$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: V6JpgBh9j1K3T0A096i/pY551czZgPORnYVGQfxRF5k= Subject key identifier: 7F:02:21:40:BC:6A:96:B8:7D:DB:82:71:A5:06:59:69:89:BB:D1:01 Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 3828E7DF760DDBA4ADEEB1E6D0193E4A64B059F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 20:31:48 +0000 Manifest this update: Tue 28 Jul 2026 20:26:48 +0000 Manifest next update: Wed 29 Jul 2026 23:18:48 +0000 Files and hashes: 1: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) 2: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) 3: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: +2vZMfbLJOuwaS7/zqo2PhQsOyyZ1aekCAUle5rkKPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:28:e7:df:76:0d:db:a4:ad:ee:b1:e6:d0:19:3e:4a:64:b0:59:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: Jul 28 20:26:48 2026 GMT Not After : Jul 29 23:18:48 2026 GMT Subject: CN=7F022140BC6A96B87DDB8271A506596989BBD101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a2:d5:61:86:25:75:0f:91:a6:b2:00:7c:84: 73:73:81:26:a5:0b:a7:eb:a3:c0:25:53:3b:ad:01: a9:b5:9f:33:85:5f:46:53:e9:c7:44:ca:d7:ab:f6: ae:bd:ca:b4:83:17:99:b6:d4:ab:03:ad:7c:4f:a1: 55:7f:03:40:51:8b:86:70:58:af:d6:be:20:5f:eb: 3f:32:91:5f:10:75:95:2d:26:b2:ad:39:36:c9:75: 5d:8d:4a:04:4d:6b:e8:7b:ff:d8:ce:6d:f4:72:90: f2:0a:16:70:af:e3:b5:d1:2c:e1:66:ed:50:69:f2: 03:5d:c6:34:ca:eb:ad:98:a4:71:45:fd:b3:cb:1d: 4a:6e:8f:be:dd:e5:d0:85:fe:48:f9:01:76:f1:80: 32:87:2f:db:38:e8:0f:20:a0:b0:dc:8b:45:8d:71: 1f:a0:19:67:36:2a:4a:66:d8:22:96:61:9a:49:6a: bb:d7:48:15:f9:66:41:78:d9:92:82:e9:2c:b8:03: c0:11:1e:81:6c:1c:0f:24:02:df:66:00:0c:7e:60: 6d:8f:5f:81:a2:87:4b:37:ea:bc:6d:a2:3f:0c:1e: fa:04:e8:c2:59:67:2e:44:4b:ab:22:3b:28:8c:a7: eb:43:a7:e0:84:7a:4b:b6:f5:c4:3c:46:0b:0e:43: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:02:21:40:BC:6A:96:B8:7D:DB:82:71:A5:06:59:69:89:BB:D1:01 X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8d:33:d8:c7:71:88:23:5c:9f:ad:2a:ee:3f:f7:02:09:fd: 56:58:ab:93:72:bc:a6:f6:16:b1:f6:4b:5e:64:f0:3f:01:7a: 53:85:f3:90:53:0f:24:15:a9:28:1e:dd:b8:6d:94:20:66:56: c9:07:57:72:be:83:35:97:97:88:f0:ac:32:bf:d3:72:d7:53: 2c:83:2a:29:44:a3:1e:5c:c4:00:a5:99:01:bf:7d:dd:ef:72: 69:8f:1e:5b:3a:ea:a0:25:17:9b:3f:14:95:7d:f5:b3:7d:17: 40:b2:56:b9:aa:2f:fa:b6:18:6f:97:ca:8f:97:46:4e:89:4a: 6c:9c:35:7f:14:a8:4d:00:5c:9f:17:38:c1:97:eb:96:5f:0a: 6a:3f:ca:c1:2c:62:31:ff:07:d8:18:7e:53:56:48:0e:27:3f: cb:fc:af:3b:d3:e4:f1:26:b2:59:94:fe:01:7c:57:a6:92:e8: 0b:43:e2:73:f3:c8:66:cb:e1:40:32:1b:57:9d:de:35:1a:d0: 66:ad:5c:a3:cf:fa:eb:a9:18:61:77:b4:53:69:13:e3:62:4c: 5d:22:b1:34:9b:50:cf:70:40:b2:21:6b:76:92:98:a0:ac:29: be:14:97:b7:9c:27:97:4f:fa:51:c6:98:de:49:e4:23:38:89: 32:de:d9:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCjn33YN26St7rHm0Bk+SmSwWfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjA3MjgyMDI2NDhaFw0yNjA3MjkyMzE4NDhaMDMxMTAvBgNV BAMTKDdGMDIyMTQwQkM2QTk2Qjg3RERCODI3MUE1MDY1OTY5ODlCQkQxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRotVhhiV1D5GmsgB8hHNzgSal C6fro8AlUzutAam1nzOFX0ZT6cdEyter9q69yrSDF5m21KsDrXxPoVV/A0BRi4Zw WK/WviBf6z8ykV8QdZUtJrKtOTbJdV2NSgRNa+h7/9jObfRykPIKFnCv47XRLOFm 7VBp8gNdxjTK662YpHFF/bPLHUpuj77d5dCF/kj5AXbxgDKHL9s46A8goLDci0WN cR+gGWc2Kkpm2CKWYZpJarvXSBX5ZkF42ZKC6Sy4A8ARHoFsHA8kAt9mAAx+YG2P X4Gih0s36rxtoj8MHvoE6MJZZy5ES6siOyiMp+tDp+CEeku29cQ8RgsOQ0xxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwIhQLxqlrh924JxpQZZaYm70QEwHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeNM9jHcYgjXJ+tKu4/9wIJ/VZYq5NyvKb2 FrH2S15k8D8BelOF85BTDyQVqSge3bhtlCBmVskHV3K+gzWXl4jwrDK/03LXUyyD KilEox5cxAClmQG/fd3vcmmPHls66qAlF5s/FJV99bN9F0CyVrmqL/q2GG+Xyo+X Rk6JSmycNX8UqE0AXJ8XOMGX65ZfCmo/ysEsYjH/B9gYflNWSA4nP8v8rzvT5PEm slmU/gF8V6aS6AtD4nPzyGbL4UAyG1ed3jUa0GatXKPP+uupGGF3tFNpE+NiTF0i sTSbUM9wQLIha3aSmKCsKb4Ul7ecJ5dP+lHGmN5J5CM4iTLe2Ws= -----END CERTIFICATE-----Generated at Wed Jul 29 04:28:34 2026 by rpki-client