGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHgGMMDqD/yr3Zx0cobbEqG3c h2q2Tc87HH6cxkSA2ZRT9C1pxy28mrgbk9DmUYQwSyYbxTun1Op8S6RXwn/K+hQK rtrc47gUKkP42XGSO9mvXBNtKzAAkl2CFqFza3YhJq5aJLNJziqOQ2TYbkQMcF/h 99XVkQT2OzIIOm2Dy06Q9gUEkt1Ee28Nh25BwG2QNe7MRhTRFXWj/YI6/rLibIDh d6UJtQjvi+jY3isym0E8SjbImZFZzXTDRpu+CC56nMCy/bVVBq5t1hbH5roij0K8 8hN82pyvZxRHdnal+4U28iEU6Y76aJbVpnXsGgOe03hTSTvcuN+jz/cSiEIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz8LYfvZtrXtYUEQHL8VKKq25n30wHwYDVR0j BBgwFoAU7edNuUeRqThm7HKRIUz+F6LohHwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FlY2IwMDItMjRhNC00OTU1LWEzMzMtMDAyZmRiNzQ1NTNmLzAvRURFNzREQjk0 NzkxQTkzODY2RUM3MjkxMjE0Q0ZFMTdBMkU4ODQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FREU3NERCOTQ3OTFBOTM4NjZFQzcyOTEyMTRDRkUxN0EyRTg4 NDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvRURFNzREQjk0NzkxQTkzODY2RUM3MjkxMjE0Q0ZF MTdBMkU4ODQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoepmjlisWBvA3BmlgzVLFZhoNHje/ZJaGk PqrBROD5D62FvwyQKfdbfnuRJICGzqrrq1H6/E+2Vblfx/841Ti46Ulab8f1QUkp PLNONJ/ef0RvjeM3/0znbwn31Fkq7HO4ReDWJoS5dNx6jkdeddnVS2YpdrxIAeYx L/noAkvIQUIOEQNhRy89yY7OrLQ+1dwthlWj1N62YeYIv0xY+Bm8UB157g/g51oh ENSKm4zdQ9R9xnQQYyUlxRYOXttomRBdxH2Jk2z0dVoNJDNIlU+Df2tuSBXj06vl S4Tqv4U/kvA2daTnWJ1g8I3jmu8L554PgWriV2uYJfHwU7JaMI8= -----END CERTIFICATE-----Generated at Tue Sep 22 16:42:25 2026 by rpki-client