$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft File: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft (raw, json) Hash identifier: NxzH33ibmcjH4ccZkEsDPtC/eMR1r8lqIqou0mv0exo= Subject key identifier: 53:1E:E6:15:DF:9D:BD:E8:C7:F4:AA:1D:5D:49:22:00:DF:88:5D:B7 Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D Certificate issuer: /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D Certificate serial: 3D9B45B5235D8AB59B941380628154B8718C4A0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:32:05 +0000 Manifest this update: Wed 16 Sep 2026 18:27:05 +0000 Manifest next update: Thu 17 Sep 2026 20:22:05 +0000 Files and hashes: 1: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: y23ei7JhisKDcrmLs/IfTlddxIuJqQ3o+RaQBaZ//Ws=) 2: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: JgYuRVVLY5uhLSJE/sZQYEOvK74P7yfUZ3Eo+U6PjCs=) 3: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: boDuLeGcrulC4Uynp3CHSUapz3xB3GO6CYNItPeHTs4=) 4: ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl (hash: 1mRhgt11m7sVnFd8/EpM2nyXlWMJEbOCtlOc0UoXKII=) 5: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: d2NngQ1ClG3KccosIUCvHr+xZx4Rn0+Y8+h4km4ecJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9b:45:b5:23:5d:8a:b5:9b:94:13:80:62:81:54:b8:71:8c:4a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D Validity Not Before: Sep 16 18:27:05 2026 GMT Not After : Sep 17 20:22:05 2026 GMT Subject: CN=531EE615DF9DBDE8C7F4AA1D5D492200DF885DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:90:a9:59:65:e6:21:5c:61:b1:d8:b2:e3: 2d:c4:13:70:04:ac:e9:99:0d:86:92:d1:a7:ce:de: 01:14:60:7d:ca:c6:c2:5b:5f:a8:b2:d8:3e:25:22: 8e:e3:18:de:8d:1f:11:3c:1c:17:0b:70:aa:be:42: 20:38:d9:6d:a2:69:6f:42:cc:1b:6b:4f:70:8c:75: 1b:11:92:02:84:72:de:26:3b:10:ad:53:9f:1a:0a: 56:62:08:bc:c4:6d:9e:60:57:ff:a3:d9:ba:90:48: 18:6e:4c:72:17:bd:b0:07:9c:f2:16:62:9a:74:e7: d3:98:f5:e2:93:cd:9c:5f:80:1e:bf:2e:e8:9b:e8: 82:ed:88:46:10:85:4a:23:e7:be:98:8a:eb:82:35: 4e:4b:cf:ad:92:79:65:d3:6f:f8:d1:c6:b0:18:d9: fa:58:0e:fc:ff:2f:73:79:12:24:df:85:a0:46:83: 50:2a:91:f3:7f:dd:9a:3e:80:c2:ac:b8:50:ce:f8: f7:12:7c:ab:4b:0c:77:51:35:e4:68:38:10:af:76: 28:4a:8e:e2:b5:91:4e:de:97:88:2e:93:82:3a:6f: 7e:f3:ff:42:60:4f:92:7d:31:9c:ee:f7:c0:43:29: 89:cc:18:98:6f:7c:12:e1:43:d3:8f:24:7a:a4:6f: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1E:E6:15:DF:9D:BD:E8:C7:F4:AA:1D:5D:49:22:00:DF:88:5D:B7 X509v3 Authority Key Identifier: keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f6:98:b0:93:dc:52:f8:27:65:a8:32:a1:7a:dc:e4:b6:a3: f3:5b:28:c2:6c:f2:31:66:f5:b8:bf:9f:ef:9b:62:3c:f0:2a: 21:12:e8:6b:ab:ca:5f:78:45:40:55:5e:92:85:d7:bd:2d:0e: c7:7e:ce:29:ed:31:1c:5f:11:7b:31:f8:b4:23:d7:b6:03:2b: e7:86:cc:f0:68:68:94:ae:9b:4e:e6:bc:1f:4b:66:b7:17:7d: fe:7f:01:73:2b:85:6a:aa:4f:8f:64:73:37:08:19:b9:db:78: a1:07:b8:db:0d:13:c1:7a:7f:e1:09:1b:a1:bc:7e:e5:d8:5f: b7:6e:04:0a:54:df:97:d5:8c:4c:76:cc:dd:f8:94:61:50:0c: 06:4f:c9:4d:5f:47:e1:14:36:06:fc:4c:3d:aa:81:52:b6:b6: b8:65:f8:6e:cd:6c:9b:9a:99:a7:0d:0c:e8:ab:8c:d8:79:58: 38:2f:0b:40:48:b9:de:2b:92:8a:22:4d:a4:7a:04:5f:cd:30: 22:f8:88:55:fc:62:96:a7:2f:73:ff:a7:4e:90:7b:c9:6f:a9: 32:52:c5:18:97:cf:be:74:c9:12:e4:0b:1c:19:8b:90:5f:03: 90:2d:88:95:ee:c0:b1:8b:34:8d:a6:77:f3:ba:c9:43:63:f7: 41:ce:ef:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZtFtSNdirWblBOAYoFUuHGMSgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzMDU3RUVERUY5Rjk5RDZEMTBFQUEwRjQ3RTREMTA5 OTdDMUU2RDAeFw0yNjA5MTYxODI3MDVaFw0yNjA5MTcyMDIyMDVaMDMxMTAvBgNV BAMTKDUzMUVFNjE1REY5REJERThDN0Y0QUExRDVENDkyMjAwREY4ODVEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBpCpWWXmIVxhsdiy4y3EE3AE rOmZDYaS0afO3gEUYH3KxsJbX6iy2D4lIo7jGN6NHxE8HBcLcKq+QiA42W2iaW9C zBtrT3CMdRsRkgKEct4mOxCtU58aClZiCLzEbZ5gV/+j2bqQSBhuTHIXvbAHnPIW Ypp059OY9eKTzZxfgB6/Luib6ILtiEYQhUoj576YiuuCNU5Lz62SeWXTb/jRxrAY 2fpYDvz/L3N5EiTfhaBGg1AqkfN/3Zo+gMKsuFDO+PcSfKtLDHdRNeRoOBCvdihK juK1kU7el4guk4I6b37z/0JgT5J9MZzu98BDKYnMGJhvfBLhQ9OPJHqkb/G5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUx7mFd+dvejH9KodXUkiAN+IXbcwHwYDVR0j BBgwFoAU7TBX7t75+Z1tEOqg9H5NEJl8Hm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGUxOGQtYTA0Ny00NTkwLTllNTYtNDY0YTczZTIzYzZjLzAvRUQzMDU3RUVE RUY5Rjk5RDZEMTBFQUEwRjQ3RTREMTA5OTdDMUU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRDMwNTdFRURFRjlGOTlENkQxMEVBQTBGNDdFNEQxMDk5N0Mx RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvRUQzMDU3RUVERUY5Rjk5RDZEMTBFQUEwRjQ3RTRE MTA5OTdDMUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX2mLCT3FL4J2WoMqF63OS2o/NbKMJs8jFm 9bi/n++bYjzwKiES6Guryl94RUBVXpKF170tDsd+zintMRxfEXsx+LQj17YDK+eG zPBoaJSum07mvB9LZrcXff5/AXMrhWqqT49kczcIGbnbeKEHuNsNE8F6f+EJG6G8 fuXYX7duBApU35fVjEx2zN34lGFQDAZPyU1fR+EUNgb8TD2qgVK2trhl+G7NbJua macNDOirjNh5WDgvC0BIud4rkooiTaR6BF/NMCL4iFX8YpanL3P/p06Qe8lvqTJS xRiXz750yRLkCxwZi5BfA5AtiJXuwLGLNI2md/O6yUNj90HO75E= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:07 2026 by rpki-client