$ rpki-client -vvvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: 25J4D3q0NzJ55kaMYnAbfRPk4yDHP4nodSXGNiSuvDQ= Subject key identifier: 17:F8:E0:B2:55:43:1C:AC:67:1C:41:BF:F2:57:1A:EB:53:62:20:D0 Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 2F17814742F7B17E307D5294F35E2983A000818E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:57:45 +0000 Manifest this update: Mon 21 Sep 2026 00:52:45 +0000 Manifest next update: Tue 22 Sep 2026 03:23:45 +0000 Files and hashes: 1: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) 2: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) 3: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 4: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 5: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) 6: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 7: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: MPofk6E1MxX4cunqgsdKg6DvzfRotPsz28juwARc0u8=) 8: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) 9: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:17:81:47:42:f7:b1:7e:30:7d:52:94:f3:5e:29:83:a0:00:81:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: Sep 21 00:52:45 2026 GMT Not After : Sep 22 03:23:45 2026 GMT Subject: CN=17F8E0B255431CAC671C41BFF2571AEB536220D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:00:e2:62:ac:c6:3f:40:f5:75:a0:c6:a7: a6:2d:c8:28:81:80:dd:3c:30:1b:9e:36:2a:a6:3d: 06:37:18:87:9b:6e:bf:99:fe:56:7d:3b:96:e8:b2: ed:31:7a:ba:da:c0:21:4e:15:62:1f:14:a3:9e:fe: 12:b9:d7:10:5c:1c:b4:8f:c6:7f:8b:6a:5e:d9:37: b3:73:35:43:3f:0d:d5:7c:27:1f:f9:91:ea:1f:e3: 8f:44:71:fa:5d:aa:74:91:d0:f4:76:7a:b4:b3:f8: 13:68:06:75:19:89:aa:ba:bd:6a:10:f6:84:19:a5: e0:15:40:49:36:95:5e:5e:9c:b8:08:0d:76:f8:39: 38:c8:b4:71:b0:0c:3a:ca:9e:0f:13:5c:b4:0b:cc: 4c:2e:81:2e:a8:5e:cd:ee:3e:b3:fa:06:9d:3d:b0: d9:b5:9e:60:90:12:74:5e:96:d0:bb:b0:4a:57:97: c5:03:75:86:8c:6a:42:1c:61:ce:2b:b1:c1:2e:05: f2:aa:f2:15:72:10:a5:19:a7:55:46:11:0c:81:86: 48:99:af:d5:ea:c8:dc:71:7f:4b:cd:36:24:cb:7d: 2f:07:67:13:2f:19:37:03:f4:3e:cf:a8:ff:60:92: 58:44:17:28:b8:7f:f4:4d:69:91:df:56:a7:58:a8: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F8:E0:B2:55:43:1C:AC:67:1C:41:BF:F2:57:1A:EB:53:62:20:D0 X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c7:26:ec:21:d2:03:a5:d1:94:8b:e2:24:25:cf:dc:bc:d3: 58:87:57:6e:75:62:bc:f7:88:f9:1c:7b:f2:63:00:56:c0:41: 36:8a:55:80:6a:49:72:64:da:62:ec:fa:1f:30:e8:9c:39:9c: b1:3b:ae:9d:d2:0f:32:7b:bc:96:ce:f2:8d:af:d2:43:3b:b6: da:5d:25:93:d0:03:3a:fe:8e:20:e8:ae:84:38:e1:00:fe:18: 06:d7:9a:9e:50:a5:75:2b:a4:9d:f6:2e:70:f6:07:af:f6:d0: 71:5e:5b:ac:e1:2b:8c:d0:ef:b0:f3:a6:05:14:6a:d6:05:db: 66:b7:9b:f8:ca:c8:5d:2b:26:f0:92:64:f4:f4:19:f8:a4:e8: dd:6e:ba:35:5c:a6:b7:70:6b:4b:9a:55:77:53:58:04:07:b1: 05:dd:92:17:1c:f3:86:8e:f0:8f:b3:e2:6e:61:90:27:4e:76: bb:01:a6:5b:5d:60:31:0e:ad:77:ad:5d:6f:75:8f:e5:61:5e: 2c:c6:ac:81:c9:67:92:df:37:f4:d3:74:df:0d:ca:d9:8f:15: 2c:e2:b0:f9:fe:6b:f8:e4:61:b8:38:26:ab:dd:60:7a:b4:2a: d4:a0:02:b1:2b:8a:96:34:7f:6c:c6:59:9c:22:d5:10:71:4d: f5:50:59:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxeBR0L3sX4wfVKU814pg6AAgY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjA5MjEwMDUyNDVaFw0yNjA5MjIwMzIzNDVaMDMxMTAvBgNV BAMTKDE3RjhFMEIyNTU0MzFDQUM2NzFDNDFCRkYyNTcxQUVCNTM2MjIwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDReQDiYqzGP0D1daDGp6YtyCiB gN08MBueNiqmPQY3GIebbr+Z/lZ9O5bosu0xerrawCFOFWIfFKOe/hK51xBcHLSP xn+Lal7ZN7NzNUM/DdV8Jx/5keof449EcfpdqnSR0PR2erSz+BNoBnUZiaq6vWoQ 9oQZpeAVQEk2lV5enLgIDXb4OTjItHGwDDrKng8TXLQLzEwugS6oXs3uPrP6Bp09 sNm1nmCQEnReltC7sEpXl8UDdYaMakIcYc4rscEuBfKq8hVyEKUZp1VGEQyBhkiZ r9XqyNxxf0vNNiTLfS8HZxMvGTcD9D7PqP9gklhEFyi4f/RNaZHfVqdYqF/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/jgslVDHKxnHEG/8lca61NiINAwHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzHJuwh0gOl0ZSL4iQlz9y801iHV251Yrz3 iPkce/JjAFbAQTaKVYBqSXJk2mLs+h8w6Jw5nLE7rp3SDzJ7vJbO8o2v0kM7ttpd JZPQAzr+jiDoroQ44QD+GAbXmp5QpXUrpJ32LnD2B6/20HFeW6zhK4zQ77DzpgUU atYF22a3m/jKyF0rJvCSZPT0Gfik6N1uujVcprdwa0uaVXdTWAQHsQXdkhcc84aO 8I+z4m5hkCdOdrsBpltdYDEOrXetXW91j+VhXizGrIHJZ5LfN/TTdN8NytmPFSzi sPn+a/jkYbg4JqvdYHq0KtSgArEripY0f2zGWZwi1RBxTfVQWSE= -----END CERTIFICATE-----Generated at Mon Sep 21 12:49:25 2026 by rpki-client