$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft File: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft (raw, json) Hash identifier: DfzX04ANYIvlh1QQBkeuZZCuaRK/BuiUvp/7gnplVMM= Subject key identifier: 3E:09:2C:25:40:1C:85:5A:F9:88:9E:11:B0:3A:9E:26:93:71:88:56 Authority key identifier: AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 Certificate issuer: /CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Certificate serial: 1628F0266E3E3E890AF5544338038875FA74ADFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:41:07 +0000 Manifest this update: Sun 20 Sep 2026 23:36:07 +0000 Manifest next update: Tue 22 Sep 2026 02:05:07 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: eMjrRkEiItNdv20OSL8v5DoNQVMNdFSIv45ei3rnYVk=) 2: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl (hash: bCNuSYelK7SrQTE9CB9EyFP8hQbpbeyDplX//OL+/Yc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:28:f0:26:6e:3e:3e:89:0a:f5:54:43:38:03:88:75:fa:74:ad:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Validity Not Before: Sep 20 23:36:07 2026 GMT Not After : Sep 22 02:05:07 2026 GMT Subject: CN=3E092C25401C855AF9889E11B03A9E2693718856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:1a:bd:bf:10:aa:48:53:3e:8c:71:52:b1: 4b:d5:60:a8:fe:3d:c3:89:73:c7:c8:48:cd:45:47: 58:2e:4c:bb:94:b1:94:b4:62:e3:79:7f:1c:59:e6: ee:e5:39:7b:0e:85:60:49:27:02:0f:71:af:64:58: 74:57:30:1e:80:7c:fa:18:57:07:36:45:96:c7:70: 0e:2e:40:55:13:27:da:94:54:d6:d0:a8:1b:f9:58: 2c:ff:26:1f:be:1c:eb:b0:94:7d:5d:75:6c:29:b7: cf:1b:ba:1f:4c:4f:6e:64:98:04:13:2b:b3:42:cd: eb:a8:48:bd:d9:65:2f:9c:04:87:58:05:ee:82:5f: e4:76:f2:14:29:19:6f:14:65:a9:a5:a8:69:16:3d: 23:10:58:23:56:9c:3f:7b:7c:d7:df:4e:26:2e:24: a5:35:2a:bd:ca:54:76:1f:76:12:8f:3d:fd:9d:6c: c7:b0:35:88:c2:36:75:78:de:3d:b9:66:2f:fd:4a: 56:e9:0c:58:0e:86:6d:f0:3b:3e:63:fd:2b:b5:80: eb:f8:7e:6d:29:9f:56:2f:ec:6b:09:c3:93:f5:1c: 3b:04:e4:21:a4:68:eb:49:7f:6c:67:04:a7:81:8d: f1:46:bb:0a:12:2b:3f:39:d6:53:61:26:33:a5:98: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:09:2C:25:40:1C:85:5A:F9:88:9E:11:B0:3A:9E:26:93:71:88:56 X509v3 Authority Key Identifier: keyid:AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6d:aa:29:6f:a9:f8:54:ed:35:39:74:ab:93:ae:1f:df:83: 27:eb:3f:eb:86:9d:0b:c8:f5:17:75:8f:06:56:fd:c4:7c:7c: cf:1b:07:8f:dd:c8:6b:85:b3:7c:64:36:ff:fa:cc:62:54:f8: ab:e5:21:0a:1d:2b:33:2a:65:d2:29:64:e8:a6:d5:39:3f:7b: 1b:ba:18:ad:a7:dc:5f:7c:00:c5:0d:40:31:fa:d9:17:ec:e1: 36:9b:a7:34:52:a4:84:40:e1:1f:af:36:09:64:1f:d1:11:eb: b0:7b:7d:04:18:75:29:6d:43:48:c3:56:37:f0:c9:fd:a5:c9: 04:c4:66:6e:6b:84:f6:fb:79:0f:30:f8:1e:5b:8b:e4:f1:b1: 7d:6a:fe:70:fd:b4:03:1f:93:3b:55:d8:13:f8:93:58:57:6d: 8f:db:57:b1:0b:48:e3:bb:de:2d:68:fb:f2:d7:92:d2:65:50: 4e:0d:bd:c2:b4:86:2c:de:33:2b:f3:fe:c1:b4:6e:cc:5a:0a: 31:98:6d:c9:d9:a7:54:ec:f7:cb:23:fd:c1:d8:aa:55:84:11: 86:14:6c:18:19:c9:64:da:36:3f:58:5f:64:d5:21:9d:4f:11: 5d:56:5f:1a:69:29:0d:da:43:7b:e6:38:be:c3:64:73:4d:16: 00:45:a0:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFijwJm4+PokK9VRDOAOIdfp0rfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYy QURFNUE1NDAeFw0yNjA5MjAyMzM2MDdaFw0yNjA5MjIwMjA1MDdaMDMxMTAvBgNV BAMTKDNFMDkyQzI1NDAxQzg1NUFGOTg4OUUxMUIwM0E5RTI2OTM3MTg4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrshq9vxCqSFM+jHFSsUvVYKj+ PcOJc8fISM1FR1guTLuUsZS0YuN5fxxZ5u7lOXsOhWBJJwIPca9kWHRXMB6AfPoY Vwc2RZbHcA4uQFUTJ9qUVNbQqBv5WCz/Jh++HOuwlH1ddWwpt88buh9MT25kmAQT K7NCzeuoSL3ZZS+cBIdYBe6CX+R28hQpGW8UZamlqGkWPSMQWCNWnD97fNffTiYu JKU1Kr3KVHYfdhKPPf2dbMewNYjCNnV43j25Zi/9SlbpDFgOhm3wOz5j/Su1gOv4 fm0pn1Yv7GsJw5P1HDsE5CGkaOtJf2xnBKeBjfFGuwoSKz851lNhJjOlmMnNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPgksJUAchVr5iJ4RsDqeJpNxiFYwHwYDVR0j BBgwFoAUrbFTLyF9MPfna0pGSe6vryreWlQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmExOGY4YTAtOTNhZS00MzU5LThhNWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYy MTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYyQURFNUE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREIxNTMyRjIxN0QzMEY3RTc2QjRBNDY0OUVFQUZBRjJBREU1 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFG QUYyQURFNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIptqilvqfhU7TU5dKuTrh/fgyfrP+uGnQvI 9Rd1jwZW/cR8fM8bB4/dyGuFs3xkNv/6zGJU+KvlIQodKzMqZdIpZOim1Tk/exu6 GK2n3F98AMUNQDH62Rfs4TabpzRSpIRA4R+vNglkH9ER67B7fQQYdSltQ0jDVjfw yf2lyQTEZm5rhPb7eQ8w+B5bi+TxsX1q/nD9tAMfkztV2BP4k1hXbY/bV7ELSOO7 3i1o+/LXktJlUE4NvcK0hizeMyvz/sG0bsxaCjGYbcnZp1Ts98sj/cHYqlWEEYYU bBgZyWTaNj9YX2TVIZ1PEV1WXxppKQ3aQ3vmOL7DZHNNFgBFoJ0= -----END CERTIFICATE-----Generated at Mon Sep 21 17:49:35 2026 by rpki-client