$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: BU0T7BfUbPXYlZXhzwhYMr1M2IvoY1kxt4ijBJAFmSk= Subject key identifier: A2:23:78:DC:CE:D2:D1:6C:91:2A:77:0A:7C:71:67:D1:E2:B5:2F:C8 Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 13BCCBA7E791DA28B8082D6A6E118A41D2511D48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 12:26:09 +0000 Manifest this update: Thu 24 Sep 2026 12:21:09 +0000 Manifest next update: Fri 25 Sep 2026 13:16:09 +0000 Files and hashes: 1: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) 3: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: ditouj4G4FvFVRfXx53IrPUFdxVVVNrBPgDw/jS1Aqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bc:cb:a7:e7:91:da:28:b8:08:2d:6a:6e:11:8a:41:d2:51:1d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: Sep 24 12:21:09 2026 GMT Not After : Sep 25 13:16:09 2026 GMT Subject: CN=A22378DCCED2D16C912A770A7C7167D1E2B52FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0c:03:17:ad:0f:d8:4b:b6:c6:b2:ff:e3:f8: 2f:cb:80:e3:28:3b:6c:bb:e8:60:72:68:69:02:67: 48:ab:85:8f:c8:8c:d8:ce:4f:50:ff:3f:ff:e7:6e: c8:1a:28:89:08:6a:f3:3d:10:9e:ca:ae:29:5b:95: 4c:fc:7e:7a:8e:5c:b4:62:ae:cc:9c:54:0f:fc:4a: f4:d3:53:97:88:ba:08:04:15:85:88:9e:70:94:63: b8:3f:14:ae:f3:ea:d2:e3:45:57:71:9b:14:74:86: cb:f5:c6:66:8f:e7:95:aa:37:52:4d:f4:3e:bd:c2: 60:97:03:97:0f:51:3e:12:58:e3:cb:c2:9a:d4:01: ee:41:f5:2c:5d:83:a2:f6:f6:25:fc:f0:18:d1:20: 55:85:43:4e:c4:6c:6e:56:be:d4:cd:05:5f:cf:dd: 2d:af:b3:05:0a:84:4f:3d:0b:18:79:bb:db:1e:3e: 4e:5a:f1:96:b4:74:5a:b9:66:ed:b9:95:4a:cf:fc: 80:65:4a:7e:fb:83:9f:60:79:62:93:0f:13:9d:ac: c9:94:41:ac:8f:48:c8:cb:4f:50:67:8c:73:71:17: c8:71:45:78:ed:5c:69:0c:a4:e6:f2:73:d5:f5:60: 01:43:9d:f2:9c:e8:1c:b4:f2:fc:e0:25:27:73:cf: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:78:DC:CE:D2:D1:6C:91:2A:77:0A:7C:71:67:D1:E2:B5:2F:C8 X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:63:c8:3a:cb:67:fe:41:32:1b:fb:e9:8a:a5:86:09:f2:58: 29:ad:d9:7a:d7:65:c0:b6:bf:c9:aa:94:82:31:7a:7f:0e:90: f0:95:6b:10:3f:23:3c:61:9f:3b:e1:d5:86:ee:07:a8:75:1c: 72:81:03:a4:a8:ee:86:f0:2f:c2:d1:1a:07:ba:e0:93:de:a4: 5b:da:04:f3:4c:94:e0:07:c9:3c:57:13:c3:27:76:a1:93:73: 33:a6:0e:c5:11:d5:39:36:d5:f1:74:de:93:a4:db:49:d8:6f: 41:ad:40:66:ab:86:c7:c7:9e:fa:40:c5:1b:87:b7:5b:1c:b7: b4:86:76:cf:90:0e:dc:16:96:c4:bd:f8:2a:38:22:83:e1:91: b9:13:2d:46:f9:26:1d:af:94:4a:0b:77:54:32:89:6d:81:1a: a7:4a:85:5f:33:b2:0a:b7:0a:92:5a:eb:24:6c:58:b9:c4:ba: 9b:e4:13:ff:eb:39:aa:14:9b:a0:1a:a0:48:fb:8f:24:6a:d9: e6:f9:fc:8e:63:2a:5b:6b:db:f3:35:33:29:23:c5:82:71:68: 0c:32:8d:13:4b:00:21:96:1f:4b:51:c5:68:9b:02:c3:d3:18: d8:45:dd:be:46:e7:bb:68:c6:fb:21:bc:5e:2a:42:6f:e4:d6: 16:1b:b1:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7zLp+eR2ii4CC1qbhGKQdJRHUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjA5MjQxMjIxMDlaFw0yNjA5MjUxMzE2MDlaMDMxMTAvBgNV BAMTKEEyMjM3OERDQ0VEMkQxNkM5MTJBNzcwQTdDNzE2N0QxRTJCNTJGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRDAMXrQ/YS7bGsv/j+C/LgOMo O2y76GByaGkCZ0irhY/IjNjOT1D/P//nbsgaKIkIavM9EJ7KrilblUz8fnqOXLRi rsycVA/8SvTTU5eIuggEFYWInnCUY7g/FK7z6tLjRVdxmxR0hsv1xmaP55WqN1JN 9D69wmCXA5cPUT4SWOPLwprUAe5B9Sxdg6L29iX88BjRIFWFQ07EbG5WvtTNBV/P 3S2vswUKhE89Cxh5u9sePk5a8Za0dFq5Zu25lUrP/IBlSn77g59geWKTDxOdrMmU QayPSMjLT1BnjHNxF8hxRXjtXGkMpObyc9X1YAFDnfKc6By08vzgJSdzz4r5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoiN43M7S0WyRKncKfHFn0eK1L8gwHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBjyDrLZ/5BMhv76YqlhgnyWCmt2XrXZcC2 v8mqlIIxen8OkPCVaxA/Izxhnzvh1YbuB6h1HHKBA6So7obwL8LRGge64JPepFva BPNMlOAHyTxXE8MndqGTczOmDsUR1Tk21fF03pOk20nYb0GtQGarhsfHnvpAxRuH t1sct7SGds+QDtwWlsS9+Co4IoPhkbkTLUb5Jh2vlEoLd1QyiW2BGqdKhV8zsgq3 CpJa6yRsWLnEupvkE//rOaoUm6AaoEj7jyRq2eb5/I5jKltr2/M1MykjxYJxaAwy jRNLACGWH0tRxWibAsPTGNhF3b5G57toxvshvF4qQm/k1hYbsVs= -----END CERTIFICATE-----Generated at Fri Sep 25 04:50:31 2026 by rpki-client