$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: BeB0vPTsdaq46phzOddeDOfsVyn1eVriQEsTMyrP+pQ= Subject key identifier: 5B:62:B4:90:57:08:3C:79:29:4B:11:C3:E0:F2:08:96:7E:5C:2F:8C Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 1E261ABAA5068CE2193983EC40AEA2BC239F9C14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:41 +0000 Manifest this update: Tue 12 May 2026 19:30:41 +0000 Manifest next update: Wed 13 May 2026 20:58:41 +0000 Files and hashes: 1: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) 2: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) 3: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: 2DH8o9MCQJ0DPjLBRTfi8hYSyvpLDtZ35YSPgJ449TM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:26:1a:ba:a5:06:8c:e2:19:39:83:ec:40:ae:a2:bc:23:9f:9c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: May 12 19:30:41 2026 GMT Not After : May 13 20:58:41 2026 GMT Subject: CN=5B62B49057083C79294B11C3E0F208967E5C2F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:9a:ea:8a:2c:c2:13:62:8c:30:0e:49:13: 95:f6:a7:bb:41:81:a3:4d:97:f4:77:4c:a4:4a:5e: 20:97:32:cc:94:17:b3:c1:a5:55:c9:64:a1:2e:2d: 62:ea:e0:7c:48:15:15:4c:69:7a:96:1f:bb:fc:39: b5:ed:6f:b9:8e:f7:d7:b3:95:f7:fe:b5:10:fe:85: 19:cb:97:9f:9f:6b:71:c5:1c:17:1c:8f:0b:62:c5: 79:cb:a2:87:b9:f7:78:fb:7e:6d:eb:42:00:27:e4: b5:93:ea:64:76:60:34:4c:e6:9d:3b:d3:f9:6a:70: fe:f4:91:e9:35:fa:34:e4:29:ad:74:11:ad:c7:6c: b1:54:2d:52:62:64:d9:74:a2:17:96:06:03:bb:85: f9:7e:2a:2e:55:fe:a6:9c:76:93:44:5e:ed:ac:50: 59:78:9d:b6:b8:12:db:6d:35:48:e2:a0:3f:b0:5b: d8:27:ee:b1:a1:f0:4f:0d:92:77:58:5f:2c:09:79: 74:9b:3f:d5:f4:69:8d:97:4a:7e:a4:1c:d5:a7:ad: 8a:1c:92:6b:7d:82:c4:11:3d:49:ac:c8:e5:3e:58: c2:68:c1:3c:57:5b:06:3d:85:dd:c7:84:4c:4d:7e: 43:e2:e6:5f:8e:fa:46:2b:9e:0b:b3:5a:c6:f9:81: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:B4:90:57:08:3C:79:29:4B:11:C3:E0:F2:08:96:7E:5C:2F:8C X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4a:47:f4:03:22:21:80:50:de:7f:4d:d7:24:81:13:14:93: c6:b4:6e:2f:d4:8d:8c:4b:26:4b:9f:48:51:fe:57:cd:dc:04: 6d:75:9d:b8:fe:26:8a:8c:38:0b:a8:24:50:77:81:30:6d:12: 71:ff:35:4b:02:0a:e4:c6:d3:d7:b3:5f:3e:ab:e7:86:77:37: 6c:e0:a8:f3:0e:1f:e1:71:09:94:3e:40:93:9a:a6:e7:af:d0: 34:79:84:0f:fe:87:6e:cb:2b:f0:4b:5a:98:c0:4d:a5:2d:97: 6f:c3:be:21:47:16:48:b6:a6:8b:2e:35:43:a6:d0:ad:39:b8: f6:8c:b6:e5:39:6b:2f:c3:b8:70:b1:51:5b:de:37:de:c2:36: 83:14:8d:89:79:86:48:5c:68:6f:0e:07:c2:3f:fe:86:59:89: 0e:ae:97:56:99:0e:28:02:8a:0a:3b:3f:d1:56:68:d9:02:f9: b8:db:36:9f:4a:ec:3b:08:83:e1:7e:19:c4:cf:ef:40:ec:cb: e4:8f:b5:43:9f:99:70:54:de:c2:c1:b0:a3:c1:a1:5e:1f:b1: 88:b3:a7:91:d3:08:b9:06:c5:2e:14:9a:d3:2b:71:bb:e4:f5: 5e:e2:22:b5:59:51:67:cf:36:4e:b0:6d:73:b9:b1:ef:64:5c: 75:57:0a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiYauqUGjOIZOYPsQK6ivCOfnBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjA1MTIxOTMwNDFaFw0yNjA1MTMyMDU4NDFaMDMxMTAvBgNV BAMTKDVCNjJCNDkwNTcwODNDNzkyOTRCMTFDM0UwRjIwODk2N0U1QzJGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwx5rqiizCE2KMMA5JE5X2p7tB gaNNl/R3TKRKXiCXMsyUF7PBpVXJZKEuLWLq4HxIFRVMaXqWH7v8ObXtb7mO99ez lff+tRD+hRnLl5+fa3HFHBccjwtixXnLooe593j7fm3rQgAn5LWT6mR2YDRM5p07 0/lqcP70kek1+jTkKa10Ea3HbLFULVJiZNl0oheWBgO7hfl+Ki5V/qacdpNEXu2s UFl4nba4EtttNUjioD+wW9gn7rGh8E8NkndYXywJeXSbP9X0aY2XSn6kHNWnrYoc kmt9gsQRPUmsyOU+WMJowTxXWwY9hd3HhExNfkPi5l+O+kYrnguzWsb5gXv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW2K0kFcIPHkpSxHD4PIIln5cL4wwHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJKR/QDIiGAUN5/TdckgRMUk8a0bi/UjYxL JkufSFH+V83cBG11nbj+JoqMOAuoJFB3gTBtEnH/NUsCCuTG09ezXz6r54Z3N2zg qPMOH+FxCZQ+QJOapuev0DR5hA/+h27LK/BLWpjATaUtl2/DviFHFki2posuNUOm 0K05uPaMtuU5ay/DuHCxUVveN97CNoMUjYl5hkhcaG8OB8I//oZZiQ6ul1aZDigC igo7P9FWaNkC+bjbNp9K7DsIg+F+GcTP70Dsy+SPtUOfmXBU3sLBsKPBoV4fsYiz p5HTCLkGxS4UmtMrcbvk9V7iIrVZUWfPNk6wbXO5se9kXHVXCnI= -----END CERTIFICATE-----Generated at Wed May 13 01:45:06 2026 by rpki-client