$ rpki-client -vvvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: aU9cZ0lioy2ZkCJRQvH+uPC5IhafOY1Vumi05OEra5E= Subject key identifier: 73:06:A7:7B:DF:50:92:AF:C4:2F:08:5D:5C:DA:4C:B7:FC:49:F7:D7 Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 0576C2A0465603FAC09B90B3B201771D4CEB6F3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:32:46 +0000 Manifest this update: Wed 23 Sep 2026 21:27:46 +0000 Manifest next update: Thu 24 Sep 2026 23:01:46 +0000 Files and hashes: 1: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 2: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 3: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 4: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) 5: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) 6: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) 7: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) 8: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) 9: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: 8TEOug9cmS77uNcmC8y0Lve6fWnaSPCr7UzZsROcEVc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:76:c2:a0:46:56:03:fa:c0:9b:90:b3:b2:01:77:1d:4c:eb:6f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: Sep 23 21:27:46 2026 GMT Not After : Sep 24 23:01:46 2026 GMT Subject: CN=7306A77BDF5092AFC42F085D5CDA4CB7FC49F7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:28:bd:14:c8:5b:5b:3d:0a:1e:1b:2a:d6: 6e:fc:1f:2c:ca:89:57:a4:a1:4c:b8:a7:25:29:64: 61:84:14:b3:9b:99:ec:02:c9:cd:77:6b:df:8c:d6: 60:58:da:9f:b1:a1:47:7d:32:c2:8b:c2:b5:00:ec: 34:a2:d9:e3:83:5d:d1:23:2d:a3:58:80:ae:c3:3f: a8:c6:33:1b:53:08:d0:e0:1e:0b:ad:8e:96:d8:44: 5b:6c:5d:70:8a:0a:18:3a:0e:52:39:39:d3:18:37: 53:8b:61:b8:24:d3:de:1b:a4:c6:91:56:bc:a5:1e: 7e:d4:3a:19:d6:fb:35:8d:24:0e:25:ff:33:a2:d1: af:13:90:bf:f4:66:37:93:28:bd:e1:cd:f7:2c:5b: 04:76:ba:37:33:43:94:a1:2c:15:8a:9c:db:1c:da: 9d:6b:09:c9:18:b8:72:7b:8d:ce:9f:b5:e2:a2:8e: 6a:9a:f9:b2:33:ea:4b:b3:0a:f9:5b:63:2b:5e:11: f3:2f:d5:d0:0a:8d:d0:ac:3f:38:e2:bf:27:0e:36: 62:c9:b4:a6:51:24:5f:21:03:af:11:fd:2b:f3:a6: 0e:6c:88:ca:e6:6d:dc:f3:84:cb:6a:68:59:45:c9: 5c:0a:78:30:90:1d:b6:32:33:93:00:3c:bb:9d:f5: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:06:A7:7B:DF:50:92:AF:C4:2F:08:5D:5C:DA:4C:B7:FC:49:F7:D7 X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c6:97:d8:ee:42:51:b5:3b:a9:54:32:76:2a:e6:9e:2c:c9: 08:84:c4:0c:7c:56:dc:aa:df:d5:eb:c3:b0:3f:3e:37:f3:87: f8:4c:4c:6e:c7:90:a5:43:ac:a2:e2:85:46:95:aa:a8:f7:0c: b8:3b:f0:6e:06:13:4d:60:9b:42:3b:4b:01:8c:b3:c9:22:ca: 1c:46:99:98:42:47:04:71:c0:3a:9a:c8:3d:3a:58:6a:b6:1b: a1:30:94:ad:f9:a1:ee:2d:d0:c6:b6:6a:af:f6:52:01:5e:20: b6:96:9f:18:98:98:f7:a8:10:28:fd:49:ce:b1:52:a7:9d:76: c8:ed:74:81:b9:7c:97:94:dc:c7:0a:fc:12:3e:c6:fe:f9:6d: b9:2b:f0:8a:8c:20:4e:b0:2f:8f:11:0d:a0:57:3d:db:7e:90: a7:ce:4d:06:d5:70:7d:4d:5d:75:6f:3d:bf:f7:20:dc:3c:5f: 96:80:75:76:be:de:1d:23:0e:92:49:a0:12:99:ec:2b:ff:2e: 56:dc:e3:02:a9:88:84:4c:22:b2:48:b3:de:57:99:0b:ac:dc: 57:04:3f:3c:9b:98:99:dd:25:3d:31:57:56:98:84:17:d4:4d: 51:d2:ee:0f:1f:69:36:56:fa:50:ae:71:4d:56:f6:53:dc:6f: b1:56:56:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXbCoEZWA/rAm5CzsgF3HUzrbzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjA5MjMyMTI3NDZaFw0yNjA5MjQyMzAxNDZaMDMxMTAvBgNV BAMTKDczMDZBNzdCREY1MDkyQUZDNDJGMDg1RDVDREE0Q0I3RkM0OUY3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+Si9FMhbWz0KHhsq1m78HyzK iVekoUy4pyUpZGGEFLObmewCyc13a9+M1mBY2p+xoUd9MsKLwrUA7DSi2eODXdEj LaNYgK7DP6jGMxtTCNDgHgutjpbYRFtsXXCKChg6DlI5OdMYN1OLYbgk094bpMaR VrylHn7UOhnW+zWNJA4l/zOi0a8TkL/0ZjeTKL3hzfcsWwR2ujczQ5ShLBWKnNsc 2p1rCckYuHJ7jc6fteKijmqa+bIz6kuzCvlbYyteEfMv1dAKjdCsPzjivycONmLJ tKZRJF8hA68R/Svzpg5siMrmbdzzhMtqaFlFyVwKeDCQHbYyM5MAPLud9WQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcwane99Qkq/ELwhdXNpMt/xJ99cwHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjGl9juQlG1O6lUMnYq5p4syQiExAx8Vtyq 39Xrw7A/Pjfzh/hMTG7HkKVDrKLihUaVqqj3DLg78G4GE01gm0I7SwGMs8kiyhxG mZhCRwRxwDqayD06WGq2G6EwlK35oe4t0Ma2aq/2UgFeILaWnxiYmPeoECj9Sc6x UqeddsjtdIG5fJeU3McK/BI+xv75bbkr8IqMIE6wL48RDaBXPdt+kKfOTQbVcH1N XXVvPb/3INw8X5aAdXa+3h0jDpJJoBKZ7Cv/Llbc4wKpiIRMIrJIs95XmQus3FcE PzybmJndJT0xV1aYhBfUTVHS7g8faTZW+lCucU1W9lPcb7FWVgE= -----END CERTIFICATE-----Generated at Thu Sep 24 01:58:11 2026 by rpki-client