$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json) Hash identifier: N9IdOZr5Quik6pxSweGGjvRctm76bVKRXzzfyYgcB64= Subject key identifier: BE:CB:EB:3C:20:D7:6A:79:E0:E6:FB:1E:6C:1C:C8:8C:1D:87:E0:39 Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Certificate serial: 080D3B8B7C110F13021F1429E3C72F0C3C69433F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft Manifest number: 08 Signing time: Thu 07 May 2026 18:27:29 +0000 Manifest this update: Thu 07 May 2026 18:22:29 +0000 Manifest next update: Fri 08 May 2026 20:12:29 +0000 Files and hashes: 1: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=) 2: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: luns9YpLONcHql43RVA14JvArzIIuiXWLP0FKzzyW1E=) 3: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 20:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0d:3b:8b:7c:11:0f:13:02:1f:14:29:e3:c7:2f:0c:3c:69:43:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Validity Not Before: May 7 18:22:29 2026 GMT Not After : May 8 20:12:29 2026 GMT Subject: CN=BECBEB3C20D76A79E0E6FB1E6C1CC88C1D87E039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:8c:3b:16:35:73:2b:2f:c0:7f:ed:26:83: b6:9d:ff:a9:e2:00:67:59:24:af:90:89:e6:6c:df: fa:4d:44:28:4f:3b:98:4c:1d:9f:ec:50:fc:18:db: 60:fc:27:9b:74:22:53:d7:04:b1:4f:6d:31:2a:17: 8f:09:94:1e:4f:79:76:1a:2b:fa:e9:a7:22:9f:a7: a0:d4:8a:09:96:7c:c6:71:a4:dd:e5:b9:37:4b:eb: 30:a4:b2:9f:2f:6f:06:1e:ab:a1:e4:82:1a:98:e6: 64:58:37:b6:91:ef:8f:44:f9:d0:66:8b:4a:d9:1d: 9e:73:aa:76:2f:a7:f2:8f:60:7e:d8:b9:5a:f3:1c: 75:f0:24:9c:c7:b3:81:35:69:42:82:b1:34:0c:09: 3b:27:bf:e9:7c:e2:3a:39:f5:96:55:0d:63:1d:ec: c2:0d:03:37:ed:29:65:14:24:f3:b0:47:73:8b:2d: 0b:89:da:2e:ca:84:17:6d:7b:c3:f4:68:03:b7:3b: 3c:08:23:d5:6c:7e:2a:e9:e8:c8:af:de:64:a8:14: 2d:be:55:40:be:fe:2e:f9:64:39:29:47:cf:c6:a5: 31:58:2b:f9:f3:9d:59:92:67:cd:e0:73:7a:23:e1: f4:05:55:f9:b6:60:2c:af:1a:3a:54:e9:8d:c6:dc: 1e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:EB:3C:20:D7:6A:79:E0:E6:FB:1E:6C:1C:C8:8C:1D:87:E0:39 X509v3 Authority Key Identifier: keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:61:65:83:76:7c:ee:6f:8e:13:d4:3c:ba:06:6f:3c:33:e8: d4:1b:1f:10:78:1f:d7:e2:d3:da:c7:b8:c8:6e:a7:dd:cc:c1: 98:1d:88:66:ab:ff:21:46:ee:e0:3d:51:a8:b1:87:9d:50:a4: e7:bb:fa:6d:04:a6:93:49:2e:aa:e7:1b:ad:1a:88:7d:9a:e6: 0b:0f:e9:58:c1:d6:f7:b4:49:08:34:d0:c1:f5:fa:2d:a3:b0: 50:f3:9a:00:bc:ef:9e:70:24:13:6f:40:45:5e:e5:a1:03:21: 58:16:ad:40:d0:87:1d:f9:8d:57:89:36:23:87:e2:22:5b:d4: e8:97:aa:df:e5:97:60:7e:f3:21:30:4e:22:4e:19:f4:3f:48: 0c:71:3c:a5:e5:6a:1a:06:10:fb:89:73:d6:e7:d7:e2:1a:5a: 63:27:53:5a:73:44:03:aa:02:ad:66:70:f0:9d:2a:c1:dd:e2: 57:57:a2:f0:71:93:4f:6b:8e:e5:01:65:2c:a6:e7:82:8a:c8: 77:e8:64:69:8d:a7:a2:bb:da:16:b2:2b:ea:2a:02:da:3c:d4: 9d:45:bd:0f:0a:00:d0:69:7f:39:c0:e2:bf:cf:d4:92:61:f9: 66:94:ae:d9:31:45:0a:1b:50:c7:00:4e:83:51:ae:d8:48:eb: fd:cd:d9:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCA07i3wRDxMCHxQp48cvDDxpQz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1 RDdBNUFGMDAeFw0yNjA1MDcxODIyMjlaFw0yNjA1MDgyMDEyMjlaMDMxMTAvBgNV BAMTKEJFQ0JFQjNDMjBENzZBNzlFMEU2RkIxRTZDMUNDODhDMUQ4N0UwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIIw7FjVzKy/Af+0mg7ad/6ni AGdZJK+QieZs3/pNRChPO5hMHZ/sUPwY22D8J5t0IlPXBLFPbTEqF48JlB5PeXYa K/rppyKfp6DUigmWfMZxpN3luTdL6zCksp8vbwYeq6HkghqY5mRYN7aR749E+dBm i0rZHZ5zqnYvp/KPYH7YuVrzHHXwJJzHs4E1aUKCsTQMCTsnv+l84jo59ZZVDWMd 7MINAzftKWUUJPOwR3OLLQuJ2i7KhBdte8P0aAO3OzwII9Vsfirp6Miv3mSoFC2+ VUC+/i75ZDkpR8/GpTFYK/nznVmSZ83gc3oj4fQFVfm2YCyvGjpU6Y3G3B63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsvrPCDXanng5vsebBzIjB2H4DkwHwYDVR0j BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1 NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlhZYN2fO5vjhPUPLoGbzwz6NQbHxB4H9fi 09rHuMhup93MwZgdiGar/yFG7uA9Uaixh51QpOe7+m0EppNJLqrnG60aiH2a5gsP 6VjB1ve0SQg00MH1+i2jsFDzmgC8755wJBNvQEVe5aEDIVgWrUDQhx35jVeJNiOH 4iJb1OiXqt/ll2B+8yEwTiJOGfQ/SAxxPKXlahoGEPuJc9bn1+IaWmMnU1pzRAOq Aq1mcPCdKsHd4ldXovBxk09rjuUBZSym54KKyHfoZGmNp6K72hayK+oqAto81J1F vQ8KANBpfznA4r/P1JJh+WaUrtkxRQobUMcAToNRrthI6/3N2bg= -----END CERTIFICATE-----Generated at Fri May 8 07:25:20 2026 by rpki-client