$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft File: ED8DD7447C376181396EB62C759A6F26FB167CCA.mft (raw, json) Hash identifier: Uv7DC+Ak2preMHzLp81dPnvi6NdkYcygQl47Gc6joQU= Subject key identifier: 1F:47:5E:0A:46:16:21:64:52:E6:BF:0E:B8:50:BA:8C:25:42:AA:48 Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA Certificate issuer: /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Certificate serial: 5C5A3D21FF845B51B2D2A8B42B83F9AEC77AAD7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 07:31:49 +0000 Manifest this update: Mon 02 Nov 2026 07:26:49 +0000 Manifest next update: Tue 03 Nov 2026 11:20:49 +0000 Files and hashes: 1: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=) 2: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: WD8rkoXkQTqnUe9DEQn99XMfFlR76Acc32DExkXvm/I=) 3: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=) 4: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=) 5: ED8DD7447C376181396EB62C759A6F26FB167CCA.crl (hash: LX5gdPoXeJlDowVlNHQStq0BgG+LygLVPajumfC5bBk=) 6: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=) 7: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: ebvrnt2gfBGMuAXBfS5jxa2H91cp8yKz8AywyJ9Opto=) 8: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5a:3d:21:ff:84:5b:51:b2:d2:a8:b4:2b:83:f9:ae:c7:7a:ad:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Validity Not Before: Nov 2 07:26:49 2026 GMT Not After : Nov 3 11:20:49 2026 GMT Subject: CN=1F475E0A4616216452E6BF0EB850BA8C2542AA48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:de:48:1c:22:77:8c:ec:78:e5:db:ef:d3: fb:22:bd:5e:f5:09:93:14:ad:2b:02:86:e1:27:29: 49:f1:54:c5:b4:6f:7c:1b:e1:60:58:9d:a3:ab:fc: d9:da:03:20:60:d8:9e:45:57:db:53:33:86:5b:9d: bf:f9:fb:b7:ae:0d:a5:af:bb:9e:06:8e:21:e6:30: ac:45:3e:15:4a:6e:fd:58:70:eb:d7:9b:17:15:d6: de:0a:68:f9:c6:78:65:1a:4a:00:b8:b7:ea:04:09: 86:93:f8:d3:e2:c9:cb:8a:0a:17:35:8d:20:0a:d7: e5:29:48:b2:fc:76:ce:f4:69:5f:63:dc:7a:ee:72: 8e:08:73:e8:84:bb:22:d2:04:8d:67:a9:9a:9f:a1: ad:f0:6a:64:81:c4:8a:91:b5:97:21:27:05:e2:40: d8:30:f1:84:39:1f:af:64:32:b8:8a:fd:47:e9:06: fb:13:99:4c:ba:51:91:6d:2d:3a:85:e9:b7:12:36: 96:a0:85:51:2f:60:2e:2e:27:14:88:e9:06:b8:26: 9d:5c:73:7b:ea:92:05:e0:3a:9a:cf:bf:bf:3b:e0: e0:fb:50:8d:48:2a:e5:74:b8:4a:1f:02:9f:18:ab: 38:b5:21:92:a1:e7:4b:47:30:6d:d8:c1:c5:83:37: 0b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:5E:0A:46:16:21:64:52:E6:BF:0E:B8:50:BA:8C:25:42:AA:48 X509v3 Authority Key Identifier: keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8b:12:2d:c9:c5:eb:41:b2:3a:98:16:49:3a:9f:1b:00:03: 76:34:d7:18:51:c7:80:8d:96:59:18:06:6c:45:8e:f6:be:5c: f1:53:77:ff:98:77:a6:86:36:a8:6d:30:58:d3:65:4f:70:b5: eb:c6:23:33:87:ad:2a:b8:6f:56:99:12:e8:4b:0f:5a:5e:dd: 1f:ff:90:c7:4c:65:5f:78:e9:b7:3b:47:c2:6a:b6:d8:8e:4b: ea:a9:f5:fb:20:30:aa:6f:d2:19:54:7b:97:50:45:92:bc:c7: df:c3:d7:66:21:fe:ab:01:f5:ce:96:13:9b:f3:ea:d5:74:10: 0e:fa:96:f8:b7:57:09:93:90:b8:7c:17:8f:31:e3:91:48:2a: 7b:d1:54:0b:ab:17:4c:f1:96:8b:85:76:a6:fe:96:e5:f2:e6: 49:6b:6b:cb:55:9c:4a:e2:e1:81:82:b3:a2:bf:97:d3:6b:a0: 87:f3:da:f5:4b:78:17:c1:3f:47:f4:62:bf:a3:9c:16:46:30: 24:ff:68:fd:4b:7c:45:8b:52:55:ed:6e:ef:d4:18:c6:4e:3e: eb:29:6f:5f:68:51:21:ae:a0:49:1b:7c:c7:92:e7:7a:38:50: 3c:a7:8f:e8:4d:4c:dc:f2:08:65:09:c5:d6:36:c6:66:5e:37: 14:f6:94:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFo9If+EW1Gy0qi0K4P5rsd6rXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG QjE2N0NDQTAeFw0yNjExMDIwNzI2NDlaFw0yNjExMDMxMTIwNDlaMDMxMTAvBgNV BAMTKDFGNDc1RTBBNDYxNjIxNjQ1MkU2QkYwRUI4NTBCQThDMjU0MkFBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqd5IHCJ3jOx45dvv0/sivV71 CZMUrSsChuEnKUnxVMW0b3wb4WBYnaOr/NnaAyBg2J5FV9tTM4Zbnb/5+7euDaWv u54GjiHmMKxFPhVKbv1YcOvXmxcV1t4KaPnGeGUaSgC4t+oECYaT+NPiycuKChc1 jSAK1+UpSLL8ds70aV9j3Hruco4Ic+iEuyLSBI1nqZqfoa3wamSBxIqRtZchJwXi QNgw8YQ5H69kMriK/UfpBvsTmUy6UZFtLTqF6bcSNpaghVEvYC4uJxSI6Qa4Jp1c c3vqkgXgOprPv7874OD7UI1IKuV0uEofAp8Yqzi1IZKh50tHMG3YwcWDNws3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0deCkYWIWRS5r8OuFC6jCVCqkgwHwYDVR0j BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3 QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3 Q0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZG MjZGQjE2N0NDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+LEi3JxetBsjqYFkk6nxsAA3Y01xhRx4CN llkYBmxFjva+XPFTd/+Yd6aGNqhtMFjTZU9wtevGIzOHrSq4b1aZEuhLD1pe3R// kMdMZV946bc7R8JqttiOS+qp9fsgMKpv0hlUe5dQRZK8x9/D12Yh/qsB9c6WE5vz 6tV0EA76lvi3VwmTkLh8F48x45FIKnvRVAurF0zxlouFdqb+luXy5klra8tVnEri 4YGCs6K/l9NroIfz2vVLeBfBP0f0Yr+jnBZGMCT/aP1LfEWLUlXtbu/UGMZOPusp b19oUSGuoEkbfMeS53o4UDynj+hNTNzyCGUJxdY2xmZeNxT2lB8= -----END CERTIFICATE-----Generated at Mon Nov 2 14:16:32 2026 by rpki-client