$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json) Hash identifier: MJg8PcszT+FK4NMKkoWIhELZ5+hkbXUYDY1gXMp247g= Subject key identifier: 16:ED:CB:EE:AB:C7:5F:37:64:37:A5:EC:C9:AB:05:87:D1:3D:69:31 Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Certificate serial: 0E3D5A4F8322D65A9F1A93AE5E5A3E70BE66599A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:57:48 +0000 Manifest this update: Mon 21 Sep 2026 04:52:48 +0000 Manifest next update: Tue 22 Sep 2026 07:20:48 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=) 2: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=) 3: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: WIYwv0TMwXiOj8vtrlvgQqeGl0wTmg+ENYb6LghqpAo=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3d:5a:4f:83:22:d6:5a:9f:1a:93:ae:5e:5a:3e:70:be:66:59:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Validity Not Before: Sep 21 04:52:48 2026 GMT Not After : Sep 22 07:20:48 2026 GMT Subject: CN=16EDCBEEABC75F376437A5ECC9AB0587D13D6931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:bf:9e:1d:59:d4:2e:12:35:09:fc:7c:1f:87: 3e:4e:8a:e1:f0:80:26:6d:24:d7:0a:ef:cc:e6:92: b8:62:2f:28:71:c8:13:7a:ca:78:a2:62:51:df:f0: c3:c3:44:0f:fd:bd:92:84:6d:a3:82:88:e7:00:a4: f1:a0:99:d2:b3:d2:f7:d4:07:a6:1f:43:10:a3:01: 36:39:96:c5:42:17:5b:84:67:1f:a6:b9:d4:e8:a3: fc:6b:d6:b3:cb:da:6c:f2:97:97:5f:e3:6e:e0:0a: 6a:0d:9f:1d:d9:31:23:34:80:56:9b:e4:63:34:23: f6:82:d2:46:78:6b:77:e4:05:1d:06:ba:bc:3f:fb: 9a:16:58:84:d2:10:1e:9f:ef:38:65:6b:6c:78:7c: 9e:78:f5:4d:2a:e0:00:86:48:11:aa:42:41:b1:90: 7f:34:f0:2b:89:82:fb:86:03:19:5b:7c:28:d4:18: a3:b6:d0:1f:b6:c9:00:6d:51:e4:4f:f9:e2:e8:a7: a1:99:20:6d:f3:6b:36:5d:63:1f:d0:a0:bd:d7:da: f4:91:4d:13:b1:7b:90:f7:1b:23:08:94:02:ca:5a: 3a:93:40:bd:d2:26:49:c0:ce:e9:82:2d:f4:1c:07: eb:40:4e:9a:8c:a4:8f:01:92:58:57:c0:5c:22:10: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:ED:CB:EE:AB:C7:5F:37:64:37:A5:EC:C9:AB:05:87:D1:3D:69:31 X509v3 Authority Key Identifier: keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:75:38:b7:4b:c2:d1:35:cf:bb:4f:90:0e:2c:21:2d:4b:46: 9e:87:75:1d:da:6c:4b:19:32:9f:9c:05:76:2e:90:7c:d0:03: 5d:f5:ff:72:21:dc:b8:f4:7b:1c:92:aa:41:09:1e:75:48:3c: 58:e1:17:83:73:33:b2:6c:c7:ae:30:89:3b:93:88:09:39:a4: 84:17:2f:ce:59:1e:2c:34:38:ca:50:d9:05:e1:8b:ad:fc:02: ee:16:a7:ca:46:49:99:3b:98:75:94:06:bc:68:20:a8:c2:a1: 66:4d:d9:c1:33:cd:cb:7f:7b:4e:da:1e:5d:71:c0:68:f0:79: 24:b0:a1:90:4b:3a:48:98:8f:d5:24:f9:80:7f:b0:87:0b:92: 68:13:49:ba:5d:f4:22:0b:10:b8:d0:c4:ef:71:06:10:3f:2e: ce:be:b9:85:c0:9f:f9:c0:5f:46:48:31:21:1e:fe:54:56:bc: 8c:90:0e:da:c6:47:16:de:dc:32:30:71:27:83:80:9b:1b:3d: b7:48:87:d5:80:50:d4:e5:b3:4e:7e:d3:7a:4f:95:ba:c6:da: 56:12:e4:1a:1d:0a:13:12:30:ad:c6:85:24:7d:d8:68:a7:7e: cf:90:ba:6e:fd:d3:5d:14:62:2a:41:ba:aa:47:22:7f:f5:3e: 96:0f:94:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDj1aT4Mi1lqfGpOuXlo+cL5mWZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1 RDdBNUFGMDAeFw0yNjA5MjEwNDUyNDhaFw0yNjA5MjIwNzIwNDhaMDMxMTAvBgNV BAMTKDE2RURDQkVFQUJDNzVGMzc2NDM3QTVFQ0M5QUIwNTg3RDEzRDY5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4v54dWdQuEjUJ/Hwfhz5OiuHw gCZtJNcK78zmkrhiLyhxyBN6yniiYlHf8MPDRA/9vZKEbaOCiOcApPGgmdKz0vfU B6YfQxCjATY5lsVCF1uEZx+mudToo/xr1rPL2mzyl5df427gCmoNnx3ZMSM0gFab 5GM0I/aC0kZ4a3fkBR0Gurw/+5oWWITSEB6f7zhla2x4fJ549U0q4ACGSBGqQkGx kH808CuJgvuGAxlbfCjUGKO20B+2yQBtUeRP+eLop6GZIG3zazZdYx/QoL3X2vSR TROxe5D3GyMIlALKWjqTQL3SJknAzumCLfQcB+tATpqMpI8BklhXwFwiEMZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFu3L7qvHXzdkN6XsyasFh9E9aTEwHwYDVR0j BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1 NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt1OLdLwtE1z7tPkA4sIS1LRp6HdR3abEsZ Mp+cBXYukHzQA131/3Ih3Lj0exySqkEJHnVIPFjhF4NzM7Jsx64wiTuTiAk5pIQX L85ZHiw0OMpQ2QXhi638Au4Wp8pGSZk7mHWUBrxoIKjCoWZN2cEzzct/e07aHl1x wGjweSSwoZBLOkiYj9Uk+YB/sIcLkmgTSbpd9CILELjQxO9xBhA/Ls6+uYXAn/nA X0ZIMSEe/lRWvIyQDtrGRxbe3DIwcSeDgJsbPbdIh9WAUNTls05+03pPlbrG2lYS 5BodChMSMK3GhSR92Ginfs+Qum79010UYipBuqpHIn/1PpYPlAE= -----END CERTIFICATE-----Generated at Mon Sep 21 19:50:44 2026 by rpki-client