$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft File: ED8801C97D629F0D5149E3C88E72600C016E4712.mft (raw, json) Hash identifier: r9smgs805BN9rPya89ma5SfNlq2fFXuPIlSwvp2n/rg= Subject key identifier: 1C:19:F4:49:71:7F:CC:19:B1:F9:BC:4D:7E:EC:63:57:D6:31:1D:5A Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 38BA6F28FE79C43D164725123C06AE2C1070A9BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft Manifest number: 0100 Signing time: Tue 03 Nov 2026 15:37:18 +0000 Manifest this update: Tue 03 Nov 2026 15:32:18 +0000 Manifest next update: Wed 04 Nov 2026 17:24:18 +0000 Files and hashes: 1: ED8801C97D629F0D5149E3C88E72600C016E4712.crl (hash: teStQ6AT2k1jj9gdkfdqjOJXUxe+KLjqhQLCaoK6x7g=) 2: 3136302e32322e3230342e302f32342d3234203d3e20313531353832.roa (hash: FG7A9MU7fb9tdKd7oBxqaGhx29fl+O14KDwowo1B/f0=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313531353832.roa (hash: V03YYLB7n64oWFaNCyRjfBxyGau7JMeXMeEWbhh6cZk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 17:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ba:6f:28:fe:79:c4:3d:16:47:25:12:3c:06:ae:2c:10:70:a9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: Nov 3 15:32:18 2026 GMT Not After : Nov 4 17:24:18 2026 GMT Subject: CN=1C19F449717FCC19B1F9BC4D7EEC6357D6311D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:ba:24:e5:1e:b0:46:4d:96:f7:8f:53:b8: f9:b9:38:bb:bf:af:bc:77:86:9d:3b:8c:36:06:5b: c8:07:e6:f4:4b:d0:00:e5:53:21:d1:b8:30:5d:2b: c9:16:0c:ea:5a:90:d7:36:24:d5:f4:2d:35:6c:bc: 86:e8:d7:1a:8e:89:b7:07:b2:04:38:e2:bd:87:3b: c5:0c:44:2e:d5:23:ef:97:c1:f1:56:cd:3d:7b:3c: 7a:04:6e:90:89:ba:d2:4c:cf:e8:92:b3:6c:a0:f2: ea:f1:63:41:68:53:ea:09:1b:6c:ae:d1:2d:c2:8e: 7e:85:6c:a1:03:4e:31:0d:d9:08:db:eb:01:64:03: 78:f8:3a:75:ca:26:5c:10:8d:75:ca:31:cb:1b:9a: 13:91:38:63:58:3b:a5:7c:2f:1a:ab:08:2f:88:50: cd:15:41:70:24:c9:b1:6d:1e:d2:5d:55:41:e6:65: 7e:16:2c:6f:5c:ee:c1:d1:12:5d:b2:20:50:d6:60: 07:3b:67:93:fc:bb:4e:90:97:1b:aa:04:f0:23:e8: f4:0c:36:4e:46:e8:d3:6c:61:ca:dd:25:9a:df:84: 79:b9:10:ef:34:1e:6a:00:bc:69:1a:9e:f9:50:11: 95:20:a7:71:34:c9:3e:d8:6a:1c:a5:86:1a:e1:0f: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:19:F4:49:71:7F:CC:19:B1:F9:BC:4D:7E:EC:63:57:D6:31:1D:5A X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:52:c2:85:f8:12:8a:50:f7:dd:8e:e6:88:41:d3:6f:b0:c3: e4:f5:24:af:db:b6:2e:4f:0d:00:83:f3:86:f3:fb:0e:54:f4: c0:e2:84:86:47:4c:66:bb:49:1b:4a:78:62:59:ea:17:d5:86: 4c:a3:0e:0b:23:2d:72:8c:d0:c9:b8:58:53:4d:fe:46:31:3c: 51:76:1e:fc:ab:d4:cd:b1:8f:fe:69:a4:1e:30:c0:ca:76:d8: 75:64:9f:7c:df:39:1b:66:09:e9:39:4f:00:e0:ca:5e:4a:c6: 2c:ad:0a:f5:69:ac:28:19:5e:4a:88:14:8a:c3:fa:8a:f7:2f: 58:cb:83:54:19:f8:bc:08:65:a7:fa:2c:ed:e0:f9:48:57:1a: c8:03:d6:c6:af:b3:22:56:df:59:37:35:14:48:f3:51:fc:73: da:76:9a:3a:48:98:3e:ed:69:ba:05:db:96:8a:03:08:c6:0c: 25:8d:5c:e1:f7:d7:9d:e0:40:6e:01:62:26:58:9d:01:1a:78: 90:bd:9c:1d:fc:a1:c9:6d:fc:b0:05:a3:62:80:73:7e:a0:04: 72:e9:b9:a6:74:3e:ac:d0:59:db:b6:a9:29:04:3a:f9:98:6b: 4e:40:9b:bb:d1:e4:e1:4c:97:08:65:ad:89:9c:3a:af:52:e0: cd:2f:48:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLpvKP55xD0WRyUSPAauLBBwqbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjExMDMxNTMyMThaFw0yNjExMDQxNzI0MThaMDMxMTAvBgNV BAMTKDFDMTlGNDQ5NzE3RkNDMTlCMUY5QkM0RDdFRUM2MzU3RDYzMTFENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOrok5R6wRk2W949TuPm5OLu/ r7x3hp07jDYGW8gH5vRL0ADlUyHRuDBdK8kWDOpakNc2JNX0LTVsvIbo1xqOibcH sgQ44r2HO8UMRC7VI++XwfFWzT17PHoEbpCJutJMz+iSs2yg8urxY0FoU+oJG2yu 0S3Cjn6FbKEDTjEN2Qjb6wFkA3j4OnXKJlwQjXXKMcsbmhOROGNYO6V8LxqrCC+I UM0VQXAkybFtHtJdVUHmZX4WLG9c7sHREl2yIFDWYAc7Z5P8u06QlxuqBPAj6PQM Nk5G6NNsYcrdJZrfhHm5EO80HmoAvGkanvlQEZUgp3E0yT7YahylhhrhD+sJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBn0SXF/zBmx+bxNfuxjV9YxHVowHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYw MEMwMTZFNDcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZSwoX4EopQ992O5ohB02+ww+T1JK/bti5P DQCD84bz+w5U9MDihIZHTGa7SRtKeGJZ6hfVhkyjDgsjLXKM0Mm4WFNN/kYxPFF2 Hvyr1M2xj/5ppB4wwMp22HVkn3zfORtmCek5TwDgyl5KxiytCvVprCgZXkqIFIrD +or3L1jLg1QZ+LwIZaf6LO3g+UhXGsgD1savsyJW31k3NRRI81H8c9p2mjpImD7t aboF25aKAwjGDCWNXOH3153gQG4BYiZYnQEaeJC9nB38oclt/LAFo2KAc36gBHLp uaZ0PqzQWdu2qSkEOvmYa05Am7vR5OFMlwhlrYmcOq9S4M0vSKM= -----END CERTIFICATE-----Generated at Wed Nov 4 05:44:19 2026 by rpki-client