$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft File: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft (raw, json) Hash identifier: /0w72B401teKEkdC/BGLmqhfDVHOvsJJvDPdHUGspuk= Subject key identifier: E3:1F:77:7A:89:A1:17:12:B5:37:10:47:B9:ED:AF:C7:AC:27:1F:50 Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Certificate serial: 73F320D4138390705EABC7A712E454FA44A0F462 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:58:20 +0000 Manifest this update: Wed 23 Sep 2026 13:53:20 +0000 Manifest next update: Thu 24 Sep 2026 14:35:20 +0000 Files and hashes: 1: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=) 2: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=) 3: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: CDdAgCCqdZ4eGgwg/DutRSkrLQoNO6bQnfQJc5Q/9rc=) 4: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: 2KuqxGxxUoWsjT52nc8YqV6GIpta4WniQwIsnjhtsto=) 5: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=) 6: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl (hash: cOokDVUg44TTY6YMC9Zx/XYAR4YKZkzGajbkpLJPkX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f3:20:d4:13:83:90:70:5e:ab:c7:a7:12:e4:54:fa:44:a0:f4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Validity Not Before: Sep 23 13:53:20 2026 GMT Not After : Sep 24 14:35:20 2026 GMT Subject: CN=E31F777A89A11712B5371047B9EDAFC7AC271F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5f:b2:97:ef:7c:c9:59:73:88:fc:08:42:bc: 44:a3:6a:a7:ae:e8:df:ca:04:e9:37:92:01:3b:ee: c8:88:db:0e:15:8f:6b:dd:51:34:71:e6:54:1a:1d: 95:32:57:b6:47:a9:d2:a2:fd:d5:d6:50:19:f3:c5: 0a:12:03:57:78:b8:6c:db:47:87:32:d8:26:20:e1: 48:b3:ae:25:5b:ee:a1:20:22:77:5d:61:22:c5:13: d3:d7:9d:43:d8:a9:62:95:86:c9:f7:4d:b3:c9:79: c3:e7:69:fc:ad:03:4e:38:08:b9:5f:fa:3a:15:97: e6:08:49:b9:80:da:a6:81:8a:d6:3d:38:08:e7:2e: 2f:41:53:9f:30:ff:46:35:58:f2:9f:45:90:2c:2c: c1:13:8b:bd:fb:7c:0d:75:af:57:33:1c:0b:71:5e: e2:73:47:a5:9e:4c:56:10:38:5f:2d:c5:f3:0b:fa: be:83:7b:0d:d6:10:1b:1a:67:0f:2b:12:55:fa:6a: 2f:55:1a:81:ce:f7:c5:7d:85:07:b2:21:39:cc:17: 92:ab:60:0e:a3:63:ea:a9:e2:af:3e:d2:87:23:a6: 43:78:2b:8a:31:0d:5c:ff:a9:2f:88:30:f6:c9:bf: c4:e3:1d:26:0e:58:62:8c:57:34:8c:80:47:e4:ab: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1F:77:7A:89:A1:17:12:B5:37:10:47:B9:ED:AF:C7:AC:27:1F:50 X509v3 Authority Key Identifier: keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:43:5f:77:ed:6f:16:ee:31:6f:8f:b5:ef:45:5e:1d:f4:a9: 2e:c2:af:cf:ea:37:36:92:51:9b:2f:46:26:94:97:be:e2:a3: d4:d9:53:ad:d7:97:64:57:00:27:6b:08:2f:80:c3:16:5e:56: d8:4f:af:5c:86:04:cd:fe:29:de:6b:5e:28:3c:41:64:3a:88: 60:83:81:97:e6:34:b6:a3:80:5b:10:b6:19:2e:1a:73:17:87: ea:77:df:3f:11:5f:0e:f0:ff:a6:89:6f:22:99:25:eb:6e:9e: 2d:09:3f:0e:67:1e:c2:53:45:81:c6:6d:c4:ed:b0:54:c5:4b: bb:75:33:0a:f9:5f:f8:86:a9:b5:a7:71:38:64:84:8c:4a:41: 71:b4:ce:c9:d4:48:52:1e:9a:07:f9:94:7f:ec:48:2d:00:d7: 2d:64:7d:1f:7b:0d:12:86:3b:bc:d0:b2:b5:e3:ec:67:f5:b4: ec:7b:78:ee:d2:09:3d:5b:ab:b7:14:34:da:15:a1:91:a8:52: 62:60:8e:42:bb:eb:a5:6d:12:8e:0a:8a:4a:bd:9b:8e:2c:c7: 15:64:c9:32:8d:95:3d:dd:9c:e8:79:51:0a:7a:3d:bc:bb:be: 39:52:3c:fb:b6:15:ba:56:e2:94:9b:0c:a8:17:e9:c5:d4:54: e2:07:f5:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/Mg1BODkHBeq8enEuRU+kSg9GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5 NTk4QThBMjAeFw0yNjA5MjMxMzUzMjBaFw0yNjA5MjQxNDM1MjBaMDMxMTAvBgNV BAMTKEUzMUY3NzdBODlBMTE3MTJCNTM3MTA0N0I5RURBRkM3QUMyNzFGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjX7KX73zJWXOI/AhCvESjaqeu 6N/KBOk3kgE77siI2w4Vj2vdUTRx5lQaHZUyV7ZHqdKi/dXWUBnzxQoSA1d4uGzb R4cy2CYg4UizriVb7qEgInddYSLFE9PXnUPYqWKVhsn3TbPJecPnafytA044CLlf +joVl+YISbmA2qaBitY9OAjnLi9BU58w/0Y1WPKfRZAsLMETi737fA11r1czHAtx XuJzR6WeTFYQOF8txfML+r6Dew3WEBsaZw8rElX6ai9VGoHO98V9hQeyITnMF5Kr YA6jY+qp4q8+0ocjpkN4K4oxDVz/qS+IMPbJv8TjHSYOWGKMVzSMgEfkqyybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4x93eomhFxK1NxBHue2vx6wnH1AwHwYDVR0j BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1 NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB OEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0Ey MEI5NTk4QThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRDX3ftbxbuMW+Pte9FXh30qS7Cr8/qNzaS UZsvRiaUl77io9TZU63Xl2RXACdrCC+AwxZeVthPr1yGBM3+Kd5rXig8QWQ6iGCD gZfmNLajgFsQthkuGnMXh+p33z8RXw7w/6aJbyKZJetuni0JPw5nHsJTRYHGbcTt sFTFS7t1Mwr5X/iGqbWncThkhIxKQXG0zsnUSFIemgf5lH/sSC0A1y1kfR97DRKG O7zQsrXj7Gf1tOx7eO7SCT1bq7cUNNoVoZGoUmJgjkK766VtEo4Kikq9m44sxxVk yTKNlT3dnOh5UQp6Pby7vjlSPPu2FbpW4pSbDKgX6cXUVOIH9Uw= -----END CERTIFICATE-----Generated at Thu Sep 24 02:36:28 2026 by rpki-client