$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft (raw, json) Hash identifier: j/vOEq6kOEJxnouyTKtj6kfBAR/Ib5ydm9zX5MiBo4k= Subject key identifier: E0:99:78:2E:D4:59:CE:B8:05:42:22:EE:49:74:4F:2E:35:C5:3F:C4 Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Certificate serial: 6DFBAC2BFC9DD33F8402D72C1F92F927C550FC84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 18:18:36 +0000 Manifest this update: Wed 23 Sep 2026 18:13:36 +0000 Manifest next update: Thu 24 Sep 2026 19:57:36 +0000 Files and hashes: 1: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: rmdjm7QqoJ2GS17azzOS2oUqFKYvi6CMQRKzm3faQVA=) 2: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=) 3: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl (hash: MLXwg0Sroty9hZGr4TxwCkJ+ttuMuPKa8FpYmCbC3mk=) 4: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fb:ac:2b:fc:9d:d3:3f:84:02:d7:2c:1f:92:f9:27:c5:50:fc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Validity Not Before: Sep 23 18:13:36 2026 GMT Not After : Sep 24 19:57:36 2026 GMT Subject: CN=E099782ED459CEB8054222EE49744F2E35C53FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:4e:20:fd:79:1c:86:68:b5:ee:ca:e5:8f: cd:84:05:09:9b:46:61:c7:56:9a:f7:37:08:56:9e: 65:a1:7d:21:ba:85:10:fd:57:7d:f5:ff:10:87:f0: 69:4f:d7:33:53:01:4b:c3:7e:4a:29:63:b2:00:9f: ff:68:d2:7d:a7:34:79:39:32:b4:a5:3e:ea:37:f6: 80:37:51:b8:9c:d3:01:77:bd:6d:1c:73:d0:3c:89: 4e:72:ce:7b:85:69:05:5b:d7:d5:62:e1:58:90:db: 61:1c:dc:18:d3:3f:12:16:95:ed:a0:4c:d2:1f:70: a4:8d:0d:59:db:5f:9a:98:24:a9:dd:fb:bb:06:80: 04:58:dc:1c:db:44:55:7c:43:c0:90:26:7f:e7:9c: bb:ff:b4:87:f7:6b:78:46:a3:4b:a6:46:5c:81:36: 1e:d1:80:2e:31:92:5c:51:2f:6d:62:b6:dc:a5:38: 15:68:79:8a:14:fe:37:b2:eb:73:7f:7d:b6:9c:17: 52:d3:2b:ed:8b:a3:b5:7a:aa:5a:f6:30:fd:90:26: 30:5e:4e:dc:bc:fa:8c:ee:b0:67:9f:e1:67:f6:10: cc:ed:2d:45:2f:a1:b2:03:8f:46:81:9e:1c:2a:01: 44:dc:b3:10:8f:c8:71:9a:58:05:f5:1a:21:08:17: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:99:78:2E:D4:59:CE:B8:05:42:22:EE:49:74:4F:2E:35:C5:3F:C4 X509v3 Authority Key Identifier: keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0b:0c:d9:9e:ed:7a:37:ae:f6:97:da:ef:f4:33:47:5f:d2: 13:cb:2b:94:95:c0:22:fd:5a:c7:a1:2b:2d:2b:2f:32:b9:cf: a7:82:9d:68:16:47:8a:a0:fe:0c:c7:ff:5f:fd:f2:bd:e2:27: 8b:5a:80:58:dc:5a:0a:45:42:70:36:2f:46:e0:f3:04:fa:d3: 53:98:bb:01:af:d7:8a:41:e3:55:ae:70:9c:4e:9f:de:21:30: 70:c4:b5:0a:d6:97:f3:6c:5a:9d:2c:a2:24:7e:94:75:d5:f1: c0:9c:a4:d8:73:77:a5:89:0e:ae:14:ab:f7:d9:7f:79:c2:01: 15:e6:6e:15:2c:27:24:7b:40:7c:07:1b:62:0c:67:72:f6:03: ae:36:5a:9e:19:e9:f9:1b:5a:43:a1:fa:c9:e6:56:7d:dd:0a: a7:58:45:1e:fc:01:e7:98:7a:68:ad:a0:ce:4c:27:8e:ba:9a: 56:57:64:22:e7:d5:69:f8:1c:b6:1f:7b:3d:1b:e5:a9:07:2f: 21:e9:4f:1e:90:5c:19:90:f1:ce:b5:03:d5:03:2f:b9:22:7c: c7:1c:66:01:e0:71:99:a2:ae:0e:fd:39:ed:7e:ff:ee:34:ea: a1:61:93:07:52:f9:96:c7:d1:ba:aa:da:c5:d6:a0:d5:1a:99: 0b:00:d5:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbfusK/yd0z+EAtcsH5L5J8VQ/IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4 NjNFMjlGNDAeFw0yNjA5MjMxODEzMzZaFw0yNjA5MjQxOTU3MzZaMDMxMTAvBgNV BAMTKEUwOTk3ODJFRDQ1OUNFQjgwNTQyMjJFRTQ5NzQ0RjJFMzVDNTNGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IE4g/Xkchmi17srlj82EBQmb RmHHVpr3NwhWnmWhfSG6hRD9V331/xCH8GlP1zNTAUvDfkopY7IAn/9o0n2nNHk5 MrSlPuo39oA3Ubic0wF3vW0cc9A8iU5yznuFaQVb19Vi4ViQ22Ec3BjTPxIWle2g TNIfcKSNDVnbX5qYJKnd+7sGgARY3BzbRFV8Q8CQJn/nnLv/tIf3a3hGo0umRlyB Nh7RgC4xklxRL21ittylOBVoeYoU/jey63N/fbacF1LTK+2Lo7V6qlr2MP2QJjBe Tty8+ozusGef4Wf2EMztLUUvobIDj0aBnhwqAUTcsxCPyHGaWAX1GiEIF57XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Jl4LtRZzrgFQiLuSXRPLjXFP8QwHwYDVR0j BBgwFoAU7XtZRCesuAoesuTpLV5rpoY+KfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk5NGQzNzUtZmM3ZC00ZGM3LWExZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQy N0FDQjgwQTFFQjJFNEU5MkQ1RTZCQTY4NjNFMjlGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDdCNTk0NDI3QUNCODBBMUVCMkU0RTkyRDVFNkJBNjg2M0Uy OUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvRUQ3QjU5NDQyN0FDQjgwQTFFQjJFNEU5MkQ1RTZC QTY4NjNFMjlGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMLDNme7Xo3rvaX2u/0M0df0hPLK5SVwCL9 WsehKy0rLzK5z6eCnWgWR4qg/gzH/1/98r3iJ4tagFjcWgpFQnA2L0bg8wT601OY uwGv14pB41WucJxOn94hMHDEtQrWl/NsWp0soiR+lHXV8cCcpNhzd6WJDq4Uq/fZ f3nCARXmbhUsJyR7QHwHG2IMZ3L2A642Wp4Z6fkbWkOh+snmVn3dCqdYRR78AeeY emitoM5MJ466mlZXZCLn1Wn4HLYfez0b5akHLyHpTx6QXBmQ8c61A9UDL7kifMcc ZgHgcZmirg79Oe1+/+406qFhkwdS+ZbH0bqq2sXWoNUamQsA1bo= -----END CERTIFICATE-----Generated at Wed Sep 23 22:36:18 2026 by rpki-client