$ rpki-client -vvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft File: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft (raw, json) Hash identifier: TyJy1qokZ1Zhl20JlVm/QPRdBC3yhYCDYhQDPUQdoN4= Subject key identifier: 15:ED:0C:DB:E8:23:96:D5:A4:71:19:A8:03:92:E6:0D:82:87:AF:CD Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Certificate serial: 58D990E7086F2B3A6376C9524A98B4D28ECE4CAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:11:59 +0000 Manifest this update: Fri 24 Jul 2026 02:06:59 +0000 Manifest next update: Sat 25 Jul 2026 05:00:59 +0000 Files and hashes: 1: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: 7PEJXW7RMfgjbRMHoDP/Q67ewQubnf7QvBInIps/U3k=) 2: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=) 3: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: W+AAZvdz9uWMtockMX6VSZJ0oNmTRpeghrirQa/hfSI=) 4: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl (hash: aNqargtT/tMQ+2dFnNAFADXjWTTwLkDyXc+FZfSHZrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d9:90:e7:08:6f:2b:3a:63:76:c9:52:4a:98:b4:d2:8e:ce:4c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Validity Not Before: Jul 24 02:06:59 2026 GMT Not After : Jul 25 05:00:59 2026 GMT Subject: CN=15ED0CDBE82396D5A47119A80392E60D8287AFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:50:d5:6a:ac:42:ac:db:4f:66:7f:f6:50: b5:49:e2:a9:b0:6a:96:1e:2f:56:0d:19:46:3c:be: d8:38:20:cf:a6:63:28:eb:15:3d:ee:84:24:a3:f8: dc:35:c7:da:90:f0:76:17:e9:6d:c2:c4:be:2b:93: 45:3f:4b:59:7f:af:5b:7f:c4:fe:05:58:7e:f7:bc: ed:7f:01:d6:04:fb:3c:67:ca:50:df:a2:49:65:6c: af:8c:9c:dc:d5:e9:7d:28:53:85:94:98:ff:88:a1: 7b:8d:8b:c7:00:48:b3:f8:8d:07:d2:a4:aa:1a:d7: af:b0:8a:99:6b:b5:cc:92:5c:0b:8e:73:22:2d:ae: b8:6b:b4:2a:90:01:c4:57:61:6e:f4:f0:6d:dc:7b: 52:c3:c6:14:c8:b4:27:1e:aa:60:d3:9d:dc:7a:93: e7:05:ce:a4:af:28:1d:63:a7:6d:1c:92:78:9a:5b: fe:38:97:17:bf:f0:7a:34:ac:e9:40:99:66:2a:10: 48:1a:64:fa:c2:a5:d9:c5:f5:96:87:7b:84:8e:1f: 5f:f0:d9:21:05:71:0e:7a:6a:ba:37:3c:37:94:33: 14:44:6b:77:21:94:43:c5:29:1d:04:8c:d9:b7:d3: 35:16:04:a9:13:d5:8e:f1:91:a3:18:2b:11:76:b1: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:ED:0C:DB:E8:23:96:D5:A4:71:19:A8:03:92:E6:0D:82:87:AF:CD X509v3 Authority Key Identifier: keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b8:4e:5f:3e:d9:f5:9b:7f:e2:bf:c7:04:24:d7:2d:61:68: 9f:a4:8c:62:53:d2:23:06:a4:74:98:aa:51:08:57:1e:59:41: 96:be:fa:c6:bb:59:32:4b:a7:d7:a2:1e:81:0c:4e:64:01:21: 30:9b:26:0e:a7:c8:36:a8:6c:95:12:ef:fb:15:a6:d5:85:c9: 78:a5:ba:e8:12:f4:76:da:79:b3:ee:ac:a5:48:e3:fb:b9:b7: 5d:c9:df:c1:99:1a:7f:36:b1:04:0e:74:55:4a:fe:2b:a5:b4: 42:e7:62:43:82:78:7e:5e:ad:a2:ca:5a:25:6e:7b:2c:4e:41: c3:05:a8:c5:35:62:51:f6:92:2d:94:69:99:16:23:c7:3a:e4: 8d:fe:55:c2:b1:83:d2:5c:6d:ae:1d:80:d1:68:30:be:6c:21: 93:d9:02:e5:27:76:5a:35:79:e4:c1:42:62:71:25:7f:22:23: 6b:bc:08:f1:00:56:95:4c:17:e8:df:b1:a1:87:c8:1a:a6:05: 12:25:bc:ce:e4:05:5e:79:40:34:3e:5d:e4:2f:25:14:ca:44: ad:dc:f3:bc:f7:b5:c7:a5:c7:aa:b5:d9:12:d1:60:23:3a:27: ce:f5:7b:ab:64:7b:55:ce:3f:39:7d:c7:e3:8f:29:00:0c:09: bf:ac:b0:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNmQ5whvKzpjdslSSpi00o7OTK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjNDODND ODZCMEEyNzAeFw0yNjA3MjQwMjA2NTlaFw0yNjA3MjUwNTAwNTlaMDMxMTAvBgNV BAMTKDE1RUQwQ0RCRTgyMzk2RDVBNDcxMTlBODAzOTJFNjBEODI4N0FGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0FDVaqxCrNtPZn/2ULVJ4qmw apYeL1YNGUY8vtg4IM+mYyjrFT3uhCSj+Nw1x9qQ8HYX6W3CxL4rk0U/S1l/r1t/ xP4FWH73vO1/AdYE+zxnylDfokllbK+MnNzV6X0oU4WUmP+IoXuNi8cASLP4jQfS pKoa16+wiplrtcySXAuOcyItrrhrtCqQAcRXYW708G3ce1LDxhTItCceqmDTndx6 k+cFzqSvKB1jp20ckniaW/44lxe/8Ho0rOlAmWYqEEgaZPrCpdnF9ZaHe4SOH1/w 2SEFcQ56aro3PDeUMxREa3chlEPFKR0EjNm30zUWBKkT1Y7xkaMYKxF2scFrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFe0M2+gjltWkcRmoA5LmDYKHr80wHwYDVR0j BBgwFoAUrXpdeG1cVAfEXxCCvtY8g8hrCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlNjAzZTMtZjIzZS00YzZhLWJiM2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2 RDVDNTQwN0M0NUYxMDgyQkVENjNDODNDODZCMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDdBNUQ3ODZENUM1NDA3QzQ1RjEwODJCRUQ2M0M4M0M4NkIw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjND ODNDODZCMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADa4Tl8+2fWbf+K/xwQk1y1haJ+kjGJT0iMG pHSYqlEIVx5ZQZa++sa7WTJLp9eiHoEMTmQBITCbJg6nyDaobJUS7/sVptWFyXil uugS9HbaebPurKVI4/u5t13J38GZGn82sQQOdFVK/iultELnYkOCeH5eraLKWiVu eyxOQcMFqMU1YlH2ki2UaZkWI8c65I3+VcKxg9Jcba4dgNFoML5sIZPZAuUndlo1 eeTBQmJxJX8iI2u8CPEAVpVMF+jfsaGHyBqmBRIlvM7kBV55QDQ+XeQvJRTKRK3c 87z3tcelx6q12RLRYCM6J871e6tke1XOPzl9x+OPKQAMCb+ssAg= -----END CERTIFICATE-----Generated at Fri Jul 24 07:41:21 2026 by rpki-client