$ rpki-client -vvf rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft (raw, json) Hash identifier: 0d2tOqpZaNBdcqJe0gg4VpEKbGvAm5HltEi5vgVoXyg= Subject key identifier: E7:94:F6:5B:98:1E:B9:03:3E:EE:D0:D2:E0:B4:7A:95:42:D1:8E:97 Authority key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A Certificate issuer: /CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Certificate serial: 6036E473A22A86539B2F6502577395C41D39167E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 13:02:40 +0000 Manifest this update: Tue 28 Jul 2026 12:57:40 +0000 Manifest next update: Wed 29 Jul 2026 15:09:40 +0000 Files and hashes: 1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: HdNzGHLZKPYzFVkh/tdlOMNe0NE8KbyBRcBVr8tLORE=) 2: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl (hash: UHz7QRdf7VefevOyghJHCxd2yV38hh7920cxnPqrdLA=) 3: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: NH4yUQHyXjk48GXKuIwjhyG7vZ+Cx25bwYRUGuZituk=) 4: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K0hWr7nblRa/oP+EjsYT3ozmxs7zbRuzowY36KyLRjU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:36:e4:73:a2:2a:86:53:9b:2f:65:02:57:73:95:c4:1d:39:16:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Validity Not Before: Jul 28 12:57:40 2026 GMT Not After : Jul 29 15:09:40 2026 GMT Subject: CN=E794F65B981EB9033EEED0D2E0B47A9542D18E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:05:97:e8:08:21:96:a8:2f:49:7d:6e:db: 84:c9:4c:3a:73:68:04:e4:37:39:87:32:e1:27:ab: be:33:17:dc:ee:2a:4f:ed:10:dd:7d:ce:e4:7b:66: 5e:2f:f4:e8:6d:58:8e:15:00:c4:76:48:73:6e:4a: 4f:d3:c1:ce:ac:6b:93:87:6d:0a:7f:cc:3c:03:1a: c2:8d:f1:26:65:a6:a3:60:54:0c:28:f1:ac:25:f7: 7a:3d:8e:36:b2:10:87:61:c3:10:fa:42:70:5a:46: a6:b4:05:88:05:ba:62:ac:41:bf:1d:f5:d4:48:8b: e9:f0:5a:3d:27:7c:31:bb:f6:f7:11:9b:1f:74:9e: 93:03:b6:cf:8f:3b:36:4a:14:66:b6:76:1d:bd:63: 37:3e:34:bc:df:59:bd:4f:12:b9:8f:f9:6a:84:99: 30:b1:89:2c:2c:03:c4:57:fb:b0:e5:b5:ea:ed:5e: e7:c7:63:67:7b:76:45:c7:3a:d4:33:8b:c7:89:e7: c7:13:55:de:5c:af:a5:9b:e2:f7:e4:f2:8b:ac:d8: 58:87:66:cd:b3:80:87:7a:7f:c6:11:4f:4d:17:78: 31:1d:d1:d8:12:91:ea:48:b1:f5:a6:9c:de:58:1b: b5:f3:a7:bc:92:5c:d2:69:38:9f:30:1a:92:0c:b7: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:F6:5B:98:1E:B9:03:3E:EE:D0:D2:E0:B4:7A:95:42:D1:8E:97 X509v3 Authority Key Identifier: keyid:AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:08:12:d6:ab:a4:84:82:66:a2:72:d9:df:53:7f:75:d8:26: 80:e0:5a:04:7a:1f:11:3a:15:e9:a6:c7:66:cb:ea:67:4e:0e: cc:0f:6a:cc:7a:9a:11:70:e0:70:c9:20:d3:65:b2:cb:41:73: 53:f6:4a:91:f7:8f:02:9e:02:d6:21:74:69:af:57:26:cb:2d: 7a:51:7c:5b:aa:a2:b7:0a:a2:b4:34:21:2d:82:99:97:fe:61: 2b:8f:c9:32:83:7d:2d:4e:79:68:41:bc:3b:6a:ea:24:5e:d4: a0:c1:66:ae:9b:52:3e:1b:13:4f:19:d2:7a:c0:e5:75:d7:78: 3f:8f:68:54:ae:ec:38:92:54:7d:be:30:c9:b8:be:00:6b:04: 0f:f0:e3:b7:e8:36:3c:00:95:28:73:a6:e6:d7:a6:1c:d8:0f: 9d:94:0c:e4:33:cd:80:cb:4a:72:ce:4c:b0:40:9d:5b:b4:f1: f3:f4:39:d8:09:b4:4b:23:2e:89:f9:dc:1f:d0:e4:ec:c6:3e: db:e9:07:c5:68:ea:8f:e4:72:9a:1a:74:60:df:b6:37:11:25: b6:a0:3d:f0:e7:e6:cd:e6:8f:98:1f:36:d2:f9:f1:a5:2a:a6: 66:a9:7f:bf:26:83:07:ed:5a:10:51:0f:19:27:71:67:9d:43: fc:68:15:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDbkc6IqhlObL2UCV3OVxB05Fn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1 MUE2RkUyQTAeFw0yNjA3MjgxMjU3NDBaFw0yNjA3MjkxNTA5NDBaMDMxMTAvBgNV BAMTKEU3OTRGNjVCOTgxRUI5MDMzRUVFRDBEMkUwQjQ3QTk1NDJEMThFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcgWX6AghlqgvSX1u24TJTDpz aATkNzmHMuEnq74zF9zuKk/tEN19zuR7Zl4v9OhtWI4VAMR2SHNuSk/Twc6sa5OH bQp/zDwDGsKN8SZlpqNgVAwo8awl93o9jjayEIdhwxD6QnBaRqa0BYgFumKsQb8d 9dRIi+nwWj0nfDG79vcRmx90npMDts+POzZKFGa2dh29Yzc+NLzfWb1PErmP+WqE mTCxiSwsA8RX+7DltertXufHY2d7dkXHOtQzi8eJ58cTVd5cr6Wb4vfk8ous2FiH Zs2zgId6f8YRT00XeDEd0dgSkepIsfWmnN5YG7Xzp7ySXNJpOJ8wGpIMt08pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU55T2W5geuQM+7tDS4LR6lULRjpcwHwYDVR0j BBgwFoAUrWsKLQaoV3HSovGvabKaU1Gm/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY1NTFhYjktODA0MS00YTlhLTliNTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQw NkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1MUE2RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDZCMEEyRDA2QTg1NzcxRDJBMkYxQUY2OUIyOUE1MzUxQTZG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlB NTM1MUE2RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwIEtarpISCZqJy2d9Tf3XYJoDgWgR6HxE6 Femmx2bL6mdODswPasx6mhFw4HDJINNlsstBc1P2SpH3jwKeAtYhdGmvVybLLXpR fFuqorcKorQ0IS2CmZf+YSuPyTKDfS1OeWhBvDtq6iRe1KDBZq6bUj4bE08Z0nrA 5XXXeD+PaFSu7DiSVH2+MMm4vgBrBA/w47foNjwAlShzpubXphzYD52UDOQzzYDL SnLOTLBAnVu08fP0OdgJtEsjLon53B/Q5OzGPtvpB8Vo6o/kcpoadGDftjcRJbag PfDn5s3mj5gfNtL58aUqpmapf78mgwftWhBRDxkncWedQ/xoFTg= -----END CERTIFICATE-----Generated at Wed Jul 29 03:09:24 2026 by rpki-client