$ rpki-client -vvvf rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft File: ED63844C4B15010EA3F230F69A770C2B1C84C105.mft (raw, json) Hash identifier: uGK+xsQ7y1zBRP3tZxL4M8XtWRDUQDjdk8jzquBZX7w= Subject key identifier: F6:1F:28:51:1D:3F:58:92:81:AA:EC:FE:C1:19:F1:F2:2F:50:A9:47 Authority key identifier: ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05 Certificate issuer: /CN=ED63844C4B15010EA3F230F69A770C2B1C84C105 Certificate serial: 45843A621468FB967F4991EAF9573DF2F50DF14D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 15:19:19 +0000 Manifest this update: Fri 25 Sep 2026 15:14:19 +0000 Manifest next update: Sat 26 Sep 2026 19:12:19 +0000 Files and hashes: 1: ED63844C4B15010EA3F230F69A770C2B1C84C105.crl (hash: T+0AQLZ8vX0TN1gKy/PTmzq5Aw3mMINwANFtunldQcY=) 2: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: u/f9pBg0fHFgqAdliz0CbmpL4V+/eW84b3JUz0/QPns=) 3: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: NixEwf5mDvcBcm4WRaep6YCV7NZr3+VpuhyzC3KObpI=) 4: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: AnDqHlidff5Ox0jt0yjx0uwvccFAfB7mH1oiPDPa4CY=) 5: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: 1eOUv0Nol5QAajQql0Encer3ZT9+Up46jsqBzqDlEmA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 19:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:84:3a:62:14:68:fb:96:7f:49:91:ea:f9:57:3d:f2:f5:0d:f1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED63844C4B15010EA3F230F69A770C2B1C84C105 Validity Not Before: Sep 25 15:14:19 2026 GMT Not After : Sep 26 19:12:19 2026 GMT Subject: CN=F61F28511D3F589281AAECFEC119F1F22F50A947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:e2:8b:16:c9:23:58:89:af:c5:21:57:79: 3d:6e:58:68:f6:b9:72:38:1d:fe:12:6e:a9:93:53: f6:39:76:e3:b7:88:0a:b7:11:5f:f4:9f:45:c7:50: 17:0a:ac:3d:e1:8b:5e:72:5b:d4:75:94:13:e4:58: 42:e9:66:22:9e:1a:08:3b:76:53:10:c8:e3:e5:91: 19:2f:2d:81:4c:a8:dc:52:13:d8:b0:7e:21:ea:d7: 36:22:16:79:cc:3e:53:5f:19:74:8b:12:06:0a:2f: 42:c6:29:b1:25:ac:90:70:2d:2d:99:12:4e:db:1b: ca:c2:2d:41:b5:ad:09:fd:42:42:81:eb:a1:8e:24: f0:95:2e:d3:19:b8:fe:91:9a:4d:e6:9c:c9:55:2a: a1:64:22:53:4f:19:81:6f:04:98:e6:16:0a:7f:52: 39:44:e7:b1:dc:5e:aa:91:71:51:9c:90:46:be:35: 95:39:18:33:b2:07:95:75:46:69:ea:3a:9d:b2:cc: f3:95:de:66:eb:22:32:dd:cb:6b:43:fd:0a:ef:43: d0:ae:a6:e8:62:07:5e:3c:bd:a6:59:22:fa:33:9b: 36:4a:b0:96:64:3a:94:a0:b9:60:9b:11:5e:32:9c: 57:95:a7:fa:32:dd:b9:c4:18:25:85:8c:77:ba:25: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1F:28:51:1D:3F:58:92:81:AA:EC:FE:C1:19:F1:F2:2F:50:A9:47 X509v3 Authority Key Identifier: keyid:ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:22:5e:d3:16:56:6e:25:dc:1a:67:a6:d8:c0:26:2c:4b:74: fa:b3:ed:05:bf:0f:de:a3:7d:ac:5e:67:2c:53:36:37:02:3e: 1b:a3:15:d0:6b:84:8e:f5:65:25:aa:66:59:bd:da:ce:be:97: a8:f9:32:21:35:20:c2:1f:5c:c1:58:57:54:f4:e5:d7:49:2f: c6:63:94:c4:fb:c2:84:b7:6d:ef:4c:07:cc:9a:15:9a:82:80: 61:51:41:10:37:ad:00:97:4b:bc:fa:4f:86:e2:90:e2:ad:ee: 38:70:9b:a3:78:21:98:d7:48:df:f0:4c:a9:27:e7:5c:0a:2f: 57:03:4d:34:97:60:fe:96:ba:db:e9:88:c9:5b:1f:6b:66:24: d5:83:68:8b:e4:f7:41:25:81:3d:ea:6d:cd:f6:9e:c7:d4:21: 0e:75:41:b6:2a:40:62:80:72:cf:64:c8:83:4a:80:f7:f7:72: fe:72:ec:a4:a7:7a:22:17:c4:c7:6b:c9:ca:8a:9c:60:21:a1: 52:d2:eb:fe:ae:d5:d9:21:6a:b4:cc:2b:59:83:0d:8c:b5:1e: d0:57:cb:db:00:c8:e0:a6:12:de:9a:ae:02:6a:cb:9f:16:84: 24:51:58:f7:74:3e:95:fb:45:60:16:37:22:4b:78:ed:9a:b5: 3c:c5:4c:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYQ6YhRo+5Z/SZHq+Vc98vUN8U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ2Mzg0NEM0QjE1MDEwRUEzRjIzMEY2OUE3NzBDMkIx Qzg0QzEwNTAeFw0yNjA5MjUxNTE0MTlaFw0yNjA5MjYxOTEyMTlaMDMxMTAvBgNV BAMTKEY2MUYyODUxMUQzRjU4OTI4MUFBRUNGRUMxMTlGMUYyMkY1MEE5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVieKLFskjWImvxSFXeT1uWGj2 uXI4Hf4SbqmTU/Y5duO3iAq3EV/0n0XHUBcKrD3hi15yW9R1lBPkWELpZiKeGgg7 dlMQyOPlkRkvLYFMqNxSE9iwfiHq1zYiFnnMPlNfGXSLEgYKL0LGKbElrJBwLS2Z Ek7bG8rCLUG1rQn9QkKB66GOJPCVLtMZuP6Rmk3mnMlVKqFkIlNPGYFvBJjmFgp/ UjlE57HcXqqRcVGckEa+NZU5GDOyB5V1RmnqOp2yzPOV3mbrIjLdy2tD/QrvQ9Cu puhiB148vaZZIvozmzZKsJZkOpSguWCbEV4ynFeVp/oy3bnEGCWFjHe6JTZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9h8oUR0/WJKBquz+wRnx8i9QqUcwHwYDVR0j BBgwFoAU7WOETEsVAQ6j8jD2mncMKxyEwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZhNzY2NWEtYjUwYi00YTQ1LWE4ZjktMGQ2OWJkN2Q3NDNkLzAvRUQ2Mzg0NEM0 QjE1MDEwRUEzRjIzMEY2OUE3NzBDMkIxQzg0QzEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDYzODQ0QzRCMTUwMTBFQTNGMjMwRjY5QTc3MEMyQjFDODRD MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZhNzY2NWEtYjUwYi00YTQ1LWE4 ZjktMGQ2OWJkN2Q3NDNkLzAvRUQ2Mzg0NEM0QjE1MDEwRUEzRjIzMEY2OUE3NzBD MkIxQzg0QzEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwiXtMWVm4l3BpnptjAJixLdPqz7QW/D96j faxeZyxTNjcCPhujFdBrhI71ZSWqZlm92s6+l6j5MiE1IMIfXMFYV1T05ddJL8Zj lMT7woS3be9MB8yaFZqCgGFRQRA3rQCXS7z6T4bikOKt7jhwm6N4IZjXSN/wTKkn 51wKL1cDTTSXYP6WutvpiMlbH2tmJNWDaIvk90ElgT3qbc32nsfUIQ51QbYqQGKA cs9kyINKgPf3cv5y7KSneiIXxMdrycqKnGAhoVLS6/6u1dkharTMK1mDDYy1HtBX y9sAyOCmEt6argJqy58WhCRRWPd0PpX7RWAWNyJLeO2atTzFTI8= -----END CERTIFICATE-----Generated at Sat Sep 26 14:24:42 2026 by rpki-client