$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft File: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft (raw, json) Hash identifier: DlDKJNOnEgDg7ljytaWpZCWV+BpFbuK3XhpAtB+vA3E= Subject key identifier: 7C:94:14:8D:17:7D:8C:EA:E7:20:B2:03:84:5A:62:4A:37:29:E8:1F Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Certificate serial: 22930F54B38956B1072E0F51FD93C43C3423AED7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 20:23:08 +0000 Manifest this update: Sun 01 Nov 2026 20:18:08 +0000 Manifest next update: Mon 02 Nov 2026 20:48:08 +0000 Files and hashes: 1: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: 2KuqxGxxUoWsjT52nc8YqV6GIpta4WniQwIsnjhtsto=) 2: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: CDdAgCCqdZ4eGgwg/DutRSkrLQoNO6bQnfQJc5Q/9rc=) 3: ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl (hash: xBbDrBzWjG7t5QU4taZtHe/O1ITVzdWvFaOyb7dGm7Y=) 4: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=) 5: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: tuVT2WVuoJKqXbVfqOcI1MXvhl8U5VJFAWjVhCi6+7c=) 6: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:93:0f:54:b3:89:56:b1:07:2e:0f:51:fd:93:c4:3c:34:23:ae:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2 Validity Not Before: Nov 1 20:18:08 2026 GMT Not After : Nov 2 20:48:08 2026 GMT Subject: CN=7C94148D177D8CEAE720B203845A624A3729E81F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:c5:4f:d1:63:4b:ad:21:ed:84:d1:37:d6: ca:0f:8f:55:66:bd:21:11:fc:eb:18:45:59:72:14: f4:54:0c:23:f9:90:94:d7:bc:c4:71:4a:6c:2c:fa: 36:ae:c0:0e:98:48:1a:af:a8:24:07:d3:a4:9d:66: 8f:19:f6:da:1d:1a:1f:c9:ae:cc:ba:55:ca:c8:1e: 80:cf:05:0a:49:fa:c7:82:b5:42:16:4f:10:c8:47: 33:74:ea:67:d6:83:74:42:ec:a4:23:82:ce:81:c2: f7:5f:15:f8:8a:a6:81:40:c8:8b:a7:87:ea:b1:26: 97:a8:c1:90:d6:9d:47:3a:c2:35:11:84:20:6f:58: 26:5d:ed:00:4e:5f:81:7a:65:f9:9a:00:13:6c:44: 69:d9:7a:ca:9f:69:53:48:c0:d3:b6:7b:8f:6c:82: 2f:19:82:69:22:f7:52:b0:7d:e7:e7:8f:8a:be:4e: 6c:a5:6f:7e:af:41:37:9b:2f:2e:85:3f:f1:5f:65: 62:07:11:a0:20:4d:19:d8:45:c7:62:40:65:bc:30: bb:ed:0e:d2:14:c7:a1:10:b7:09:a3:93:94:6f:bb: 53:dd:77:6d:d2:b4:5c:2f:1e:17:d4:cb:e8:c4:0f: 7d:38:fe:25:7b:96:30:76:4e:00:74:7d:47:66:b8: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:94:14:8D:17:7D:8C:EA:E7:20:B2:03:84:5A:62:4A:37:29:E8:1F X509v3 Authority Key Identifier: keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:d8:08:76:66:8c:64:cc:7b:ca:e5:cd:9d:3a:fd:08:68: 1a:77:57:7e:ef:47:ae:fc:02:68:e6:83:df:20:26:9d:0d:33: 0c:ff:24:28:15:7f:9f:ec:e0:b9:c9:51:e7:5b:f6:92:c0:6b: 2d:8a:85:8e:a3:5a:93:0b:46:66:01:f8:5a:ed:95:2a:37:f1: 9c:38:52:8b:d8:4c:be:ac:9c:45:a4:0c:87:d0:ed:7e:d6:79: 95:f6:ed:89:77:c0:7b:53:0e:5d:11:95:51:09:05:90:b2:08: a4:11:e3:09:c5:60:aa:fa:a5:44:a5:78:42:df:8d:37:c7:e4: 54:66:73:87:6c:7d:ac:46:29:67:90:ae:61:03:8a:05:83:c5: 53:df:b4:ed:3a:dd:9b:ab:14:c0:0c:89:e5:f0:4a:e1:00:eb: 47:35:62:b3:dc:a1:f9:00:fa:91:46:b2:4c:47:e6:03:ff:a1: 10:9a:c5:48:fa:51:d1:73:79:8f:1a:ec:4f:af:ad:7a:ce:29: cb:65:3d:ef:9e:4a:43:f4:03:55:da:09:5b:7d:56:02:38:4d: fe:e8:46:93:ae:42:0a:75:be:60:f2:95:0a:12:48:e8:00:cb: 41:0d:92:28:e2:b7:80:fe:09:71:c3:fe:98:21:86:e7:e3:aa: 3d:27:31:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIpMPVLOJVrEHLg9R/ZPEPDQjrtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5 NTk4QThBMjAeFw0yNjExMDEyMDE4MDhaFw0yNjExMDIyMDQ4MDhaMDMxMTAvBgNV BAMTKDdDOTQxNDhEMTc3RDhDRUFFNzIwQjIwMzg0NUE2MjRBMzcyOUU4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe48VP0WNLrSHthNE31soPj1Vm vSER/OsYRVlyFPRUDCP5kJTXvMRxSmws+jauwA6YSBqvqCQH06SdZo8Z9todGh/J rsy6VcrIHoDPBQpJ+seCtUIWTxDIRzN06mfWg3RC7KQjgs6BwvdfFfiKpoFAyIun h+qxJpeowZDWnUc6wjURhCBvWCZd7QBOX4F6ZfmaABNsRGnZesqfaVNIwNO2e49s gi8Zgmki91Kwfefnj4q+Tmylb36vQTebLy6FP/FfZWIHEaAgTRnYRcdiQGW8MLvt DtIUx6EQtwmjk5Rvu1Pdd23StFwvHhfUy+jED304/iV7ljB2TgB0fUdmuN9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJQUjRd9jOrnILIDhFpiSjcp6B8wHwYDVR0j BBgwFoAU7UHe91Yw1rx2s5Krr8eiC5WYqKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmI4ODU4ZTAtZWNmMC00ZTUzLWE0OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1 NjMwRDZCQzc2QjM5MkFCQUZDN0EyMEI5NTk4QThBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDQxREVGNzU2MzBENkJDNzZCMzkyQUJBRkM3QTIwQjk1OThB OEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvRUQ0MURFRjc1NjMwRDZCQzc2QjM5MkFCQUZDN0Ey MEI5NTk4QThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZR2Ah2ZoxkzHvK5c2dOv0IaBp3V37vR678 Amjmg98gJp0NMwz/JCgVf5/s4LnJUedb9pLAay2KhY6jWpMLRmYB+FrtlSo38Zw4 UovYTL6snEWkDIfQ7X7WeZX27Yl3wHtTDl0RlVEJBZCyCKQR4wnFYKr6pUSleELf jTfH5FRmc4dsfaxGKWeQrmEDigWDxVPftO063ZurFMAMieXwSuEA60c1YrPcofkA +pFGskxH5gP/oRCaxUj6UdFzeY8a7E+vrXrOKctlPe+eSkP0A1XaCVt9VgI4Tf7o RpOuQgp1vmDylQoSSOgAy0ENkijit4D+CXHD/pghhufjqj0nMeE= -----END CERTIFICATE-----Generated at Sun Nov 1 23:21:14 2026 by rpki-client