$ rpki-client -vvvf rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft File: ED63844C4B15010EA3F230F69A770C2B1C84C105.mft (raw, json) Hash identifier: 7k2UyVMlJXb8Fc1kFUl8IPdQYpDaMrKU+gj9dpP2weY= Subject key identifier: 80:35:66:2A:D1:FE:4D:91:1A:6B:F5:61:04:90:EC:1B:42:71:87:95 Authority key identifier: ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05 Certificate issuer: /CN=ED63844C4B15010EA3F230F69A770C2B1C84C105 Certificate serial: 3EC0EF36B68F9C2EE5D73E7EEB6A6A7BC77582F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft Manifest number: EA Signing time: Sat 24 Oct 2026 12:49:59 +0000 Manifest this update: Sat 24 Oct 2026 12:44:59 +0000 Manifest next update: Sun 25 Oct 2026 14:49:59 +0000 Files and hashes: 1: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: 1eOUv0Nol5QAajQql0Encer3ZT9+Up46jsqBzqDlEmA=) 2: ED63844C4B15010EA3F230F69A770C2B1C84C105.crl (hash: bu0alJg6UtrpOWcsplts/vlbRFRXhQrJqLnycqXxRJU=) 3: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: u/f9pBg0fHFgqAdliz0CbmpL4V+/eW84b3JUz0/QPns=) 4: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: AnDqHlidff5Ox0jt0yjx0uwvccFAfB7mH1oiPDPa4CY=) 5: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: NixEwf5mDvcBcm4WRaep6YCV7NZr3+VpuhyzC3KObpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 14:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c0:ef:36:b6:8f:9c:2e:e5:d7:3e:7e:eb:6a:6a:7b:c7:75:82:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED63844C4B15010EA3F230F69A770C2B1C84C105 Validity Not Before: Oct 24 12:44:59 2026 GMT Not After : Oct 25 14:49:59 2026 GMT Subject: CN=8035662AD1FE4D911A6BF5610490EC1B42718795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:11:6e:84:f1:48:32:c1:6d:78:e9:13:4a: 3e:a2:cb:b1:26:9a:64:49:2d:0b:fe:44:ed:be:35: c8:8c:fd:67:1f:a6:d8:c6:01:b8:f8:78:44:b6:ae: 7b:58:96:58:0d:3e:4c:16:1a:02:10:e0:0a:45:9f: 08:7d:8f:86:72:65:53:1c:68:df:64:65:ba:cd:0e: 30:86:ec:b7:70:20:56:14:a8:10:99:dd:13:b9:50: d5:22:5d:6d:cd:9d:10:4c:5e:61:44:fe:c8:4e:0a: c0:67:5d:dc:0d:c2:0a:b4:6b:bd:30:63:ea:30:ac: de:be:2d:fd:cc:5f:fb:ad:b3:6a:7d:66:72:81:4e: d2:9d:de:31:4d:fe:12:d3:3d:e7:0e:ac:0e:34:a7: 85:4a:24:1a:de:85:de:0a:0a:d9:a8:f2:85:cb:08: 54:1c:bc:b6:d9:38:b8:0d:f8:42:00:ea:93:98:82: 24:c9:49:98:b4:69:bb:cf:5c:33:0f:5e:4c:37:11: 55:cc:fa:77:02:c3:ee:82:da:b0:23:1a:5a:e7:e4: 3e:d2:1b:bc:0b:5b:77:79:a9:00:c5:21:ae:ac:1d: 25:2c:2f:42:21:96:37:e4:62:bc:11:a5:6a:eb:83: 6b:26:a0:12:6b:fb:4c:0b:85:91:28:34:8b:23:57: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:35:66:2A:D1:FE:4D:91:1A:6B:F5:61:04:90:EC:1B:42:71:87:95 X509v3 Authority Key Identifier: keyid:ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:33:34:40:d5:6c:02:9d:52:14:ac:3d:c7:fe:b9:84:a7:53: cb:60:61:5d:cc:ef:2d:11:44:54:39:5b:d4:ec:b9:35:f2:9b: dd:f6:33:c5:ac:6d:3a:da:ae:7b:79:1d:a8:3d:c1:97:e9:53: bf:5f:d5:7f:16:41:f4:d2:ea:52:f3:3f:dd:2e:cf:34:6a:9e: 95:2e:51:05:79:8f:ac:13:60:99:5e:e6:df:30:25:7e:84:03: c1:51:b7:1a:82:f7:ea:7b:a0:ef:17:0d:81:72:c2:ca:88:1c: 89:e8:b6:04:b5:46:b0:2a:06:1a:c2:bb:38:de:6a:31:dc:e6: 07:4c:28:ad:f5:32:16:92:f2:6d:79:e6:04:0f:30:46:8f:10: 99:35:e6:15:82:dd:67:93:f1:8c:67:b4:fd:3a:0a:db:d5:0c: 14:16:fa:65:68:95:de:cc:2a:65:db:24:b3:f4:cf:6f:b2:8e: bf:6b:15:2a:bc:df:7b:c3:7a:3d:e6:92:03:d7:50:d4:6f:74: 42:29:7f:16:09:94:21:d7:44:89:8d:fc:8a:93:2c:39:ed:32: 1d:73:82:a6:eb:f6:23:99:98:c5:cc:84:b9:db:a1:cc:65:37: f7:ca:68:0e:bd:75:a6:4e:12:5e:03:7e:29:aa:e5:cc:66:83: 66:0b:d2:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsDvNraPnC7l1z5+62pqe8d1gvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ2Mzg0NEM0QjE1MDEwRUEzRjIzMEY2OUE3NzBDMkIx Qzg0QzEwNTAeFw0yNjEwMjQxMjQ0NTlaFw0yNjEwMjUxNDQ5NTlaMDMxMTAvBgNV BAMTKDgwMzU2NjJBRDFGRTREOTExQTZCRjU2MTA0OTBFQzFCNDI3MTg3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jRFuhPFIMsFteOkTSj6iy7Em mmRJLQv+RO2+NciM/WcfptjGAbj4eES2rntYllgNPkwWGgIQ4ApFnwh9j4ZyZVMc aN9kZbrNDjCG7LdwIFYUqBCZ3RO5UNUiXW3NnRBMXmFE/shOCsBnXdwNwgq0a70w Y+owrN6+Lf3MX/uts2p9ZnKBTtKd3jFN/hLTPecOrA40p4VKJBrehd4KCtmo8oXL CFQcvLbZOLgN+EIA6pOYgiTJSZi0abvPXDMPXkw3EVXM+ncCw+6C2rAjGlrn5D7S G7wLW3d5qQDFIa6sHSUsL0IhljfkYrwRpWrrg2smoBJr+0wLhZEoNIsjV4t/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDVmKtH+TZEaa/VhBJDsG0Jxh5UwHwYDVR0j BBgwFoAU7WOETEsVAQ6j8jD2mncMKxyEwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZhNzY2NWEtYjUwYi00YTQ1LWE4ZjktMGQ2OWJkN2Q3NDNkLzAvRUQ2Mzg0NEM0 QjE1MDEwRUEzRjIzMEY2OUE3NzBDMkIxQzg0QzEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDYzODQ0QzRCMTUwMTBFQTNGMjMwRjY5QTc3MEMyQjFDODRD MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZhNzY2NWEtYjUwYi00YTQ1LWE4 ZjktMGQ2OWJkN2Q3NDNkLzAvRUQ2Mzg0NEM0QjE1MDEwRUEzRjIzMEY2OUE3NzBD MkIxQzg0QzEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8zNEDVbAKdUhSsPcf+uYSnU8tgYV3M7y0R RFQ5W9TsuTXym932M8WsbTrarnt5Hag9wZfpU79f1X8WQfTS6lLzP90uzzRqnpUu UQV5j6wTYJle5t8wJX6EA8FRtxqC9+p7oO8XDYFywsqIHInotgS1RrAqBhrCuzje ajHc5gdMKK31MhaS8m155gQPMEaPEJk15hWC3WeT8YxntP06CtvVDBQW+mVold7M KmXbJLP0z2+yjr9rFSq833vDej3mkgPXUNRvdEIpfxYJlCHXRImN/IqTLDntMh1z gqbr9iOZmMXMhLnbocxlN/fKaA69daZOEl4Dfimq5cxmg2YL0jo= -----END CERTIFICATE-----Generated at Sun Oct 25 09:52:41 2026 by rpki-client