$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft File: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft (raw, json) Hash identifier: 1kd5bTJOXZET8gS7c8WsrRFvwXllvmOsX1dl6bb3ym4= Subject key identifier: 52:35:E9:08:37:1F:01:D2:9C:6C:25:B9:6D:3C:30:54:73:47:5B:16 Authority key identifier: AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 Certificate issuer: /CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Certificate serial: 317338F419E5C3AEA987C13F8FDFEB990D059EDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft Manifest number: FF Signing time: Tue 10 Nov 2026 01:01:53 +0000 Manifest this update: Tue 10 Nov 2026 00:56:53 +0000 Manifest next update: Wed 11 Nov 2026 03:23:53 +0000 Files and hashes: 1: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl (hash: LBSAR3f3EB53Xu+pNryXK2TX9IXABu/BEGujSnEDdQc=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: eMjrRkEiItNdv20OSL8v5DoNQVMNdFSIv45ei3rnYVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 03:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:73:38:f4:19:e5:c3:ae:a9:87:c1:3f:8f:df:eb:99:0d:05:9e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Validity Not Before: Nov 10 00:56:53 2026 GMT Not After : Nov 11 03:23:53 2026 GMT Subject: CN=5235E908371F01D29C6C25B96D3C305473475B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:0f:af:f1:94:ea:13:b7:24:87:5a:af:be: 76:53:5c:7e:66:7e:03:ba:13:00:f4:e2:7f:3f:d8: 8d:bc:67:48:b5:fa:83:f6:07:ff:07:42:16:a1:56: de:b2:12:1d:91:8d:2c:58:d2:f8:1a:a2:8e:8f:b6: 9b:1a:0f:1d:2e:64:e8:68:5b:df:d4:a2:50:ba:0a: 99:24:ff:85:80:3f:2d:78:1b:5d:c9:e0:ef:79:bb: 26:09:0c:70:64:48:bc:43:76:1a:68:3a:99:54:59: 8b:9d:84:6f:59:7d:bd:96:dd:76:35:74:04:dd:97: 79:05:aa:98:9e:4c:24:5b:c0:5c:4f:b2:8b:e7:7f: 8b:ca:59:f6:f0:8e:13:ff:c3:a7:b6:25:30:8a:3a: 80:d8:a1:79:61:3c:a2:92:09:98:19:ff:82:f8:09: 24:f7:14:62:73:b5:36:96:e4:cd:55:37:22:98:09: 39:4b:10:8d:b4:a3:af:53:23:8a:8d:6c:23:86:e0: ef:15:7e:9c:24:50:3c:c5:a9:4e:05:f4:1c:e6:ed: 33:0a:db:c6:16:a6:fb:e4:55:26:14:46:90:2e:bc: 1f:76:da:cb:86:8f:91:32:4d:2d:93:f2:e0:a5:63: 57:ec:78:a3:76:44:23:6f:94:ea:10:07:f5:8d:0b: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:35:E9:08:37:1F:01:D2:9C:6C:25:B9:6D:3C:30:54:73:47:5B:16 X509v3 Authority Key Identifier: keyid:AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:72:49:64:02:cc:3a:95:06:6f:4e:c0:6b:57:9d:db:66:b1: 48:dc:7f:e1:7c:40:f8:5e:d7:94:b4:8e:4a:5a:de:4e:f7:07: e0:ae:8b:e7:40:06:e3:d9:2b:5f:75:e9:54:2b:d7:a3:5d:16: 80:fd:eb:ee:c1:2f:a1:c7:d0:ae:cd:3e:d6:c0:d7:67:90:c6: b4:f8:1c:f2:49:a2:32:70:7a:d0:fa:a5:10:03:cb:34:6d:c2: f1:e1:db:3b:9a:ef:e4:e2:54:25:6e:e2:b9:0b:25:e4:7e:05: 56:d0:49:26:3c:20:48:e3:28:ac:a6:0f:19:cf:70:12:89:a9: 1f:43:b5:b7:f9:ac:de:c4:a0:43:12:56:0e:6b:65:b7:3b:37: 11:7f:86:a1:9f:3c:5a:26:1f:4d:15:c7:47:c6:a5:c9:49:b6: d3:36:d2:4b:a3:3d:e8:c4:ad:46:e9:93:39:88:a5:b3:c6:ec: 3c:ca:d8:dc:97:32:d4:b0:29:ea:1f:6d:fa:d7:2b:47:00:40: 3c:cb:c4:bc:69:db:cb:5b:32:0a:87:ce:c2:b5:e0:57:51:34: e2:83:78:5f:8f:2e:e5:af:18:cf:ff:be:53:23:39:f1:25:1a: 60:a0:6f:a5:a3:1f:17:9a:f0:88:a1:52:8e:ab:8a:00:09:d7: 21:33:3f:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXM49Bnlw66ph8E/j9/rmQ0FntswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYy QURFNUE1NDAeFw0yNjExMTAwMDU2NTNaFw0yNjExMTEwMzIzNTNaMDMxMTAvBgNV BAMTKDUyMzVFOTA4MzcxRjAxRDI5QzZDMjVCOTZEM0MzMDU0NzM0NzVCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyA+v8ZTqE7ckh1qvvnZTXH5m fgO6EwD04n8/2I28Z0i1+oP2B/8HQhahVt6yEh2RjSxY0vgaoo6PtpsaDx0uZOho W9/UolC6Cpkk/4WAPy14G13J4O95uyYJDHBkSLxDdhpoOplUWYudhG9Zfb2W3XY1 dATdl3kFqpieTCRbwFxPsovnf4vKWfbwjhP/w6e2JTCKOoDYoXlhPKKSCZgZ/4L4 CST3FGJztTaW5M1VNyKYCTlLEI20o69TI4qNbCOG4O8VfpwkUDzFqU4F9Bzm7TMK 28YWpvvkVSYURpAuvB922suGj5EyTS2T8uClY1fseKN2RCNvlOoQB/WNCzTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUjXpCDcfAdKcbCW5bTwwVHNHWxYwHwYDVR0j BBgwFoAUrbFTLyF9MPfna0pGSe6vryreWlQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmExOGY4YTAtOTNhZS00MzU5LThhNWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYy MTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYyQURFNUE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREIxNTMyRjIxN0QzMEY3RTc2QjRBNDY0OUVFQUZBRjJBREU1 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFG QUYyQURFNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9ySWQCzDqVBm9OwGtXndtmsUjcf+F8QPhe 15S0jkpa3k73B+Cui+dABuPZK1916VQr16NdFoD96+7BL6HH0K7NPtbA12eQxrT4 HPJJojJwetD6pRADyzRtwvHh2zua7+TiVCVu4rkLJeR+BVbQSSY8IEjjKKymDxnP cBKJqR9Dtbf5rN7EoEMSVg5rZbc7NxF/hqGfPFomH00Vx0fGpclJttM20kujPejE rUbpkzmIpbPG7DzK2NyXMtSwKeofbfrXK0cAQDzLxLxp28tbMgqHzsK14FdRNOKD eF+PLuWvGM//vlMjOfElGmCgb6WjHxea8IihUo6rigAJ1yEzP4Y= -----END CERTIFICATE-----Generated at Tue Nov 10 10:32:03 2026 by rpki-client