$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft File: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft (raw, json) Hash identifier: FcWMjQBrkOIiYvJYowb0uy0k82h6qYEO+3vUH6IA7FM= Subject key identifier: 3C:AD:62:D1:12:AD:77:BC:99:23:75:4F:51:C8:AD:09:A0:87:08:E8 Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 Certificate issuer: /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Certificate serial: 0A07525009571A6C67B916D4FBC81ABCC17AD79C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 18:13:14 +0000 Manifest this update: Thu 24 Sep 2026 18:08:14 +0000 Manifest next update: Fri 25 Sep 2026 19:46:14 +0000 Files and hashes: 1: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl (hash: ayF58GjCNkBn0A7tifiARfN0FisGCYYI/S2NhFBDSSw=) 2: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: ffbCXyninBGio9BOygv4p476TIGMpl53kSauEjC/roA=) 3: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Jz250gHnK9wmceEyoEa7ZzH19MTY0j2TTvLScjld8Z4=) 4: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: gyHsfmW6KN8Q0altXeM0ynZaoGDZjnrHl/TgsA39vQ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:07:52:50:09:57:1a:6c:67:b9:16:d4:fb:c8:1a:bc:c1:7a:d7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Validity Not Before: Sep 24 18:08:14 2026 GMT Not After : Sep 25 19:46:14 2026 GMT Subject: CN=3CAD62D112AD77BC9923754F51C8AD09A08708E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1a:53:fa:d0:c6:bc:5f:0e:6a:2c:39:71:f4: f3:4c:0c:8f:ee:5e:93:33:60:07:ff:0f:15:2b:67: 1e:8b:72:4d:8c:2b:86:ac:8c:a5:ae:55:16:ad:5b: ca:2a:53:25:85:25:a7:dc:c9:08:c7:43:fd:ba:ba: 7f:30:2d:ff:81:80:35:7c:5e:6e:5d:2d:d8:ae:ab: d6:3c:04:f5:63:68:1b:8b:7f:8f:81:33:64:54:77: 3e:f6:da:1d:0f:e3:21:6a:0b:0f:7d:d5:c2:3d:0c: fd:60:54:e4:6d:2e:ad:5f:45:c6:d6:82:4c:b6:ef: 91:31:c1:1c:04:06:0b:b2:95:36:b5:05:cc:ac:41: f7:b2:b6:f5:14:2e:77:62:0d:db:41:d2:e4:fb:4a: 34:bb:30:05:b4:24:59:fa:69:81:cc:20:e3:dc:4f: 39:9d:84:1c:06:91:74:71:da:dd:19:3b:af:94:a1: 02:40:6b:e4:18:07:6e:a0:b3:65:41:29:86:32:98: ae:02:c0:37:39:41:d5:02:2d:2e:fb:bc:34:02:3d: 93:89:d6:32:9a:9d:ac:3d:aa:8d:6a:ef:1c:00:a7: c9:81:34:ae:b1:55:d4:1e:03:6d:50:92:9e:02:37: bf:66:1c:95:ce:0a:9f:e3:0d:72:7f:8d:62:d2:7b: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AD:62:D1:12:AD:77:BC:99:23:75:4F:51:C8:AD:09:A0:87:08:E8 X509v3 Authority Key Identifier: keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:14:d9:90:0e:69:8e:8d:58:5d:60:48:7c:99:23:f9:28:08: ec:2f:84:de:b4:07:09:c7:e6:4c:d2:dc:9f:fd:a0:6a:69:16: 09:50:f8:91:91:11:60:f4:e4:d3:0a:c2:49:32:c6:47:4d:cc: 21:41:75:bf:c0:a2:fe:29:1e:74:71:14:be:a3:5b:72:61:12: 5e:a0:98:49:cb:c5:ba:01:48:4f:a0:d6:c6:68:2a:f7:2e:c6: f2:61:6d:3f:c6:79:de:d1:ee:b4:74:70:30:d8:a9:ad:a5:a1: 4d:33:47:f1:46:ac:61:88:e9:41:ab:3a:c9:d1:82:2d:bd:91: 87:20:ac:7b:a9:30:5b:ed:9f:bc:df:e8:ad:37:f6:05:86:07: 7a:33:dc:53:d3:ac:aa:0f:40:76:bc:e9:ac:42:24:36:e3:2e: d9:bb:1f:5e:4f:35:fe:70:d2:50:d6:49:16:c5:75:80:8a:66: 94:e4:eb:d5:ed:2d:0e:bb:ea:0d:af:41:a6:0f:20:9c:16:a2: c9:41:a0:93:90:14:94:ea:fd:71:b4:45:1d:8a:8e:be:3c:2f: 50:1f:90:14:26:9f:ed:2a:17:f2:76:1f:3d:3d:0a:0d:c4:20: fa:10:b5:c6:fe:7a:8f:a9:c6:06:94:19:70:65:80:d9:d8:13: e3:39:05:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgdSUAlXGmxnuRbU+8gavMF615wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4 NzRFOTBFMTAeFw0yNjA5MjQxODA4MTRaFw0yNjA5MjUxOTQ2MTRaMDMxMTAvBgNV BAMTKDNDQUQ2MkQxMTJBRDc3QkM5OTIzNzU0RjUxQzhBRDA5QTA4NzA4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGlP60Ma8Xw5qLDlx9PNMDI/u XpMzYAf/DxUrZx6Lck2MK4asjKWuVRatW8oqUyWFJafcyQjHQ/26un8wLf+BgDV8 Xm5dLdiuq9Y8BPVjaBuLf4+BM2RUdz722h0P4yFqCw991cI9DP1gVORtLq1fRcbW gky275ExwRwEBguylTa1BcysQfeytvUULndiDdtB0uT7SjS7MAW0JFn6aYHMIOPc TzmdhBwGkXRx2t0ZO6+UoQJAa+QYB26gs2VBKYYymK4CwDc5QdUCLS77vDQCPZOJ 1jKanaw9qo1q7xwAp8mBNK6xVdQeA21Qkp4CN79mHJXOCp/jDXJ/jWLSe62hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPK1i0RKtd7yZI3VPUcitCaCHCOgwHwYDVR0j BBgwFoAUrYMjDenp1Qqc32ozLgPcWIdOkOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjkwMDNkNmMtOTVmMS00N2E0LTlkNWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERF OUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4NzRFOTBFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDgzMjMwREU5RTlENTBBOUNERjZBMzMyRTAzREM1ODg3NEU5 MEUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RD NTg4NzRFOTBFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYU2ZAOaY6NWF1gSHyZI/koCOwvhN60BwnH 5kzS3J/9oGppFglQ+JGREWD05NMKwkkyxkdNzCFBdb/Aov4pHnRxFL6jW3JhEl6g mEnLxboBSE+g1sZoKvcuxvJhbT/Ged7R7rR0cDDYqa2loU0zR/FGrGGI6UGrOsnR gi29kYcgrHupMFvtn7zf6K039gWGB3oz3FPTrKoPQHa86axCJDbjLtm7H15PNf5w 0lDWSRbFdYCKZpTk69XtLQ676g2vQaYPIJwWoslBoJOQFJTq/XG0RR2Kjr48L1Af kBQmn+0qF/J2Hz09Cg3EIPoQtcb+eo+pxgaUGXBlgNnYE+M5BYw= -----END CERTIFICATE-----Generated at Fri Sep 25 05:34:15 2026 by rpki-client