$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft (raw, json) Hash identifier: xYneS3+//umeJnxqylZMnwNtCFF4jGYeCizDmFRMbKw= Subject key identifier: F2:B1:75:2B:D6:96:5A:55:0E:E9:6F:65:0F:FA:66:83:F7:2C:34:BA Authority key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A Certificate issuer: /CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Certificate serial: 1AC1D821CFD835D5570961265579243E75E24532 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 03:43:44 +0000 Manifest this update: Sun 15 Nov 2026 03:38:44 +0000 Manifest next update: Mon 16 Nov 2026 04:52:44 +0000 Files and hashes: 1: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K0hWr7nblRa/oP+EjsYT3ozmxs7zbRuzowY36KyLRjU=) 2: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: HdNzGHLZKPYzFVkh/tdlOMNe0NE8KbyBRcBVr8tLORE=) 3: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: NH4yUQHyXjk48GXKuIwjhyG7vZ+Cx25bwYRUGuZituk=) 4: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl (hash: AEqy9sQ/DaSpJ9jjhxbgiY62XNtrFEKzsh6fsmFJz7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c1:d8:21:cf:d8:35:d5:57:09:61:26:55:79:24:3e:75:e2:45:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Validity Not Before: Nov 15 03:38:44 2026 GMT Not After : Nov 16 04:52:44 2026 GMT Subject: CN=F2B1752BD6965A550EE96F650FFA6683F72C34BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:47:f0:b6:cd:d2:43:b2:2a:ba:8f:5d:2f:dc: 08:b4:50:fe:ea:8b:e6:0e:c5:e5:b8:6a:78:36:01: 17:97:5d:80:06:98:ea:9b:db:3b:79:38:4a:cc:61: 5d:eb:d3:4c:d0:68:a7:17:82:ea:6b:57:11:db:95: 0d:d6:67:40:a8:a7:98:56:1a:1e:1d:b8:f3:e0:fa: 35:16:f5:7b:74:43:28:72:9b:90:2b:3c:68:29:93: 4d:0a:40:24:bc:e3:dd:82:a3:9a:95:13:c7:97:3e: af:c5:7e:b9:32:a0:2e:45:ad:de:c7:dd:f9:a8:1a: 53:f9:37:02:fd:37:7b:04:2b:ae:02:3f:01:ca:56: 07:d7:ae:d9:34:b4:f5:58:54:0e:e1:99:96:7e:40: bd:93:a3:58:73:0b:5e:04:67:10:88:64:dc:44:9b: 39:e0:40:d0:74:64:64:b1:50:4e:6f:48:4c:49:31: 27:61:86:43:df:20:9d:37:39:8a:cf:0d:f0:83:41: 23:8b:cb:ca:e5:42:c6:2b:57:cf:86:a5:29:e3:17: d2:74:50:f3:13:0d:16:45:48:ac:ab:f4:ae:9f:55: 8f:8e:6f:31:48:da:08:93:cd:47:66:2e:fd:28:2f: 82:10:68:8e:d4:dd:fa:63:ca:5b:24:69:c7:e3:26: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B1:75:2B:D6:96:5A:55:0E:E9:6F:65:0F:FA:66:83:F7:2C:34:BA X509v3 Authority Key Identifier: keyid:AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:94:08:91:1f:28:88:80:7e:09:0d:a4:65:98:a6:8e:4f:0a: 5d:bd:56:86:ee:4d:eb:f4:d8:fa:f1:3b:92:10:a7:bd:b6:e9: bc:e4:70:8a:e2:8b:42:30:16:31:d6:9f:ff:3b:1f:10:18:49: fb:48:ba:2d:23:94:f0:b9:31:c0:ef:42:58:5b:04:c4:59:0e: 89:2b:90:16:85:6d:a2:02:a3:8d:63:3c:3a:56:94:3d:c4:7b: 55:94:b5:22:76:db:af:24:d0:c0:48:26:94:80:e0:11:96:75: e6:90:ae:6a:e2:34:a6:26:b5:ac:40:1c:cb:43:52:60:bd:1f: 17:36:2b:d9:ed:fa:11:15:ee:97:3a:d8:42:2a:c1:84:4c:33: 9f:69:37:84:e6:8e:02:d0:d0:40:c9:82:36:7c:ca:8a:0e:fe: c8:72:fc:70:9f:12:a0:a6:81:fe:68:af:14:a4:2b:dd:3b:3a: fe:1f:c2:a1:50:54:2f:8d:38:6f:a0:3a:93:b3:93:d0:5f:03: 00:83:41:a8:be:61:6f:6b:43:6a:57:39:23:7a:86:cb:a0:6c: d0:6a:aa:5d:82:40:36:27:56:2b:9f:c9:81:15:67:0b:8f:58: 28:5e:44:e5:bb:c9:e5:be:6e:cb:a5:2c:31:e5:2b:52:a9:89: 18:38:4d:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsHYIc/YNdVXCWEmVXkkPnXiRTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1 MUE2RkUyQTAeFw0yNjExMTUwMzM4NDRaFw0yNjExMTYwNDUyNDRaMDMxMTAvBgNV BAMTKEYyQjE3NTJCRDY5NjVBNTUwRUU5NkY2NTBGRkE2NjgzRjcyQzM0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRR/C2zdJDsiq6j10v3Ai0UP7q i+YOxeW4ang2AReXXYAGmOqb2zt5OErMYV3r00zQaKcXguprVxHblQ3WZ0Cop5hW Gh4duPPg+jUW9Xt0Qyhym5ArPGgpk00KQCS8492Co5qVE8eXPq/FfrkyoC5Frd7H 3fmoGlP5NwL9N3sEK64CPwHKVgfXrtk0tPVYVA7hmZZ+QL2To1hzC14EZxCIZNxE mzngQNB0ZGSxUE5vSExJMSdhhkPfIJ03OYrPDfCDQSOLy8rlQsYrV8+GpSnjF9J0 UPMTDRZFSKyr9K6fVY+ObzFI2giTzUdmLv0oL4IQaI7U3fpjylskacfjJrvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rF1K9aWWlUO6W9lD/pmg/csNLowHwYDVR0j BBgwFoAUrWsKLQaoV3HSovGvabKaU1Gm/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY1NTFhYjktODA0MS00YTlhLTliNTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQw NkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1MUE2RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDZCMEEyRDA2QTg1NzcxRDJBMkYxQUY2OUIyOUE1MzUxQTZG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlB NTM1MUE2RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCUCJEfKIiAfgkNpGWYpo5PCl29VobuTev0 2PrxO5IQp7226bzkcIrii0IwFjHWn/87HxAYSftIui0jlPC5McDvQlhbBMRZDokr kBaFbaICo41jPDpWlD3Ee1WUtSJ2268k0MBIJpSA4BGWdeaQrmriNKYmtaxAHMtD UmC9Hxc2K9nt+hEV7pc62EIqwYRMM59pN4TmjgLQ0EDJgjZ8yooO/shy/HCfEqCm gf5orxSkK907Ov4fwqFQVC+NOG+gOpOzk9BfAwCDQai+YW9rQ2pXOSN6hsugbNBq ql2CQDYnViufyYEVZwuPWCheROW7yeW+bsulLDHlK1KpiRg4TUI= -----END CERTIFICATE-----Generated at Sun Nov 15 11:56:33 2026 by rpki-client