$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft File: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft (raw, json) Hash identifier: bNmpopNltZC/NU9PKvq3ViEF6WN3wJTXMXqt0MzoAkQ= Subject key identifier: 60:61:86:79:EC:DF:59:B3:DE:03:14:F4:AE:A2:B6:56:0E:3F:84:FC Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B Certificate issuer: /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B Certificate serial: 27940FF5CC0AC67BC873285A08B97E3C6D0F6177 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 09:58:27 +0000 Manifest this update: Wed 23 Sep 2026 09:53:27 +0000 Manifest next update: Thu 24 Sep 2026 11:10:27 +0000 Files and hashes: 1: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: mIxFRHOE8DmYRrXlDisTfwK6lb1/0VKqM0Rpgtaxvto=) 2: 3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (hash: BPYAzlmVCSDysVPnzRbriP0ZO+KBD1gNQiYmmJ0AsGc=) 3: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl (hash: aq0HxzzYY5I0Yc/Ss7js5WqyWzmnnERyrPLT8vfeSyU=) 4: 3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (hash: eouhZL8KRzKxSED1dcGBFmzqWDAKHQivhxiq0mmIE9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:94:0f:f5:cc:0a:c6:7b:c8:73:28:5a:08:b9:7e:3c:6d:0f:61:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B Validity Not Before: Sep 23 09:53:27 2026 GMT Not After : Sep 24 11:10:27 2026 GMT Subject: CN=60618679ECDF59B3DE0314F4AEA2B6560E3F84FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:a2:26:5a:91:91:07:7a:44:5e:2a:ee:f8: c1:eb:e2:70:e2:5a:42:de:a9:77:94:74:68:64:1f: 9e:bf:15:3a:2c:83:e9:35:43:c3:3b:73:2f:c9:a2: f2:f6:fa:29:74:7f:ba:56:5f:f1:25:7c:be:63:30: 53:46:24:be:a9:8f:9d:38:ca:6b:4e:d5:d3:24:53: 82:db:e3:15:1f:c4:6e:c0:14:0e:4d:67:fd:02:9f: 28:04:6f:53:12:40:de:73:18:dc:05:91:f7:8b:93: 2b:68:e9:4a:0e:2f:af:ca:62:65:70:10:4e:de:1a: 9e:5a:46:72:92:3d:d2:3b:e0:d2:ef:4b:e3:84:a3: 8f:1a:b7:18:59:73:4b:a1:0b:e3:64:60:d1:38:4e: 4c:3b:71:ed:a6:12:c4:d0:34:53:b7:d0:01:aa:51: 61:44:f4:d0:cb:31:e2:39:6a:e1:99:a5:67:c7:91: 9c:96:3e:87:49:c6:e6:93:0a:36:a9:a8:91:59:f8: f5:e5:02:b9:54:09:f8:20:c0:d5:ee:52:3b:29:76: 14:c4:4d:77:18:6f:04:7e:54:7a:ad:20:27:44:13: b5:93:c5:aa:47:bb:b9:80:a0:09:84:12:f3:c7:ca: ff:22:22:ab:ab:aa:82:86:e2:6c:a0:96:70:9a:9f: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:61:86:79:EC:DF:59:B3:DE:03:14:F4:AE:A2:B6:56:0E:3F:84:FC X509v3 Authority Key Identifier: keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:72:9f:80:26:8d:32:28:01:79:42:b4:5d:6b:60:1d:7f:e3: d3:2b:42:08:e0:18:fb:6c:77:98:b9:a1:b2:4f:95:ad:85:55: cd:66:07:70:80:ed:80:9c:42:dd:a3:a1:1a:dd:e5:8b:a1:fa: 2e:f6:e5:fc:5e:76:2e:c5:79:9d:3f:18:cc:d1:ff:aa:b0:24: b1:ed:79:75:1c:00:41:1e:7b:18:b9:8a:05:aa:58:45:87:73: 10:fb:85:d7:3c:9e:3b:65:72:a1:c4:49:35:16:75:be:16:ce: 7d:6c:4b:75:02:a3:00:b6:db:7d:e8:bd:91:2f:cf:5c:bd:e1: 40:ef:7e:d9:d8:c3:3d:67:82:6e:0d:e2:d6:3e:a4:55:1c:67: 89:c5:39:18:a5:f8:51:de:f7:82:a1:fe:25:22:39:35:14:dd: cf:fa:34:e9:5f:ce:22:ce:07:90:78:f9:d7:87:86:35:97:dd: 2d:be:8f:49:62:bf:d2:a0:16:d8:9d:8b:67:f7:b8:da:0c:93: 4e:b8:66:20:3d:cc:78:98:ac:25:53:ed:f5:2e:de:a8:0c:30: b6:1f:22:d5:89:d9:27:09:94:8d:3e:75:84:4e:32:27:bc:6f: ac:46:78:7f:f8:d9:24:b7:41:bc:6f:ef:de:4b:03:9d:b7:c0: 66:9b:f3:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ5QP9cwKxnvIcyhaCLl+PG0PYXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2MjRB QTIxMDI4QjAeFw0yNjA5MjMwOTUzMjdaFw0yNjA5MjQxMTEwMjdaMDMxMTAvBgNV BAMTKDYwNjE4Njc5RUNERjU5QjNERTAzMTRGNEFFQTJCNjU2MEUzRjg0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkaImWpGRB3pEXiru+MHr4nDi WkLeqXeUdGhkH56/FTosg+k1Q8M7cy/JovL2+il0f7pWX/ElfL5jMFNGJL6pj504 ymtO1dMkU4Lb4xUfxG7AFA5NZ/0CnygEb1MSQN5zGNwFkfeLkyto6UoOL6/KYmVw EE7eGp5aRnKSPdI74NLvS+OEo48atxhZc0uhC+NkYNE4Tkw7ce2mEsTQNFO30AGq UWFE9NDLMeI5auGZpWfHkZyWPodJxuaTCjapqJFZ+PXlArlUCfggwNXuUjspdhTE TXcYbwR+VHqtICdEE7WTxapHu7mAoAmEEvPHyv8iIqurqoKG4myglnCan1LhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGGGeezfWbPeAxT0rqK2Vg4/hPwwHwYDVR0j BBgwFoAUrYzOZBLkdk+1yb34MfgGJKohAoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlNGNkOTYtY2ZjMS00NTc3LWFkM2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQx MkU0NzY0RkI1QzlCREY4MzFGODA2MjRBQTIxMDI4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDhDQ0U2NDEyRTQ3NjRGQjVDOUJERjgzMUY4MDYyNEFBMjEw MjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2 MjRBQTIxMDI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxyn4AmjTIoAXlCtF1rYB1/49MrQgjgGPts d5i5obJPla2FVc1mB3CA7YCcQt2joRrd5Yuh+i725fxedi7FeZ0/GMzR/6qwJLHt eXUcAEEeexi5igWqWEWHcxD7hdc8njtlcqHESTUWdb4Wzn1sS3UCowC2233ovZEv z1y94UDvftnYwz1ngm4N4tY+pFUcZ4nFORil+FHe94Kh/iUiOTUU3c/6NOlfziLO B5B4+deHhjWX3S2+j0liv9KgFtidi2f3uNoMk064ZiA9zHiYrCVT7fUu3qgMMLYf ItWJ2ScJlI0+dYROMie8b6xGeH/42SS3Qbxv795LA523wGab88U= -----END CERTIFICATE-----Generated at Thu Sep 24 00:29:09 2026 by rpki-client