$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: eWVUp8spGNvNXzrfzia/dEE7T/2FA48dnj7Zn1rnNMo= Subject key identifier: 31:84:9E:65:69:CD:1F:69:20:28:F9:D9:4E:6A:CE:37:73:67:DF:44 Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 2036AB34FAA1D87B5D7EE601AEC61E6F0ED1B0B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:22:30 +0000 Manifest this update: Thu 23 Jul 2026 14:17:30 +0000 Manifest next update: Fri 24 Jul 2026 16:19:30 +0000 Files and hashes: 1: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) 2: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: CBBFHaRfI9ei6GjFA7bXjqKxjt1om1TIm0SPxmQ8QW8=) 3: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:36:ab:34:fa:a1:d8:7b:5d:7e:e6:01:ae:c6:1e:6f:0e:d1:b0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: Jul 23 14:17:30 2026 GMT Not After : Jul 24 16:19:30 2026 GMT Subject: CN=31849E6569CD1F692028F9D94E6ACE377367DF44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:71:ee:c9:2b:20:32:63:fa:70:31:e5:30: ed:81:10:cc:56:92:5a:33:1c:9e:9d:60:3e:a5:09: c3:3e:a9:c0:55:28:94:55:e7:47:cc:a5:49:48:13: 54:81:f3:e3:38:c1:0b:49:69:31:92:b9:00:f4:ba: 17:c3:22:13:2a:24:68:c2:a9:a7:77:15:e5:10:68: 67:83:4f:f4:44:ac:27:6e:25:7e:26:4d:34:ed:2a: c7:dc:b2:7b:06:e3:66:cd:ad:6e:01:53:48:10:11: 31:71:c7:89:c1:9e:ea:30:65:a2:0a:07:13:f0:20: a4:d1:61:29:d6:81:68:85:48:54:f2:d7:6c:9f:87: f0:94:d0:69:04:dc:fb:23:00:89:02:2a:df:8c:36: 8a:a2:e0:af:56:2a:1f:a4:6e:90:57:fe:9a:ab:e8: 05:7b:cf:20:db:4b:9b:d6:34:8c:a5:f4:ca:1b:69: fb:ef:b9:4a:b2:df:ac:c7:75:a3:54:59:70:cf:d1: 9d:ed:aa:a5:ce:c4:ff:db:6a:3e:39:42:88:ff:05: cf:fb:ea:52:50:ad:56:ae:c3:ff:02:ab:d4:e3:59: c4:a8:86:80:b2:00:87:f6:b8:c4:0a:9d:e5:94:e4: bc:54:24:c2:84:e3:b6:bd:54:9a:44:b1:97:4d:47: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:84:9E:65:69:CD:1F:69:20:28:F9:D9:4E:6A:CE:37:73:67:DF:44 X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:35:ae:98:38:89:ca:9b:6d:94:d4:54:e5:e1:5a:f9:8d:5b: bc:78:c2:9a:66:e8:28:e9:07:c6:ee:25:89:c0:03:cc:c7:07: 87:c2:32:51:f1:c2:51:f0:51:eb:82:06:27:c8:f3:33:8b:40: 2b:61:9c:e5:43:f8:c1:1e:17:98:5a:58:5a:94:85:85:12:92: b0:57:5f:84:b4:c7:fe:18:2b:77:5c:4b:ec:52:92:ea:84:f0: ed:5b:e6:fd:cf:07:87:ff:d6:2f:3d:97:30:f0:2b:3a:24:7a: ba:16:52:90:14:71:6f:4b:93:f5:5a:97:0e:07:99:54:63:b2: ab:b4:e6:32:de:6a:69:b3:1c:f5:df:e2:a8:4b:28:13:2b:02: af:ab:88:61:6c:2c:58:20:a6:f8:87:63:5b:ba:37:66:1c:b3: 0d:57:1d:53:fb:88:1b:65:a4:e3:c3:49:09:86:a4:60:59:66: b5:a7:2b:f6:63:69:29:d3:e0:17:11:3a:66:4b:5a:30:89:52: 82:ca:74:f4:b5:6a:c2:8d:19:a2:98:20:d1:68:57:78:96:16: 00:86:ef:24:8c:a0:34:b6:00:25:47:14:50:d8:2a:ee:3f:cd: c3:6f:d5:52:03:35:c5:94:94:9d:0a:5d:bf:c9:b4:f8:f3:f0: 25:f6:b0:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDarNPqh2HtdfuYBrsYebw7RsLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjA3MjMxNDE3MzBaFw0yNjA3MjQxNjE5MzBaMDMxMTAvBgNV BAMTKDMxODQ5RTY1NjlDRDFGNjkyMDI4RjlEOTRFNkFDRTM3NzM2N0RGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOHHuySsgMmP6cDHlMO2BEMxW klozHJ6dYD6lCcM+qcBVKJRV50fMpUlIE1SB8+M4wQtJaTGSuQD0uhfDIhMqJGjC qad3FeUQaGeDT/RErCduJX4mTTTtKsfcsnsG42bNrW4BU0gQETFxx4nBnuowZaIK BxPwIKTRYSnWgWiFSFTy12yfh/CU0GkE3PsjAIkCKt+MNoqi4K9WKh+kbpBX/pqr 6AV7zyDbS5vWNIyl9MobafvvuUqy36zHdaNUWXDP0Z3tqqXOxP/baj45Qoj/Bc/7 6lJQrVauw/8Cq9TjWcSohoCyAIf2uMQKneWU5LxUJMKE47a9VJpEsZdNRz2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMYSeZWnNH2kgKPnZTmrON3Nn30QwHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc1rpg4icqbbZTUVOXhWvmNW7x4wppm6Cjp B8buJYnAA8zHB4fCMlHxwlHwUeuCBifI8zOLQCthnOVD+MEeF5haWFqUhYUSkrBX X4S0x/4YK3dcS+xSkuqE8O1b5v3PB4f/1i89lzDwKzokeroWUpAUcW9Lk/Valw4H mVRjsqu05jLeammzHPXf4qhLKBMrAq+riGFsLFggpviHY1u6N2Ycsw1XHVP7iBtl pOPDSQmGpGBZZrWnK/ZjaSnT4BcROmZLWjCJUoLKdPS1asKNGaKYINFoV3iWFgCG 7ySMoDS2ACVHFFDYKu4/zcNv1VIDNcWUlJ0KXb/JtPjz8CX2sBg= -----END CERTIFICATE-----Generated at Fri Jul 24 04:18:04 2026 by rpki-client