$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft File: ADF43E36B1768DE874BC2E4386678718C68AC58C.mft (raw, json) Hash identifier: xbqbwgKw5UJuamwhM5RjSRmQjuRrhIvT75UMNguKdHc= Subject key identifier: 5A:5F:08:A4:13:0E:7C:B2:FE:09:B5:9C:99:EA:19:B8:DC:71:5C:10 Authority key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C Certificate issuer: /CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Certificate serial: 62AC819B5F2447BD649A8B8902C251F114565733 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:20:35 +0000 Manifest this update: Wed 17 Jun 2026 02:15:35 +0000 Manifest next update: Thu 18 Jun 2026 02:30:35 +0000 Files and hashes: 1: ADF43E36B1768DE874BC2E4386678718C68AC58C.crl (hash: tTgu8j2yCQN+qXCtM0okLFCkK9iLXkFOI00yeIFAdQg=) 2: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: YGwFwZ5ZgSYttDBh5EguczXxt0Tj6L2YYXDVT0BcXEg=) 3: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: K8yPbAzC5p5yuBTV3LGTKzGdC+9ek4+ufDT1mYTr44E=) 4: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: 5KPKZA2RTu5ylHSV1TQQG9h2k3pnK+Y0k5lXF80cirU=) 5: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: HhOurlT1i9ohxjrni1AsVYHua6nriyDIMH2PNMhJi+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ac:81:9b:5f:24:47:bd:64:9a:8b:89:02:c2:51:f1:14:56:57:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Validity Not Before: Jun 17 02:15:35 2026 GMT Not After : Jun 18 02:30:35 2026 GMT Subject: CN=5A5F08A4130E7CB2FE09B59C99EA19B8DC715C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:b3:59:9b:45:48:d4:8c:27:64:3c:77:3c: 29:6c:a1:01:4c:30:a8:bd:e3:74:83:67:93:b6:0b: b9:d8:2f:b3:b0:39:4a:55:5a:49:59:bf:55:19:21: fa:a8:94:0d:24:92:56:04:5a:a1:a7:9a:ca:85:7c: 4a:9c:e5:73:18:db:d7:cf:14:a3:bc:0e:bc:9e:4c: bb:7c:f6:f0:06:55:c5:55:7d:c8:7a:fb:bf:12:e1: e8:64:3f:ed:8a:bd:ce:69:63:f1:5a:8c:1a:0d:c9: 25:34:7b:68:53:aa:67:c8:7e:d8:bf:85:64:e2:72: 90:d0:ff:c3:90:0c:d9:7a:63:45:85:fc:68:97:39: 3c:d3:b2:8b:52:d7:6b:77:a0:a3:60:d0:9f:0c:e3: 67:39:48:a6:5b:81:86:79:7f:e9:bc:f4:a6:9c:cf: fa:67:72:be:50:2d:22:94:3d:26:72:fd:0c:21:d2: 5b:32:35:4c:90:3b:b7:49:c8:28:60:f8:df:4d:65: 9b:42:6c:2f:43:30:08:b1:8e:34:be:a6:45:bd:0c: 9b:17:d7:95:3b:4b:47:08:84:de:ef:c3:aa:5d:92: 60:0c:33:e2:a1:46:a7:ba:77:f9:f9:33:40:8a:35: 93:fb:e6:27:e1:63:43:96:97:30:f1:ef:53:92:74: b3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5F:08:A4:13:0E:7C:B2:FE:09:B5:9C:99:EA:19:B8:DC:71:5C:10 X509v3 Authority Key Identifier: keyid:AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cb:a8:10:49:25:20:d2:10:bf:5e:00:ad:cc:18:c4:ce:61: d7:95:99:25:ac:69:3c:cf:c8:4d:86:71:b5:b6:3c:71:90:2d: 51:1a:f4:6c:a1:b5:3f:79:b8:8f:e7:3f:5b:35:04:e4:35:9d: 0c:f2:99:19:e3:7a:61:3a:f7:6b:78:fd:12:bb:ba:3e:28:bf: 3e:9b:cf:9c:42:b6:30:50:ff:60:d5:5e:6a:e2:aa:7f:0f:2c: 2a:ce:d7:cb:80:9b:03:45:3b:cd:ad:0b:56:ab:07:7c:7d:ab: bd:70:04:bd:0f:7f:43:66:f5:db:21:c2:eb:2e:df:2c:6c:ff: b0:9d:b8:a9:61:0d:e9:da:41:25:15:15:31:e6:db:bc:03:e7: 58:48:2c:ab:dc:f8:20:ae:17:fc:67:95:b9:f6:1c:93:84:47: 00:ee:7b:c0:d1:62:34:a5:d1:cf:f1:d7:93:8a:e6:9b:cd:ba: ba:f5:77:a4:bf:89:5b:54:5f:d8:a0:21:a3:38:17:bf:a7:75: 5f:f4:76:6a:e7:1b:4c:b4:5a:9b:43:db:02:2c:9f:10:33:34: 99:c8:53:7c:c9:91:9f:43:32:e1:d2:16:6d:a1:3f:0f:39:4d: 2a:e0:0a:4a:68:e6:80:a7:80:a3:8f:89:94:f3:4a:d0:81:71: 54:d0:e6:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqyBm18kR71kmouJAsJR8RRWVzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3MThD NjhBQzU4QzAeFw0yNjA2MTcwMjE1MzVaFw0yNjA2MTgwMjMwMzVaMDMxMTAvBgNV BAMTKDVBNUYwOEE0MTMwRTdDQjJGRTA5QjU5Qzk5RUExOUI4REM3MTVDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOBrNZm0VI1IwnZDx3PClsoQFM MKi943SDZ5O2C7nYL7OwOUpVWklZv1UZIfqolA0kklYEWqGnmsqFfEqc5XMY29fP FKO8DryeTLt89vAGVcVVfch6+78S4ehkP+2Kvc5pY/FajBoNySU0e2hTqmfIfti/ hWTicpDQ/8OQDNl6Y0WF/GiXOTzTsotS12t3oKNg0J8M42c5SKZbgYZ5f+m89Kac z/pncr5QLSKUPSZy/Qwh0lsyNUyQO7dJyChg+N9NZZtCbC9DMAixjjS+pkW9DJsX 15U7S0cIhN7vw6pdkmAMM+KhRqe6d/n5M0CKNZP75ifhY0OWlzDx71OSdLMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWl8IpBMOfLL+CbWcmeoZuNxxXBAwHwYDVR0j BBgwFoAUrfQ+NrF2jeh0vC5DhmeHGMaKxYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIxYzk1NzktNTZiYS00YTcwLWJhMTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZC MTc2OERFODc0QkMyRTQzODY2Nzg3MThDNjhBQzU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREY0M0UzNkIxNzY4REU4NzRCQzJFNDM4NjY3ODcxOEM2OEFD NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3 MThDNjhBQzU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3LqBBJJSDSEL9eAK3MGMTOYdeVmSWsaTzP yE2GcbW2PHGQLVEa9GyhtT95uI/nP1s1BOQ1nQzymRnjemE692t4/RK7uj4ovz6b z5xCtjBQ/2DVXmriqn8PLCrO18uAmwNFO82tC1arB3x9q71wBL0Pf0Nm9dshwusu 3yxs/7CduKlhDenaQSUVFTHm27wD51hILKvc+CCuF/xnlbn2HJOERwDue8DRYjSl 0c/x15OK5pvNurr1d6S/iVtUX9igIaM4F7+ndV/0dmrnG0y0WptD2wIsnxAzNJnI U3zJkZ9DMuHSFm2hPw85TSrgCkpo5oCngKOPiZTzStCBcVTQ5mY= -----END CERTIFICATE-----Generated at Wed Jun 17 13:33:19 2026 by rpki-client