$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft File: ED8DD7447C376181396EB62C759A6F26FB167CCA.mft (raw, json) Hash identifier: t0Dz/9ZyIao1TBAYb/Zh8u4GWxjrNyDtyDmIWoYEOjU= Subject key identifier: A4:8C:75:36:7D:DB:D9:4E:54:BB:29:B1:18:B1:A0:C6:EC:1F:8B:30 Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA Certificate issuer: /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Certificate serial: 52089C6489A05C36C26CA1533BEE1D5174D33D7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:56:52 +0000 Manifest this update: Thu 24 Sep 2026 12:51:52 +0000 Manifest next update: Fri 25 Sep 2026 13:45:52 +0000 Files and hashes: 1: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=) 2: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=) 3: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: ebvrnt2gfBGMuAXBfS5jxa2H91cp8yKz8AywyJ9Opto=) 4: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=) 5: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: WD8rkoXkQTqnUe9DEQn99XMfFlR76Acc32DExkXvm/I=) 6: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=) 7: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=) 8: ED8DD7447C376181396EB62C759A6F26FB167CCA.crl (hash: 1eXRzwsN+cZ8WGVEZE8u+NnDwhsxI9goKbwzcHiGv+A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:08:9c:64:89:a0:5c:36:c2:6c:a1:53:3b:ee:1d:51:74:d3:3d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Validity Not Before: Sep 24 12:51:52 2026 GMT Not After : Sep 25 13:45:52 2026 GMT Subject: CN=A48C75367DDBD94E54BB29B118B1A0C6EC1F8B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:1a:de:e5:d1:52:24:cb:19:e5:d1:ef:bf: 0a:e5:85:a1:92:91:6f:4d:be:7c:f8:2e:39:2a:e6: ac:14:28:5f:f9:ef:82:ff:01:b8:bd:0e:04:e1:49: 1c:5e:11:77:0a:fa:27:a5:fc:69:67:1a:ec:b7:1c: 98:ce:a0:4e:9a:f0:9d:f6:51:59:b7:44:e8:00:a7: f7:df:35:dc:18:fe:44:c1:b1:37:ae:21:2b:56:c8: b8:1c:5d:ec:c1:0e:17:30:e1:4c:d2:17:48:ac:8c: a6:12:dd:97:42:16:b2:c4:a4:b8:97:94:65:aa:ef: 1c:47:c1:1b:ba:ba:36:6f:3d:a6:a8:c7:24:a3:1a: 1a:96:5f:9b:e9:47:3c:fa:43:ee:3e:88:af:9f:31: f1:db:f8:86:f3:cc:c3:0f:e7:49:63:42:74:63:8a: ee:e7:c3:20:1b:17:89:08:5e:52:d2:d4:f7:84:6f: 56:b4:66:69:57:54:48:d0:59:28:6b:81:53:9c:c5: 6d:d6:a6:35:2e:5e:4e:07:b8:78:65:2e:13:40:a0: 34:c6:2c:64:54:7a:8b:ef:79:4c:f9:b1:a1:04:78: b7:52:c3:08:27:25:e4:8b:66:ff:12:e1:79:78:8e: 5e:dd:bf:2b:d6:75:4e:ff:e7:e0:6b:45:d5:67:71: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8C:75:36:7D:DB:D9:4E:54:BB:29:B1:18:B1:A0:C6:EC:1F:8B:30 X509v3 Authority Key Identifier: keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:91:a3:7c:90:61:43:29:77:0a:92:49:a2:a8:a2:34:a8:c1: 42:7e:56:60:9f:ac:4e:9f:d2:22:ac:e4:d9:b3:08:4c:00:55: f5:00:44:7d:ab:16:51:d1:2b:fb:7b:84:00:fb:ca:62:c6:e3: 19:30:09:ce:a8:a5:60:74:32:b9:8e:56:18:57:ae:59:4d:89: 5b:51:bd:63:73:de:26:21:4a:29:3a:f4:93:4a:93:b0:9c:cd: 67:e8:12:dc:ce:04:18:17:c0:16:5e:53:9b:ee:0b:9b:4a:30: 91:94:1b:08:da:88:15:2c:9f:be:ca:ad:20:83:83:e0:36:d1: 6f:99:fa:d4:62:3d:87:3b:3e:f8:c7:55:66:a0:17:73:ee:d9: 31:85:cf:98:27:48:ae:92:62:ae:f0:e2:8b:13:1c:e6:52:e3: 3f:50:bd:0a:86:6c:c4:e8:d3:15:97:19:38:13:03:a5:4b:46: 22:ee:aa:74:f8:1e:52:8d:41:86:c7:48:0c:b7:24:f6:0d:13: 50:43:da:90:06:5f:b3:af:9c:56:2d:d0:48:9f:c4:c4:91:39: 7b:ea:82:e8:8e:f5:c0:84:66:54:33:de:bb:ae:c6:6f:f8:cc: 91:e5:40:9e:14:7f:b1:ad:2b:f9:fb:98:aa:9c:4b:90:5a:94: 47:a0:5d:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgicZImgXDbCbKFTO+4dUXTTPX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG QjE2N0NDQTAeFw0yNjA5MjQxMjUxNTJaFw0yNjA5MjUxMzQ1NTJaMDMxMTAvBgNV BAMTKEE0OEM3NTM2N0REQkQ5NEU1NEJCMjlCMTE4QjFBMEM2RUMxRjhCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJRre5dFSJMsZ5dHvvwrlhaGS kW9Nvnz4Ljkq5qwUKF/574L/Abi9DgThSRxeEXcK+iel/GlnGuy3HJjOoE6a8J32 UVm3ROgAp/ffNdwY/kTBsTeuIStWyLgcXezBDhcw4UzSF0isjKYS3ZdCFrLEpLiX lGWq7xxHwRu6ujZvPaaoxySjGhqWX5vpRzz6Q+4+iK+fMfHb+IbzzMMP50ljQnRj iu7nwyAbF4kIXlLS1PeEb1a0ZmlXVEjQWShrgVOcxW3WpjUuXk4HuHhlLhNAoDTG LGRUeovveUz5saEEeLdSwwgnJeSLZv8S4Xl4jl7dvyvWdU7/5+BrRdVncREZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpIx1Nn3b2U5UuymxGLGgxuwfizAwHwYDVR0j BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3 QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3 Q0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZG MjZGQjE2N0NDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmRo3yQYUMpdwqSSaKoojSowUJ+VmCfrE6f 0iKs5NmzCEwAVfUARH2rFlHRK/t7hAD7ymLG4xkwCc6opWB0MrmOVhhXrllNiVtR vWNz3iYhSik69JNKk7CczWfoEtzOBBgXwBZeU5vuC5tKMJGUGwjaiBUsn77KrSCD g+A20W+Z+tRiPYc7PvjHVWagF3Pu2TGFz5gnSK6SYq7w4osTHOZS4z9QvQqGbMTo 0xWXGTgTA6VLRiLuqnT4HlKNQYbHSAy3JPYNE1BD2pAGX7OvnFYt0EifxMSROXvq guiO9cCEZlQz3ruuxm/4zJHlQJ4Uf7GtK/n7mKqcS5BalEegXd4= -----END CERTIFICATE-----Generated at Fri Sep 25 02:40:38 2026 by rpki-client