$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft File: AD238D07A804B8783FEA2C95818033D3F37F9B13.mft (raw, json) Hash identifier: GUxLWQnyHnl2Ryx+MSgx9XC6Ob1SP/7JBT9LBRFVonw= Subject key identifier: 48:7F:31:A3:A8:4F:8C:6B:20:16:6E:2C:72:C9:F3:50:90:1F:A4:62 Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 Certificate issuer: /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Certificate serial: 6516293B4493F92744E05106FBE9330909AC8D70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 22:03:57 +0000 Manifest this update: Tue 28 Jul 2026 21:58:57 +0000 Manifest next update: Thu 30 Jul 2026 00:04:57 +0000 Files and hashes: 1: AD238D07A804B8783FEA2C95818033D3F37F9B13.crl (hash: RfDY2JZsvD9BRPuSUjSjHFigza7JfkHcgndbswl4ZJ4=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:16:29:3b:44:93:f9:27:44:e0:51:06:fb:e9:33:09:09:ac:8d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Validity Not Before: Jul 28 21:58:57 2026 GMT Not After : Jul 30 00:04:57 2026 GMT Subject: CN=487F31A3A84F8C6B20166E2C72C9F350901FA462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:cd:44:77:e2:f7:97:85:87:ea:40:1f:48: bb:44:b2:9e:60:28:3b:cc:0a:09:6e:5a:82:5c:b4: a9:22:cc:71:55:0a:79:42:d6:32:d3:30:d4:99:7f: 1d:ae:ef:2b:12:79:ed:67:27:fb:b9:ef:50:15:f0: 2f:3b:54:cb:cd:ed:29:5f:3b:11:6a:d5:1b:c7:ea: 57:5a:1d:54:14:92:08:7d:73:10:20:be:26:9a:ba: 52:21:9d:43:ba:8e:dd:6b:4f:8c:49:4c:c8:c4:12: b6:eb:59:60:5e:cb:7c:66:fb:5f:fa:ce:74:ea:06: a5:42:9b:be:67:fc:2f:0f:de:cb:c3:1b:32:78:69: eb:d4:f1:5b:ca:42:b4:12:93:43:d0:51:d1:09:a2: ba:88:7f:f6:59:84:bb:6d:97:32:2c:23:9a:ae:2d: a9:70:f9:df:1a:ed:46:6b:25:91:03:55:10:c8:ff: a8:d1:db:66:2d:39:aa:3b:60:f4:3c:57:78:96:de: 0e:e9:79:a7:f0:08:42:b1:2f:7d:92:d8:72:6b:57: 90:4f:69:a2:25:97:a0:cd:3b:5c:88:b4:bc:9a:da: 06:f5:82:6f:bd:de:f7:29:43:30:54:95:6d:c5:82: ee:5f:cf:9b:2b:3e:07:5a:99:4b:2b:b3:f8:13:27: 00:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:31:A3:A8:4F:8C:6B:20:16:6E:2C:72:C9:F3:50:90:1F:A4:62 X509v3 Authority Key Identifier: keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:21:35:05:f3:d5:0e:e8:ac:f5:57:83:90:33:46:7c:41:1b: d1:c9:ab:f8:bb:ec:8e:bd:b9:d0:1a:66:2a:07:00:2a:78:11: 56:41:2a:ef:13:22:c7:4e:03:e1:52:4d:b8:79:09:7a:0b:d5: 54:8e:fc:33:16:70:9d:2c:0a:ed:25:ef:55:72:16:33:75:df: fa:e7:80:83:ca:06:04:28:c4:74:f3:7f:a1:e1:18:47:39:a1: dc:27:74:ff:52:ba:12:ae:73:f4:5e:e9:e8:d4:68:22:ed:7e: 57:61:dc:ec:a3:66:64:cb:e4:c2:83:e3:5e:e3:2e:cf:26:99: 34:62:6a:95:cf:c5:8e:2b:eb:11:d4:3d:fe:dc:a5:3f:5c:11: 2d:1d:e7:70:73:f6:21:9d:f3:be:94:78:68:73:97:81:dd:d9: 77:08:19:b3:91:5c:45:62:bb:34:03:51:d2:c1:90:42:5d:ae: 3a:b5:d1:1c:e9:f2:92:63:4b:69:be:b8:93:16:03:a7:c8:bf: a6:a4:26:fe:2c:b5:1f:8f:07:4b:cb:a7:98:4d:20:3d:22:17: 62:61:c9:15:d1:d2:b2:0c:e5:f3:1f:42:ff:f7:d1:7a:db:3b: cd:bc:60:fe:26:af:b1:06:8c:5d:64:4e:64:a6:27:7b:5a:40: 1c:14:8f:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRYpO0ST+SdE4FEG++kzCQmsjXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNG MzdGOUIxMzAeFw0yNjA3MjgyMTU4NTdaFw0yNjA3MzAwMDA0NTdaMDMxMTAvBgNV BAMTKDQ4N0YzMUEzQTg0RjhDNkIyMDE2NkUyQzcyQzlGMzUwOTAxRkE0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCORc1Ed+L3l4WH6kAfSLtEsp5g KDvMCgluWoJctKkizHFVCnlC1jLTMNSZfx2u7ysSee1nJ/u571AV8C87VMvN7Slf OxFq1RvH6ldaHVQUkgh9cxAgviaaulIhnUO6jt1rT4xJTMjEErbrWWBey3xm+1/6 znTqBqVCm75n/C8P3svDGzJ4aevU8VvKQrQSk0PQUdEJorqIf/ZZhLttlzIsI5qu Lalw+d8a7UZrJZEDVRDI/6jR22YtOao7YPQ8V3iW3g7peafwCEKxL32S2HJrV5BP aaIll6DNO1yItLya2gb1gm+93vcpQzBUlW3Fgu5fz5srPgdamUsrs/gTJwCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSH8xo6hPjGsgFm4scsnzUJAfpGIwHwYDVR0j BBgwFoAUrSONB6gEuHg/6iyVgYAz0/N/mxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU0NWM5ZWItM2JiNi00MjAzLThjODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdB ODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNGMzdGOUIxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDIzOEQwN0E4MDRCODc4M0ZFQTJDOTU4MTgwMzNEM0YzN0Y5 QjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMz RDNGMzdGOUIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAchNQXz1Q7orPVXg5AzRnxBG9HJq/i77I69 udAaZioHACp4EVZBKu8TIsdOA+FSTbh5CXoL1VSO/DMWcJ0sCu0l71VyFjN13/rn gIPKBgQoxHTzf6HhGEc5odwndP9SuhKuc/Re6ejUaCLtfldh3OyjZmTL5MKD417j Ls8mmTRiapXPxY4r6xHUPf7cpT9cES0d53Bz9iGd876UeGhzl4Hd2XcIGbORXEVi uzQDUdLBkEJdrjq10Rzp8pJjS2m+uJMWA6fIv6akJv4stR+PB0vLp5hNID0iF2Jh yRXR0rIM5fMfQv/30XrbO828YP4mr7EGjF1kTmSmJ3taQBwUjwk= -----END CERTIFICATE-----Generated at Wed Jul 29 07:53:29 2026 by rpki-client