$ rpki-client -vvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft File: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft (raw, json) Hash identifier: XIu7xMQlSWIUO9c+G+H8k0UD4E157Dq8+Apml7XgirE= Subject key identifier: 07:43:2B:6B:E7:37:2F:8F:62:BB:98:C7:E0:AF:49:85:72:27:D0:7D Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Certificate serial: 0C6AD7EC9694B60FC17EDAC7BB174D2C466A12B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:53 +0000 Manifest this update: Tue 12 May 2026 18:23:53 +0000 Manifest next update: Wed 13 May 2026 19:03:53 +0000 Files and hashes: 1: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: W+AAZvdz9uWMtockMX6VSZJ0oNmTRpeghrirQa/hfSI=) 2: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl (hash: s0QpltlN63IMCHCshkbqix7b+URYgp4e6KnpQ2qeono=) 3: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: 7PEJXW7RMfgjbRMHoDP/Q67ewQubnf7QvBInIps/U3k=) 4: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6a:d7:ec:96:94:b6:0f:c1:7e:da:c7:bb:17:4d:2c:46:6a:12:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Validity Not Before: May 12 18:23:53 2026 GMT Not After : May 13 19:03:53 2026 GMT Subject: CN=07432B6BE7372F8F62BB98C7E0AF49857227D07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:7b:e2:6d:f3:27:57:14:c4:4b:5a:72:08: 5d:7e:bf:dc:8c:29:73:93:7e:37:25:f0:5c:78:c5: da:9c:52:2f:8f:a0:ed:fc:7f:4f:39:37:c7:42:bf: 56:fb:de:aa:2c:a3:a6:1c:fd:cf:bd:04:cf:c1:f2: aa:e0:a2:61:f6:fc:f0:37:c5:65:d3:ef:a2:8d:c3: 9f:0b:c3:69:fd:16:74:c3:37:0f:be:0b:e7:42:8b: 99:49:8b:0c:5f:b6:8e:b5:71:7a:a6:13:84:d8:58: 1f:ca:60:84:ef:a6:3b:e7:ce:4a:de:e7:84:4b:96: 02:5c:0d:7f:6c:e7:09:d9:17:3d:eb:8c:69:12:3b: 15:ac:18:28:56:91:93:66:31:b9:a7:ce:f4:ae:6c: aa:ff:1d:b5:bc:1a:5b:ca:6f:13:af:2f:df:13:86: 21:7e:42:46:1f:a6:1d:b7:3c:ed:2f:1a:42:1c:ec: 86:31:16:6d:ba:c4:76:86:7f:16:bf:74:2d:79:3e: dc:8c:95:f1:7b:fe:76:24:1a:6b:47:04:18:71:83: 46:d8:69:41:9a:d1:67:f7:f3:39:09:a5:58:1f:26: e8:a1:b6:ac:25:ff:6b:c1:ba:c2:ff:d0:aa:ce:5f: df:3e:82:80:e9:57:db:7f:55:56:86:b7:b6:ea:01: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:43:2B:6B:E7:37:2F:8F:62:BB:98:C7:E0:AF:49:85:72:27:D0:7D X509v3 Authority Key Identifier: keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:df:ef:b1:ef:93:c9:7a:56:56:02:9c:2d:1c:21:ee:6d:b7: 34:75:75:21:ea:42:29:dc:93:28:91:97:6c:9e:f8:5a:89:8e: 4a:ed:94:6a:1c:5e:ae:21:fe:c0:7b:a3:c4:40:7b:99:e6:5e: 82:a5:72:df:ff:ae:0d:f6:3c:ae:c1:b0:53:06:18:e2:d4:f4: c6:cd:f9:93:50:1f:54:ca:c1:0a:19:83:0b:3a:93:8b:35:eb: bd:e8:a5:1c:97:4f:9f:6a:23:8e:a4:38:1e:80:96:20:dc:7a: f5:44:14:49:73:b8:8a:67:7f:b4:4d:b6:57:b4:4c:cb:c4:c4: 81:c5:9f:77:51:c9:78:43:5e:f7:76:d4:ab:fc:42:a4:51:34: 95:76:b9:64:86:d4:77:07:6c:d1:72:20:2a:d8:b5:5b:23:d4: be:99:bd:18:d8:eb:cc:03:02:ea:1b:21:87:cb:6f:fb:3b:be: ce:03:43:ad:ee:0a:3e:08:ac:39:02:a1:ed:68:e5:4b:5e:29: 89:2f:57:37:cc:4e:73:96:29:2a:32:69:a2:52:fa:de:cd:f6: 04:87:40:d9:a4:db:55:89:bf:cc:73:2c:75:3e:a0:0a:0b:9b: fb:9f:9c:e9:ed:2a:0c:a7:4c:16:1a:8b:1c:bc:b4:9f:09:d6: b1:e7:30:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGrX7JaUtg/BftrHuxdNLEZqErUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjNDODND ODZCMEEyNzAeFw0yNjA1MTIxODIzNTNaFw0yNjA1MTMxOTAzNTNaMDMxMTAvBgNV BAMTKDA3NDMyQjZCRTczNzJGOEY2MkJCOThDN0UwQUY0OTg1NzIyN0QwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWunvibfMnVxTES1pyCF1+v9yM KXOTfjcl8Fx4xdqcUi+PoO38f085N8dCv1b73qoso6Yc/c+9BM/B8qrgomH2/PA3 xWXT76KNw58Lw2n9FnTDNw++C+dCi5lJiwxfto61cXqmE4TYWB/KYITvpjvnzkre 54RLlgJcDX9s5wnZFz3rjGkSOxWsGChWkZNmMbmnzvSubKr/HbW8GlvKbxOvL98T hiF+QkYfph23PO0vGkIc7IYxFm26xHaGfxa/dC15PtyMlfF7/nYkGmtHBBhxg0bY aUGa0Wf38zkJpVgfJuihtqwl/2vBusL/0KrOX98+goDpV9t/VVaGt7bqATWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB0Mra+c3L49iu5jH4K9JhXIn0H0wHwYDVR0j BBgwFoAUrXpdeG1cVAfEXxCCvtY8g8hrCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlNjAzZTMtZjIzZS00YzZhLWJiM2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2 RDVDNTQwN0M0NUYxMDgyQkVENjNDODNDODZCMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDdBNUQ3ODZENUM1NDA3QzQ1RjEwODJCRUQ2M0M4M0M4NkIw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjND ODNDODZCMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3f77Hvk8l6VlYCnC0cIe5ttzR1dSHqQinc kyiRl2ye+FqJjkrtlGocXq4h/sB7o8RAe5nmXoKlct//rg32PK7BsFMGGOLU9MbN +ZNQH1TKwQoZgws6k4s1673opRyXT59qI46kOB6AliDcevVEFElzuIpnf7RNtle0 TMvExIHFn3dRyXhDXvd21Kv8QqRRNJV2uWSG1HcHbNFyICrYtVsj1L6ZvRjY68wD AuobIYfLb/s7vs4DQ63uCj4IrDkCoe1o5UteKYkvVzfMTnOWKSoyaaJS+t7N9gSH QNmk21WJv8xzLHU+oAoLm/ufnOntKgynTBYaixy8tJ8J1rHnMM4= -----END CERTIFICATE-----Generated at Wed May 13 02:49:58 2026 by rpki-client