$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft (raw, json) Hash identifier: sIYmOISw/MrLQEKD9RRDy4mpdwPZDXz1Fab1wxMpLUQ= Subject key identifier: FE:EA:91:CF:17:59:48:8F:47:4F:DE:B3:6A:6C:38:E5:86:8F:F2:FD Authority key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A Certificate issuer: /CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Certificate serial: 4855F6B23E17275650FDA3B089FDE07C4078F890 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:01:53 +0000 Manifest this update: Thu 24 Sep 2026 04:56:53 +0000 Manifest next update: Fri 25 Sep 2026 07:08:53 +0000 Files and hashes: 1: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: NH4yUQHyXjk48GXKuIwjhyG7vZ+Cx25bwYRUGuZituk=) 2: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl (hash: L52OZAohXWzjMGlyngq9vZazvUtwmRppq6tQ2CTsrGY=) 3: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K0hWr7nblRa/oP+EjsYT3ozmxs7zbRuzowY36KyLRjU=) 4: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: HdNzGHLZKPYzFVkh/tdlOMNe0NE8KbyBRcBVr8tLORE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:55:f6:b2:3e:17:27:56:50:fd:a3:b0:89:fd:e0:7c:40:78:f8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Validity Not Before: Sep 24 04:56:53 2026 GMT Not After : Sep 25 07:08:53 2026 GMT Subject: CN=FEEA91CF1759488F474FDEB36A6C38E5868FF2FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:fc:66:a6:39:70:4a:30:38:59:74:d9:81: 98:22:5d:42:f8:f6:1f:83:18:22:5f:6f:fe:d7:8d: 97:53:7c:10:e3:f8:36:3e:fb:91:dd:5f:34:52:4c: 06:5f:c4:4b:14:e1:b7:18:01:33:45:9d:82:8a:95: 8e:c5:f4:f5:1d:0e:87:2a:a8:a0:e6:9f:61:d2:04: f3:28:cd:2d:d2:99:d2:42:fb:ab:dc:7b:98:44:02: fe:63:ab:0f:54:85:ae:86:85:b8:70:29:ce:e0:f2: 0c:70:24:ae:25:83:9c:f8:40:29:7c:33:93:61:6b: c3:80:7d:c1:13:74:86:6a:32:b9:e2:60:fc:09:b0: 01:17:c3:3f:39:bb:aa:2e:14:85:fc:4c:7c:7d:79: da:e2:ef:cc:ec:67:1a:fe:2e:fe:e6:1e:18:8d:ed: 0e:d9:fa:04:60:75:ce:53:76:43:1d:48:f4:29:4e: 1c:1d:02:e5:38:3c:96:69:a3:90:cb:b5:c5:29:1a: e4:94:46:2e:08:0b:20:fa:2e:b5:83:2a:5c:61:74: 22:55:55:76:8a:7f:52:0c:69:2f:4f:de:61:32:86: 22:9e:4f:e1:59:37:bc:4c:4c:0c:d6:ec:1c:4b:c4: 00:76:fb:15:d3:74:7e:aa:0d:50:a8:d7:80:ee:a2: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EA:91:CF:17:59:48:8F:47:4F:DE:B3:6A:6C:38:E5:86:8F:F2:FD X509v3 Authority Key Identifier: keyid:AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f5:72:5a:d0:29:a0:b6:02:8b:e9:b5:15:f7:f0:16:31:da: cf:a8:70:3f:14:d9:68:fd:de:8a:fd:4d:71:2c:9b:fe:22:e9: 00:76:b1:1c:07:85:94:49:55:90:02:88:01:97:ad:f0:5b:dc: 6b:dd:25:8d:17:41:41:8a:e2:f9:e2:70:aa:3c:47:ea:58:de: c5:51:92:c8:08:1b:ee:8a:90:cb:71:41:3e:65:1c:2d:f1:88: 65:92:de:49:08:19:fa:33:31:97:52:d1:42:71:eb:bc:41:dd: f4:14:0d:50:f8:39:03:f0:2e:7b:50:ff:3c:c9:ec:99:ad:87: 49:da:47:cf:8d:b3:84:35:1a:1b:72:49:0e:74:86:7f:02:b6: 04:b0:be:9c:f3:a8:f1:ae:8b:f3:bb:59:a7:c4:e1:97:10:d4: ac:6b:d6:0f:ca:89:94:ff:3a:fd:62:ca:d5:6b:b1:2b:ce:cd: af:f0:cf:db:65:35:e0:ff:60:ad:16:f2:3c:e0:b6:a4:fd:ef: c0:4e:22:cd:97:e8:0c:5f:a5:96:c9:da:98:b0:24:45:74:f6: ba:a9:f9:3a:89:03:82:d2:0a:a9:c3:8e:b3:0a:95:84:29:c6: 84:26:29:e1:04:c9:b3:71:39:cb:18:e6:98:0d:10:5b:10:e2: de:6b:41:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFX2sj4XJ1ZQ/aOwif3gfEB4+JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1 MUE2RkUyQTAeFw0yNjA5MjQwNDU2NTNaFw0yNjA5MjUwNzA4NTNaMDMxMTAvBgNV BAMTKEZFRUE5MUNGMTc1OTQ4OEY0NzRGREVCMzZBNkMzOEU1ODY4RkYyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeu/xmpjlwSjA4WXTZgZgiXUL4 9h+DGCJfb/7XjZdTfBDj+DY++5HdXzRSTAZfxEsU4bcYATNFnYKKlY7F9PUdDocq qKDmn2HSBPMozS3SmdJC+6vce5hEAv5jqw9Uha6GhbhwKc7g8gxwJK4lg5z4QCl8 M5Nha8OAfcETdIZqMrniYPwJsAEXwz85u6ouFIX8THx9edri78zsZxr+Lv7mHhiN 7Q7Z+gRgdc5TdkMdSPQpThwdAuU4PJZpo5DLtcUpGuSURi4ICyD6LrWDKlxhdCJV VXaKf1IMaS9P3mEyhiKeT+FZN7xMTAzW7BxLxAB2+xXTdH6qDVCo14DuolTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/uqRzxdZSI9HT96zamw45YaP8v0wHwYDVR0j BBgwFoAUrWsKLQaoV3HSovGvabKaU1Gm/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY1NTFhYjktODA0MS00YTlhLTliNTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQw NkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1MUE2RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDZCMEEyRDA2QTg1NzcxRDJBMkYxQUY2OUIyOUE1MzUxQTZG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlB NTM1MUE2RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH1clrQKaC2AovptRX38BYx2s+ocD8U2Wj9 3or9TXEsm/4i6QB2sRwHhZRJVZACiAGXrfBb3GvdJY0XQUGK4vnicKo8R+pY3sVR ksgIG+6KkMtxQT5lHC3xiGWS3kkIGfozMZdS0UJx67xB3fQUDVD4OQPwLntQ/zzJ 7Jmth0naR8+Ns4Q1GhtySQ50hn8CtgSwvpzzqPGui/O7WafE4ZcQ1Kxr1g/KiZT/ Ov1iytVrsSvOza/wz9tlNeD/YK0W8jzgtqT978BOIs2X6AxfpZbJ2piwJEV09rqp +TqJA4LSCqnDjrMKlYQpxoQmKeEEybNxOcsY5pgNEFsQ4t5rQe8= -----END CERTIFICATE-----Generated at Thu Sep 24 17:06:15 2026 by rpki-client