$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft File: ED8D01C73F80C3D77C261531F032760A254A0C33.mft (raw, json) Hash identifier: Frp5yIEziSPUYcXzAfwLsTyYipc6QdUVeeqIfBv8wDk= Subject key identifier: 12:8E:66:A3:A0:0A:04:9A:29:3E:32:EE:C2:12:74:95:6D:B5:2F:28 Authority key identifier: ED:8D:01:C7:3F:80:C3:D7:7C:26:15:31:F0:32:76:0A:25:4A:0C:33 Certificate issuer: /CN=ED8D01C73F80C3D77C261531F032760A254A0C33 Certificate serial: 3BFF1B130B57FBA3947B6EC49E50AD0A445E638D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 11:12:15 +0000 Manifest this update: Wed 02 Sep 2026 11:07:15 +0000 Manifest next update: Thu 03 Sep 2026 13:28:15 +0000 Files and hashes: 1: ED8D01C73F80C3D77C261531F032760A254A0C33.crl (hash: fbuWH09UidkDuTdT5JUt4pKnHkiVMYOFuC4VQrXUe08=) 2: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: OJ2yEQilrDM/Xg2aTHzxO6aZkpu5qjxVD1asbChN4Os=) 3: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: tjGhv+f3OyNAH/rInqaJjPy0RZlADPOgngZRxnhpidI=) 4: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: GKO8zdtE5CxssueJt3Z36/7K9MSiC3xyGYv8jirDeyE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.crl rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 13:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ff:1b:13:0b:57:fb:a3:94:7b:6e:c4:9e:50:ad:0a:44:5e:63:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8D01C73F80C3D77C261531F032760A254A0C33 Validity Not Before: Sep 2 11:07:15 2026 GMT Not After : Sep 3 13:28:15 2026 GMT Subject: CN=128E66A3A00A049A293E32EEC21274956DB52F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:e5:21:e3:8e:90:d4:aa:75:dc:a3:c0:3b: b2:e9:a1:35:4c:38:e8:a5:93:49:28:f7:3a:a6:9d: 44:50:75:57:2d:d0:32:8f:59:6d:c1:93:64:e2:f7: 07:12:32:c4:0a:25:72:45:d6:cb:91:8e:92:84:c5: 79:33:8e:23:ce:50:84:6c:af:2d:a4:90:90:40:83: 45:86:d7:13:72:4d:eb:bb:de:6a:44:51:55:cc:9b: fc:df:59:2d:c5:58:21:b6:96:94:e5:61:53:94:bc: a2:9e:21:47:3c:35:13:e7:f3:06:73:b1:28:4a:0d: 57:20:f6:6d:35:e8:62:75:61:4d:f9:9a:76:bb:2b: 88:3d:30:51:1c:dc:1e:88:97:73:46:05:fe:ae:87: 17:0c:1b:fe:83:b3:64:c9:9c:71:86:e5:70:2c:33: 33:4b:09:36:3d:97:a5:00:d2:bb:93:ed:62:f9:c9: 20:e9:fb:a7:82:02:8d:0b:1f:4c:6e:4e:b4:4d:ed: ce:eb:9a:b8:fd:87:6c:40:de:ef:1e:ca:ab:1f:ad: 93:02:5b:d3:e2:7a:9c:90:40:85:11:f2:5e:27:89: 41:4b:3e:f2:97:f3:1a:92:58:5f:a8:2a:48:77:10: 59:cd:43:f6:08:5a:f8:7f:36:84:b5:87:c7:19:7e: 99:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8E:66:A3:A0:0A:04:9A:29:3E:32:EE:C2:12:74:95:6D:B5:2F:28 X509v3 Authority Key Identifier: keyid:ED:8D:01:C7:3F:80:C3:D7:7C:26:15:31:F0:32:76:0A:25:4A:0C:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8D01C73F80C3D77C261531F032760A254A0C33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ED8D01C73F80C3D77C261531F032760A254A0C33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e8:0b:41:7d:ad:02:27:0e:b2:88:ed:4b:85:88:e8:46:f3: 5f:ef:5d:d8:b2:23:92:45:ac:05:92:c2:19:75:d0:32:08:9e: 42:47:77:f7:3f:cc:01:21:8e:4f:d7:9a:28:dc:de:a0:ef:34: 4f:48:99:6d:0e:c6:1a:db:42:d6:95:31:48:a0:7e:be:76:14: de:ff:09:77:47:0d:ab:c8:dd:9d:ae:4a:6a:72:f3:0f:96:b6: fe:80:8a:5e:7a:19:e6:00:28:46:44:0f:e7:d5:a5:03:51:74: b5:25:1b:dd:24:bc:2e:e4:f6:c9:f8:bc:74:fc:19:1e:61:50: 03:8c:dc:48:47:87:0b:e3:b8:5e:69:4c:17:be:11:9e:7c:68: bf:ee:df:4b:c5:8a:3b:c0:62:2a:d7:db:de:d6:10:fe:4c:07: 64:24:6e:65:4f:b2:a8:5c:26:ab:a5:d3:23:2f:bb:e4:ab:c6: 59:46:fe:f5:e8:33:99:18:93:02:44:ca:4d:c3:11:a5:eb:fa: de:b1:b9:26:f5:fa:a2:d6:42:4d:7a:99:10:a5:47:b4:ff:1a: b6:57:82:a0:70:52:6c:b7:f9:9d:73:5a:fe:c2:e1:b4:7f:ba: 69:83:cc:21:d1:06:03:40:c0:68:b7:a1:6b:58:3f:d5:0c:2b: 99:58:05:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/8bEwtX+6OUe27EnlCtCkReY40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4RDAxQzczRjgwQzNENzdDMjYxNTMxRjAzMjc2MEEy NTRBMEMzMzAeFw0yNjA5MDIxMTA3MTVaFw0yNjA5MDMxMzI4MTVaMDMxMTAvBgNV BAMTKDEyOEU2NkEzQTAwQTA0OUEyOTNFMzJFRUMyMTI3NDk1NkRCNTJGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjsuUh446Q1Kp13KPAO7LpoTVM OOilk0ko9zqmnURQdVct0DKPWW3Bk2Ti9wcSMsQKJXJF1suRjpKExXkzjiPOUIRs ry2kkJBAg0WG1xNyTeu73mpEUVXMm/zfWS3FWCG2lpTlYVOUvKKeIUc8NRPn8wZz sShKDVcg9m016GJ1YU35mna7K4g9MFEc3B6Il3NGBf6uhxcMG/6Ds2TJnHGG5XAs MzNLCTY9l6UA0ruT7WL5ySDp+6eCAo0LH0xuTrRN7c7rmrj9h2xA3u8eyqsfrZMC W9PiepyQQIUR8l4niUFLPvKX8xqSWF+oKkh3EFnNQ/YIWvh/NoS1h8cZfpmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEo5mo6AKBJopPjLuwhJ0lW21LygwHwYDVR0j BBgwFoAU7Y0Bxz+Aw9d8JhUx8DJ2CiVKDDMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U1YzczY2MtOTg1ZS00ZTkyLWJhNjktY2Q4YmZmZTRhNTNkLzAvRUQ4RDAxQzcz RjgwQzNENzdDMjYxNTMxRjAzMjc2MEEyNTRBMEMzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhEMDFDNzNGODBDM0Q3N0MyNjE1MzFGMDMyNzYwQTI1NEEw QzMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRUQ4RDAxQzczRjgwQzNENzdDMjYxNTMxRjAzMjc2 MEEyNTRBMEMzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvoC0F9rQInDrKI7UuFiOhG81/vXdiyI5JF rAWSwhl10DIInkJHd/c/zAEhjk/Xmijc3qDvNE9ImW0OxhrbQtaVMUigfr52FN7/ CXdHDavI3Z2uSmpy8w+Wtv6Ail56GeYAKEZED+fVpQNRdLUlG90kvC7k9sn4vHT8 GR5hUAOM3EhHhwvjuF5pTBe+EZ58aL/u30vFijvAYirX297WEP5MB2QkbmVPsqhc Jqul0yMvu+SrxllG/vXoM5kYkwJEyk3DEaXr+t6xuSb1+qLWQk16mRClR7T/GrZX gqBwUmy3+Z1zWv7C4bR/ummDzCHRBgNAwGi3oWtYP9UMK5lYBXA= -----END CERTIFICATE-----Generated at Thu Sep 3 05:05:57 2026 by rpki-client