$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json) Hash identifier: 0UDKuNge7O+eMMC7UJz19AFWzpOyxkE3FRSag1DFqTo= Subject key identifier: 8F:75:22:D9:E7:CB:76:67:D3:49:B4:73:D2:45:AA:DD:86:98:79:CC Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Certificate serial: 792EE6F7CB1F860240D75D26FBA1558626ECC542 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 09:43:36 +0000 Manifest this update: Mon 21 Sep 2026 09:38:36 +0000 Manifest next update: Tue 22 Sep 2026 13:13:36 +0000 Files and hashes: 1: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: SOisOA1DikxlLllWf9JYGl0AemoaWvMXE79PpY/P2e0=) 2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=) 3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2e:e6:f7:cb:1f:86:02:40:d7:5d:26:fb:a1:55:86:26:ec:c5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Validity Not Before: Sep 21 09:38:36 2026 GMT Not After : Sep 22 13:13:36 2026 GMT Subject: CN=8F7522D9E7CB7667D349B473D245AADD869879CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8e:ac:34:cc:70:96:08:41:a3:16:36:85:be: 5a:91:fc:ac:c0:cd:5e:10:f0:dc:b1:9d:c5:7e:6a: c9:30:6f:0c:8a:2e:11:96:46:ab:e2:53:84:5d:ca: c7:d5:a7:05:bd:82:0e:d3:ee:7e:d9:99:e6:d7:72: 7c:1f:48:db:c4:c4:1c:46:96:29:82:d0:b3:8e:df: 07:a9:d7:af:33:ef:d6:7f:85:bb:f4:56:5e:08:9d: 1a:46:36:dd:39:2d:84:b2:34:2e:e1:11:b2:50:74: 44:28:42:03:a7:d5:f0:c6:94:38:c6:35:c2:35:ce: 45:e3:81:99:48:d7:c8:8e:cb:a1:af:2e:cf:5e:e5: c2:a3:c9:93:d8:7d:24:8e:45:93:62:b2:6c:b0:3b: 5c:3d:79:9e:d0:f7:9a:d8:82:eb:40:c8:13:ad:69: a9:90:00:b4:19:12:66:5f:8d:eb:f3:34:ea:e1:9a: d7:84:c5:b1:20:9f:fc:5e:f7:f7:bc:da:48:c9:fc: 0d:f6:57:4f:a3:e0:3c:b5:5d:1b:b3:eb:8c:48:c0: 2f:20:59:c6:7e:82:d6:3f:7b:75:ba:2b:30:92:ee: ff:68:da:b7:8a:5b:9e:6a:00:41:3a:76:83:94:ef: 24:f0:d6:c7:82:a0:9f:bd:eb:3f:a1:f6:c5:17:24: a8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:75:22:D9:E7:CB:76:67:D3:49:B4:73:D2:45:AA:DD:86:98:79:CC X509v3 Authority Key Identifier: keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3e:8d:d6:d0:cb:22:bb:d7:89:fa:0d:ef:ca:67:24:c6:2f: 7a:e9:fd:c3:81:1a:8d:79:c3:d7:30:b6:55:fe:da:38:42:99: 76:74:39:22:b9:27:41:dc:b0:2c:13:4a:80:10:5a:13:25:41: dd:b2:1b:31:dd:87:b7:89:90:c4:95:24:4f:dc:64:2e:53:40: cf:62:23:7e:bd:70:6a:5c:02:cc:fb:3f:21:39:ad:dd:75:a1: 66:b8:7e:03:76:88:c8:7c:e5:90:24:7e:14:54:b5:66:34:23: ab:da:fd:e2:f2:ea:b1:17:e7:00:ee:36:f6:d8:a6:83:a1:f6: 41:fb:a9:ee:0f:d0:65:af:a8:b8:d7:7d:8d:df:82:25:34:eb: 8f:5c:ec:26:88:8f:8f:c8:d5:6f:d0:0d:76:f9:9d:96:7d:ae: c4:d7:a5:b8:da:5a:8a:3c:7f:6a:c4:cf:ed:59:3c:11:05:81: 64:d4:1d:8a:bd:68:33:df:98:fd:75:cb:37:6a:e3:e1:7c:f2: 06:d1:f3:2a:10:65:0b:9c:3f:2d:d5:17:9f:2f:df:3e:0a:67: ab:c5:87:8f:f3:b7:c2:db:c2:4f:f1:ff:12:35:5d:fc:5a:a9: 89:0e:11:80:20:92:79:56:35:e8:fd:bc:36:19:f4:59:b0:df: fd:3c:e0:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeS7m98sfhgJA110m+6FVhibsxUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5 QkMyRjIxRjAeFw0yNjA5MjEwOTM4MzZaFw0yNjA5MjIxMzEzMzZaMDMxMTAvBgNV BAMTKDhGNzUyMkQ5RTdDQjc2NjdEMzQ5QjQ3M0QyNDVBQUREODY5ODc5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4jqw0zHCWCEGjFjaFvlqR/KzA zV4Q8NyxncV+askwbwyKLhGWRqviU4RdysfVpwW9gg7T7n7ZmebXcnwfSNvExBxG limC0LOO3wep168z79Z/hbv0Vl4InRpGNt05LYSyNC7hEbJQdEQoQgOn1fDGlDjG NcI1zkXjgZlI18iOy6GvLs9e5cKjyZPYfSSORZNismywO1w9eZ7Q95rYgutAyBOt aamQALQZEmZfjevzNOrhmteExbEgn/xe9/e82kjJ/A32V0+j4Dy1XRuz64xIwC8g WcZ+gtY/e3W6KzCS7v9o2reKW55qAEE6doOU7yTw1seCoJ+96z+h9sUXJKhbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3Ui2efLdmfTSbRz0kWq3YaYecwwHwYDVR0j BBgwFoAUrRnSJkiQA/CStp1X8q7khJvC8h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNiMTc4NTctYmUzZC00MTMyLThmMTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0 ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5QkMyRjIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRDE5RDIyNjQ4OTAwM0YwOTJCNjlENTdGMkFFRTQ4NDlCQzJG MjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0 ODQ5QkMyRjIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU+jdbQyyK714n6De/KZyTGL3rp/cOBGo15 w9cwtlX+2jhCmXZ0OSK5J0HcsCwTSoAQWhMlQd2yGzHdh7eJkMSVJE/cZC5TQM9i I369cGpcAsz7PyE5rd11oWa4fgN2iMh85ZAkfhRUtWY0I6va/eLy6rEX5wDuNvbY poOh9kH7qe4P0GWvqLjXfY3fgiU0649c7CaIj4/I1W/QDXb5nZZ9rsTXpbjaWoo8 f2rEz+1ZPBEFgWTUHYq9aDPfmP11yzdq4+F88gbR8yoQZQucPy3VF58v3z4KZ6vF h4/zt8Lbwk/x/xI1XfxaqYkOEYAgknlWNej9vDYZ9Fmw3/084NE= -----END CERTIFICATE-----Generated at Mon Sep 21 23:45:28 2026 by rpki-client