$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft (raw, json) Hash identifier: bG/pPZT2mfGiHh2lIjseqGmMNy4+SNZxlSFLIs5sqWc= Subject key identifier: 7F:AE:9E:A2:8E:7A:C7:BD:BA:C7:2C:19:20:9E:84:49:79:A3:5F:81 Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Certificate serial: 1F1F4D374ED286F32ABAB9C1F8A57E3EC3999818 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 20:58:06 +0000 Manifest this update: Thu 08 Oct 2026 20:53:06 +0000 Manifest next update: Fri 09 Oct 2026 22:08:06 +0000 Files and hashes: 1: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl (hash: s2HJur4kIdWicYu3DTIz9ac9l6JQwiLQqsKTm9UoJoM=) 2: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: EnY0Hs+doVUANIJECCY02CNqFLFOHODN+SHTHjgvg80=) 3: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: mH28ada8E5i3aNud985QIm6IhE3W0Yqx49iijo6/+ho=) 4: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1f:4d:37:4e:d2:86:f3:2a:ba:b9:c1:f8:a5:7e:3e:c3:99:98:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Validity Not Before: Oct 8 20:53:06 2026 GMT Not After : Oct 9 22:08:06 2026 GMT Subject: CN=7FAE9EA28E7AC7BDBAC72C19209E844979A35F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:a0:39:80:20:4e:97:f4:5a:6e:ec:c0:03: 9d:4b:86:f3:04:a9:23:f1:65:cd:b2:bf:cb:00:40: 82:25:b5:c0:4c:76:d8:37:85:31:da:54:fc:39:76: 15:92:0e:fc:a3:a5:a4:d4:3b:9b:d8:cc:4c:39:53: 93:cf:01:c5:14:b6:69:b9:3d:a0:3f:af:6f:35:eb: a6:b5:8b:23:69:98:c1:88:f3:dd:ab:8e:e3:18:aa: 12:cc:e9:6d:1a:80:8a:33:ea:01:dc:02:d9:46:8b: 4e:e1:15:95:91:53:ea:b3:f1:02:b7:82:82:da:f6: b1:bd:4f:8b:01:19:55:0c:c8:19:62:00:8b:62:11: 81:3d:fb:a1:6a:59:3f:2f:d1:41:8f:26:25:af:95: 61:50:fc:cf:1e:aa:26:5f:79:f4:7b:ca:66:9f:a3: 01:7c:f9:2a:4b:f4:70:a1:e0:a2:d3:3b:a4:d7:0e: f9:11:50:f2:be:97:2b:59:81:2d:5b:cb:18:26:60: 0f:00:07:1e:8d:b3:a5:e6:ad:f2:7d:c4:b6:bc:8f: 49:38:8d:1f:f2:42:8b:24:03:83:3f:f6:26:7c:d0: 5e:39:5e:fe:3a:7d:03:34:9e:68:72:bf:1a:e4:61: 07:0f:d7:74:75:ea:f6:a4:8d:52:0e:1a:db:be:d8: d4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AE:9E:A2:8E:7A:C7:BD:BA:C7:2C:19:20:9E:84:49:79:A3:5F:81 X509v3 Authority Key Identifier: keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:60:52:27:29:0c:6b:5e:e5:47:f1:c4:a9:67:e8:d1:af:bf: 8e:1d:02:68:a7:a5:6b:42:78:6c:82:75:55:8e:7f:cf:fc:0d: fd:df:f7:fb:e4:f5:30:38:7f:af:48:32:da:b9:b9:33:bd:7b: b5:f8:7d:77:98:2c:47:5b:8e:75:b0:22:82:59:57:6c:ec:b7: b5:5f:7e:d8:2c:76:b6:3b:43:bf:3d:96:ba:5d:5e:f6:a0:d9: 2f:22:af:98:4b:c6:18:e7:c8:f7:c9:dd:ab:81:5f:08:32:d4: b7:3a:ae:32:45:e5:98:ab:ab:29:26:67:e2:96:77:c5:cc:d0: 11:5b:c2:66:e7:42:b9:5f:45:4e:ca:6a:6c:de:15:0c:bc:48: ab:01:96:fa:d7:75:bc:9f:fb:51:d5:64:34:0c:5e:43:d9:11: 7c:9d:20:5f:1b:04:55:2f:0f:4a:67:be:b6:9f:bf:89:21:27: 35:5e:f0:de:c0:22:6e:e2:b1:fa:03:98:85:fc:64:76:65:40: 08:33:dc:1e:4e:6d:5f:3d:d6:76:78:6f:eb:4b:60:51:5d:96: e7:73:79:4f:c6:4b:14:08:4e:97:7d:87:3b:d8:4d:64:97:da: 32:55:c7:0e:a1:f7:7e:6b:42:7f:8d:73:c9:34:4d:ca:12:6c: d9:e5:8f:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHx9NN07ShvMqurnB+KV+PsOZmBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1 RDdBNUFGMDAeFw0yNjEwMDgyMDUzMDZaFw0yNjEwMDkyMjA4MDZaMDMxMTAvBgNV BAMTKDdGQUU5RUEyOEU3QUM3QkRCQUM3MkMxOTIwOUU4NDQ5NzlBMzVGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieKA5gCBOl/RabuzAA51LhvME qSPxZc2yv8sAQIIltcBMdtg3hTHaVPw5dhWSDvyjpaTUO5vYzEw5U5PPAcUUtmm5 PaA/r28166a1iyNpmMGI892rjuMYqhLM6W0agIoz6gHcAtlGi07hFZWRU+qz8QK3 goLa9rG9T4sBGVUMyBliAItiEYE9+6FqWT8v0UGPJiWvlWFQ/M8eqiZfefR7ymaf owF8+SpL9HCh4KLTO6TXDvkRUPK+lytZgS1byxgmYA8ABx6Ns6XmrfJ9xLa8j0k4 jR/yQoskA4M/9iZ80F45Xv46fQM0nmhyvxrkYQcP13R16vakjVIOGtu+2NTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf66eoo56x726xywZIJ6ESXmjX4EwHwYDVR0j BBgwFoAUnt1Y+1W0UDfXXIM1m2l7RF16WvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YWU4MmYtNTM3ZS00NjI2LWJlOWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1 NUI0NTAzN0Q3NUM4MzM1OUI2OTdCNDQ1RDdBNUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RURENThGQjU1QjQ1MDM3RDc1QzgzMzU5QjY5N0I0NDVEN0E1 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvOUVERDU4RkI1NUI0NTAzN0Q3NUM4MzM1OUI2OTdC NDQ1RDdBNUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdgUicpDGte5UfxxKln6NGvv44dAminpWtC eGyCdVWOf8/8Df3f9/vk9TA4f69IMtq5uTO9e7X4fXeYLEdbjnWwIoJZV2zst7Vf ftgsdrY7Q789lrpdXvag2S8ir5hLxhjnyPfJ3auBXwgy1Lc6rjJF5ZirqykmZ+KW d8XM0BFbwmbnQrlfRU7KamzeFQy8SKsBlvrXdbyf+1HVZDQMXkPZEXydIF8bBFUv D0pnvrafv4khJzVe8N7AIm7isfoDmIX8ZHZlQAgz3B5ObV891nZ4b+tLYFFdludz eU/GSxQITpd9hzvYTWSX2jJVxw6h935rQn+Nc8k0TcoSbNnlj3s= -----END CERTIFICATE-----Generated at Thu Oct 8 23:30:22 2026 by rpki-client