$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft File: ADF43E36B1768DE874BC2E4386678718C68AC58C.mft (raw, json) Hash identifier: w16BskraU9Re+/EFYCPrGV0pqFjs65Q/60KDZBYCXmM= Subject key identifier: B2:1D:C1:94:B0:55:E2:5D:6B:A9:A5:67:85:E7:A5:16:5A:A3:D0:3E Authority key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C Certificate issuer: /CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Certificate serial: 1525A618B274746D711A1B27F32F66EA316FAA76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 16:56:43 +0000 Manifest this update: Thu 24 Sep 2026 16:51:43 +0000 Manifest next update: Fri 25 Sep 2026 18:51:43 +0000 Files and hashes: 1: ADF43E36B1768DE874BC2E4386678718C68AC58C.crl (hash: 4C4yCk2vKbbvfG59390o0prXOakZAdBWyVIETUwByaQ=) 2: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: HhOurlT1i9ohxjrni1AsVYHua6nriyDIMH2PNMhJi+I=) 3: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: 5KPKZA2RTu5ylHSV1TQQG9h2k3pnK+Y0k5lXF80cirU=) 4: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: YGwFwZ5ZgSYttDBh5EguczXxt0Tj6L2YYXDVT0BcXEg=) 5: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: K8yPbAzC5p5yuBTV3LGTKzGdC+9ek4+ufDT1mYTr44E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:25:a6:18:b2:74:74:6d:71:1a:1b:27:f3:2f:66:ea:31:6f:aa:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Validity Not Before: Sep 24 16:51:43 2026 GMT Not After : Sep 25 18:51:43 2026 GMT Subject: CN=B21DC194B055E25D6BA9A56785E7A5165AA3D03E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:a3:e3:00:15:f8:1e:f8:33:a5:6b:4d:e3: c4:0a:57:25:16:6c:18:9f:69:67:56:eb:cf:6b:5a: 2b:be:ca:90:32:79:2b:89:a4:3e:d2:57:29:15:13: 63:ce:3e:a8:b4:f1:53:59:65:07:8f:07:16:de:7f: be:1c:9b:30:5c:8e:37:81:a8:40:e8:65:bf:f1:f8: 9c:e8:b6:8f:8e:27:82:dd:41:80:3e:9d:ef:16:f2: 20:17:8c:3a:f3:8a:0f:98:88:d2:ee:93:04:7a:a5: 05:5f:04:bf:8e:6a:40:b5:09:af:51:e8:9d:a8:fa: aa:0e:2e:f3:cb:18:8b:ce:11:15:1c:e4:8e:e7:62: c8:18:44:d6:0e:1e:b0:ba:f7:6a:48:5b:72:d1:a0: fd:dc:7b:38:e8:37:c7:ba:12:b4:93:5a:1d:aa:43: 26:a1:a9:cb:eb:ee:28:b0:95:31:10:9a:0c:dc:fa: 79:aa:4d:c4:46:3f:4f:43:24:b7:4d:c6:a8:ce:cc: 66:a7:ae:b7:1f:fb:f4:c2:d4:4f:b7:e6:82:62:92: f2:a9:e9:3e:f4:e5:3e:52:50:f6:b5:41:a2:b8:dc: 8e:cf:62:3d:45:01:02:6d:ee:32:cd:4c:82:b2:94: 49:b4:e7:d9:b8:0a:07:76:36:b2:76:14:af:12:63: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1D:C1:94:B0:55:E2:5D:6B:A9:A5:67:85:E7:A5:16:5A:A3:D0:3E X509v3 Authority Key Identifier: keyid:AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b9:be:f7:d6:03:14:aa:ad:2b:30:58:8c:93:4e:d4:03:2a: c7:80:b8:c7:66:c3:14:72:e9:cf:7d:01:e8:51:df:fb:0b:5b: db:12:ef:6d:42:fb:84:44:6d:0e:2b:10:8f:a0:ab:ac:33:54: f7:88:cf:25:df:53:42:f1:32:4e:c6:37:9f:09:58:be:14:50: b6:a0:95:55:03:58:ab:b8:eb:74:7c:9b:73:7e:27:0f:4b:b4: 16:e0:3e:c7:51:d5:1d:59:69:c5:11:78:65:04:b9:31:e7:e7: 72:d2:36:9d:79:59:b9:37:12:97:43:ad:60:f7:f2:05:b6:db: 5d:ff:30:7f:64:7a:1d:9c:51:15:a3:85:b5:d2:8c:63:33:c4: 84:a7:78:ec:39:b3:e4:22:b3:4e:2a:fb:6b:4a:11:0c:58:8f: b4:73:92:57:2e:f4:4f:81:62:ae:70:29:22:cf:1b:05:18:7a: 51:93:53:76:3d:f4:2d:4e:5f:eb:71:a1:d6:60:f0:a2:dd:58: 6b:ad:78:f3:0d:a3:fd:8b:3d:5b:ba:6e:eb:60:f4:a9:98:70: 05:23:45:c7:dd:fc:d2:34:35:3c:4c:95:ab:86:04:57:16:e9: 92:16:42:33:b9:03:ce:b4:3c:27:56:47:86:19:50:46:ea:44: ce:7e:0e:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSWmGLJ0dG1xGhsn8y9m6jFvqnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3MThD NjhBQzU4QzAeFw0yNjA5MjQxNjUxNDNaFw0yNjA5MjUxODUxNDNaMDMxMTAvBgNV BAMTKEIyMURDMTk0QjA1NUUyNUQ2QkE5QTU2Nzg1RTdBNTE2NUFBM0QwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYKPjABX4HvgzpWtN48QKVyUW bBifaWdW689rWiu+ypAyeSuJpD7SVykVE2POPqi08VNZZQePBxbef74cmzBcjjeB qEDoZb/x+Jzoto+OJ4LdQYA+ne8W8iAXjDrzig+YiNLukwR6pQVfBL+OakC1Ca9R 6J2o+qoOLvPLGIvOERUc5I7nYsgYRNYOHrC692pIW3LRoP3cezjoN8e6ErSTWh2q Qyahqcvr7iiwlTEQmgzc+nmqTcRGP09DJLdNxqjOzGanrrcf+/TC1E+35oJikvKp 6T705T5SUPa1QaK43I7PYj1FAQJt7jLNTIKylEm059m4Cgd2NrJ2FK8SYy31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsh3BlLBV4l1rqaVnheelFlqj0D4wHwYDVR0j BBgwFoAUrfQ+NrF2jeh0vC5DhmeHGMaKxYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIxYzk1NzktNTZiYS00YTcwLWJhMTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZC MTc2OERFODc0QkMyRTQzODY2Nzg3MThDNjhBQzU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREY0M0UzNkIxNzY4REU4NzRCQzJFNDM4NjY3ODcxOEM2OEFD NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3 MThDNjhBQzU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi5vvfWAxSqrSswWIyTTtQDKseAuMdmwxRy 6c99AehR3/sLW9sS721C+4REbQ4rEI+gq6wzVPeIzyXfU0LxMk7GN58JWL4UULag lVUDWKu463R8m3N+Jw9LtBbgPsdR1R1ZacUReGUEuTHn53LSNp15Wbk3EpdDrWD3 8gW2213/MH9keh2cURWjhbXSjGMzxISneOw5s+Qis04q+2tKEQxYj7Rzklcu9E+B Yq5wKSLPGwUYelGTU3Y99C1OX+txodZg8KLdWGutePMNo/2LPVu6butg9KmYcAUj Rcfd/NI0NTxMlauGBFcW6ZIWQjO5A860PCdWR4YZUEbqRM5+Dn0= -----END CERTIFICATE-----Generated at Thu Sep 24 22:27:05 2026 by rpki-client