$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft File: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft (raw, json) Hash identifier: RqN6cw503td3fOdvnSl3PoeBkvtN0oKpspXP3hsgB34= Subject key identifier: 2F:58:22:DE:17:35:6D:10:E2:25:C1:2F:53:3F:E5:F8:2E:4C:93:33 Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Certificate serial: 44C2E2DCF26ACA4FDC6E069CE345DA5FE0E77151 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 11:55:24 +0000 Manifest this update: Thu 24 Sep 2026 11:50:24 +0000 Manifest next update: Fri 25 Sep 2026 14:31:24 +0000 Files and hashes: 1: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: 7PEJXW7RMfgjbRMHoDP/Q67ewQubnf7QvBInIps/U3k=) 2: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=) 3: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl (hash: +SO+ouvSZCYp4+D6bBxllx7eiEBYuToMxEUOObQjDQQ=) 4: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: W+AAZvdz9uWMtockMX6VSZJ0oNmTRpeghrirQa/hfSI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c2:e2:dc:f2:6a:ca:4f:dc:6e:06:9c:e3:45:da:5f:e0:e7:71:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Validity Not Before: Sep 24 11:50:24 2026 GMT Not After : Sep 25 14:31:24 2026 GMT Subject: CN=2F5822DE17356D10E225C12F533FE5F82E4C9333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:bf:27:b9:2a:3d:46:1b:ae:6d:12:70:82: 7a:74:b6:54:35:3d:4f:9e:40:b7:dc:21:ea:cc:e8: f9:fb:06:85:de:c9:af:90:1e:3f:ff:f2:bd:c3:2b: 97:58:5c:af:0a:4d:a4:7d:0a:88:1d:b3:76:95:5c: 77:74:27:c8:f9:f4:7c:51:4a:a5:49:d1:dd:aa:4a: e9:9b:96:be:9a:cd:27:35:f3:6a:72:9a:30:4f:30: 03:d6:3c:e2:2b:a4:40:9e:b2:94:1a:83:43:00:50: c7:89:ca:0b:b0:a7:d7:7d:f3:33:ad:f0:cc:39:04: 7c:af:db:ad:7f:1c:5e:cc:22:8e:da:9e:6b:0d:76: ab:37:1a:7c:08:b5:bb:d1:dc:8d:ad:b2:e7:21:85: 70:7f:b0:26:b6:44:32:06:2a:7e:0c:e1:27:38:4e: 8d:55:da:17:09:82:86:31:71:ad:e6:d0:82:5e:b9: d4:65:11:ef:30:76:cd:72:ef:f4:bc:58:03:62:6b: 8a:b4:36:17:eb:04:14:2c:ea:a6:c3:8c:51:45:a2: 5a:d7:a8:ee:83:43:f3:bd:9e:02:c7:0c:d9:2c:e4: 25:84:cf:ff:39:15:88:ab:62:28:7a:a7:e2:09:47: ef:0c:fb:c9:28:60:bd:79:a9:5a:47:83:78:41:8d: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:58:22:DE:17:35:6D:10:E2:25:C1:2F:53:3F:E5:F8:2E:4C:93:33 X509v3 Authority Key Identifier: keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a5:4b:12:11:87:0d:55:f1:a0:4f:2b:fa:16:8b:3a:e6:48: 89:39:0b:66:36:18:35:e0:84:1d:b5:05:4e:87:02:11:6f:ac: 72:75:10:a9:34:16:a9:71:2f:6b:ac:bf:5b:b9:f8:9f:d6:84: 42:f5:04:0c:b8:9b:74:8e:1e:d5:f5:dc:3e:14:a0:b4:4c:15: d6:cd:84:1e:ec:7a:50:f4:b5:72:e5:38:34:cd:f5:da:fe:da: df:55:69:d4:ec:ec:f9:b0:53:52:03:9d:ee:d1:93:d0:71:5e: 6b:11:4d:a5:48:d1:79:7f:5b:bc:30:c4:5c:7f:c5:c0:87:a7: 87:00:02:43:8b:fd:d3:34:3b:14:99:92:80:8a:54:d6:b7:31: 87:c1:c0:d0:f5:11:20:cd:39:a4:71:63:c3:f3:de:b9:8d:4d: 95:d0:01:44:d4:2e:bc:81:0b:91:71:a9:83:57:79:8f:2d:45: 97:72:49:cf:28:db:bc:d9:db:52:ff:3f:46:64:8b:82:df:2a: 26:7c:48:b5:9e:56:66:44:23:de:b2:a8:eb:17:f0:c0:f0:fb: 8d:17:29:d6:ac:c6:b4:20:4d:e4:e9:b3:04:99:a2:57:0f:6e: b6:e9:ca:77:97:26:81:b5:92:c5:62:99:73:ad:bb:f4:ad:64: ca:76:ac:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMLi3PJqyk/cbgac40XaX+DncVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjNDODND ODZCMEEyNzAeFw0yNjA5MjQxMTUwMjRaFw0yNjA5MjUxNDMxMjRaMDMxMTAvBgNV BAMTKDJGNTgyMkRFMTczNTZEMTBFMjI1QzEyRjUzM0ZFNUY4MkU0QzkzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnr8nuSo9RhuubRJwgnp0tlQ1 PU+eQLfcIerM6Pn7BoXeya+QHj//8r3DK5dYXK8KTaR9Cogds3aVXHd0J8j59HxR SqVJ0d2qSumblr6azSc182pymjBPMAPWPOIrpECespQag0MAUMeJyguwp9d98zOt 8Mw5BHyv261/HF7MIo7anmsNdqs3GnwItbvR3I2tsuchhXB/sCa2RDIGKn4M4Sc4 To1V2hcJgoYxca3m0IJeudRlEe8wds1y7/S8WANia4q0NhfrBBQs6qbDjFFFolrX qO6DQ/O9ngLHDNks5CWEz/85FYirYih6p+IJR+8M+8koYL15qVpHg3hBjWtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL1gi3hc1bRDiJcEvUz/l+C5MkzMwHwYDVR0j BBgwFoAUrXpdeG1cVAfEXxCCvtY8g8hrCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlNjAzZTMtZjIzZS00YzZhLWJiM2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2 RDVDNTQwN0M0NUYxMDgyQkVENjNDODNDODZCMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDdBNUQ3ODZENUM1NDA3QzQ1RjEwODJCRUQ2M0M4M0M4NkIw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjND ODNDODZCMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGlSxIRhw1V8aBPK/oWizrmSIk5C2Y2GDXg hB21BU6HAhFvrHJ1EKk0FqlxL2usv1u5+J/WhEL1BAy4m3SOHtX13D4UoLRMFdbN hB7selD0tXLlODTN9dr+2t9VadTs7PmwU1IDne7Rk9BxXmsRTaVI0Xl/W7wwxFx/ xcCHp4cAAkOL/dM0OxSZkoCKVNa3MYfBwND1ESDNOaRxY8Pz3rmNTZXQAUTULryB C5FxqYNXeY8tRZdySc8o27zZ21L/P0Zki4LfKiZ8SLWeVmZEI96yqOsX8MDw+40X KdasxrQgTeTpswSZolcPbrbpyneXJoG1ksVimXOtu/StZMp2rLU= -----END CERTIFICATE-----Generated at Thu Sep 24 15:34:10 2026 by rpki-client