$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft File: AD238D07A804B8783FEA2C95818033D3F37F9B13.mft (raw, json) Hash identifier: 0OQsgX+3Kkq5gcO9bx+1JlzllVLw+OCqpJWQLdXWKoc= Subject key identifier: D9:9D:18:41:61:5A:8F:18:65:AF:74:32:A7:2A:54:56:7B:89:B7:ED Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 Certificate issuer: /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Certificate serial: 0E0F82714CA7AD36860F959E9B45AE06323F520F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:45 +0000 Manifest this update: Tue 12 May 2026 20:32:45 +0000 Manifest next update: Wed 13 May 2026 23:03:45 +0000 Files and hashes: 1: AD238D07A804B8783FEA2C95818033D3F37F9B13.crl (hash: ZVZrmPdTqncUlX1drxp1mtQvYubjy7HfqCn3O0v1y7o=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0f:82:71:4c:a7:ad:36:86:0f:95:9e:9b:45:ae:06:32:3f:52:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Validity Not Before: May 12 20:32:45 2026 GMT Not After : May 13 23:03:45 2026 GMT Subject: CN=D99D1841615A8F1865AF7432A72A54567B89B7ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:58:8e:f7:6b:97:eb:29:92:91:22:ef:bd:dc: 84:56:af:61:13:16:5b:aa:df:be:1f:fa:0c:19:d1: 0a:50:6d:22:26:78:18:09:2e:6c:b7:cb:ed:6c:c1: b6:a3:d3:5d:5c:08:3a:24:2c:1f:3a:83:74:f0:ee: 82:d5:e9:f1:4b:96:d7:f9:9e:28:da:da:b1:5f:df: 92:44:c7:93:83:58:74:d6:6f:3e:15:df:74:73:a6: 78:3a:b1:eb:06:9f:8d:5e:c1:66:82:dc:0b:16:7d: 20:85:64:5c:b9:24:35:22:85:6b:7f:1a:7c:ed:03: b8:42:60:a5:19:02:cf:78:28:e7:32:72:10:3e:97: 53:ee:cd:6b:d0:20:9e:b2:b5:d5:02:7f:45:16:b3: a9:ea:f0:04:78:0c:52:4d:16:00:f9:8f:c7:d7:4a: 5c:95:9a:f7:27:e8:c4:08:1e:99:69:09:d8:71:0e: fa:c0:86:17:04:1a:73:c1:41:1d:6c:60:d1:1d:46: 90:3e:d1:47:04:17:66:f2:da:70:02:d5:33:0b:8f: 6e:6e:56:ad:12:1e:06:ad:6c:13:8c:39:46:11:ed: 3f:3e:b2:13:6e:8b:44:16:67:be:1c:00:a3:9a:d4: d4:bd:80:f6:c2:4f:38:d0:58:4f:45:80:15:91:7d: 4a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9D:18:41:61:5A:8F:18:65:AF:74:32:A7:2A:54:56:7B:89:B7:ED X509v3 Authority Key Identifier: keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:31:52:4f:6c:94:dc:08:b2:0c:11:6b:e5:3d:7a:10:94:14: 4c:3e:12:ff:92:9a:33:ee:bb:6e:72:b4:23:83:b6:c9:08:ac: 30:46:48:bf:ae:c1:18:1e:eb:2e:c3:46:3d:7d:6b:96:c6:97: 66:83:6f:9f:26:ce:49:c8:27:f2:f9:52:7e:22:f2:ab:a7:04: 37:73:7d:08:47:d1:8f:f5:ca:05:1e:ef:19:f2:bc:1f:37:34: c5:13:5c:9b:32:94:d4:f2:1b:c5:45:18:d9:a8:a0:69:21:c6: 66:6b:d1:f3:b9:d6:63:a5:20:86:9c:f3:04:d6:b4:5d:10:06: ac:af:5b:c9:e4:26:2a:87:d7:c7:af:7a:0c:57:0a:b9:f8:a0: db:9d:80:72:80:5b:29:e8:ff:94:08:1d:ce:c7:90:9c:73:06: fa:d0:22:be:4b:ad:f0:3a:f2:64:84:e9:f8:94:1e:1c:13:14: 92:59:8c:71:f8:14:58:41:9a:7f:d8:f1:83:88:96:81:5a:8f: ed:d2:f6:db:5b:26:f7:9d:d9:92:ea:57:32:bc:4c:93:38:18: d2:6f:19:01:e5:a7:d4:08:b4:9e:12:26:ea:90:10:54:98:e8: e9:9a:9b:37:44:0e:94:fa:13:9a:c3:4a:0d:ed:39:b4:ea:17: 40:06:a9:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDg+CcUynrTaGD5Wem0WuBjI/Ug8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNG MzdGOUIxMzAeFw0yNjA1MTIyMDMyNDVaFw0yNjA1MTMyMzAzNDVaMDMxMTAvBgNV BAMTKEQ5OUQxODQxNjE1QThGMTg2NUFGNzQzMkE3MkE1NDU2N0I4OUI3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpWI73a5frKZKRIu+93IRWr2ET Fluq374f+gwZ0QpQbSImeBgJLmy3y+1swbaj011cCDokLB86g3Tw7oLV6fFLltf5 nija2rFf35JEx5ODWHTWbz4V33Rzpng6sesGn41ewWaC3AsWfSCFZFy5JDUihWt/ GnztA7hCYKUZAs94KOcychA+l1PuzWvQIJ6ytdUCf0UWs6nq8AR4DFJNFgD5j8fX SlyVmvcn6MQIHplpCdhxDvrAhhcEGnPBQR1sYNEdRpA+0UcEF2by2nAC1TMLj25u Vq0SHgatbBOMOUYR7T8+shNui0QWZ74cAKOa1NS9gPbCTzjQWE9FgBWRfUrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Z0YQWFajxhlr3QypypUVnuJt+0wHwYDVR0j BBgwFoAUrSONB6gEuHg/6iyVgYAz0/N/mxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU0NWM5ZWItM2JiNi00MjAzLThjODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdB ODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNGMzdGOUIxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDIzOEQwN0E4MDRCODc4M0ZFQTJDOTU4MTgwMzNEM0YzN0Y5 QjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMz RDNGMzdGOUIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMxUk9slNwIsgwRa+U9ehCUFEw+Ev+SmjPu u25ytCODtskIrDBGSL+uwRge6y7DRj19a5bGl2aDb58mzknIJ/L5Un4i8qunBDdz fQhH0Y/1ygUe7xnyvB83NMUTXJsylNTyG8VFGNmooGkhxmZr0fO51mOlIIac8wTW tF0QBqyvW8nkJiqH18evegxXCrn4oNudgHKAWyno/5QIHc7HkJxzBvrQIr5LrfA6 8mSE6fiUHhwTFJJZjHH4FFhBmn/Y8YOIloFaj+3S9ttbJved2ZLqVzK8TJM4GNJv GQHlp9QItJ4SJuqQEFSY6OmamzdEDpT6E5rDSg3tObTqF0AGqVk= -----END CERTIFICATE-----Generated at Wed May 13 03:59:39 2026 by rpki-client