$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json) Hash identifier: YcV+WwOXkhvIlmIppNXvifNzDu5Xh5bakAGK7gxVT3o= Subject key identifier: 27:72:BC:92:86:85:9F:39:26:72:CA:8C:40:BF:6B:A3:71:46:30:C1 Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Certificate serial: 64AC91A3FCA6A34D36243888B9F9D0C0A2DDED97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 18:07:49 +0000 Manifest this update: Fri 25 Sep 2026 18:02:49 +0000 Manifest next update: Sat 26 Sep 2026 19:14:49 +0000 Files and hashes: 1: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=) 2: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: ELm7gorhTeRWlkGEIpX8du4mE6mQyid40H/9NJV0rAg=) 3: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=) 4: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ac:91:a3:fc:a6:a3:4d:36:24:38:88:b9:f9:d0:c0:a2:dd:ed:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Validity Not Before: Sep 25 18:02:49 2026 GMT Not After : Sep 26 19:14:49 2026 GMT Subject: CN=2772BC9286859F392672CA8C40BF6BA3714630C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:cc:cf:15:d4:b7:73:26:60:9f:57:8a:2e: 29:9f:c6:98:0a:23:eb:5e:40:52:c9:41:f3:5f:a3: c8:97:55:c1:a5:61:b8:5c:e5:d8:03:3e:87:59:94: af:8b:e1:06:d9:84:31:d8:ac:6c:51:4d:de:e0:8f: 70:5c:19:7a:d7:33:24:18:92:f3:df:7b:5a:67:d8: e3:9b:c4:04:10:3f:c4:5a:18:3c:1a:61:50:de:85: 91:23:9d:25:bf:89:04:8c:22:6f:22:31:7d:39:45: 0d:de:f0:fd:bc:bb:5e:cc:07:79:17:c9:2b:cd:f6: 74:94:ad:30:f2:10:e4:4d:00:3d:56:eb:e9:f1:42: 23:93:63:4d:c2:f3:4d:22:e9:cd:98:f1:ad:2a:23: 46:56:1c:a1:84:f2:51:3d:3c:9e:f8:62:ee:2d:34: fa:1d:93:20:de:19:ce:54:f0:89:85:c7:83:fb:9b: 4a:23:03:dc:8e:26:83:11:13:1a:1b:93:39:76:13: a1:44:7c:7c:48:aa:80:f6:4e:44:93:f1:89:be:a3: 54:16:a6:72:cb:bf:92:d2:9c:20:66:44:61:19:35: b9:ad:bb:75:19:e9:9b:b9:84:16:c0:66:da:eb:08: 56:a9:e8:47:78:77:16:68:84:7c:cd:96:b2:83:22: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:72:BC:92:86:85:9F:39:26:72:CA:8C:40:BF:6B:A3:71:46:30:C1 X509v3 Authority Key Identifier: keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:15:5b:e6:77:3c:99:d0:8c:07:b4:6c:01:d1:97:be:00:26: ed:d5:f3:55:f5:7b:85:a0:79:9f:11:d2:ef:9c:4f:5e:40:c8: fe:41:27:51:a1:8a:c3:fe:80:b3:30:09:5b:b7:67:e6:92:b9: b9:be:4d:15:68:72:cb:9a:18:69:6f:59:9c:b2:03:3d:59:47: 62:90:26:0b:0f:2c:25:b9:9c:9a:67:a3:04:58:69:fb:9c:a6: 91:48:04:ec:98:3e:82:cb:18:99:d7:2e:c9:db:55:17:2a:95: e8:9e:dc:e6:98:46:7f:d7:93:3c:df:08:4e:7e:62:f3:2c:6e: 3a:cd:4a:c7:16:3d:a5:fe:fa:95:8c:1f:41:7a:6d:f8:08:81: 14:37:cc:72:a4:86:33:dc:6e:ae:cc:ca:b2:b3:92:87:b1:ca: 86:b6:f0:1c:40:0c:c3:79:e0:e2:99:c5:a1:70:37:86:00:f3: 0d:5f:1d:b7:c4:27:75:ce:c1:61:21:26:2d:10:9e:24:4a:45: ad:06:3b:98:8d:51:81:10:2b:25:ac:0b:4f:50:60:28:27:94: 31:fa:e9:62:c2:22:e6:2b:ba:32:92:c5:2d:b8:b9:84:34:a4: 85:ab:34:60:8b:95:14:49:01:37:81:f4:72:c8:f0:00:5c:1a: 97:af:04:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKyRo/ymo002JDiIufnQwKLd7ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1 RDdBNUFGMDAeFw0yNjA5MjUxODAyNDlaFw0yNjA5MjYxOTE0NDlaMDMxMTAvBgNV BAMTKDI3NzJCQzkyODY4NTlGMzkyNjcyQ0E4QzQwQkY2QkEzNzE0NjMwQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVeczPFdS3cyZgn1eKLimfxpgK I+teQFLJQfNfo8iXVcGlYbhc5dgDPodZlK+L4QbZhDHYrGxRTd7gj3BcGXrXMyQY kvPfe1pn2OObxAQQP8RaGDwaYVDehZEjnSW/iQSMIm8iMX05RQ3e8P28u17MB3kX ySvN9nSUrTDyEORNAD1W6+nxQiOTY03C800i6c2Y8a0qI0ZWHKGE8lE9PJ74Yu4t NPodkyDeGc5U8ImFx4P7m0ojA9yOJoMRExobkzl2E6FEfHxIqoD2TkST8Ym+o1QW pnLLv5LSnCBmRGEZNbmtu3UZ6Zu5hBbAZtrrCFap6Ed4dxZohHzNlrKDIr6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3K8koaFnzkmcsqMQL9ro3FGMMEwHwYDVR0j BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1 NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUVW+Z3PJnQjAe0bAHRl74AJu3V81X1e4Wg eZ8R0u+cT15AyP5BJ1GhisP+gLMwCVu3Z+aSubm+TRVocsuaGGlvWZyyAz1ZR2KQ JgsPLCW5nJpnowRYafucppFIBOyYPoLLGJnXLsnbVRcqleie3OaYRn/XkzzfCE5+ YvMsbjrNSscWPaX++pWMH0F6bfgIgRQ3zHKkhjPcbq7MyrKzkoexyoa28BxADMN5 4OKZxaFwN4YA8w1fHbfEJ3XOwWEhJi0QniRKRa0GO5iNUYEQKyWsC09QYCgnlDH6 6WLCIuYrujKSxS24uYQ0pIWrNGCLlRRJATeB9HLI8ABcGpevBCA= -----END CERTIFICATE-----Generated at Fri Sep 25 23:49:15 2026 by rpki-client