$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json) Hash identifier: CXvwkWvn7qfx1wQd7WOyKm7X210OQdpe88SeZ4hJc3M= Subject key identifier: FA:25:FA:7B:EB:C8:8B:BA:76:42:1A:CA:D9:A7:40:05:91:88:7E:C6 Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Certificate serial: 2758CE03888156B0C3461B9347458BE14C82F941 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 11:38:06 +0000 Manifest this update: Wed 19 Aug 2026 11:33:06 +0000 Manifest next update: Thu 20 Aug 2026 12:37:06 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=) 2: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=) 3: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: Z5daCSujy9AoCl8gZmhH0ij876zje3UQ9z0TZUfAQpw=) 4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 11:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:58:ce:03:88:81:56:b0:c3:46:1b:93:47:45:8b:e1:4c:82:f9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Validity Not Before: Aug 19 11:33:06 2026 GMT Not After : Aug 20 12:37:06 2026 GMT Subject: CN=FA25FA7BEBC88BBA76421ACAD9A7400591887EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:07:19:01:93:68:c6:84:90:b6:de:05:c7:d6: 9c:61:76:9f:fc:c3:f1:c0:05:e6:bc:84:0f:03:5d: bf:db:93:e3:46:71:63:b8:5c:1b:35:be:a1:c3:2d: 51:d9:99:6b:42:00:39:db:e3:ff:1c:b1:63:29:ed: ff:67:2f:81:12:9d:a1:76:8a:ac:2f:0c:26:0a:54: da:be:59:b8:e3:73:ea:d3:fa:5a:39:cc:63:ad:61: 39:10:99:f0:e2:88:dd:bf:33:8c:c4:49:1d:06:60: 7e:a5:30:98:8f:9d:74:ea:e7:fc:59:81:73:c4:df: e1:5a:16:51:eb:05:86:9a:76:9f:00:c4:fc:8f:fe: de:ee:54:6a:12:94:dc:ca:17:08:ba:c9:78:75:31: 85:fd:38:fa:34:f1:c7:c2:d4:83:71:84:82:4e:a2: b0:17:d0:f1:08:64:da:7b:68:8c:fc:5b:bf:8e:11: 24:70:5c:62:88:2b:49:9e:64:f8:b5:c3:94:bb:7a: 86:65:57:ee:08:4c:c4:bf:40:d3:e8:8d:5d:9d:db: d6:44:dd:81:6b:b9:13:84:a7:ed:a1:fb:9c:6a:0f: 75:ed:5f:85:2a:42:21:4d:7d:d5:f2:1a:f1:29:98: 2a:6d:78:18:19:26:7f:b5:a0:df:74:e0:70:23:bd: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:FA:7B:EB:C8:8B:BA:76:42:1A:CA:D9:A7:40:05:91:88:7E:C6 X509v3 Authority Key Identifier: keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3f:fe:3f:3d:4b:e4:a9:7b:3d:74:fe:17:f6:4d:ac:22:c8: b4:95:a8:b6:74:e6:f3:6d:cf:cf:72:d8:83:82:06:d3:fc:c5: 3b:7f:cc:66:d1:b5:1a:cd:0a:dc:b1:86:57:5d:c5:2c:d3:d0: 9a:e5:db:ce:fc:e9:91:a2:fb:7d:de:e2:ed:9a:51:f8:16:c1: be:4f:05:aa:8f:88:50:42:36:58:9d:84:ca:14:8a:b2:d5:55: 21:68:02:e1:14:68:b9:11:58:d1:06:9f:c8:1c:7e:5d:ed:18: f6:2f:ca:c7:50:7f:85:9c:02:6f:d1:c1:73:d4:c5:53:ce:9a: a8:d4:17:de:93:79:6f:79:bf:3d:86:4f:53:5d:a8:6f:c4:e5: b0:1a:2c:ad:32:d2:1a:79:78:0e:ad:30:52:27:57:9c:fd:a0: 3d:53:1b:d1:e2:f4:76:2c:f1:4a:73:f8:d6:9e:81:71:9b:34: e0:36:02:14:fb:3d:72:89:82:ae:73:57:ea:5d:f5:4e:5d:22: e1:ea:24:53:c1:a7:a2:61:5d:a5:36:84:b9:82:a6:d1:15:54: 5d:1a:14:67:85:fa:5f:ba:51:ea:ee:e3:4b:e6:1e:61:6d:e1: d7:47:db:e7:f2:61:13:c8:95:d8:47:cb:d9:28:84:24:18:4e: 81:dd:d6:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1jOA4iBVrDDRhuTR0WL4UyC+UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1 RDdBNUFGMDAeFw0yNjA4MTkxMTMzMDZaFw0yNjA4MjAxMjM3MDZaMDMxMTAvBgNV BAMTKEZBMjVGQTdCRUJDODhCQkE3NjQyMUFDQUQ5QTc0MDA1OTE4ODdFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBxkBk2jGhJC23gXH1pxhdp/8 w/HABea8hA8DXb/bk+NGcWO4XBs1vqHDLVHZmWtCADnb4/8csWMp7f9nL4ESnaF2 iqwvDCYKVNq+Wbjjc+rT+lo5zGOtYTkQmfDiiN2/M4zESR0GYH6lMJiPnXTq5/xZ gXPE3+FaFlHrBYaadp8AxPyP/t7uVGoSlNzKFwi6yXh1MYX9OPo08cfC1INxhIJO orAX0PEIZNp7aIz8W7+OESRwXGKIK0meZPi1w5S7eoZlV+4ITMS/QNPojV2d29ZE 3YFruROEp+2h+5xqD3XtX4UqQiFNfdXyGvEpmCpteBgZJn+1oN904HAjvc3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+iX6e+vIi7p2QhrK2adABZGIfsYwHwYDVR0j BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1 NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo//j89S+Spez10/hf2TawiyLSVqLZ05vNt z89y2IOCBtP8xTt/zGbRtRrNCtyxhlddxSzT0Jrl28786ZGi+33e4u2aUfgWwb5P BaqPiFBCNlidhMoUirLVVSFoAuEUaLkRWNEGn8gcfl3tGPYvysdQf4WcAm/RwXPU xVPOmqjUF96TeW95vz2GT1NdqG/E5bAaLK0y0hp5eA6tMFInV5z9oD1TG9Hi9HYs 8Upz+NaegXGbNOA2AhT7PXKJgq5zV+pd9U5dIuHqJFPBp6JhXaU2hLmCptEVVF0a FGeF+l+6Ueru40vmHmFt4ddH2+fyYRPIldhHy9kohCQYToHd1m8= -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:19 2026 by rpki-client