$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json) Hash identifier: es/3ujVxUqqpSK9ob0w8RiioGTBcbztTWXRFv9dBlD4= Subject key identifier: 4C:7B:07:A1:C6:89:25:8D:9B:86:7E:A5:62:63:4E:B3:18:93:F4:B5 Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Certificate serial: 354BC12232D79A13F645C48111DDAB73DB670322 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 18:07:20 +0000 Manifest this update: Sat 14 Nov 2026 18:02:20 +0000 Manifest next update: Sun 15 Nov 2026 21:27:20 +0000 Files and hashes: 1: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=) 2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=) 3: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: RaGvgxUw6soDfZh6UyozTadsN4eHKW1SM3JKCXprPYE=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4b:c1:22:32:d7:9a:13:f6:45:c4:81:11:dd:ab:73:db:67:03:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Validity Not Before: Nov 14 18:02:20 2026 GMT Not After : Nov 15 21:27:20 2026 GMT Subject: CN=4C7B07A1C689258D9B867EA562634EB31893F4B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:37:5d:aa:a3:e6:0a:85:9d:1f:15:7d:93: 17:a8:a6:dc:2b:95:70:1b:86:62:c0:0a:25:61:88: c8:ba:05:81:48:3b:75:bf:44:e8:51:f2:c6:82:34: 27:8c:01:e5:f2:de:a5:c9:44:60:21:95:19:0a:db: 4e:62:bb:15:95:c7:b4:76:8f:b3:2d:2c:d6:42:9a: 8e:15:b5:a4:d6:50:71:35:b4:12:63:11:68:ef:20: c9:35:16:c2:31:64:0a:35:80:4f:ea:a9:2e:ab:96: c6:49:ff:2c:c3:98:28:b7:32:11:9e:d4:f5:5f:d8: 45:0f:f2:9a:a3:e3:3c:ac:71:35:46:bd:db:d0:28: 3d:0d:2c:f8:c4:d1:bc:b9:2b:c6:ac:9b:6a:80:63: 1a:8c:06:f4:8f:49:87:47:dd:d7:0d:1e:78:b1:7e: d6:e7:ab:9d:8f:6e:f1:ee:fe:ac:d4:fa:f0:12:47: c8:73:9b:58:12:0d:43:61:43:db:d3:37:dd:da:ef: 19:b4:3f:1f:24:c4:7f:13:fc:70:9b:f8:07:63:f1: df:dc:af:88:89:86:73:5d:27:86:72:61:00:e9:a0: 02:05:17:24:23:f8:9e:a8:a9:1a:18:06:87:8d:28: 42:e1:65:82:79:28:d1:a2:6b:01:4d:31:cd:1d:4e: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7B:07:A1:C6:89:25:8D:9B:86:7E:A5:62:63:4E:B3:18:93:F4:B5 X509v3 Authority Key Identifier: keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:0c:2f:53:54:94:ca:f8:86:a8:90:14:91:78:93:0e:76:49: 71:43:e6:52:c2:80:75:1b:69:9d:0f:22:64:f6:35:96:4f:47: 30:b3:fd:d6:ef:25:be:2c:37:8e:f6:da:53:7c:63:23:b4:e1: 9f:60:c2:39:86:80:28:45:2d:10:dd:f2:cf:45:0e:54:7c:22: f9:b1:b0:77:3d:3e:a2:e1:c8:44:6f:43:30:91:da:7b:0b:b3: 09:02:0a:c3:e3:30:2f:41:e2:d3:54:0f:47:a4:ea:83:98:f5: 2a:34:b1:3d:f6:6f:8f:92:17:bb:48:d2:54:7a:d8:9a:4a:f2: 8d:6f:92:8b:29:7a:22:dd:4c:2e:ff:35:94:3e:6e:32:47:12: a1:67:45:3f:10:60:9a:de:c6:ca:30:83:d2:f8:c4:ce:20:42: 96:cf:2c:49:65:f8:d6:38:0c:20:0f:cf:44:cc:07:3b:0b:56: 69:c6:9c:19:77:c7:7d:cc:af:03:d6:3f:e1:9c:f6:2b:bf:dc: 3f:e7:ea:bb:3d:da:d4:92:01:28:c6:24:d1:39:e8:dd:89:11: fe:4f:cc:5c:43:d7:2f:05:62:ac:d6:b9:19:a1:53:9c:8c:f1: d7:f3:f5:57:31:2b:8b:7b:8b:15:f2:a7:53:ed:ba:6e:2e:dd: ff:aa:db:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUvBIjLXmhP2RcSBEd2rc9tnAyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1 RDdBNUFGMDAeFw0yNjExMTQxODAyMjBaFw0yNjExMTUyMTI3MjBaMDMxMTAvBgNV BAMTKDRDN0IwN0ExQzY4OTI1OEQ5Qjg2N0VBNTYyNjM0RUIzMTg5M0Y0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrDddqqPmCoWdHxV9kxeoptwr lXAbhmLACiVhiMi6BYFIO3W/ROhR8saCNCeMAeXy3qXJRGAhlRkK205iuxWVx7R2 j7MtLNZCmo4VtaTWUHE1tBJjEWjvIMk1FsIxZAo1gE/qqS6rlsZJ/yzDmCi3MhGe 1PVf2EUP8pqj4zyscTVGvdvQKD0NLPjE0by5K8asm2qAYxqMBvSPSYdH3dcNHnix ftbnq52PbvHu/qzU+vASR8hzm1gSDUNhQ9vTN93a7xm0Px8kxH8T/HCb+Adj8d/c r4iJhnNdJ4ZyYQDpoAIFFyQj+J6oqRoYBoeNKELhZYJ5KNGiawFNMc0dTp6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTHsHocaJJY2bhn6lYmNOsxiT9LUwHwYDVR0j BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1 NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAML1NUlMr4hqiQFJF4kw52SXFD5lLCgHUb aZ0PImT2NZZPRzCz/dbvJb4sN4722lN8YyO04Z9gwjmGgChFLRDd8s9FDlR8Ivmx sHc9PqLhyERvQzCR2nsLswkCCsPjMC9B4tNUD0ek6oOY9So0sT32b4+SF7tI0lR6 2JpK8o1vkospeiLdTC7/NZQ+bjJHEqFnRT8QYJrexsowg9L4xM4gQpbPLEll+NY4 DCAPz0TMBzsLVmnGnBl3x33MrwPWP+Gc9iu/3D/n6rs92tSSASjGJNE56N2JEf5P zFxD1y8FYqzWuRmhU5yM8dfz9VcxK4t7ixXyp1Ptum4u3f+q2+w= -----END CERTIFICATE-----Generated at Sun Nov 15 10:37:44 2026 by rpki-client