$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft File: ADF43E36B1768DE874BC2E4386678718C68AC58C.mft (raw, json) Hash identifier: 1wM71gZlhZwgDUbz2zJtF6jkX+YHEmqJ0jkDLwKUY9c= Subject key identifier: 4A:90:DD:45:09:40:06:52:42:44:B2:6A:C7:E8:4E:59:B0:5C:34:9D Authority key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C Certificate issuer: /CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Certificate serial: 321E9AB4C25295249856BA73C4C36F107CE4ABD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 10:53:59 +0000 Manifest this update: Fri 25 Sep 2026 10:48:59 +0000 Manifest next update: Sat 26 Sep 2026 11:05:59 +0000 Files and hashes: 1: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: YGwFwZ5ZgSYttDBh5EguczXxt0Tj6L2YYXDVT0BcXEg=) 2: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: 5KPKZA2RTu5ylHSV1TQQG9h2k3pnK+Y0k5lXF80cirU=) 3: ADF43E36B1768DE874BC2E4386678718C68AC58C.crl (hash: yCzVFPJe7AgzZX+b5SWAJSp0zNuB4m2Ypy2GAKASjik=) 4: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: HhOurlT1i9ohxjrni1AsVYHua6nriyDIMH2PNMhJi+I=) 5: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: K8yPbAzC5p5yuBTV3LGTKzGdC+9ek4+ufDT1mYTr44E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1e:9a:b4:c2:52:95:24:98:56:ba:73:c4:c3:6f:10:7c:e4:ab:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Validity Not Before: Sep 25 10:48:59 2026 GMT Not After : Sep 26 11:05:59 2026 GMT Subject: CN=4A90DD45094006524244B26AC7E84E59B05C349D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:72:d0:b5:98:89:06:ca:e9:ed:b1:e7:3c: 67:ee:17:c0:53:8b:f0:4e:1e:c6:1b:cf:4c:96:bd: b8:a7:ee:25:c6:3e:35:ea:87:57:7c:db:3d:12:6b: aa:11:f7:4b:60:3b:14:7f:61:9c:d1:74:43:1a:bb: fe:29:3e:6c:6a:8b:97:51:17:60:9e:10:65:9f:06: a4:26:bc:84:e8:40:b6:c4:6f:3e:6d:e1:bb:b4:07: 04:a1:07:08:b9:37:e1:b8:ff:e6:8f:39:bc:ec:11: 3c:5a:2d:0c:a8:ad:97:27:35:bf:78:1e:b5:35:4d: db:fc:05:ab:66:09:82:82:b3:a1:21:d6:a1:c8:2b: f9:57:bd:67:69:06:a6:12:23:18:35:24:5c:fd:65: cf:8d:26:94:75:54:9e:08:2a:fd:eb:74:65:3b:26: f8:dd:e6:b1:30:5b:98:93:fd:78:a8:d2:c1:7f:7f: e3:f7:1f:e5:66:ff:49:76:50:d9:93:fe:30:46:c0: 1c:17:63:2e:b6:f5:f3:a5:66:f2:42:2a:6b:03:8e: 6a:19:08:ec:16:7f:58:11:a4:28:98:86:27:2f:20: 0c:f3:fc:c6:ea:da:44:47:97:f4:c7:1c:20:9b:51: f1:37:3e:ea:f7:b3:42:a0:c9:c9:d4:3f:f5:34:62: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:DD:45:09:40:06:52:42:44:B2:6A:C7:E8:4E:59:B0:5C:34:9D X509v3 Authority Key Identifier: keyid:AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:df:e4:b6:85:02:ed:57:a9:dd:e3:49:35:ca:71:73:fa:24: e3:8b:d0:1d:75:7d:86:cf:bb:b9:bd:20:ff:fa:fb:6b:0c:9c: 51:a2:56:b6:8e:a0:7c:53:77:98:c0:de:6e:8f:1e:a7:5b:03: b5:77:b0:58:4f:0d:aa:9d:32:4c:e2:77:af:ad:49:b0:19:25: de:8d:a5:d5:21:a1:fb:55:b3:0d:f1:c3:2f:4f:b6:19:b4:89: c5:f2:66:a8:0d:e3:1d:57:7d:fd:52:f9:45:e2:29:b5:db:4c: 83:35:48:5f:e5:a7:35:97:50:3d:45:43:7b:fd:e6:b8:28:8a: df:7e:75:43:bc:f3:4d:28:93:22:d6:39:42:c5:e2:10:a5:30: 67:e2:36:58:d4:55:40:6b:7e:a7:d7:5c:a2:63:a7:04:2f:23: 90:2d:37:e2:73:d5:90:4c:40:75:d9:a3:5c:f2:d1:de:2c:30: 29:d5:c7:c3:47:e5:27:38:6b:5f:fb:6e:9a:1e:2f:eb:83:db: 17:6a:b4:25:70:99:56:f9:00:a5:4d:67:7b:0c:cc:52:c1:d2: c2:28:52:da:02:59:f8:5c:3b:05:16:b2:ae:23:64:bf:aa:d3: 1c:7a:64:d9:5c:83:21:ca:80:71:c7:c3:bc:4f:70:b9:d1:e5: 67:fb:12:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMh6atMJSlSSYVrpzxMNvEHzkq9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3MThD NjhBQzU4QzAeFw0yNjA5MjUxMDQ4NTlaFw0yNjA5MjYxMTA1NTlaMDMxMTAvBgNV BAMTKDRBOTBERDQ1MDk0MDA2NTI0MjQ0QjI2QUM3RTg0RTU5QjA1QzM0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXXLQtZiJBsrp7bHnPGfuF8BT i/BOHsYbz0yWvbin7iXGPjXqh1d82z0Sa6oR90tgOxR/YZzRdEMau/4pPmxqi5dR F2CeEGWfBqQmvIToQLbEbz5t4bu0BwShBwi5N+G4/+aPObzsETxaLQyorZcnNb94 HrU1Tdv8BatmCYKCs6Eh1qHIK/lXvWdpBqYSIxg1JFz9Zc+NJpR1VJ4IKv3rdGU7 Jvjd5rEwW5iT/Xio0sF/f+P3H+Vm/0l2UNmT/jBGwBwXYy629fOlZvJCKmsDjmoZ COwWf1gRpCiYhicvIAzz/Mbq2kRHl/THHCCbUfE3Pur3s0KgycnUP/U0YnkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSpDdRQlABlJCRLJqx+hOWbBcNJ0wHwYDVR0j BBgwFoAUrfQ+NrF2jeh0vC5DhmeHGMaKxYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIxYzk1NzktNTZiYS00YTcwLWJhMTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZC MTc2OERFODc0QkMyRTQzODY2Nzg3MThDNjhBQzU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREY0M0UzNkIxNzY4REU4NzRCQzJFNDM4NjY3ODcxOEM2OEFD NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3 MThDNjhBQzU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjf5LaFAu1Xqd3jSTXKcXP6JOOL0B11fYbP u7m9IP/6+2sMnFGiVraOoHxTd5jA3m6PHqdbA7V3sFhPDaqdMkzid6+tSbAZJd6N pdUhoftVsw3xwy9Pthm0icXyZqgN4x1Xff1S+UXiKbXbTIM1SF/lpzWXUD1FQ3v9 5rgoit9+dUO8800okyLWOULF4hClMGfiNljUVUBrfqfXXKJjpwQvI5AtN+Jz1ZBM QHXZo1zy0d4sMCnVx8NH5Sc4a1/7bpoeL+uD2xdqtCVwmVb5AKVNZ3sMzFLB0sIo UtoCWfhcOwUWsq4jZL+q0xx6ZNlcgyHKgHHHw7xPcLnR5Wf7EsY= -----END CERTIFICATE-----Generated at Fri Sep 25 18:25:23 2026 by rpki-client