$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft File: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft (raw, json) Hash identifier: EihoGx90RIV3onrgynh7EZGhqsiMj07nlUQKLUdgwmI= Subject key identifier: 1A:43:BB:F1:95:D2:86:E4:98:6F:89:98:4D:10:78:EB:DE:60:EC:1E Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D Certificate issuer: /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D Certificate serial: 2F3F964A02E2E7BC7532EFDF0E98C0EC900EE8BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:51:20 +0000 Manifest this update: Mon 21 Sep 2026 07:46:20 +0000 Manifest next update: Tue 22 Sep 2026 10:24:20 +0000 Files and hashes: 1: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl (hash: 61JuE6mF2Fyl4A6GI+44uf/HKlJIHpubmbSAXAJ7HfE=) 2: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: d2NngQ1ClG3KccosIUCvHr+xZx4Rn0+Y8+h4km4ecJk=) 3: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: JgYuRVVLY5uhLSJE/sZQYEOvK74P7yfUZ3Eo+U6PjCs=) 4: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: y23ei7JhisKDcrmLs/IfTlddxIuJqQ3o+RaQBaZ//Ws=) 5: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: boDuLeGcrulC4Uynp3CHSUapz3xB3GO6CYNItPeHTs4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 10:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3f:96:4a:02:e2:e7:bc:75:32:ef:df:0e:98:c0:ec:90:0e:e8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D Validity Not Before: Sep 21 07:46:20 2026 GMT Not After : Sep 22 10:24:20 2026 GMT Subject: CN=1A43BBF195D286E4986F89984D1078EBDE60EC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:04:9d:4c:54:62:31:29:73:c4:6a:c0:47: eb:d8:2a:f9:65:34:6d:d2:67:3a:26:a7:86:54:06: 09:62:bc:3b:26:8f:ee:79:ac:97:12:83:a0:df:73: f6:c6:42:f9:08:eb:89:36:21:85:20:13:c0:c8:3a: 36:25:80:31:72:0b:4a:2c:84:27:66:4b:ef:c0:35: a2:f5:9f:80:24:70:48:68:bb:ea:b8:e9:22:97:ab: b5:21:ed:5e:68:b7:fd:7b:29:a1:43:6c:a7:4e:df: df:30:29:91:41:96:ca:94:f0:6f:a7:ca:72:ae:67: 37:b2:98:19:d3:fb:ce:ca:f5:ed:a4:3c:e3:5c:72: c3:dd:e8:7c:f9:ba:18:98:2f:56:bb:98:8e:b1:6f: ee:0a:00:46:04:02:0f:7e:43:72:d1:3b:70:2a:ec: 83:2c:e2:57:46:7d:ab:37:9d:f2:16:ea:af:60:69: b1:c9:f7:eb:15:28:b2:f3:8f:79:00:a3:97:2f:35: 46:95:b4:05:91:df:3a:3a:06:b2:9e:f6:87:89:25: 5e:65:9d:d1:c7:57:65:39:e8:0e:b4:7e:4d:b8:31: 92:d0:a0:4f:73:e0:a0:09:84:c7:3f:a2:9c:09:0e: d9:86:8d:c0:67:f1:5f:22:d9:e7:c8:34:30:09:cd: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:43:BB:F1:95:D2:86:E4:98:6F:89:98:4D:10:78:EB:DE:60:EC:1E X509v3 Authority Key Identifier: keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:7e:f9:ea:ce:38:85:b1:b8:d6:c0:2c:7e:29:b8:44:72:be: c1:14:44:e0:df:b5:a5:0a:8e:47:f5:54:ab:ff:46:e4:19:57: ed:f2:15:c7:76:c2:8e:70:f0:9b:ed:dc:0a:00:e3:58:17:35: 1d:26:95:00:9a:a3:09:55:67:f5:b8:f1:77:26:26:1c:66:63: 80:18:66:07:76:53:d9:df:07:6b:db:7b:1f:b9:01:63:27:bb: 96:bf:50:cd:8e:38:77:c5:84:2e:54:fc:4c:2b:b4:1e:dd:ad: c6:6a:75:85:30:77:b5:4d:d2:d2:60:3e:73:c6:33:91:8c:03: 2e:f5:0e:1a:d1:06:0a:c7:0e:6f:ce:63:83:d0:e8:e1:23:e8: 22:9a:7b:f4:fa:99:89:f9:b4:7e:b4:a2:b9:4b:8c:c1:9b:e2: 79:dc:35:1d:a3:90:f0:8d:13:13:61:60:76:34:cb:76:0f:4a: 29:86:cb:1f:56:a4:73:aa:5b:57:cb:f1:c9:5f:49:d1:7d:fc: fa:55:5c:f4:3d:cb:7f:38:d4:ba:b5:0f:10:d8:68:c6:eb:57: 8f:ca:ae:85:56:2e:05:aa:57:f6:a0:d5:0c:79:33:0f:3c:ac: d6:46:3f:9e:1c:dc:17:80:11:f2:68:a1:e9:62:6d:ea:ad:2b: 1e:f1:27:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULz+WSgLi57x1Mu/fDpjA7JAO6LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzMDU3RUVERUY5Rjk5RDZEMTBFQUEwRjQ3RTREMTA5 OTdDMUU2RDAeFw0yNjA5MjEwNzQ2MjBaFw0yNjA5MjIxMDI0MjBaMDMxMTAvBgNV BAMTKDFBNDNCQkYxOTVEMjg2RTQ5ODZGODk5ODREMTA3OEVCREU2MEVDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxgSdTFRiMSlzxGrAR+vYKvll NG3SZzomp4ZUBglivDsmj+55rJcSg6Dfc/bGQvkI64k2IYUgE8DIOjYlgDFyC0os hCdmS+/ANaL1n4AkcEhou+q46SKXq7Uh7V5ot/17KaFDbKdO398wKZFBlsqU8G+n ynKuZzeymBnT+87K9e2kPONccsPd6Hz5uhiYL1a7mI6xb+4KAEYEAg9+Q3LRO3Aq 7IMs4ldGfas3nfIW6q9gabHJ9+sVKLLzj3kAo5cvNUaVtAWR3zo6BrKe9oeJJV5l ndHHV2U56A60fk24MZLQoE9z4KAJhMc/opwJDtmGjcBn8V8i2efINDAJzZQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGkO78ZXShuSYb4mYTRB4695g7B4wHwYDVR0j BBgwFoAU7TBX7t75+Z1tEOqg9H5NEJl8Hm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGUxOGQtYTA0Ny00NTkwLTllNTYtNDY0YTczZTIzYzZjLzAvRUQzMDU3RUVE RUY5Rjk5RDZEMTBFQUEwRjQ3RTREMTA5OTdDMUU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDMwNTdFRURFRjlGOTlENkQxMEVBQTBGNDdFNEQxMDk5N0Mx RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvRUQzMDU3RUVERUY5Rjk5RDZEMTBFQUEwRjQ3RTRE MTA5OTdDMUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZ++erOOIWxuNbALH4puERyvsEURODftaUK jkf1VKv/RuQZV+3yFcd2wo5w8Jvt3AoA41gXNR0mlQCaowlVZ/W48XcmJhxmY4AY Zgd2U9nfB2vbex+5AWMnu5a/UM2OOHfFhC5U/EwrtB7drcZqdYUwd7VN0tJgPnPG M5GMAy71DhrRBgrHDm/OY4PQ6OEj6CKae/T6mYn5tH60orlLjMGb4nncNR2jkPCN ExNhYHY0y3YPSimGyx9WpHOqW1fL8clfSdF9/PpVXPQ9y3841Lq1DxDYaMbrV4/K roVWLgWqV/ag1Qx5Mw88rNZGP54c3BeAEfJooelibeqtKx7xJyo= -----END CERTIFICATE-----Generated at Tue Sep 22 04:22:57 2026 by rpki-client