$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft File: ED8DD7447C376181396EB62C759A6F26FB167CCA.mft (raw, json) Hash identifier: qXA57RoEoZ227TyAemiD6nA4xCO3JXQaPJiZrMndbdg= Subject key identifier: 19:76:0C:22:A8:41:05:26:AF:D7:15:3D:A3:AD:62:ED:29:35:AD:A2 Authority key identifier: ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA Certificate issuer: /CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Certificate serial: 5B6940818AB5D64F1286849991A45DB091FA838C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:38:07 +0000 Manifest this update: Wed 16 Sep 2026 23:33:07 +0000 Manifest next update: Fri 18 Sep 2026 01:32:07 +0000 Files and hashes: 1: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: ebvrnt2gfBGMuAXBfS5jxa2H91cp8yKz8AywyJ9Opto=) 2: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: DJNypGuOoUSV7gRXOo1mgps8RVz8MOoHDOMqtLjLggE=) 3: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: C5clxgUYP9XHGfKX/9C3tvM41BGIrTvX3FcxM91X8hs=) 4: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: bhTSyHeOO7MNF7IUduF/l9R7lDRw35+ZvVs7q9knSB8=) 5: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: oefIxPzlv3TEUPHxjAyLabVndRBzhgACi+FePcVpcT0=) 6: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: WD8rkoXkQTqnUe9DEQn99XMfFlR76Acc32DExkXvm/I=) 7: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: +abOsadKcb3LKEaA+RDkJMcVrO6kctlKFBtfIfD4x0g=) 8: ED8DD7447C376181396EB62C759A6F26FB167CCA.crl (hash: 6aO5CQWtpQJdXe4MWfvxxRtaOLSPGods/eKKlmVLPps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:69:40:81:8a:b5:d6:4f:12:86:84:99:91:a4:5d:b0:91:fa:83:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8DD7447C376181396EB62C759A6F26FB167CCA Validity Not Before: Sep 16 23:33:07 2026 GMT Not After : Sep 18 01:32:07 2026 GMT Subject: CN=19760C22A8410526AFD7153DA3AD62ED2935ADA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:68:8c:24:78:4a:92:f8:27:eb:f2:1a:aa: 3e:25:cb:92:a1:8b:e3:f1:66:6b:e7:8b:84:8b:dc: 32:88:d9:51:0e:2b:c5:50:80:4e:ff:13:c0:87:0f: ce:70:98:a3:38:1d:72:dd:58:af:a4:5c:4e:33:32: 2d:7e:21:9d:88:88:87:9d:31:e4:20:82:5d:1b:1a: 05:af:39:24:c9:2f:2c:e5:6b:0e:2a:29:fd:15:42: 90:fd:61:01:2e:90:54:9f:66:bd:f9:3a:a5:e0:7d: 10:a5:96:f6:62:1e:15:06:a0:0a:6a:d7:b0:d7:f2: fc:6c:d0:49:b4:c9:e4:89:bb:79:34:51:95:36:45: b6:01:3e:49:c5:d5:7d:8b:2d:8a:3e:f1:63:dc:9d: 0e:27:06:a5:fe:cd:55:52:5e:13:6e:15:90:37:58: 12:37:90:19:21:f5:78:3d:43:3d:42:dd:1f:ec:9b: 43:b7:5a:65:93:0b:f1:ee:44:08:d7:97:7a:d2:46: 1d:10:22:d0:13:ea:fb:b8:dd:ff:03:46:a3:2f:c4: 7f:62:57:5c:05:d6:7a:67:51:06:dd:0b:20:b3:45: 69:5a:8c:63:7c:8d:ef:0c:72:d4:cb:c5:f7:ae:31: 39:18:18:10:de:a9:8b:16:11:dd:35:e7:31:49:ae: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:76:0C:22:A8:41:05:26:AF:D7:15:3D:A3:AD:62:ED:29:35:AD:A2 X509v3 Authority Key Identifier: keyid:ED:8D:D7:44:7C:37:61:81:39:6E:B6:2C:75:9A:6F:26:FB:16:7C:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED8DD7447C376181396EB62C759A6F26FB167CCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/ED8DD7447C376181396EB62C759A6F26FB167CCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:10:44:b6:ec:c8:06:be:e8:b4:7f:b2:08:7c:87:8c:d4:56: de:f2:3e:02:60:a5:d9:eb:44:9d:fe:36:5e:cf:b8:be:16:ce: b1:76:a5:ca:0c:ea:63:89:21:20:39:53:42:b7:a1:23:53:a6: 2e:b0:a0:ac:6c:7b:f2:08:2a:4d:d0:13:36:26:f3:45:de:2a: 8b:5b:2e:98:40:79:9a:dd:be:26:34:bd:4f:41:85:89:03:3d: a0:f3:10:e4:d3:5e:c9:26:cd:26:a1:82:34:d4:6b:64:f0:91: ed:94:6b:32:4d:7c:b6:c8:8a:5a:f7:00:95:30:56:20:e6:11: 4a:ab:23:ef:e6:53:06:aa:64:f0:ef:c6:12:fb:21:04:43:20: b3:ec:9d:df:b6:61:02:15:a3:07:2f:81:02:cc:81:9d:b0:c7: 09:0c:08:57:46:53:a5:89:84:bf:33:5e:9f:e1:ca:93:68:26: 1f:1a:65:15:57:be:a6:e1:05:0d:65:f8:b1:f2:8b:59:7c:d4: 05:31:b3:d1:60:c7:71:4e:76:30:67:1d:d1:58:33:7b:92:a1: 6a:1a:23:9b:1d:e8:97:3f:05:e8:57:36:3b:8b:db:73:68:31: 8b:b3:89:ad:d8:00:71:33:d5:17:28:3f:cc:21:55:47:4e:b1: 63:ba:3b:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2lAgYq11k8ShoSZkaRdsJH6g4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZG QjE2N0NDQTAeFw0yNjA5MTYyMzMzMDdaFw0yNjA5MTgwMTMyMDdaMDMxMTAvBgNV BAMTKDE5NzYwQzIyQTg0MTA1MjZBRkQ3MTUzREEzQUQ2MkVEMjkzNUFEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPamiMJHhKkvgn6/Iaqj4ly5Kh i+PxZmvni4SL3DKI2VEOK8VQgE7/E8CHD85wmKM4HXLdWK+kXE4zMi1+IZ2IiIed MeQggl0bGgWvOSTJLyzlaw4qKf0VQpD9YQEukFSfZr35OqXgfRCllvZiHhUGoApq 17DX8vxs0Em0yeSJu3k0UZU2RbYBPknF1X2LLYo+8WPcnQ4nBqX+zVVSXhNuFZA3 WBI3kBkh9Xg9Qz1C3R/sm0O3WmWTC/HuRAjXl3rSRh0QItAT6vu43f8DRqMvxH9i V1wF1npnUQbdCyCzRWlajGN8je8MctTLxfeuMTkYGBDeqYsWEd015zFJrs/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXYMIqhBBSav1xU9o61i7Sk1raIwHwYDVR0j BBgwFoAU7Y3XRHw3YYE5brYsdZpvJvsWfMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZlNTA0YzUtZDdiYS00ZmU5LTllNTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3 QzM3NjE4MTM5NkVCNjJDNzU5QTZGMjZGQjE2N0NDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDhERDc0NDdDMzc2MTgxMzk2RUI2MkM3NTlBNkYyNkZCMTY3 Q0NBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvRUQ4REQ3NDQ3QzM3NjE4MTM5NkVCNjJDNzU5QTZG MjZGQjE2N0NDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcQRLbsyAa+6LR/sgh8h4zUVt7yPgJgpdnr RJ3+Nl7PuL4WzrF2pcoM6mOJISA5U0K3oSNTpi6woKxse/IIKk3QEzYm80XeKotb LphAeZrdviY0vU9BhYkDPaDzEOTTXskmzSahgjTUa2Twke2UazJNfLbIilr3AJUw ViDmEUqrI+/mUwaqZPDvxhL7IQRDILPsnd+2YQIVowcvgQLMgZ2wxwkMCFdGU6WJ hL8zXp/hypNoJh8aZRVXvqbhBQ1l+LHyi1l81AUxs9Fgx3FOdjBnHdFYM3uSoWoa I5sd6Jc/BehXNjuL23NoMYuzia3YAHEz1RcoP8whVUdOsWO6O+I= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:02 2026 by rpki-client