$ rpki-client -vvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft File: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft (raw, json) Hash identifier: hOlIt+V+umhXANl0/Oa7d5pGXYGv9Qaa/DyFi6/uV3k= Subject key identifier: 18:82:FA:79:28:08:8A:DF:C8:5E:2F:E9:D6:A3:08:72:F5:A0:EC:A9 Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Certificate serial: 23C58A1503A612EB3D7C479ADC0696B1EB35FFF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:16:15 +0000 Manifest this update: Tue 16 Jun 2026 18:11:15 +0000 Manifest next update: Wed 17 Jun 2026 19:14:15 +0000 Files and hashes: 1: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: 7PEJXW7RMfgjbRMHoDP/Q67ewQubnf7QvBInIps/U3k=) 2: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: W+AAZvdz9uWMtockMX6VSZJ0oNmTRpeghrirQa/hfSI=) 3: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl (hash: EODSCYeWpIaS2st3XvZR67bsuowo9FVncxTyBu7ofCI=) 4: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c5:8a:15:03:a6:12:eb:3d:7c:47:9a:dc:06:96:b1:eb:35:ff:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Validity Not Before: Jun 16 18:11:15 2026 GMT Not After : Jun 17 19:14:15 2026 GMT Subject: CN=1882FA7928088ADFC85E2FE9D6A30872F5A0ECA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:0c:49:1c:91:1f:a8:12:52:5b:74:96:f8: 3d:56:79:40:93:7f:4d:fe:ce:63:22:46:1b:2c:18: 3f:8f:e0:39:d3:d0:aa:c2:9a:c2:49:22:61:f2:8f: 12:f8:19:e5:00:e2:ac:a3:de:c0:5d:50:c4:b2:a1: 9b:9a:0e:b0:3e:07:3a:3d:ad:68:29:23:ec:db:8c: 2f:fd:2e:7d:f4:5c:d3:5a:de:10:31:77:23:6e:fd: 04:53:79:b5:8f:a7:13:c7:65:92:c7:a7:b4:04:9e: 39:16:2b:37:2a:9d:0b:ef:c6:d7:f3:53:0a:c4:df: 56:d4:78:36:17:43:1d:e7:9b:3a:b1:d1:e0:5a:16: 75:93:78:dd:4a:1d:5b:63:b2:50:77:cf:40:b4:0a: 29:d0:0a:73:08:c9:d4:a1:0f:f8:e1:b3:c3:1d:15: 40:36:48:03:7b:64:49:40:9c:0f:f8:54:84:4d:75: ae:96:b4:74:ce:b7:44:6d:26:c0:55:10:88:92:83: 10:b8:a8:6c:68:75:8e:bd:0b:b0:49:8d:e0:5e:64: e6:fe:c3:5d:06:ee:67:73:1a:68:36:29:56:34:7c: 00:8e:38:0e:7c:a6:85:0c:13:14:df:da:55:d3:91: 55:18:eb:e9:c2:3a:f3:8c:e5:e5:e6:2a:88:3c:d7: f5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:82:FA:79:28:08:8A:DF:C8:5E:2F:E9:D6:A3:08:72:F5:A0:EC:A9 X509v3 Authority Key Identifier: keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:eb:d1:01:63:36:1f:b6:ab:c2:20:8a:f0:1c:a8:b3:b9:d6: 4b:8e:d9:cf:9a:40:2c:bc:d5:e8:02:25:06:a5:ad:db:af:9b: ec:55:ae:9f:a5:2b:d6:8b:16:63:bc:66:b0:ef:02:84:42:de: e5:69:c3:71:20:2c:0b:25:16:b8:b0:f5:9d:f2:93:c3:53:cd: cb:99:71:69:a4:6a:e4:7c:7d:49:5b:c3:54:5a:bd:8c:d9:42: c7:00:0e:94:ed:f1:57:cd:bf:34:2b:18:1a:b2:d0:20:8c:b3: 97:f0:90:76:83:88:e7:a5:15:83:e0:ad:51:bc:87:d9:d3:6e: 12:fa:0d:12:dd:b3:2b:0b:5a:c4:da:2f:cc:69:16:f5:44:03: 7b:ea:dc:6d:a2:34:58:79:48:fb:e0:e9:ee:04:b4:c9:b4:96: fa:8e:c0:37:e5:6f:0e:f1:9c:c8:ab:57:dc:2a:d8:8c:49:e2: a8:c5:9d:02:09:43:80:ee:f7:c1:ac:15:73:92:fa:ef:74:da: 3c:6b:a5:7b:40:d0:51:77:42:15:8d:33:52:81:a0:7f:85:79: a1:68:1b:64:a3:37:52:b6:d0:3c:3b:2f:93:27:9f:9f:11:05: a8:21:fe:46:fb:53:75:31:a7:93:98:8c:5f:4c:c1:5b:21:d5: b6:d8:56:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8WKFQOmEus9fEea3AaWses1//EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjNDODND ODZCMEEyNzAeFw0yNjA2MTYxODExMTVaFw0yNjA2MTcxOTE0MTVaMDMxMTAvBgNV BAMTKDE4ODJGQTc5MjgwODhBREZDODVFMkZFOUQ2QTMwODcyRjVBMEVDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQaAxJHJEfqBJSW3SW+D1WeUCT f03+zmMiRhssGD+P4DnT0KrCmsJJImHyjxL4GeUA4qyj3sBdUMSyoZuaDrA+Bzo9 rWgpI+zbjC/9Ln30XNNa3hAxdyNu/QRTebWPpxPHZZLHp7QEnjkWKzcqnQvvxtfz UwrE31bUeDYXQx3nmzqx0eBaFnWTeN1KHVtjslB3z0C0CinQCnMIydShD/jhs8Md FUA2SAN7ZElAnA/4VIRNda6WtHTOt0RtJsBVEIiSgxC4qGxodY69C7BJjeBeZOb+ w10G7mdzGmg2KVY0fACOOA58poUMExTf2lXTkVUY6+nCOvOM5eXmKog81/XvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGIL6eSgIit/IXi/p1qMIcvWg7KkwHwYDVR0j BBgwFoAUrXpdeG1cVAfEXxCCvtY8g8hrCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlNjAzZTMtZjIzZS00YzZhLWJiM2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2 RDVDNTQwN0M0NUYxMDgyQkVENjNDODNDODZCMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDdBNUQ3ODZENUM1NDA3QzQ1RjEwODJCRUQ2M0M4M0M4NkIw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjND ODNDODZCMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPr0QFjNh+2q8IgivAcqLO51kuO2c+aQCy8 1egCJQalrduvm+xVrp+lK9aLFmO8ZrDvAoRC3uVpw3EgLAslFriw9Z3yk8NTzcuZ cWmkauR8fUlbw1RavYzZQscADpTt8VfNvzQrGBqy0CCMs5fwkHaDiOelFYPgrVG8 h9nTbhL6DRLdsysLWsTaL8xpFvVEA3vq3G2iNFh5SPvg6e4EtMm0lvqOwDflbw7x nMirV9wq2IxJ4qjFnQIJQ4Du98GsFXOS+u902jxrpXtA0FF3QhWNM1KBoH+FeaFo G2SjN1K20Dw7L5Mnn58RBagh/kb7U3Uxp5OYjF9MwVsh1bbYVoI= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:08 2026 by rpki-client