$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft File: ED8801C97D629F0D5149E3C88E72600C016E4712.mft (raw, json) Hash identifier: VyCk2d1pSZDpf9R6VLiu+z41gYN14lUk74Ld8oqWRdA= Subject key identifier: 2D:5B:FD:E3:2E:B9:D8:B2:8C:D2:38:F6:B8:A1:28:09:B1:FB:D9:C5 Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 74B320E8D7B7A8003F26E922258D238FE06CBC1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft Manifest number: D4 Signing time: Thu 01 Oct 2026 01:58:20 +0000 Manifest this update: Thu 01 Oct 2026 01:53:20 +0000 Manifest next update: Fri 02 Oct 2026 05:03:20 +0000 Files and hashes: 1: ED8801C97D629F0D5149E3C88E72600C016E4712.crl (hash: 0yipex2ceZZT+B2+sQr4lya/rGbAZte48Q6IbMXPNaQ=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313531353832.roa (hash: V03YYLB7n64oWFaNCyRjfBxyGau7JMeXMeEWbhh6cZk=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313531353832.roa (hash: FG7A9MU7fb9tdKd7oBxqaGhx29fl+O14KDwowo1B/f0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b3:20:e8:d7:b7:a8:00:3f:26:e9:22:25:8d:23:8f:e0:6c:bc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: Oct 1 01:53:20 2026 GMT Not After : Oct 2 05:03:20 2026 GMT Subject: CN=2D5BFDE32EB9D8B28CD238F6B8A12809B1FBD9C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:aa:2a:6f:dd:72:0f:79:f1:6b:3f:8a:9c: ae:39:3d:8e:b1:df:41:11:c8:96:f6:9d:fd:0f:5b: 78:d5:9b:f8:3c:3c:40:2c:99:65:f6:f2:2b:80:70: c5:88:4b:41:ae:42:63:95:2c:f4:2d:b4:56:96:b9: 4e:9f:39:2c:44:85:9c:08:28:96:8f:62:65:35:5b: ad:99:20:5a:93:aa:0a:51:9c:ec:8a:78:47:a8:d5: 3b:22:44:0d:12:49:d7:e0:ce:24:e7:d4:30:5c:d9: fe:ef:9c:4e:f3:7a:a5:1b:b4:28:94:4f:aa:89:ed: 6b:f2:d2:f6:a8:8e:ba:83:28:b0:1b:3f:01:fa:b1: a5:15:08:9f:ef:84:9c:5a:7c:d5:b1:fd:c3:97:bb: 03:5f:21:68:63:64:ed:72:58:4b:ae:d7:2a:bf:d7: 73:01:7d:f5:80:04:95:07:7c:55:9b:77:ea:74:6b: 4c:8b:56:47:9a:dc:6e:a5:93:ca:7b:56:ef:ef:af: 7e:cf:7e:2d:e9:e5:f1:34:a3:43:ec:2e:b9:d1:69: 7b:e2:b5:cf:43:e5:9e:c2:b3:c2:07:21:f7:b5:25: 7f:2d:e3:7d:d2:4e:d9:15:1a:1f:6b:12:2e:06:89: 03:17:eb:1f:57:2e:22:dd:d2:10:6a:2a:1b:b9:05: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5B:FD:E3:2E:B9:D8:B2:8C:D2:38:F6:B8:A1:28:09:B1:FB:D9:C5 X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e8:a4:f1:6c:d3:c4:08:24:fc:ef:41:06:6e:bd:a3:8c:1a: cd:b6:fb:1c:0c:ad:00:bb:05:8a:c0:c7:7a:9c:90:96:d7:d0: 50:0e:ab:76:68:ac:d2:2a:cd:58:77:ad:5f:c7:57:7b:77:e0: db:c5:23:2e:dd:38:e0:cd:44:7f:cd:e1:04:5e:83:1f:a7:df: f2:e3:64:43:05:96:3c:e6:79:85:9c:38:f3:b1:1c:55:f3:05: fc:75:9c:05:15:70:26:cc:ec:0c:2d:97:3c:a8:08:c9:fb:68: 52:b0:f2:2e:c9:07:26:c2:78:57:a7:bd:e4:f9:e2:61:bc:37: 8f:6c:f4:85:71:f6:b1:1a:68:84:90:2b:bc:62:3a:47:0b:ed: 59:69:30:d2:97:ff:85:33:2c:c5:2a:ce:a3:0e:9c:71:65:6f: 9a:3b:c9:6d:45:47:e2:92:0e:9e:be:fb:de:1c:58:97:79:c3: 0a:e7:15:34:41:55:17:42:e0:17:5d:55:c9:ea:7a:63:a9:11: b3:d2:17:21:1e:9b:db:6d:a0:4a:80:34:e8:74:31:5a:09:c9: 60:51:4b:52:6a:4f:41:1a:a3:c6:92:b3:af:fa:3e:76:3b:89: 6e:8e:74:6a:55:23:05:c4:c1:ee:e8:1d:2b:8b:b0:0d:b5:17: 9f:24:ce:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLMg6Ne3qAA/JukiJY0jj+BsvBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjEwMDEwMTUzMjBaFw0yNjEwMDIwNTAzMjBaMDMxMTAvBgNV BAMTKDJENUJGREUzMkVCOUQ4QjI4Q0QyMzhGNkI4QTEyODA5QjFGQkQ5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qKoqb91yD3nxaz+KnK45PY6x 30ERyJb2nf0PW3jVm/g8PEAsmWX28iuAcMWIS0GuQmOVLPQttFaWuU6fOSxEhZwI KJaPYmU1W62ZIFqTqgpRnOyKeEeo1TsiRA0SSdfgziTn1DBc2f7vnE7zeqUbtCiU T6qJ7Wvy0vaojrqDKLAbPwH6saUVCJ/vhJxafNWx/cOXuwNfIWhjZO1yWEuu1yq/ 13MBffWABJUHfFWbd+p0a0yLVkea3G6lk8p7Vu/vr37Pfi3p5fE0o0PsLrnRaXvi tc9D5Z7Cs8IHIfe1JX8t433STtkVGh9rEi4GiQMX6x9XLiLd0hBqKhu5BZynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULVv94y652LKM0jj2uKEoCbH72cUwHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYw MEMwMTZFNDcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHopPFs08QIJPzvQQZuvaOMGs22+xwMrQC7 BYrAx3qckJbX0FAOq3ZorNIqzVh3rV/HV3t34NvFIy7dOODNRH/N4QRegx+n3/Lj ZEMFljzmeYWcOPOxHFXzBfx1nAUVcCbM7AwtlzyoCMn7aFKw8i7JBybCeFenveT5 4mG8N49s9IVx9rEaaISQK7xiOkcL7VlpMNKX/4UzLMUqzqMOnHFlb5o7yW1FR+KS Dp6++94cWJd5wwrnFTRBVRdC4BddVcnqemOpEbPSFyEem9ttoEqANOh0MVoJyWBR S1JqT0Eao8aSs6/6PnY7iW6OdGpVIwXEwe7oHSuLsA21F58kziw= -----END CERTIFICATE-----Generated at Thu Oct 1 10:47:59 2026 by rpki-client