$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: nREXaF3K+rzhGhyIABapxELN+T+mfb41psPk9F64Yqc= Subject key identifier: D2:77:96:FB:86:9C:A8:13:DB:08:A2:1E:67:A8:0E:5D:60:6E:A9:C3 Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 21D080DB4D9595EEF7A2A81CA0CAF19F12394A69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 04:06:23 +0000 Manifest this update: Mon 15 Jun 2026 04:01:23 +0000 Manifest next update: Tue 16 Jun 2026 07:13:23 +0000 Files and hashes: 1: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: 5lCEXcAuURvM1mfSvYfbVov3ZUmlDmhwP+0xtixRABU=) 2: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) 3: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 4: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) 5: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 6: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) 7: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 8: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) 9: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d0:80:db:4d:95:95:ee:f7:a2:a8:1c:a0:ca:f1:9f:12:39:4a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: Jun 15 04:01:23 2026 GMT Not After : Jun 16 07:13:23 2026 GMT Subject: CN=D27796FB869CA813DB08A21E67A80E5D606EA9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ed:2e:4f:ad:f6:0d:84:88:8a:b3:40:36:68: d1:ab:67:a4:96:11:59:1c:f6:c3:be:f5:2e:bd:f8: 46:de:3b:ab:16:5b:03:e6:86:a1:36:be:55:f4:de: 93:19:44:47:92:5f:ad:3b:0e:d7:1e:6b:9d:81:13: dd:10:7b:e6:1b:83:fd:e1:06:52:dd:4d:f9:04:b3: 71:e6:87:d3:9a:0f:d8:51:7a:3c:1f:74:a0:24:7e: 7c:2c:5f:ff:79:0d:65:37:e3:a4:0a:51:60:55:e1: f3:17:25:6a:f6:51:57:8f:97:b3:ad:82:07:74:53: 9b:e6:c7:1a:45:a4:a1:61:00:87:4c:64:f4:66:ff: 43:42:bd:09:fa:17:51:5a:39:03:12:90:14:87:b5: 4e:c4:a0:62:a1:de:df:c5:e1:b6:0d:04:83:ab:b8: 62:b8:1b:58:c1:91:be:42:4e:7c:7a:f2:0f:ed:0c: 50:4b:03:a7:4b:70:ff:df:1f:51:b3:d1:b2:84:db: 37:82:bd:99:ee:6c:1a:17:f4:db:ab:57:a9:e0:9c: 1e:fd:79:39:c0:6e:1a:70:c3:02:20:cf:a7:d3:f9: ce:46:f2:6d:d5:0e:d6:94:33:ca:d1:02:3e:1e:72: b3:68:46:57:69:14:67:a6:c8:6d:7a:01:7a:0f:cd: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:77:96:FB:86:9C:A8:13:DB:08:A2:1E:67:A8:0E:5D:60:6E:A9:C3 X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7c:4a:b0:09:c8:d4:40:36:52:6d:37:fa:a2:c0:57:5d:b0: db:ae:c1:1d:7a:20:3b:19:6d:3b:92:57:ec:d3:75:d9:94:fd: c9:31:8c:87:5e:e2:e9:9e:07:40:52:fd:94:ad:94:9c:a8:ce: 46:4a:6e:16:62:6c:c4:ae:66:3c:0c:a8:6a:15:fb:b8:dd:70: 13:86:b8:7f:a5:fc:93:38:64:71:19:f7:73:53:97:a8:1b:cd: 30:e4:ac:e5:73:b3:49:15:a8:b4:14:a8:b6:d9:54:63:ab:02: 2c:6d:6d:9f:a0:47:78:f3:70:00:66:dc:d4:9d:30:9c:43:a4: b4:7b:08:47:d6:18:15:b1:68:62:1b:d0:4e:76:3c:c2:d7:87: c3:5b:c0:de:c8:7b:2c:ff:8b:2c:63:c4:a2:66:72:51:d1:4e: 1f:65:91:42:d0:5c:be:b8:ad:e9:23:88:92:f5:f5:ac:fd:ae: ea:78:35:e2:0e:9c:c3:e3:eb:b6:2f:6d:2e:bf:be:73:a7:cc: 7b:ea:85:a9:2a:34:2e:ce:f5:09:09:e6:ae:2f:65:03:c9:3b: e6:be:82:a1:bf:be:b0:67:da:7e:1c:f0:13:36:06:df:98:a8: ec:4a:ad:58:7b:07:e8:ef:75:26:b9:17:57:d3:94:9b:0b:35: 66:5e:cf:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdCA202Vle73oqgcoMrxnxI5SmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjA2MTUwNDAxMjNaFw0yNjA2MTYwNzEzMjNaMDMxMTAvBgNV BAMTKEQyNzc5NkZCODY5Q0E4MTNEQjA4QTIxRTY3QTgwRTVENjA2RUE5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY7S5PrfYNhIiKs0A2aNGrZ6SW EVkc9sO+9S69+EbeO6sWWwPmhqE2vlX03pMZREeSX607Dtcea52BE90Qe+Ybg/3h BlLdTfkEs3Hmh9OaD9hRejwfdKAkfnwsX/95DWU346QKUWBV4fMXJWr2UVePl7Ot ggd0U5vmxxpFpKFhAIdMZPRm/0NCvQn6F1FaOQMSkBSHtU7EoGKh3t/F4bYNBIOr uGK4G1jBkb5CTnx68g/tDFBLA6dLcP/fH1Gz0bKE2zeCvZnubBoX9NurV6ngnB79 eTnAbhpwwwIgz6fT+c5G8m3VDtaUM8rRAj4ecrNoRldpFGemyG16AXoPzQtBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0neW+4acqBPbCKIeZ6gOXWBuqcMwHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp8SrAJyNRANlJtN/qiwFddsNuuwR16IDsZ bTuSV+zTddmU/ckxjIde4umeB0BS/ZStlJyozkZKbhZibMSuZjwMqGoV+7jdcBOG uH+l/JM4ZHEZ93NTl6gbzTDkrOVzs0kVqLQUqLbZVGOrAixtbZ+gR3jzcABm3NSd MJxDpLR7CEfWGBWxaGIb0E52PMLXh8NbwN7Ieyz/iyxjxKJmclHRTh9lkULQXL64 rekjiJL19az9rup4NeIOnMPj67YvbS6/vnOnzHvqhakqNC7O9QkJ5q4vZQPJO+a+ gqG/vrBn2n4c8BM2Bt+YqOxKrVh7B+jvdSa5F1fTlJsLNWZezxQ= -----END CERTIFICATE-----Generated at Mon Jun 15 13:57:08 2026 by rpki-client