$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft File: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft (raw, json) Hash identifier: rgevI2NzmcDRHUIaAk1/QuoF0u39Zyo9NfUBd9lXp4Y= Subject key identifier: 57:6B:3B:FB:CA:5A:5C:FA:8A:2B:12:F8:F6:6F:17:9B:A6:23:91:1A Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Certificate serial: 631038A8BA015FD22C82663E968C1778CC3CD91B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft Manifest number: BF Signing time: Mon 21 Sep 2026 07:05:26 +0000 Manifest this update: Mon 21 Sep 2026 07:00:26 +0000 Manifest next update: Tue 22 Sep 2026 10:35:26 +0000 Files and hashes: 1: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: W+AAZvdz9uWMtockMX6VSZJ0oNmTRpeghrirQa/hfSI=) 2: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl (hash: ngBpSJlMiJiXQltSJJ1y88KHXfvsUbBO3/Fg7NaIkIg=) 3: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: 7PEJXW7RMfgjbRMHoDP/Q67ewQubnf7QvBInIps/U3k=) 4: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:10:38:a8:ba:01:5f:d2:2c:82:66:3e:96:8c:17:78:cc:3c:d9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Validity Not Before: Sep 21 07:00:26 2026 GMT Not After : Sep 22 10:35:26 2026 GMT Subject: CN=576B3BFBCA5A5CFA8A2B12F8F66F179BA623911A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:c1:a8:ce:66:d3:ad:fd:19:c2:82:b7:0e: cc:7a:13:a0:87:58:91:ae:26:7e:60:a7:86:b7:fc: 02:4d:0a:14:e8:4b:57:9b:1b:e1:a5:b1:73:d4:81: c9:a8:cd:01:1e:db:69:5a:33:0f:e0:ac:af:9f:c9: 7c:9c:b7:5d:13:a4:f8:ee:48:02:fc:ff:75:c1:77: 51:6d:ae:79:68:ff:55:9f:81:d8:4c:2e:12:d1:0f: e3:23:74:5a:e3:a9:ac:f4:46:be:4f:c6:a5:2a:07: 08:7a:d3:8d:7a:71:19:11:8b:a7:db:c5:d9:4b:70: 00:b5:cd:e6:26:3a:d2:18:40:5a:e7:c3:51:01:03: 4b:ae:56:50:fe:40:3f:22:04:7d:8f:e5:0e:4e:4c: 28:f7:a4:de:80:8d:10:27:74:96:d3:0c:7c:c8:46: 71:c2:97:09:80:b9:d6:00:37:f9:3c:13:0a:27:6f: a6:1a:97:59:41:86:fa:27:c2:d7:f4:9e:2a:61:75: 16:bc:b6:e0:a1:50:54:14:70:bc:90:3d:b6:b0:62: 36:5d:85:eb:8d:8d:90:e6:27:67:e6:b6:3b:b2:9c: 72:87:b9:88:47:bc:d2:ef:84:7a:fb:ea:72:47:e2: aa:7b:aa:5e:38:4a:ab:f6:0e:01:21:99:69:ba:e7: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6B:3B:FB:CA:5A:5C:FA:8A:2B:12:F8:F6:6F:17:9B:A6:23:91:1A X509v3 Authority Key Identifier: keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:cb:67:c9:e5:6e:8f:76:49:9f:3c:ad:f6:f6:97:9a:0d:10: fe:cf:1a:d2:4d:e1:06:eb:82:70:c7:8a:31:65:9d:b0:0e:bc: 18:4e:0d:e2:0f:83:bd:14:5e:c9:45:2f:d2:30:76:71:9a:8c: f6:bd:44:19:11:1f:aa:a6:13:70:41:70:9e:71:72:5e:81:49: 3d:3e:2f:48:57:b5:d4:62:cc:88:4f:81:53:63:a8:65:33:09: ab:02:ae:77:93:86:87:87:9e:93:6c:ad:a5:05:2c:0b:7d:f4: 56:d1:5e:44:4c:7a:9a:c2:d5:b0:74:30:20:10:89:e2:5d:65: 1a:fb:a1:ff:5d:67:eb:ca:d0:ba:c1:cf:82:ac:2e:ec:20:ed: 74:ff:5b:e8:0b:0b:53:3d:74:58:36:16:36:5a:88:81:62:74: 9e:db:b9:40:a0:dd:81:e3:61:9e:47:83:99:05:be:b4:d5:5e: 32:10:d7:71:f1:8c:fb:2d:6d:43:e3:82:f4:3b:eb:b7:f4:a9: b2:bd:94:8e:e4:ed:e5:23:89:22:e4:b9:3e:a5:8c:27:71:0c: 45:4a:6a:2e:b7:07:97:04:6f:12:c5:15:5c:d6:0c:91:a1:d8: de:bd:71:56:84:66:3f:7b:2c:34:b0:4d:d3:66:5c:3d:1b:14: 1b:c6:e5:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxA4qLoBX9IsgmY+lowXeMw82RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjNDODND ODZCMEEyNzAeFw0yNjA5MjEwNzAwMjZaFw0yNjA5MjIxMDM1MjZaMDMxMTAvBgNV BAMTKDU3NkIzQkZCQ0E1QTVDRkE4QTJCMTJGOEY2NkYxNzlCQTYyMzkxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFB8GozmbTrf0ZwoK3Dsx6E6CH WJGuJn5gp4a3/AJNChToS1ebG+GlsXPUgcmozQEe22laMw/grK+fyXyct10TpPju SAL8/3XBd1Ftrnlo/1WfgdhMLhLRD+MjdFrjqaz0Rr5PxqUqBwh60416cRkRi6fb xdlLcAC1zeYmOtIYQFrnw1EBA0uuVlD+QD8iBH2P5Q5OTCj3pN6AjRAndJbTDHzI RnHClwmAudYAN/k8Ewonb6Yal1lBhvonwtf0niphdRa8tuChUFQUcLyQPbawYjZd heuNjZDmJ2fmtjuynHKHuYhHvNLvhHr76nJH4qp7ql44Sqv2DgEhmWm65xILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2s7+8paXPqKKxL49m8Xm6YjkRowHwYDVR0j BBgwFoAUrXpdeG1cVAfEXxCCvtY8g8hrCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlNjAzZTMtZjIzZS00YzZhLWJiM2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2 RDVDNTQwN0M0NUYxMDgyQkVENjNDODNDODZCMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDdBNUQ3ODZENUM1NDA3QzQ1RjEwODJCRUQ2M0M4M0M4NkIw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjND ODNDODZCMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjLZ8nlbo92SZ88rfb2l5oNEP7PGtJN4Qbr gnDHijFlnbAOvBhODeIPg70UXslFL9IwdnGajPa9RBkRH6qmE3BBcJ5xcl6BST0+ L0hXtdRizIhPgVNjqGUzCasCrneThoeHnpNsraUFLAt99FbRXkRMeprC1bB0MCAQ ieJdZRr7of9dZ+vK0LrBz4KsLuwg7XT/W+gLC1M9dFg2FjZaiIFidJ7buUCg3YHj YZ5Hg5kFvrTVXjIQ13HxjPstbUPjgvQ767f0qbK9lI7k7eUjiSLkuT6ljCdxDEVK ai63B5cEbxLFFVzWDJGh2N69cVaEZj97LDSwTdNmXD0bFBvG5d8= -----END CERTIFICATE-----Generated at Mon Sep 21 13:56:05 2026 by rpki-client