$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/ADFD6E59E315D0FA09D64CD6BC001243617C8010.mft File: ADFD6E59E315D0FA09D64CD6BC001243617C8010.mft (raw, json) Hash identifier: gqpELh/e2w4t9ZxYpZMIjLgDB8XzYmGvW410jtP2a7w= Subject key identifier: DD:39:09:1E:C7:62:B8:EA:B6:3B:18:06:C9:C3:BE:CD:34:52:5B:68 Authority key identifier: AD:FD:6E:59:E3:15:D0:FA:09:D6:4C:D6:BC:00:12:43:61:7C:80:10 Certificate issuer: /CN=ADFD6E59E315D0FA09D64CD6BC001243617C8010 Certificate serial: 111D47FC652637EC9D786D36DE870492076C2567 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFD6E59E315D0FA09D64CD6BC001243617C8010.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/ADFD6E59E315D0FA09D64CD6BC001243617C8010.mft Manifest number: BF Signing time: Mon 21 Sep 2026 13:17:56 +0000 Manifest this update: Mon 21 Sep 2026 13:12:56 +0000 Manifest next update: Tue 22 Sep 2026 15:59:56 +0000 Files and hashes: 1: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: aME0GfDC26ytcSkENVjP0zMsjDakUE4gGwWSZHjWpFI=) 2: ADFD6E59E315D0FA09D64CD6BC001243617C8010.crl (hash: nqo4z9PsMvEmMxeQgrmeypyFDSNRa5tI3nYxUuBrTwU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/ADFD6E59E315D0FA09D64CD6BC001243617C8010.crl rsync://rpki-rsync.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/ADFD6E59E315D0FA09D64CD6BC001243617C8010.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFD6E59E315D0FA09D64CD6BC001243617C8010.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1d:47:fc:65:26:37:ec:9d:78:6d:36:de:87:04:92:07:6c:25:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFD6E59E315D0FA09D64CD6BC001243617C8010 Validity Not Before: Sep 21 13:12:56 2026 GMT Not After : Sep 22 15:59:56 2026 GMT Subject: CN=DD39091EC762B8EAB63B1806C9C3BECD34525B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:f2:95:da:65:d5:4e:c9:39:36:de:b4:d6: 37:a7:fc:55:e1:6e:53:5f:ec:41:3c:a6:36:72:a8: f3:cd:99:5a:83:3b:ac:4d:27:42:b6:1d:b9:33:b2: b9:7c:8a:7d:60:9a:9f:e0:01:90:c0:85:a1:24:d8: c7:2f:8f:6a:5a:3d:fe:9b:79:3f:55:c6:03:1b:ad: d0:fd:4a:a5:1e:b5:a6:68:d6:9e:1e:88:69:50:5a: 76:c9:b3:e0:50:3b:e0:22:3d:64:68:25:f9:73:66: 17:58:f7:a4:b8:a5:e8:a2:f4:cb:8e:11:eb:16:44: 63:1a:52:7e:9c:d0:1e:49:b2:a3:aa:1a:ab:3b:2f: d2:28:ff:99:64:0d:2c:b4:47:9e:6c:9f:cd:4e:ec: 11:a3:1f:49:7d:13:ff:17:79:c5:ca:71:fc:94:7c: be:dc:3f:10:df:a0:8b:55:af:29:ee:f5:c3:45:4a: 2b:75:a8:26:83:f2:26:32:61:78:42:45:be:d3:52: 3b:81:3e:80:47:61:b1:e5:3e:50:12:3d:27:d7:c1: bf:2b:c2:dc:fb:32:6e:30:79:ce:7f:f2:e4:52:88: b2:8f:39:2c:3f:87:b0:46:32:64:9b:db:2f:79:84: e3:6d:eb:83:f5:95:d6:dd:7f:47:cd:1f:6d:02:5d: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:09:1E:C7:62:B8:EA:B6:3B:18:06:C9:C3:BE:CD:34:52:5B:68 X509v3 Authority Key Identifier: keyid:AD:FD:6E:59:E3:15:D0:FA:09:D6:4C:D6:BC:00:12:43:61:7C:80:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/ADFD6E59E315D0FA09D64CD6BC001243617C8010.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFD6E59E315D0FA09D64CD6BC001243617C8010.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/ADFD6E59E315D0FA09D64CD6BC001243617C8010.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4b:c2:bd:34:04:13:5b:a2:b2:23:f6:5a:a0:fd:3b:1f:7e: b1:c8:41:64:b1:13:84:cd:91:c8:14:7b:bb:c6:8d:0f:d5:53: 53:cf:f7:ce:34:b1:9f:a4:6b:bf:74:9c:6a:11:4d:7d:ae:5f: 53:b4:8b:da:b2:79:1e:48:56:20:81:bd:cb:80:5e:6d:1a:83: f7:36:39:a9:77:8e:f8:1a:6f:58:1d:c3:c4:cf:07:1f:ad:17: f9:2b:99:09:10:46:8c:c3:24:9f:7a:e7:90:2c:a4:a1:a5:df: b4:8e:05:ae:10:36:4a:22:70:dc:40:13:eb:2c:13:08:fe:ca: 50:0c:bb:f3:b6:fa:70:e3:70:ff:af:8d:a4:4a:e5:ce:32:a2: 04:95:53:10:a7:f2:04:75:3f:98:0d:5c:6f:50:52:e6:a5:0c: bb:16:d0:3e:47:de:6c:7f:d7:6b:12:f3:ce:9c:2d:c6:9d:0b: dd:bd:5b:b9:58:58:dc:12:48:02:68:92:5b:c9:b5:03:77:c9: 10:a3:6e:29:23:02:6f:e2:b4:14:30:02:b7:20:fd:8d:44:d8: 82:d1:a8:d8:a5:73:65:40:53:83:43:84:a7:12:ae:18:ef:02: fc:48:f0:24:4e:ab:61:03:6f:06:71:7e:d7:ef:45:02:66:10: f0:82:3c:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUER1H/GUmN+ydeG023ocEkgdsJWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRDZFNTlFMzE1RDBGQTA5RDY0Q0Q2QkMwMDEyNDM2 MTdDODAxMDAeFw0yNjA5MjExMzEyNTZaFw0yNjA5MjIxNTU5NTZaMDMxMTAvBgNV BAMTKEREMzkwOTFFQzc2MkI4RUFCNjNCMTgwNkM5QzNCRUNEMzQ1MjVCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY4fKV2mXVTsk5Nt601jen/FXh blNf7EE8pjZyqPPNmVqDO6xNJ0K2Hbkzsrl8in1gmp/gAZDAhaEk2Mcvj2paPf6b eT9VxgMbrdD9SqUetaZo1p4eiGlQWnbJs+BQO+AiPWRoJflzZhdY96S4peii9MuO EesWRGMaUn6c0B5JsqOqGqs7L9Io/5lkDSy0R55sn81O7BGjH0l9E/8XecXKcfyU fL7cPxDfoItVrynu9cNFSit1qCaD8iYyYXhCRb7TUjuBPoBHYbHlPlASPSfXwb8r wtz7Mm4wec5/8uRSiLKPOSw/h7BGMmSb2y95hONt64P1ldbdf0fNH20CXZFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3TkJHsdiuOq2OxgGycO+zTRSW2gwHwYDVR0j BBgwFoAUrf1uWeMV0PoJ1kzWvAASQ2F8gBAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTlmZmI0M2ItZjhiNS00ZjFmLTliOGYtNWIwMmRkYmI2ZmNmLzAvQURGRDZFNTlF MzE1RDBGQTA5RDY0Q0Q2QkMwMDEyNDM2MTdDODAxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREZENkU1OUUzMTVEMEZBMDlENjRDRDZCQzAwMTI0MzYxN0M4 MDEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvQURGRDZFNTlFMzE1RDBGQTA5RDY0Q0Q2QkMwMDEy NDM2MTdDODAxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZLwr00BBNborIj9lqg/TsffrHIQWSxE4TN kcgUe7vGjQ/VU1PP9840sZ+ka790nGoRTX2uX1O0i9qyeR5IViCBvcuAXm0ag/c2 Oal3jvgab1gdw8TPBx+tF/krmQkQRozDJJ9655AspKGl37SOBa4QNkoicNxAE+ss Ewj+ylAMu/O2+nDjcP+vjaRK5c4yogSVUxCn8gR1P5gNXG9QUualDLsW0D5H3mx/ 12sS886cLcadC929W7lYWNwSSAJoklvJtQN3yRCjbikjAm/itBQwArcg/Y1E2ILR qNilc2VAU4NDhKcSrhjvAvxI8CROq2EDbwZxftfvRQJmEPCCPAw= -----END CERTIFICATE-----Generated at Tue Sep 22 09:21:04 2026 by rpki-client