$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft File: ED8801C97D629F0D5149E3C88E72600C016E4712.mft (raw, json) Hash identifier: E3CiaFwJAj/k+txP3IDRxqerYCivn5PlxLj8g7jHDJs= Subject key identifier: DF:3C:61:E7:A9:3A:1E:75:4E:A8:D7:8B:82:70:F0:E5:76:9D:4E:89 Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 47F4EE78643604FBD83954AF83BD644FCDA06A21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:51:58 +0000 Manifest this update: Thu 23 Jul 2026 17:46:58 +0000 Manifest next update: Fri 24 Jul 2026 20:41:58 +0000 Files and hashes: 1: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: 6b6QyTeKHzbwr02KTRyuHru/9K2YvXjeEcMAT+18bak=) 2: ED8801C97D629F0D5149E3C88E72600C016E4712.crl (hash: h9lD5S3Zi7plZBMRHxaHjghuMBx/OLrDiLx4igBGARo=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: I+TsRodHPZi2sFygS9uUTvIPPJWZ6Ey7cdEpwFzA144=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f4:ee:78:64:36:04:fb:d8:39:54:af:83:bd:64:4f:cd:a0:6a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: Jul 23 17:46:58 2026 GMT Not After : Jul 24 20:41:58 2026 GMT Subject: CN=DF3C61E7A93A1E754EA8D78B8270F0E5769D4E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3d:ea:02:f6:f0:93:6c:46:8e:f4:5b:6f:3c: 1d:bf:d7:0c:15:39:a4:51:44:67:e4:d6:34:77:49: ee:d4:3f:49:87:67:aa:46:5c:c6:fe:c7:0b:ff:23: 28:a7:db:68:f3:4c:68:0f:44:c5:b4:75:d2:7c:1a: a0:a6:c7:d8:e5:9c:bc:9a:b6:10:50:12:7f:2d:3e: 3b:28:62:60:e0:d4:4f:b8:96:62:31:46:e4:4a:ac: 3b:ae:15:31:45:c6:02:3d:7c:8d:24:85:a5:bc:b0: ed:ac:3b:9f:e7:04:43:b4:80:ad:7b:2a:ae:40:ea: ef:1d:6f:6d:11:43:75:c4:e3:0e:07:cd:7f:8d:7d: 12:37:75:2a:8e:cc:3d:7c:61:45:37:94:ff:27:84: b4:9b:c1:64:9a:15:08:25:09:ab:88:ad:00:3e:3e: 88:3c:1b:48:44:92:95:8b:f5:93:0b:59:4b:fe:0f: 15:3d:9b:8f:6a:24:20:85:71:3e:e4:66:9f:63:2f: b6:d7:b0:69:ff:a4:41:dc:4b:21:96:12:4b:dd:75: 55:80:26:69:fb:59:6f:90:62:bd:ae:72:c5:ab:62: 79:44:e3:c5:6c:5a:c8:58:fb:fc:07:de:9d:f8:1a: 7d:79:89:e4:fd:b9:2d:47:38:f8:ab:00:b1:4d:d7: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3C:61:E7:A9:3A:1E:75:4E:A8:D7:8B:82:70:F0:E5:76:9D:4E:89 X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3d:b2:c8:6e:f1:a0:eb:26:c3:98:8e:76:06:66:7d:5f:e7: 9b:20:1b:98:5f:ed:8f:01:8d:78:52:d7:40:91:0f:b6:87:1e: 42:75:06:50:7a:7b:f1:a8:71:4f:34:2d:fc:3a:b7:28:71:75: 98:80:6f:3d:d4:44:ef:82:c6:85:07:3a:b8:50:a9:4a:96:7c: 45:5b:79:64:e0:66:f9:a5:82:c6:2f:2a:eb:15:1c:08:02:f8: 4a:79:ad:af:47:f0:6a:cf:be:d9:4d:15:9f:65:20:96:f0:39: f5:91:13:29:6a:77:b4:e8:1d:2f:3f:6f:c4:b5:d1:1e:8d:17: a5:4b:4c:51:70:e9:f3:59:71:49:1a:40:7e:7a:49:eb:ac:e2: 5f:d3:53:53:b7:8b:6a:37:e1:82:3f:6d:67:cd:a7:3c:f9:54: 36:96:94:54:04:10:3d:5f:8d:3c:67:21:38:6b:ab:32:6f:4a: c0:58:36:12:75:2b:13:2e:75:f0:d8:41:6d:0f:b7:f3:1b:9c: bb:d0:f5:4a:77:3c:4a:88:f9:bd:de:30:fc:e0:26:8a:c4:0a: 51:a6:1f:13:58:fc:6e:e8:73:e6:07:e0:7d:f8:27:8f:69:5b: 8a:0e:51:a2:22:47:67:5d:8c:84:7d:18:26:05:8b:80:53:e7: 62:c1:66:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/TueGQ2BPvYOVSvg71kT82gaiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjA3MjMxNzQ2NThaFw0yNjA3MjQyMDQxNThaMDMxMTAvBgNV BAMTKERGM0M2MUU3QTkzQTFFNzU0RUE4RDc4QjgyNzBGMEU1NzY5RDRFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfPeoC9vCTbEaO9FtvPB2/1wwV OaRRRGfk1jR3Se7UP0mHZ6pGXMb+xwv/Iyin22jzTGgPRMW0ddJ8GqCmx9jlnLya thBQEn8tPjsoYmDg1E+4lmIxRuRKrDuuFTFFxgI9fI0khaW8sO2sO5/nBEO0gK17 Kq5A6u8db20RQ3XE4w4HzX+NfRI3dSqOzD18YUU3lP8nhLSbwWSaFQglCauIrQA+ Pog8G0hEkpWL9ZMLWUv+DxU9m49qJCCFcT7kZp9jL7bXsGn/pEHcSyGWEkvddVWA Jmn7WW+QYr2ucsWrYnlE48VsWshY+/wH3p34Gn15ieT9uS1HOPirALFN123zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3zxh56k6HnVOqNeLgnDw5XadTokwHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYw MEMwMTZFNDcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH49sshu8aDrJsOYjnYGZn1f55sgG5hf7Y8B jXhS10CRD7aHHkJ1BlB6e/GocU80Lfw6tyhxdZiAbz3URO+CxoUHOrhQqUqWfEVb eWTgZvmlgsYvKusVHAgC+Ep5ra9H8GrPvtlNFZ9lIJbwOfWREylqd7ToHS8/b8S1 0R6NF6VLTFFw6fNZcUkaQH56Seus4l/TU1O3i2o34YI/bWfNpzz5VDaWlFQEED1f jTxnIThrqzJvSsBYNhJ1KxMudfDYQW0Pt/MbnLvQ9Up3PEqI+b3eMPzgJorEClGm HxNY/G7oc+YH4H34J49pW4oOUaIiR2ddjIR9GCYFi4BT52LBZl0= -----END CERTIFICATE-----Generated at Fri Jul 24 09:39:17 2026 by rpki-client