$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: 1jR2y+Q33K9u0ZYianJDj25WrrUnhUOmOrniIf9GG0c= Subject key identifier: 68:F5:0F:53:DB:29:DE:55:C3:0D:B1:76:B2:5F:BA:EE:DF:F2:FF:E4 Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 0CA620AB9535CCAE30018CB2EA343219FC8623B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:52:21 +0000 Manifest this update: Mon 21 Sep 2026 12:47:21 +0000 Manifest next update: Tue 22 Sep 2026 13:37:21 +0000 Files and hashes: 1: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) 3: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: 6/7znNz4bpwwYAcPrOlFFcGfLmtsLhu4wdMlORSgIv4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a6:20:ab:95:35:cc:ae:30:01:8c:b2:ea:34:32:19:fc:86:23:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: Sep 21 12:47:21 2026 GMT Not After : Sep 22 13:37:21 2026 GMT Subject: CN=68F50F53DB29DE55C30DB176B25FBAEEDFF2FFE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:65:3d:99:10:ce:87:df:08:9b:88:bd:73: e1:b3:38:ae:27:f7:e4:bd:25:77:6e:e1:c1:26:05: 53:35:0c:c7:c9:f1:0d:07:df:61:fe:9a:46:e4:aa: 8a:66:99:11:24:52:9b:9b:a7:c3:f7:65:55:1e:cf: f4:5b:69:15:87:92:07:00:e2:1d:ee:10:ac:58:d8: e1:9c:41:11:b8:02:48:bc:be:c5:99:c9:6a:cd:7d: a9:e2:a1:15:75:1b:07:51:78:48:96:4d:2d:88:a5: 74:55:e0:e3:1c:8d:eb:8e:af:fc:c3:d0:70:01:b7: 26:f2:ce:dd:48:31:58:07:1a:9f:cb:5b:b0:de:c9: ba:77:f7:15:1a:92:b6:1b:07:3a:0b:7f:7d:eb:76: 06:9d:b5:7e:34:44:c5:bf:9a:e3:53:2a:a3:17:06: 04:c7:aa:54:e7:71:e0:2f:4e:96:12:aa:8f:ae:2e: c4:31:0a:86:81:1b:c3:80:a5:50:a1:ca:ed:3e:10: 9c:0d:28:8a:aa:98:e7:be:56:3a:e9:06:5f:c9:4b: 0d:7f:e0:9a:be:54:1c:84:0a:61:3d:f2:ad:f4:5f: b8:68:c5:a2:19:a5:4b:b7:bf:9e:0f:e2:37:be:96: e1:8e:38:fb:00:b3:c2:6f:fb:e9:3e:57:b7:04:5f: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F5:0F:53:DB:29:DE:55:C3:0D:B1:76:B2:5F:BA:EE:DF:F2:FF:E4 X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:72:51:f0:21:e8:33:f4:1c:6c:aa:14:ba:1b:79:c8:2e:c4: 11:2a:54:11:ef:6a:d4:52:ce:23:2a:52:db:9e:63:c7:ea:5b: c8:d5:6e:e5:32:58:47:06:6d:cb:23:37:c3:cf:04:ed:37:78: cd:cc:8e:92:34:75:fb:68:06:2b:91:1c:5a:d8:26:6a:64:e5: f6:4d:bb:41:a0:0e:19:e2:b7:b9:08:f3:ab:e7:9c:76:b6:6a: 40:45:47:02:7d:f3:7b:b2:ae:03:04:67:20:4b:02:f6:0e:c0: 5a:82:c0:01:a6:95:60:51:86:a5:7d:9a:7b:1e:32:48:25:ee: 01:26:fd:bc:77:f4:23:61:5f:0e:e0:60:98:98:e8:40:89:21: 23:ad:e5:de:41:bf:fd:62:68:d1:66:b7:21:b6:b4:d1:bf:f3: 32:67:45:f3:c9:0c:e6:57:e9:5e:8e:ac:98:8c:e0:92:b6:0f: e3:b2:32:4f:c6:41:3f:86:af:73:96:3b:d6:c0:ce:e2:d5:c7: 32:bd:e0:4d:7c:c8:dc:42:53:2b:53:4c:99:18:de:6b:48:86: fa:8b:41:5d:1a:12:de:bd:e1:49:3d:0b:ce:21:00:f3:78:81: 57:de:fb:67:7a:06:d2:4f:51:95:9e:5a:91:1a:f7:5b:70:45: a7:ee:00:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKYgq5U1zK4wAYyy6jQyGfyGI7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjA5MjExMjQ3MjFaFw0yNjA5MjIxMzM3MjFaMDMxMTAvBgNV BAMTKDY4RjUwRjUzREIyOURFNTVDMzBEQjE3NkIyNUZCQUVFREZGMkZGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmWU9mRDOh98Im4i9c+GzOK4n 9+S9JXdu4cEmBVM1DMfJ8Q0H32H+mkbkqopmmREkUpubp8P3ZVUez/RbaRWHkgcA 4h3uEKxY2OGcQRG4Aki8vsWZyWrNfanioRV1GwdReEiWTS2IpXRV4OMcjeuOr/zD 0HABtybyzt1IMVgHGp/LW7Deybp39xUakrYbBzoLf33rdgadtX40RMW/muNTKqMX BgTHqlTnceAvTpYSqo+uLsQxCoaBG8OApVChyu0+EJwNKIqqmOe+VjrpBl/JSw1/ 4Jq+VByECmE98q30X7hoxaIZpUu3v54P4je+luGOOPsAs8Jv++k+V7cEX9j3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPUPU9sp3lXDDbF2sl+67t/y/+QwHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhyUfAh6DP0HGyqFLobecguxBEqVBHvatRS ziMqUtueY8fqW8jVbuUyWEcGbcsjN8PPBO03eM3MjpI0dftoBiuRHFrYJmpk5fZN u0GgDhnit7kI86vnnHa2akBFRwJ983uyrgMEZyBLAvYOwFqCwAGmlWBRhqV9mnse Mkgl7gEm/bx39CNhXw7gYJiY6ECJISOt5d5Bv/1iaNFmtyG2tNG/8zJnRfPJDOZX 6V6OrJiM4JK2D+OyMk/GQT+Gr3OWO9bAzuLVxzK94E18yNxCUytTTJkY3mtIhvqL QV0aEt694Uk9C84hAPN4gVfe+2d6BtJPUZWeWpEa91twRafuAOI= -----END CERTIFICATE-----Generated at Mon Sep 21 19:52:26 2026 by rpki-client