$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft (raw, json) Hash identifier: RfwNDMNga2f+X4/Lvp9coMdBXD5g4clmvK65B/3sENk= Subject key identifier: 0E:48:2D:F8:1A:E0:80:2F:5C:0A:69:42:8F:C1:1B:CE:AD:D5:49:69 Authority key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A Certificate issuer: /CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Certificate serial: 6A4D1B1113BE0EE4D02B15C3FEC0944A63ACDC37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:48:51 +0000 Manifest this update: Mon 21 Sep 2026 05:43:51 +0000 Manifest next update: Tue 22 Sep 2026 07:37:51 +0000 Files and hashes: 1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: HdNzGHLZKPYzFVkh/tdlOMNe0NE8KbyBRcBVr8tLORE=) 2: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K0hWr7nblRa/oP+EjsYT3ozmxs7zbRuzowY36KyLRjU=) 3: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl (hash: UMnoE8+Iq5miXVRGq9baZgzg77l/LBPAH/pYg2mZ+2s=) 4: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: NH4yUQHyXjk48GXKuIwjhyG7vZ+Cx25bwYRUGuZituk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4d:1b:11:13:be:0e:e4:d0:2b:15:c3:fe:c0:94:4a:63:ac:dc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Validity Not Before: Sep 21 05:43:51 2026 GMT Not After : Sep 22 07:37:51 2026 GMT Subject: CN=0E482DF81AE0802F5C0A69428FC11BCEADD54969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:db:4e:78:53:85:f5:59:31:77:c3:01:c4: 0d:17:aa:72:46:17:9a:15:25:a7:ef:51:ac:55:8e: c7:9b:a6:b4:15:57:d4:f2:73:35:5e:84:2a:ee:89: 6c:a5:ee:fa:a2:e1:0e:03:51:5a:31:fd:1c:ef:8f: 2c:b6:e5:25:33:d2:34:bb:3e:b1:e0:41:65:fe:bd: c8:20:8f:80:77:40:a3:74:c4:22:ec:1f:55:6b:da: de:88:37:4e:c6:05:44:9d:e9:29:f7:86:5c:28:9f: 39:68:dd:38:41:24:0a:08:cb:eb:c4:98:d5:d4:7f: b7:7b:1a:5d:c7:f5:5d:ca:16:ae:d2:83:af:5e:5b: 0b:52:e0:2c:d9:bf:bb:27:4a:db:96:fe:27:da:84: 5e:42:81:cb:1e:f6:99:0f:1c:9a:46:cc:82:38:a4: e3:95:24:77:8f:9c:8b:95:4e:58:ea:84:08:17:de: 76:e8:46:ca:cd:c5:c3:d3:03:82:ce:00:8e:36:17: 8f:d9:bf:3d:bc:66:87:63:87:fc:18:35:8e:72:36: 65:b7:24:cc:fe:6e:6c:cb:e9:6c:2d:6f:c2:ad:ae: 88:ff:11:4a:a2:80:6c:04:36:62:24:50:32:fa:21: bb:56:15:66:26:e3:3a:8e:74:db:8e:64:f7:81:27: 6b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:48:2D:F8:1A:E0:80:2F:5C:0A:69:42:8F:C1:1B:CE:AD:D5:49:69 X509v3 Authority Key Identifier: keyid:AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:06:5e:9e:0f:2f:d7:c1:97:fc:02:30:47:d7:73:1e:1b:95: 2a:a0:4b:97:96:fd:8c:32:3f:14:01:6b:b3:b2:3f:30:9d:02: 49:34:42:84:dd:b6:f8:79:b5:61:30:8f:a8:f9:d8:e7:56:b3: 4e:9d:9c:1c:f8:ba:63:52:0e:b0:04:ba:bd:e1:ea:75:0a:33: 6e:c0:11:21:76:38:b4:b1:ba:91:4a:b8:74:3f:e3:f6:c2:a2: 04:61:42:24:1e:0d:62:8c:59:84:ae:44:8e:6b:88:43:80:f9: e0:1c:cc:d7:e4:b2:a6:24:90:f7:68:d4:6e:a3:8c:70:e4:0b: 9f:f4:f4:5e:61:5a:8a:9a:6e:52:f0:9e:8e:1a:84:1b:d2:f5: d3:08:7d:db:35:82:04:fe:7e:d1:4b:a0:69:8d:9d:77:0b:3d: 85:e1:cd:a4:38:3a:2a:b0:2b:fd:76:a4:3f:77:cf:68:55:e2: dd:74:9c:25:68:d0:b6:25:e6:85:85:f2:90:26:74:f5:fe:ff: 3d:a1:b2:cd:09:3b:54:06:0d:8b:42:c6:67:8a:07:3a:ec:79: 87:75:f9:b9:98:de:51:64:54:db:c6:e2:79:05:52:24:b1:f7: 6e:93:23:20:30:7c:0a:8f:03:9d:f7:75:bd:7f:0a:ef:cc:95: d2:36:1f:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUak0bERO+DuTQKxXD/sCUSmOs3DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1 MUE2RkUyQTAeFw0yNjA5MjEwNTQzNTFaFw0yNjA5MjIwNzM3NTFaMDMxMTAvBgNV BAMTKDBFNDgyREY4MUFFMDgwMkY1QzBBNjk0MjhGQzExQkNFQURENTQ5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosdtOeFOF9Vkxd8MBxA0XqnJG F5oVJafvUaxVjsebprQVV9TyczVehCruiWyl7vqi4Q4DUVox/Rzvjyy25SUz0jS7 PrHgQWX+vcggj4B3QKN0xCLsH1Vr2t6IN07GBUSd6Sn3hlwonzlo3ThBJAoIy+vE mNXUf7d7Gl3H9V3KFq7Sg69eWwtS4CzZv7snStuW/ifahF5Cgcse9pkPHJpGzII4 pOOVJHePnIuVTljqhAgX3nboRsrNxcPTA4LOAI42F4/Zvz28Zodjh/wYNY5yNmW3 JMz+bmzL6Wwtb8Ktroj/EUqigGwENmIkUDL6IbtWFWYm4zqOdNuOZPeBJ2vDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkgt+BrggC9cCmlCj8Ebzq3VSWkwHwYDVR0j BBgwFoAUrWsKLQaoV3HSovGvabKaU1Gm/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY1NTFhYjktODA0MS00YTlhLTliNTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQw NkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1MUE2RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDZCMEEyRDA2QTg1NzcxRDJBMkYxQUY2OUIyOUE1MzUxQTZG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlB NTM1MUE2RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0GXp4PL9fBl/wCMEfXcx4blSqgS5eW/Ywy PxQBa7OyPzCdAkk0QoTdtvh5tWEwj6j52OdWs06dnBz4umNSDrAEur3h6nUKM27A ESF2OLSxupFKuHQ/4/bCogRhQiQeDWKMWYSuRI5riEOA+eAczNfksqYkkPdo1G6j jHDkC5/09F5hWoqablLwno4ahBvS9dMIfds1ggT+ftFLoGmNnXcLPYXhzaQ4Oiqw K/12pD93z2hV4t10nCVo0LYl5oWF8pAmdPX+/z2hss0JO1QGDYtCxmeKBzrseYd1 +bmY3lFkVNvG4nkFUiSx926TIyAwfAqPA533db1/Cu/MldI2H+U= -----END CERTIFICATE-----Generated at Mon Sep 21 11:41:06 2026 by rpki-client