$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft File: ED8801C97D629F0D5149E3C88E72600C016E4712.mft (raw, json) Hash identifier: keMNqlFksyCeCmkTt0K5h6nMkqW/suAa+gFmPK2RN6k= Subject key identifier: 94:68:AF:CA:A4:27:E3:EC:F6:0E:14:97:7F:A6:3D:47:EA:64:5B:3F Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 161A5A1D230BAD43C96C8AF343B71B6B9F424050 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft Manifest number: C1 Signing time: Wed 16 Sep 2026 20:59:58 +0000 Manifest this update: Wed 16 Sep 2026 20:54:58 +0000 Manifest next update: Thu 17 Sep 2026 21:22:58 +0000 Files and hashes: 1: ED8801C97D629F0D5149E3C88E72600C016E4712.crl (hash: w26PNE064S31eblqEbOHOOq5/atZdY/N+HEFKrI6FFw=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313531353832.roa (hash: V03YYLB7n64oWFaNCyRjfBxyGau7JMeXMeEWbhh6cZk=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313531353832.roa (hash: FG7A9MU7fb9tdKd7oBxqaGhx29fl+O14KDwowo1B/f0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1a:5a:1d:23:0b:ad:43:c9:6c:8a:f3:43:b7:1b:6b:9f:42:40:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: Sep 16 20:54:58 2026 GMT Not After : Sep 17 21:22:58 2026 GMT Subject: CN=9468AFCAA427E3ECF60E14977FA63D47EA645B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:9b:23:f6:f4:4d:b8:ae:7f:e5:61:d5:84: 01:95:14:7f:b6:3c:3f:28:44:80:73:55:25:8d:4b: 63:25:4c:73:32:32:ec:da:1e:aa:59:70:ef:cc:69: 8e:51:f1:12:96:be:cd:06:23:d4:50:09:4c:27:c4: 7c:fa:2a:01:6a:3c:01:b9:f5:9a:ae:17:d0:d8:19: 82:18:00:4b:bd:a5:ba:71:51:c5:12:a3:47:c3:68: 4b:9d:dc:64:1c:de:f9:de:0e:f4:03:35:1d:dc:44: c8:15:be:47:d1:f5:a7:2b:3b:fd:47:1e:f8:67:a4: e9:dd:b8:1b:ba:b0:ce:08:59:18:ef:c5:32:fb:8a: 47:90:1b:32:2b:17:e4:40:00:94:92:fa:59:27:39: 59:bd:8b:fd:e6:f2:4c:26:0b:b4:53:05:22:96:c2: ea:a3:ea:5a:95:66:fa:46:c6:86:ae:94:6d:dd:71: f6:94:64:1f:f5:d9:b5:2b:50:51:a8:74:fe:44:44: 90:b0:2f:92:bb:96:d8:28:7f:66:fe:35:4a:69:51: 9e:80:73:1f:de:87:99:92:0b:a3:06:4e:9e:a4:06: fc:ee:31:e5:93:ef:25:90:4d:8e:94:52:b0:2e:53: 80:ff:b6:55:80:25:a4:5f:39:9a:6e:76:f8:6f:32: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:68:AF:CA:A4:27:E3:EC:F6:0E:14:97:7F:A6:3D:47:EA:64:5B:3F X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:01:14:a4:b9:0a:7d:bf:dd:85:c5:37:1e:48:11:e6:40:9d: 89:a2:83:0e:fc:18:d5:81:4d:2f:9e:6e:9e:6a:a1:2c:14:25: 22:b5:9d:b6:07:30:06:c2:03:82:bb:5b:22:8f:3c:3f:de:d6: fd:13:e3:2c:a5:be:79:42:2c:92:ff:31:df:d0:47:22:af:87: 5f:41:21:58:03:93:c9:9e:4e:82:4b:1b:c9:4d:9f:8a:bb:a1: de:9d:c9:ea:13:6f:11:12:86:ee:40:0e:05:1b:a2:c2:8b:c6: 8c:37:5f:17:ea:4f:50:ca:78:ee:b9:07:4d:45:27:cd:72:de: bf:9c:dd:5e:bb:e9:bf:23:1e:73:22:d3:84:e4:2a:3c:d7:09: 20:d8:b5:70:2c:29:4c:38:a3:e2:e9:a1:38:72:0e:82:bf:0e: 5f:ea:5c:cc:9f:09:37:5f:e2:a4:25:a3:ce:c7:96:5e:e3:d2: f7:53:a6:41:51:4e:c0:e3:fe:0a:e8:8e:4f:49:2b:26:cc:1f: 0e:ec:fa:bf:5c:16:43:56:44:40:05:6a:e1:fc:6c:01:40:d1: 5a:46:f1:13:58:ce:70:00:78:62:17:b9:dd:b7:9f:76:bc:f3: cc:64:37:73:bc:d0:b5:25:99:a2:3a:c1:31:2a:e5:25:37:66: d8:b4:11:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhpaHSMLrUPJbIrzQ7cba59CQFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjA5MTYyMDU0NThaFw0yNjA5MTcyMTIyNThaMDMxMTAvBgNV BAMTKDk0NjhBRkNBQTQyN0UzRUNGNjBFMTQ5NzdGQTYzRDQ3RUE2NDVCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Dpsj9vRNuK5/5WHVhAGVFH+2 PD8oRIBzVSWNS2MlTHMyMuzaHqpZcO/MaY5R8RKWvs0GI9RQCUwnxHz6KgFqPAG5 9ZquF9DYGYIYAEu9pbpxUcUSo0fDaEud3GQc3vneDvQDNR3cRMgVvkfR9acrO/1H HvhnpOnduBu6sM4IWRjvxTL7ikeQGzIrF+RAAJSS+lknOVm9i/3m8kwmC7RTBSKW wuqj6lqVZvpGxoaulG3dcfaUZB/12bUrUFGodP5ERJCwL5K7ltgof2b+NUppUZ6A cx/eh5mSC6MGTp6kBvzuMeWT7yWQTY6UUrAuU4D/tlWAJaRfOZpudvhvMvx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGivyqQn4+z2DhSXf6Y9R+pkWz8wHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYw MEMwMTZFNDcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUBFKS5Cn2/3YXFNx5IEeZAnYmigw78GNWB TS+ebp5qoSwUJSK1nbYHMAbCA4K7WyKPPD/e1v0T4yylvnlCLJL/Md/QRyKvh19B IVgDk8meToJLG8lNn4q7od6dyeoTbxEShu5ADgUbosKLxow3XxfqT1DKeO65B01F J81y3r+c3V676b8jHnMi04TkKjzXCSDYtXAsKUw4o+LpoThyDoK/Dl/qXMyfCTdf 4qQlo87Hll7j0vdTpkFRTsDj/grojk9JKybMHw7s+r9cFkNWREAFauH8bAFA0VpG 8RNYznAAeGIXud23n3a888xkN3O80LUlmaI6wTEq5SU3Zti0EaU= -----END CERTIFICATE-----Generated at Thu Sep 17 11:06:14 2026 by rpki-client