$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft File: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft (raw, json) Hash identifier: iKdbfh9aBLNX0ofelqBPjN1f4KGQeEDqB58sPAX0umM= Subject key identifier: 64:55:08:CF:AD:AA:C7:E1:8C:15:D7:67:5F:89:82:92:B2:08:03:D3 Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Certificate serial: 482C3A9DBAE76EE393DF81D476F5FCAD3486FE53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft Manifest number: BF Signing time: Tue 22 Sep 2026 02:19:20 +0000 Manifest this update: Tue 22 Sep 2026 02:14:20 +0000 Manifest next update: Wed 23 Sep 2026 04:34:20 +0000 Files and hashes: 1: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: 2KuqxGxxUoWsjT52nc8YqV6GIpta4WniQwIsnjhtsto=) 2: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=) 3: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl (hash: J9HGiaZHMN5PgpFz5oHw0/3CMmhtj6ZAwwYZApiqewc=) 4: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: CDdAgCCqdZ4eGgwg/DutRSkrLQoNO6bQnfQJc5Q/9rc=) 5: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=) 6: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2c:3a:9d:ba:e7:6e:e3:93:df:81:d4:76:f5:fc:ad:34:86:fe:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Validity Not Before: Sep 22 02:14:20 2026 GMT Not After : Sep 23 04:34:20 2026 GMT Subject: CN=645508CFADAAC7E18C15D7675F898292B20803D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:4e:0c:6e:85:c9:fd:1f:80:43:11:8f:2b: a5:46:b3:25:3c:2b:74:3b:c9:53:87:e7:91:8f:f8: 1e:fc:5f:4d:38:c9:e8:f0:7f:a8:b1:f0:51:9a:3a: d5:fd:53:92:f2:82:93:e4:32:b5:1e:a0:53:b1:7a: d7:3f:e1:5c:a5:4a:a2:86:49:b1:93:6c:92:5c:64: 89:9d:93:e2:4b:18:b2:c1:30:9a:48:79:73:9b:c5: 77:e1:c4:e4:b0:d9:a6:62:45:78:29:f8:44:ec:8d: f1:3f:08:19:9e:81:24:83:d0:8a:93:98:11:0b:2b: d1:ab:83:5b:86:c1:19:bf:31:a8:3a:35:e4:48:b9: 2d:c8:64:87:71:b0:57:3a:7f:39:6a:bf:55:8d:d6: 9d:a4:88:c9:77:91:f5:2e:f9:df:76:04:71:16:38: bf:16:91:61:76:a8:2f:73:68:38:28:e3:78:05:fd: 6c:ac:08:06:0c:b2:bd:ac:59:d5:ad:c8:a1:1c:84: f5:88:af:3d:7c:bd:4b:fd:1d:c0:3a:36:8a:10:bb: 70:5f:a5:6a:17:62:99:df:ed:0a:79:b6:66:c2:d8: f0:38:43:4f:e7:18:bf:d3:65:82:bd:72:a0:ab:bf: 67:7e:3e:e3:c7:18:59:fc:04:a8:c9:88:ce:e8:fa: c2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:55:08:CF:AD:AA:C7:E1:8C:15:D7:67:5F:89:82:92:B2:08:03:D3 X509v3 Authority Key Identifier: keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a2:29:57:87:94:fc:a1:2a:8f:3f:41:86:6f:f9:0c:b3:f9: 68:06:31:8f:7d:88:64:8b:46:5d:e2:ed:ff:d8:84:90:9e:cb: 18:13:00:d7:f0:0c:40:fe:ba:15:9b:09:e1:53:45:4d:d1:b5: 78:33:1b:1e:bc:12:91:2a:26:bc:df:01:8d:af:7f:3d:95:a7: 25:d2:66:9c:01:16:95:dc:d4:00:ff:5c:62:0c:5e:3a:89:6e: b3:f0:e7:b5:d4:9a:b1:c0:ea:93:4d:31:e6:bd:bb:d2:d8:d7: ad:2f:c0:e4:ad:ad:d9:e0:8b:e5:0a:cd:5f:39:b3:1d:52:c4: 38:10:23:5e:8e:93:9c:fe:8d:9f:2f:e0:41:04:2c:10:94:69: d8:24:7b:9e:f3:3c:6b:0a:cd:8a:55:bc:c2:29:f5:09:ba:6d: 13:ed:40:56:0f:a4:56:76:30:f5:28:15:a2:7c:77:80:24:5c: 10:fd:cf:1e:8e:17:6b:e6:65:c3:d6:04:e1:69:02:43:01:8e: 9f:70:9f:43:91:65:eb:67:92:69:2e:ab:d3:90:81:93:19:b4: 91:58:ee:7b:f7:68:0b:2f:c9:ed:43:e4:d2:b8:b7:50:a0:6b: 59:8e:dc:f9:69:74:7c:bc:93:db:af:ff:32:22:ba:c2:f6:21: ef:55:30:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCw6nbrnbuOT34HUdvX8rTSG/lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5 NTk4QThBMjAeFw0yNjA5MjIwMjE0MjBaFw0yNjA5MjMwNDM0MjBaMDMxMTAvBgNV BAMTKDY0NTUwOENGQURBQUM3RTE4QzE1RDc2NzVGODk4MjkyQjIwODAzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vU4MboXJ/R+AQxGPK6VGsyU8 K3Q7yVOH55GP+B78X004yejwf6ix8FGaOtX9U5LygpPkMrUeoFOxetc/4VylSqKG SbGTbJJcZImdk+JLGLLBMJpIeXObxXfhxOSw2aZiRXgp+ETsjfE/CBmegSSD0IqT mBELK9Grg1uGwRm/Mag6NeRIuS3IZIdxsFc6fzlqv1WN1p2kiMl3kfUu+d92BHEW OL8WkWF2qC9zaDgo43gF/WysCAYMsr2sWdWtyKEchPWIrz18vUv9HcA6NooQu3Bf pWoXYpnf7Qp5tmbC2PA4Q0/nGL/TZYK9cqCrv2d+PuPHGFn8BKjJiM7o+sKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZFUIz62qx+GMFddnX4mCkrIIA9MwHwYDVR0j BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1 NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB OEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0Ey MEI5NTk4QThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWiKVeHlPyhKo8/QYZv+Qyz+WgGMY99iGSL Rl3i7f/YhJCeyxgTANfwDED+uhWbCeFTRU3RtXgzGx68EpEqJrzfAY2vfz2VpyXS ZpwBFpXc1AD/XGIMXjqJbrPw57XUmrHA6pNNMea9u9LY160vwOStrdngi+UKzV85 sx1SxDgQI16Ok5z+jZ8v4EEELBCUadgke57zPGsKzYpVvMIp9Qm6bRPtQFYPpFZ2 MPUoFaJ8d4AkXBD9zx6OF2vmZcPWBOFpAkMBjp9wn0ORZetnkmkuq9OQgZMZtJFY 7nv3aAsvye1D5NK4t1Cga1mO3PlpdHy8k9uv/zIiusL2Ie9VMHk= -----END CERTIFICATE-----Generated at Tue Sep 22 06:57:20 2026 by rpki-client