$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: CP/+iMFvylg9fF88G6lnuWFQzyIE3EVRJRMV7LGLTIQ= Subject key identifier: 47:06:9C:06:9C:6D:EA:C2:83:D5:F2:C3:A3:A4:F1:5C:42:D4:FE:EE Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 1B5AAFBBFA8DB800FE72EF70800161E3257E06E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 04:44:46 +0000 Manifest this update: Sat 13 Jun 2026 04:39:46 +0000 Manifest next update: Sun 14 Jun 2026 06:35:46 +0000 Files and hashes: 1: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) 2: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) 3: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: ZdNLRy9ZcJ1qPxpKGx2+Vy7jynw8KV9bCzO9agAaXTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 06:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5a:af:bb:fa:8d:b8:00:fe:72:ef:70:80:01:61:e3:25:7e:06:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: Jun 13 04:39:46 2026 GMT Not After : Jun 14 06:35:46 2026 GMT Subject: CN=47069C069C6DEAC283D5F2C3A3A4F15C42D4FEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:66:83:05:0e:18:1a:0f:65:62:05:a1:07: a4:0f:9c:58:4d:8e:59:c1:dc:c1:2d:94:41:68:a7: fd:db:87:07:c0:9f:05:5f:e6:5a:4a:5e:45:70:c7: 88:90:16:c6:20:2e:6e:2f:35:a7:c8:ee:58:2c:78: 97:d1:2d:e9:00:34:a9:2a:e0:a4:ae:b4:88:f2:10: cd:30:b7:18:f5:a3:93:89:91:01:30:e5:48:c6:27: e4:6d:72:c0:bc:7b:eb:23:64:d7:5a:b4:56:9b:73: 2c:01:53:a3:e4:74:34:30:cb:85:18:14:fd:67:3e: 2c:71:21:61:f8:d3:d6:e2:39:07:9d:13:35:95:f4: 2f:3f:de:f0:8b:63:f9:43:fb:42:e6:c6:77:38:50: 88:ad:61:97:27:ad:24:39:32:49:9f:b1:43:38:91: 92:85:88:36:65:78:95:21:3e:2d:c6:f8:77:b4:6e: c5:a4:38:4d:50:a6:53:d6:0d:ac:1b:a8:ba:01:55: 6b:62:80:7e:54:d0:91:0e:c0:4d:f0:d6:34:a2:d0: 42:bd:01:f6:3f:83:ca:74:c2:e6:4c:a9:03:db:51: 47:90:d9:bc:1f:74:de:18:15:c1:9b:11:eb:ca:37: 34:da:31:85:be:f8:e4:2a:47:ea:3b:63:75:3c:1f: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:06:9C:06:9C:6D:EA:C2:83:D5:F2:C3:A3:A4:F1:5C:42:D4:FE:EE X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ca:2b:17:6a:00:58:89:96:60:52:de:6f:fd:39:2f:48:2a: 52:7f:04:08:f8:8a:07:76:fc:1a:91:34:f1:e3:2e:eb:f4:80: 02:e0:24:25:49:e4:32:31:82:d8:70:92:f1:67:0a:7f:49:91: 82:73:83:6e:7c:68:87:72:d2:f0:09:ce:7e:db:a9:1c:2e:99: 80:1c:e4:80:55:90:95:14:0b:53:65:3c:fa:cf:6a:1d:1a:a6: b3:37:26:68:ce:3e:65:77:64:da:b0:16:7f:35:5c:5e:8e:06: 26:6d:8e:24:9c:c8:4a:6e:5e:1c:13:99:0e:64:9f:c1:92:b1: ea:0c:b5:8b:a2:b3:01:73:c2:de:c9:ff:ba:40:26:e1:19:83: 83:a4:d4:10:1e:58:ea:8c:b0:96:ea:b5:28:7f:6b:fb:7e:78: 5a:86:9e:12:5f:06:6f:9c:89:e0:1b:1e:6e:a3:a0:a1:23:d2: b9:ac:34:12:13:97:b8:7c:32:08:66:f3:21:21:e2:e2:a6:f2: 98:02:b6:7e:9e:ec:21:69:b7:7f:63:41:5a:3c:55:f5:5f:21: cf:bb:b6:18:1f:57:3a:5f:a6:7d:08:b7:fe:5d:57:d1:46:9b: 6d:91:81:62:bf:98:7a:11:40:6a:c1:80:fe:b0:a3:bf:8a:87: c9:75:97:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1qvu/qNuAD+cu9wgAFh4yV+BugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjA2MTMwNDM5NDZaFw0yNjA2MTQwNjM1NDZaMDMxMTAvBgNV BAMTKDQ3MDY5QzA2OUM2REVBQzI4M0Q1RjJDM0EzQTRGMTVDNDJENEZFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ9maDBQ4YGg9lYgWhB6QPnFhN jlnB3MEtlEFop/3bhwfAnwVf5lpKXkVwx4iQFsYgLm4vNafI7lgseJfRLekANKkq 4KSutIjyEM0wtxj1o5OJkQEw5UjGJ+RtcsC8e+sjZNdatFabcywBU6PkdDQwy4UY FP1nPixxIWH409biOQedEzWV9C8/3vCLY/lD+0Lmxnc4UIitYZcnrSQ5MkmfsUM4 kZKFiDZleJUhPi3G+He0bsWkOE1QplPWDawbqLoBVWtigH5U0JEOwE3w1jSi0EK9 AfY/g8p0wuZMqQPbUUeQ2bwfdN4YFcGbEevKNzTaMYW++OQqR+o7Y3U8HweDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwacBpxt6sKD1fLDo6TxXELU/u4wHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfKKxdqAFiJlmBS3m/9OS9IKlJ/BAj4igd2 /BqRNPHjLuv0gALgJCVJ5DIxgthwkvFnCn9JkYJzg258aIdy0vAJzn7bqRwumYAc 5IBVkJUUC1NlPPrPah0aprM3JmjOPmV3ZNqwFn81XF6OBiZtjiScyEpuXhwTmQ5k n8GSseoMtYuiswFzwt7J/7pAJuEZg4Ok1BAeWOqMsJbqtSh/a/t+eFqGnhJfBm+c ieAbHm6joKEj0rmsNBITl7h8Mghm8yEh4uKm8pgCtn6e7CFpt39jQVo8VfVfIc+7 thgfVzpfpn0It/5dV9FGm22RgWK/mHoRQGrBgP6wo7+Kh8l1l8s= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:48 2026 by rpki-client