$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft File: AD238D07A804B8783FEA2C95818033D3F37F9B13.mft (raw, json) Hash identifier: XwIMGUT73ghBSWTU/hcB+gZGyMW4zsTxmmHXcL2oLdk= Subject key identifier: 67:3C:73:48:A2:6D:3C:C0:2C:FC:0E:F5:FF:67:0B:8F:F6:CA:90:46 Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 Certificate issuer: /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Certificate serial: 1BD721EF4462149D98D1A1717422F8C583FB9C5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 12:00:30 +0000 Manifest this update: Fri 25 Sep 2026 11:55:30 +0000 Manifest next update: Sat 26 Sep 2026 13:53:30 +0000 Files and hashes: 1: AD238D07A804B8783FEA2C95818033D3F37F9B13.crl (hash: hZWDvBItNzrOnOpPm17+ytaQxcz997oe9uyBcKL05e8=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d7:21:ef:44:62:14:9d:98:d1:a1:71:74:22:f8:c5:83:fb:9c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Validity Not Before: Sep 25 11:55:30 2026 GMT Not After : Sep 26 13:53:30 2026 GMT Subject: CN=673C7348A26D3CC02CFC0EF5FF670B8FF6CA9046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:63:c6:71:4a:30:af:f7:d1:ae:b7:37:3d: 02:64:62:c6:de:6a:48:37:43:75:d5:7c:42:59:2f: 85:5e:db:c6:d1:9f:93:47:f1:be:71:16:bc:5c:ae: e8:77:a6:d0:be:b9:24:26:bb:bb:e7:a6:f0:e2:9c: c3:96:dc:bf:b9:cf:d7:53:2b:bc:e3:c1:f6:ec:5c: 12:92:7d:a2:f7:d6:0d:d8:b4:2b:07:e6:ae:82:af: bd:2f:dd:9d:0d:d2:a0:22:a5:cd:bd:76:f0:38:46: af:4e:b0:6f:17:54:0e:51:7b:99:8d:4c:82:bf:66: 4d:0a:91:87:c2:ba:6c:2c:07:59:b4:6a:88:00:68: 88:c9:b8:5c:73:e2:a2:8b:cc:94:59:d2:0c:6f:e6: 7f:79:da:ff:a1:21:66:35:71:a6:d5:0b:92:6d:57: e6:e6:63:b7:a8:e4:23:5f:d3:63:02:6c:c9:0b:03: be:88:c3:54:ec:72:08:86:a0:e4:56:1c:14:15:e9: c8:d1:7e:8f:83:50:10:7b:f6:c8:15:e8:c5:66:f6: 78:a9:36:95:37:1d:fa:38:a0:1e:f3:5f:26:b4:9b: 42:3d:b1:ec:cc:03:c5:b1:ab:df:b9:ec:54:ca:6d: 71:ed:87:9c:d0:94:3b:f2:92:56:0b:68:fc:b1:25: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3C:73:48:A2:6D:3C:C0:2C:FC:0E:F5:FF:67:0B:8F:F6:CA:90:46 X509v3 Authority Key Identifier: keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:2e:4e:b6:ad:62:2f:b5:e7:dd:fd:85:d2:cb:e7:53:8f:a8: 3f:ee:c6:0a:39:38:80:13:79:88:53:08:0b:8e:00:07:33:7c: 0a:85:62:88:55:ed:e5:a8:e7:82:95:ca:d6:36:4b:c6:e0:f0: 2f:b3:e9:1e:cd:47:cd:b7:d2:61:1a:ce:81:95:fb:95:9f:be: c3:f3:f1:07:fb:7b:2d:a1:d4:db:31:ef:e4:cd:4e:83:00:94: a9:84:76:41:05:32:42:03:11:a0:53:7c:d3:86:58:73:2f:78: bd:18:c8:f2:23:dd:21:b7:60:58:48:d8:9f:3d:94:d7:18:95: 9d:fa:fe:04:b8:a2:65:01:48:b4:8f:aa:44:89:06:85:0b:72: d0:af:21:97:a6:32:20:78:f8:70:2a:9f:84:50:3b:6a:35:74: 8f:96:56:0e:c5:c2:65:1b:81:75:ec:24:59:96:c9:a6:83:0e: 89:f6:31:1c:94:ad:ac:3b:0d:23:47:fd:8c:0c:ef:95:c2:a4: 95:2a:1d:fe:21:d4:04:c1:8b:40:55:cf:6c:13:ad:3a:3a:63: 55:ca:33:8f:69:8c:53:f8:1d:92:99:d8:25:8a:5a:59:67:b3: 01:24:8a:6d:50:1e:af:00:b5:3b:19:23:9a:12:21:98:65:8c: b8:32:b4:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9ch70RiFJ2Y0aFxdCL4xYP7nFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNG MzdGOUIxMzAeFw0yNjA5MjUxMTU1MzBaFw0yNjA5MjYxMzUzMzBaMDMxMTAvBgNV BAMTKDY3M0M3MzQ4QTI2RDNDQzAyQ0ZDMEVGNUZGNjcwQjhGRjZDQTkwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3n2PGcUowr/fRrrc3PQJkYsbe akg3Q3XVfEJZL4Ve28bRn5NH8b5xFrxcruh3ptC+uSQmu7vnpvDinMOW3L+5z9dT K7zjwfbsXBKSfaL31g3YtCsH5q6Cr70v3Z0N0qAipc29dvA4Rq9OsG8XVA5Re5mN TIK/Zk0KkYfCumwsB1m0aogAaIjJuFxz4qKLzJRZ0gxv5n952v+hIWY1cabVC5Jt V+bmY7eo5CNf02MCbMkLA76Iw1TscgiGoORWHBQV6cjRfo+DUBB79sgV6MVm9nip NpU3Hfo4oB7zXya0m0I9sezMA8Wxq9+57FTKbXHth5zQlDvyklYLaPyxJSUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzxzSKJtPMAs/A71/2cLj/bKkEYwHwYDVR0j BBgwFoAUrSONB6gEuHg/6iyVgYAz0/N/mxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU0NWM5ZWItM2JiNi00MjAzLThjODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdB ODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNGMzdGOUIxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDIzOEQwN0E4MDRCODc4M0ZFQTJDOTU4MTgwMzNEM0YzN0Y5 QjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMz RDNGMzdGOUIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAuTratYi+15939hdLL51OPqD/uxgo5OIAT eYhTCAuOAAczfAqFYohV7eWo54KVytY2S8bg8C+z6R7NR8230mEazoGV+5WfvsPz 8Qf7ey2h1Nsx7+TNToMAlKmEdkEFMkIDEaBTfNOGWHMveL0YyPIj3SG3YFhI2J89 lNcYlZ36/gS4omUBSLSPqkSJBoULctCvIZemMiB4+HAqn4RQO2o1dI+WVg7FwmUb gXXsJFmWyaaDDon2MRyUraw7DSNH/YwM75XCpJUqHf4h1ATBi0BVz2wTrTo6Y1XK M49pjFP4HZKZ2CWKWllnswEkim1QHq8AtTsZI5oSIZhljLgytJA= -----END CERTIFICATE-----Generated at Fri Sep 25 17:57:11 2026 by rpki-client