$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft File: ADF43E36B1768DE874BC2E4386678718C68AC58C.mft (raw, json) Hash identifier: CvNfsEyO4rBMMdGUnG6sUGacJqxL+zAxgLBbMXThIz4= Subject key identifier: A2:B8:7E:92:CF:EA:84:DC:A8:7D:82:19:EB:C6:63:AE:E6:A2:38:D5 Authority key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C Certificate issuer: /CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Certificate serial: 543A08740DF089001E10CABCE099A036207B1895 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 11:59:49 +0000 Manifest this update: Thu 23 Jul 2026 11:54:49 +0000 Manifest next update: Fri 24 Jul 2026 15:45:49 +0000 Files and hashes: 1: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: 5KPKZA2RTu5ylHSV1TQQG9h2k3pnK+Y0k5lXF80cirU=) 2: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: HhOurlT1i9ohxjrni1AsVYHua6nriyDIMH2PNMhJi+I=) 3: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: YGwFwZ5ZgSYttDBh5EguczXxt0Tj6L2YYXDVT0BcXEg=) 4: ADF43E36B1768DE874BC2E4386678718C68AC58C.crl (hash: 4oouHGQGyHg3ltfScLnepLejlu807FkXU/fr7P6KGSE=) 5: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: K8yPbAzC5p5yuBTV3LGTKzGdC+9ek4+ufDT1mYTr44E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3a:08:74:0d:f0:89:00:1e:10:ca:bc:e0:99:a0:36:20:7b:18:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Validity Not Before: Jul 23 11:54:49 2026 GMT Not After : Jul 24 15:45:49 2026 GMT Subject: CN=A2B87E92CFEA84DCA87D8219EBC663AEE6A238D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f1:55:4c:ba:04:ff:b0:dd:02:4d:89:f2:77: d2:86:f5:b3:c5:2d:a7:ec:dc:20:de:a8:8e:3f:a0: f3:b9:ca:27:dd:5a:cd:b8:49:12:e4:cc:a4:b1:78: 80:aa:51:8c:b6:c0:9c:dd:2e:e9:47:b9:01:af:00: 86:f0:9f:96:82:81:57:7a:e6:99:fe:d5:27:39:e4: f2:d1:8b:38:1d:4d:f8:47:94:ba:c5:f3:a1:b6:e8: 42:35:ba:c6:9e:63:d0:4d:fc:56:f7:58:26:0c:de: 18:79:98:9e:87:0c:df:fb:9e:05:bc:26:0a:2c:62: 76:85:80:6a:e9:b3:1f:23:f5:57:97:2f:0f:c6:05: 08:c0:9a:75:c4:3d:1a:a6:74:3e:b8:e6:6e:17:9e: 58:76:22:7f:1f:2e:a6:fb:a8:37:df:67:2b:db:d7: 1c:42:2b:0d:50:84:76:0a:1a:12:e6:49:c2:4e:e1: 82:c6:09:43:23:99:3c:3b:5b:41:29:31:b0:d0:e9: 83:f2:2f:e3:11:dd:71:68:85:b0:e2:89:1e:79:9c: 95:d8:24:ff:f0:cb:08:81:55:92:9d:d7:58:74:15: 4d:6a:ae:43:f2:6a:4e:1d:fb:d1:c4:37:dd:d5:23: 78:ad:86:1a:f2:be:63:5d:a8:90:3f:b1:0a:f2:0c: 28:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B8:7E:92:CF:EA:84:DC:A8:7D:82:19:EB:C6:63:AE:E6:A2:38:D5 X509v3 Authority Key Identifier: keyid:AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:66:4e:9e:73:10:0f:cd:75:57:1d:09:d9:d4:fe:ad:62:35: 4b:72:36:28:71:3b:67:38:77:0b:c2:ba:d3:0c:93:06:98:1e: 9f:d0:a9:99:36:a7:ed:68:12:47:0c:50:7a:10:1f:7b:b9:b4: ed:d7:b8:6e:00:dd:c1:b7:e0:84:2b:2e:66:c7:03:b6:e7:e4: 25:23:57:22:d4:c3:d3:64:9b:c1:8f:f0:0a:3a:26:d8:aa:f8: e4:cb:69:05:66:24:1c:03:fa:3d:47:de:a7:9b:f2:e1:62:c6: a9:6e:51:27:75:a4:f8:27:43:f6:6a:40:6a:82:3c:4a:3d:db: a2:bd:db:3f:6a:9a:46:c5:1c:ab:27:58:bf:88:fc:0d:60:86: c4:d4:ec:86:e8:76:b6:de:11:e5:e2:71:a0:d8:34:b9:68:46: fe:d9:c9:bf:f6:5c:2a:01:7f:9d:88:6a:38:9d:0b:27:a8:98: 2e:46:c0:c1:fc:35:1d:02:a6:b6:11:d1:dd:be:8b:1d:39:8f: 37:73:42:41:75:f6:3a:3e:18:cb:47:f7:06:c3:df:90:b1:7e: 7f:6e:56:25:37:b2:d7:6a:bd:c2:dc:1f:29:c3:1c:6c:65:95: 31:9d:7b:b1:e4:ee:eb:9d:2a:b7:39:c8:eb:9a:92:c6:94:e0: 13:58:29:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDoIdA3wiQAeEMq84JmgNiB7GJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3MThD NjhBQzU4QzAeFw0yNjA3MjMxMTU0NDlaFw0yNjA3MjQxNTQ1NDlaMDMxMTAvBgNV BAMTKEEyQjg3RTkyQ0ZFQTg0RENBODdEODIxOUVCQzY2M0FFRTZBMjM4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCC8VVMugT/sN0CTYnyd9KG9bPF Lafs3CDeqI4/oPO5yifdWs24SRLkzKSxeICqUYy2wJzdLulHuQGvAIbwn5aCgVd6 5pn+1Sc55PLRizgdTfhHlLrF86G26EI1usaeY9BN/Fb3WCYM3hh5mJ6HDN/7ngW8 JgosYnaFgGrpsx8j9VeXLw/GBQjAmnXEPRqmdD645m4Xnlh2In8fLqb7qDffZyvb 1xxCKw1QhHYKGhLmScJO4YLGCUMjmTw7W0EpMbDQ6YPyL+MR3XFohbDiiR55nJXY JP/wywiBVZKd11h0FU1qrkPyak4d+9HEN93VI3ithhryvmNdqJA/sQryDCiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUorh+ks/qhNyofYIZ68ZjruaiONUwHwYDVR0j BBgwFoAUrfQ+NrF2jeh0vC5DhmeHGMaKxYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIxYzk1NzktNTZiYS00YTcwLWJhMTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZC MTc2OERFODc0QkMyRTQzODY2Nzg3MThDNjhBQzU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREY0M0UzNkIxNzY4REU4NzRCQzJFNDM4NjY3ODcxOEM2OEFD NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3 MThDNjhBQzU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARmTp5zEA/NdVcdCdnU/q1iNUtyNihxO2c4 dwvCutMMkwaYHp/QqZk2p+1oEkcMUHoQH3u5tO3XuG4A3cG34IQrLmbHA7bn5CUj VyLUw9Nkm8GP8Ao6Jtiq+OTLaQVmJBwD+j1H3qeb8uFixqluUSd1pPgnQ/ZqQGqC PEo926K92z9qmkbFHKsnWL+I/A1ghsTU7IbodrbeEeXicaDYNLloRv7Zyb/2XCoB f52IajidCyeomC5GwMH8NR0CprYR0d2+ix05jzdzQkF19jo+GMtH9wbD35Cxfn9u ViU3stdqvcLcHynDHGxllTGde7Hk7uudKrc5yOuaksaU4BNYKbY= -----END CERTIFICATE-----Generated at Fri Jul 24 08:57:33 2026 by rpki-client