$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: oqDnlPRLsM2Y90WCYIylDt60M2lLJQQNmd2i/GNAYaM= Subject key identifier: A2:00:74:09:5E:40:96:6D:B1:D8:6B:41:81:3C:D4:0F:8E:00:53:34 Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 058D3C6D7EBD8A427FB2C859FBE01D28E692AB5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 00:44:59 +0000 Manifest this update: Fri 24 Jul 2026 00:39:59 +0000 Manifest next update: Sat 25 Jul 2026 03:09:59 +0000 Files and hashes: 1: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) 2: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) 3: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) 4: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 5: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: GnRvp0NwGBx64F4G95SgDvexCeKlyMV/FdcEdKGkw8I=) 6: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 7: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 8: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) 9: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8d:3c:6d:7e:bd:8a:42:7f:b2:c8:59:fb:e0:1d:28:e6:92:ab:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: Jul 24 00:39:59 2026 GMT Not After : Jul 25 03:09:59 2026 GMT Subject: CN=A20074095E40966DB1D86B41813CD40F8E005334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:e7:11:ac:bb:e9:1d:99:f9:8c:bc:9d:21: f3:12:31:c5:1c:a6:e1:60:52:cf:f0:99:35:96:c9: 64:04:14:a9:5a:dc:9d:ff:d0:03:c2:81:70:3c:3c: 32:1c:e6:68:01:a3:e1:8b:dc:a9:f4:69:38:e2:d2: f5:2c:d3:4f:67:3d:83:47:36:fc:55:12:ee:ca:63: c1:e1:ca:78:9f:bb:72:2d:5f:a5:95:7c:1c:9d:c4: 1a:9a:2c:2c:ee:b7:d4:fc:c1:87:cd:47:8f:98:b0: 86:81:0a:32:23:36:d4:97:d4:02:57:ae:c7:f0:3f: ab:6f:50:56:4f:c7:36:bc:a1:d4:99:ea:53:73:88: 3f:64:da:54:c0:8b:c0:b0:f3:bd:fd:ea:c1:6c:00: 88:93:06:56:77:09:39:5d:9b:7b:3e:13:1c:24:98: 9e:94:ae:2d:b9:9a:7a:06:4f:7a:5f:43:a1:f9:e1: c6:5e:fd:54:7f:76:d5:56:d2:f4:93:74:5f:fd:50: 17:19:48:7a:b8:8a:0d:cb:dd:57:03:9c:f8:35:34: d3:44:8a:83:62:8a:df:e1:79:0d:ae:49:87:df:bb: e3:84:1e:79:be:f6:e7:63:27:a5:36:db:e2:4b:0c: 1d:fa:24:82:2e:8b:4f:82:f9:12:dd:64:5c:52:51: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:74:09:5E:40:96:6D:B1:D8:6B:41:81:3C:D4:0F:8E:00:53:34 X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a0:93:b5:43:a4:4e:b6:b7:47:a7:c3:31:58:d0:04:11:0a: 07:b4:9d:fc:ea:6c:df:3e:ec:6e:8a:48:ad:7b:1d:1f:9e:8f: ac:d7:e9:6b:ac:2f:41:bb:ea:2a:0b:e6:4a:40:c4:2b:e2:33: 68:b3:97:0e:6c:d0:ae:d2:0e:58:58:6d:cd:00:b8:78:3e:1e: 6c:88:2c:2e:b6:12:15:5d:39:9c:fb:fa:90:c6:97:fe:3b:cd: e6:1b:51:28:6d:2a:a5:76:1e:e2:44:c9:20:96:4d:31:8e:fe: 3a:67:93:3d:3a:60:a8:a8:b2:dd:44:86:cc:02:f1:7c:4f:89: bd:96:61:f4:b9:96:87:c7:68:5b:a5:85:6d:cd:c2:e6:cc:7b: ff:eb:56:0a:09:7c:d7:c5:e9:56:cf:b4:eb:3a:01:7e:ae:31: 83:f9:14:42:a4:6a:91:b2:49:88:bc:97:a8:fc:22:2d:fc:5c: ab:e4:bc:38:4f:be:2d:ea:cc:43:39:ff:26:68:07:17:98:7c: df:c9:72:4d:ab:b7:0a:39:d0:36:78:d7:a3:6d:7a:6d:dc:2c: e5:50:34:72:16:2a:a1:52:de:f8:13:a3:24:0a:ba:29:e8:0e: 87:d6:e3:94:2f:11:60:62:c4:35:29:f6:01:7a:ec:a2:8d:4a: ec:5b:f3:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBY08bX69ikJ/sshZ++AdKOaSq10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjA3MjQwMDM5NTlaFw0yNjA3MjUwMzA5NTlaMDMxMTAvBgNV BAMTKEEyMDA3NDA5NUU0MDk2NkRCMUQ4NkI0MTgxM0NENDBGOEUwMDUzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhecRrLvpHZn5jLydIfMSMcUc puFgUs/wmTWWyWQEFKla3J3/0APCgXA8PDIc5mgBo+GL3Kn0aTji0vUs009nPYNH NvxVEu7KY8Hhynifu3ItX6WVfBydxBqaLCzut9T8wYfNR4+YsIaBCjIjNtSX1AJX rsfwP6tvUFZPxza8odSZ6lNziD9k2lTAi8Cw87396sFsAIiTBlZ3CTldm3s+Exwk mJ6Uri25mnoGT3pfQ6H54cZe/VR/dtVW0vSTdF/9UBcZSHq4ig3L3VcDnPg1NNNE ioNiit/heQ2uSYffu+OEHnm+9udjJ6U22+JLDB36JIIui0+C+RLdZFxSUZFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogB0CV5Alm2x2GtBgTzUD44AUzQwHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGygk7VDpE62t0enwzFY0AQRCge0nfzqbN8+ 7G6KSK17HR+ej6zX6WusL0G76ioL5kpAxCviM2izlw5s0K7SDlhYbc0AuHg+HmyI LC62EhVdOZz7+pDGl/47zeYbUShtKqV2HuJEySCWTTGO/jpnkz06YKiost1EhswC 8XxPib2WYfS5lofHaFulhW3NwubMe//rVgoJfNfF6VbPtOs6AX6uMYP5FEKkapGy SYi8l6j8Ii38XKvkvDhPvi3qzEM5/yZoBxeYfN/Jck2rtwo50DZ416Ntem3cLOVQ NHIWKqFS3vgToyQKuinoDofW45QvEWBixDUp9gF67KKNSuxb818= -----END CERTIFICATE-----Generated at Fri Jul 24 02:36:12 2026 by rpki-client