$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json) Hash identifier: bQDHrmCHlyeKNENO9zeTPuiq25ZPGScMz5LzxmHBZCA= Subject key identifier: A9:6F:B6:2F:96:53:2C:D3:98:B2:11:DA:77:BF:16:F7:DD:97:D4:8F Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Certificate serial: 3B6EBB73C8E45A3EFA80BF6DA96A42C9284AFAF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:01:15 +0000 Manifest this update: Tue 12 May 2026 09:56:15 +0000 Manifest next update: Wed 13 May 2026 13:39:15 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=) 2: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=) 3: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: n9l6LX67FYD1Wg83m3AemPf6XZ3JMkXUoM8FmBMtKf8=) 4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6e:bb:73:c8:e4:5a:3e:fa:80:bf:6d:a9:6a:42:c9:28:4a:fa:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Validity Not Before: May 12 09:56:15 2026 GMT Not After : May 13 13:39:15 2026 GMT Subject: CN=A96FB62F96532CD398B211DA77BF16F7DD97D48F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:78:07:9c:7c:ac:78:7c:02:41:61:d0:7d: 98:0b:98:91:3c:04:29:0a:a5:6c:46:9c:06:d5:eb: 2f:ad:91:73:8f:fe:46:93:4d:27:87:7d:62:36:61: b5:65:05:97:d6:ce:ac:a5:69:0e:8d:41:d0:91:c3: e2:cf:d9:7a:e2:4e:8c:28:89:9e:7b:c4:0b:75:e4: d9:91:85:f7:ed:51:49:58:75:ab:1d:d6:f0:b0:2c: b2:db:ec:aa:db:d5:e9:99:e8:37:f1:92:17:35:70: d6:26:fc:b6:61:5d:34:9b:50:9b:59:a1:75:76:56: d8:1f:09:20:5d:15:ee:aa:26:96:d8:cc:a6:7c:24: 96:3d:e6:b5:94:ad:b6:7c:68:1d:ab:00:89:4a:f7: b6:ba:ba:f8:3c:bd:92:f3:d7:3c:ef:db:bf:a6:3d: 26:26:d6:4b:da:80:b8:23:d6:1b:c2:99:e5:ab:1e: bc:9c:2d:07:77:6b:68:a0:3f:77:27:fa:a4:30:24: 81:13:65:4f:c5:fc:15:b0:c8:03:ad:86:6f:ed:62: 86:90:32:22:c9:08:6e:8d:94:aa:d5:b6:21:2f:d0: e4:f2:4d:29:fe:2b:fd:8a:61:77:e4:b0:03:58:c0: 76:67:ea:2d:66:5a:1c:fb:ea:ee:4b:66:71:1c:a6: aa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6F:B6:2F:96:53:2C:D3:98:B2:11:DA:77:BF:16:F7:DD:97:D4:8F X509v3 Authority Key Identifier: keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4c:a0:ed:f3:0f:37:29:92:bd:21:6e:6f:a0:f4:c7:01:0f: 76:36:e1:2f:15:f2:ea:58:72:e4:eb:73:67:9c:0d:d1:1c:16: a6:a0:b1:65:70:b0:4a:67:62:61:30:90:f9:6d:e8:80:4f:ef: 64:46:ef:c7:6e:e5:b4:b2:6d:d9:50:cf:15:8a:c6:7c:8f:31: b9:d6:3c:fb:9b:6a:28:3b:e3:33:cc:2a:ea:e8:7d:a0:0b:00: 60:6c:85:2a:e1:7b:31:ad:55:cf:16:3b:3b:15:97:36:94:d3: aa:93:c8:e7:06:08:9d:4e:b8:67:27:f1:09:a8:d4:69:ca:4a: 6f:45:0d:22:80:9a:a8:df:2c:86:8b:37:7d:e9:09:ba:58:77: fa:65:6c:03:51:f4:2c:6b:c5:c9:80:15:a8:58:55:e8:ab:67: 93:65:60:bb:f4:2a:87:08:15:48:d4:b1:71:f3:89:18:47:06: e3:2d:a9:4f:5b:ae:6e:e5:97:03:0c:77:3c:24:89:58:29:d6: aa:6c:ab:ed:8c:65:0f:e9:ac:1d:0e:7e:00:8e:0d:79:35:4d: 51:25:06:d7:11:35:6a:a1:97:c3:e5:09:85:9c:73:b0:2d:75: 12:2d:80:44:e7:7c:4a:ff:6d:4a:3d:09:ba:12:5b:3f:d2:c0: 8d:b0:df:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO267c8jkWj76gL9tqWpCyShK+vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1 RDdBNUFGMDAeFw0yNjA1MTIwOTU2MTVaFw0yNjA1MTMxMzM5MTVaMDMxMTAvBgNV BAMTKEE5NkZCNjJGOTY1MzJDRDM5OEIyMTFEQTc3QkYxNkY3REQ5N0Q0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOngHnHyseHwCQWHQfZgLmJE8 BCkKpWxGnAbV6y+tkXOP/kaTTSeHfWI2YbVlBZfWzqylaQ6NQdCRw+LP2XriTowo iZ57xAt15NmRhfftUUlYdasd1vCwLLLb7Krb1emZ6Dfxkhc1cNYm/LZhXTSbUJtZ oXV2VtgfCSBdFe6qJpbYzKZ8JJY95rWUrbZ8aB2rAIlK97a6uvg8vZLz1zzv27+m PSYm1kvagLgj1hvCmeWrHrycLQd3a2igP3cn+qQwJIETZU/F/BWwyAOthm/tYoaQ MiLJCG6NlKrVtiEv0OTyTSn+K/2KYXfksANYwHZn6i1mWhz76u5LZnEcpqphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqW+2L5ZTLNOYshHad78W992X1I8wHwYDVR0j BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1 NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxMoO3zDzcpkr0hbm+g9McBD3Y24S8V8upY cuTrc2ecDdEcFqagsWVwsEpnYmEwkPlt6IBP72RG78du5bSybdlQzxWKxnyPMbnW PPubaig74zPMKurofaALAGBshSrhezGtVc8WOzsVlzaU06qTyOcGCJ1OuGcn8Qmo 1GnKSm9FDSKAmqjfLIaLN33pCbpYd/plbANR9CxrxcmAFahYVeirZ5NlYLv0KocI FUjUsXHziRhHBuMtqU9brm7llwMMdzwkiVgp1qpsq+2MZQ/prB0OfgCODXk1TVEl BtcRNWqhl8PlCYWcc7AtdRItgETnfEr/bUo9CboSWz/SwI2w3zg= -----END CERTIFICATE-----Generated at Wed May 13 01:44:32 2026 by rpki-client