$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json) Hash identifier: /HF/x4ZqDf7CkhpCsqSpstgBx+7aXyCSbhlqqf+B5lA= Subject key identifier: F7:E2:FE:3D:5C:A6:13:09:AB:1F:92:A6:4A:CA:AE:28:E1:03:02:32 Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Certificate serial: 5CDD121479F615D47C6B00DE132DD283D4DEE440 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:35:26 +0000 Manifest this update: Wed 23 Sep 2026 11:30:26 +0000 Manifest next update: Thu 24 Sep 2026 13:59:26 +0000 Files and hashes: 1: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=) 2: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: V/+rlbekXz5HIGJaSuEREQ7SQno5U0A2oiHg6pKLzgA=) 3: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dd:12:14:79:f6:15:d4:7c:6b:00:de:13:2d:d2:83:d4:de:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Validity Not Before: Sep 23 11:30:26 2026 GMT Not After : Sep 24 13:59:26 2026 GMT Subject: CN=F7E2FE3D5CA61309AB1F92A64ACAAE28E1030232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:a1:79:7b:0f:8b:e8:c0:85:3d:0d:0a:3a: de:87:a0:57:34:40:59:2a:6a:39:32:c7:d2:cc:70: 7b:1e:a8:bb:59:bd:95:78:bf:65:81:74:fe:4a:44: 12:c5:fd:76:b6:e5:73:e5:62:e8:e3:c4:96:92:b0: b2:56:55:6b:bb:22:2e:8b:b6:8f:d8:9c:e6:38:8a: e4:55:a6:39:4a:13:01:60:44:da:53:e6:e2:aa:0d: aa:86:df:41:48:dc:cf:3d:d8:44:47:08:c2:c8:f3: 7c:db:7e:41:ab:6a:a9:5b:e0:cf:29:60:05:5e:8e: 39:07:98:df:f0:39:98:a4:c8:84:2a:44:93:6b:63: 04:ab:9b:b6:3b:a6:7d:df:11:06:0f:ed:09:f5:c6: 8e:7d:d8:26:c4:3e:a2:70:06:4a:09:04:b5:0e:57: d8:8c:44:61:94:4f:2d:a3:85:71:b6:c2:8e:1f:64: f1:92:9d:6f:93:2a:ad:9c:91:38:1c:4d:fd:96:5b: 82:05:b4:eb:99:ab:04:bb:60:2c:fd:4b:7a:71:5f: 95:4d:55:3d:7e:f8:92:58:87:bf:c1:f3:d9:11:f8: 7f:b6:20:eb:13:23:92:94:e3:da:a9:67:de:d8:8b: 56:eb:53:cc:cd:b5:e7:17:e9:90:4e:f7:20:07:60: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E2:FE:3D:5C:A6:13:09:AB:1F:92:A6:4A:CA:AE:28:E1:03:02:32 X509v3 Authority Key Identifier: keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9f:c7:fd:b8:35:0c:90:90:d4:cb:4b:e6:36:e8:fe:f7:2b: 46:e3:cc:44:4e:b6:10:11:39:13:c9:14:03:fd:21:22:e3:14: ae:fe:09:b0:93:95:d6:e1:64:50:b7:8e:36:14:87:d5:35:97: 23:a3:47:e9:6a:4f:b1:a9:4d:43:90:90:b7:2b:e2:b1:d7:aa: 07:50:bb:57:30:91:56:48:c4:2d:a6:42:f3:11:4a:c5:bb:cd: 38:c2:9b:9f:9a:36:ca:5f:24:77:26:02:4f:81:bb:2d:96:77: a4:ef:54:ce:1e:50:34:33:61:28:0f:b3:a5:a6:95:23:91:64: 0a:06:b3:ea:08:d7:4d:bf:da:24:eb:2b:53:19:74:61:37:43: bd:a6:9d:87:c6:b3:b4:6d:15:47:91:b1:ea:21:a9:6f:d7:3c: 67:6e:85:58:77:c1:54:a7:04:a6:6f:45:aa:b1:1d:69:8e:96: 48:2c:09:38:f9:83:50:62:b3:71:ea:89:e9:aa:83:67:e8:0f: b5:15:bd:a7:13:fe:b4:ea:fc:62:0c:e5:aa:45:4f:72:fa:74: bd:ea:e0:9b:79:c2:68:56:a3:32:0e:5f:ac:c8:07:05:a4:98: 6b:60:78:b8:cb:bf:43:00:c7:f2:cb:8f:34:21:a4:6a:f4:17: 16:d1:91:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXN0SFHn2FdR8awDeEy3Sg9Te5EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1 RDdBNUFGMDAeFw0yNjA5MjMxMTMwMjZaFw0yNjA5MjQxMzU5MjZaMDMxMTAvBgNV BAMTKEY3RTJGRTNENUNBNjEzMDlBQjFGOTJBNjRBQ0FBRTI4RTEwMzAyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbuKF5ew+L6MCFPQ0KOt6HoFc0 QFkqajkyx9LMcHseqLtZvZV4v2WBdP5KRBLF/Xa25XPlYujjxJaSsLJWVWu7Ii6L to/YnOY4iuRVpjlKEwFgRNpT5uKqDaqG30FI3M892ERHCMLI83zbfkGraqlb4M8p YAVejjkHmN/wOZikyIQqRJNrYwSrm7Y7pn3fEQYP7Qn1xo592CbEPqJwBkoJBLUO V9iMRGGUTy2jhXG2wo4fZPGSnW+TKq2ckTgcTf2WW4IFtOuZqwS7YCz9S3pxX5VN VT1++JJYh7/B89kR+H+2IOsTI5KU49qpZ97Yi1brU8zNtecX6ZBO9yAHYBiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+L+PVymEwmrH5KmSsquKOEDAjIwHwYDVR0j BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1 NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmfx/24NQyQkNTLS+Y26P73K0bjzEROthAR ORPJFAP9ISLjFK7+CbCTldbhZFC3jjYUh9U1lyOjR+lqT7GpTUOQkLcr4rHXqgdQ u1cwkVZIxC2mQvMRSsW7zTjCm5+aNspfJHcmAk+Buy2Wd6TvVM4eUDQzYSgPs6Wm lSORZAoGs+oI102/2iTrK1MZdGE3Q72mnYfGs7RtFUeRseohqW/XPGduhVh3wVSn BKZvRaqxHWmOlkgsCTj5g1Bis3Hqiemqg2foD7UVvacT/rTq/GIM5apFT3L6dL3q 4Jt5wmhWozIOX6zIBwWkmGtgeLjLv0MAx/LLjzQhpGr0FxbRkYU= -----END CERTIFICATE-----Generated at Thu Sep 24 07:02:19 2026 by rpki-client