$ rpki-client -vvf rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft (raw, json) Hash identifier: 6Zra7BfK23SNawfV1GA+WQ+PtAHD43B66hIzdcLSMoE= Subject key identifier: 2B:42:26:5C:D6:BE:94:EA:30:8D:12:BA:7F:72:47:7E:20:C4:E2:66 Authority key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A Certificate issuer: /CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Certificate serial: 6C0D3911E9EEAA91B422959E14195EA8153816E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:32:29 +0000 Manifest this update: Tue 12 May 2026 06:27:29 +0000 Manifest next update: Wed 13 May 2026 07:04:29 +0000 Files and hashes: 1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: HdNzGHLZKPYzFVkh/tdlOMNe0NE8KbyBRcBVr8tLORE=) 2: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: NH4yUQHyXjk48GXKuIwjhyG7vZ+Cx25bwYRUGuZituk=) 3: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K0hWr7nblRa/oP+EjsYT3ozmxs7zbRuzowY36KyLRjU=) 4: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl (hash: XdjsQP97dbIzglhgbIKGPgdZ3754Tr1ENZKLMov5P24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0d:39:11:e9:ee:aa:91:b4:22:95:9e:14:19:5e:a8:15:38:16:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Validity Not Before: May 12 06:27:29 2026 GMT Not After : May 13 07:04:29 2026 GMT Subject: CN=2B42265CD6BE94EA308D12BA7F72477E20C4E266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:f5:84:01:8d:f0:b4:b3:ac:ce:5e:79:be: 29:6e:5c:f5:24:69:77:ec:f5:f0:b6:df:4c:8d:0a: 99:7f:7f:f8:ad:ce:c3:4e:02:0f:f7:bf:ab:63:d8: 9f:b9:b5:d0:ee:15:ee:46:d7:a0:1c:3a:af:3c:b8: f9:89:81:60:a7:5e:c6:67:2a:08:7c:95:34:7d:37: 8f:7e:c7:a0:ec:00:27:1a:5b:01:46:ef:93:1d:be: 34:bf:e0:87:ae:0e:8f:67:9c:b1:e1:c1:b8:aa:cb: af:17:54:f5:55:30:29:4e:fd:26:9b:52:5f:3f:e0: e8:99:dc:f5:6a:9d:4c:ac:60:85:9b:0e:f3:96:48: 74:ed:ba:fa:be:a2:d4:f9:a3:91:c9:90:4a:1f:db: c3:0e:39:46:58:2a:ee:77:19:35:4a:cf:9b:96:33: 80:f8:c9:6b:60:fc:2d:41:40:a6:fb:dd:54:d8:de: c3:be:9d:83:55:a8:99:a4:05:ce:71:d6:af:77:94: 7c:b4:c8:10:b0:96:9b:5b:f4:0b:8c:07:ec:9b:9e: 9a:d1:7c:46:1f:f3:1f:d6:4a:b1:80:a2:fa:6a:a5: 3d:63:cc:27:07:87:c5:8c:43:7f:1e:dc:b2:42:30: 41:59:e7:d6:47:e1:06:51:b0:a7:0f:e3:41:ae:35: 51:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:42:26:5C:D6:BE:94:EA:30:8D:12:BA:7F:72:47:7E:20:C4:E2:66 X509v3 Authority Key Identifier: keyid:AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d5:b1:1b:34:c4:5a:c5:81:ff:6d:27:c4:50:bc:ce:a4:36: 8e:93:9c:82:d1:58:b0:8e:56:d6:87:0f:fe:9d:ea:1b:4e:8e: 73:a4:63:80:d7:cf:38:86:cb:8a:51:da:f8:ca:3b:4c:76:eb: a5:6d:10:15:ff:58:64:b8:84:fd:3d:e4:a6:4b:78:f2:3f:67: 80:94:d9:68:e7:2a:51:5b:29:95:b7:ad:4d:0a:96:b7:d5:9b: ae:3e:3b:15:2b:16:c8:b2:44:bf:c7:7c:af:44:43:1d:a2:c4: c7:ff:a6:d6:47:63:a8:d1:e1:a9:91:ad:b0:9a:1a:32:76:9a: af:02:66:8c:7a:ab:60:5c:a1:45:a3:ae:23:f6:0f:1a:d6:d7: d6:05:c0:d8:2b:31:e5:84:35:45:19:07:e8:06:43:85:4e:71: 82:07:84:53:03:88:ad:89:4c:e3:1f:17:38:32:31:2a:07:e7: 52:57:35:7e:6a:da:72:0f:4a:ea:f2:89:5d:9b:03:ed:d1:a5: 01:21:e8:41:cd:ea:b0:e2:03:00:3c:71:a8:6c:8c:78:2c:62: c7:1b:4d:d6:d3:fa:ce:39:39:d3:60:1e:e1:4b:cb:90:c6:e3: 4e:39:6d:98:91:94:d9:01:e9:7e:83:23:72:6d:ed:82:68:be: 58:bf:b8:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbA05EenuqpG0IpWeFBleqBU4FuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1 MUE2RkUyQTAeFw0yNjA1MTIwNjI3MjlaFw0yNjA1MTMwNzA0MjlaMDMxMTAvBgNV BAMTKDJCNDIyNjVDRDZCRTk0RUEzMDhEMTJCQTdGNzI0NzdFMjBDNEUyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTafWEAY3wtLOszl55viluXPUk aXfs9fC230yNCpl/f/itzsNOAg/3v6tj2J+5tdDuFe5G16AcOq88uPmJgWCnXsZn Kgh8lTR9N49+x6DsACcaWwFG75MdvjS/4IeuDo9nnLHhwbiqy68XVPVVMClO/Sab Ul8/4OiZ3PVqnUysYIWbDvOWSHTtuvq+otT5o5HJkEof28MOOUZYKu53GTVKz5uW M4D4yWtg/C1BQKb73VTY3sO+nYNVqJmkBc5x1q93lHy0yBCwlptb9AuMB+ybnprR fEYf8x/WSrGAovpqpT1jzCcHh8WMQ38e3LJCMEFZ59ZH4QZRsKcP40GuNVF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0ImXNa+lOowjRK6f3JHfiDE4mYwHwYDVR0j BBgwFoAUrWsKLQaoV3HSovGvabKaU1Gm/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY1NTFhYjktODA0MS00YTlhLTliNTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQw NkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1MUE2RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDZCMEEyRDA2QTg1NzcxRDJBMkYxQUY2OUIyOUE1MzUxQTZG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlB NTM1MUE2RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInVsRs0xFrFgf9tJ8RQvM6kNo6TnILRWLCO VtaHD/6d6htOjnOkY4DXzziGy4pR2vjKO0x266VtEBX/WGS4hP095KZLePI/Z4CU 2WjnKlFbKZW3rU0KlrfVm64+OxUrFsiyRL/HfK9EQx2ixMf/ptZHY6jR4amRrbCa GjJ2mq8CZox6q2BcoUWjriP2DxrW19YFwNgrMeWENUUZB+gGQ4VOcYIHhFMDiK2J TOMfFzgyMSoH51JXNX5q2nIPSuryiV2bA+3RpQEh6EHN6rDiAwA8cahsjHgsYscb TdbT+s45OdNgHuFLy5DG4045bZiRlNkB6X6DI3Jt7YJovli/uDE= -----END CERTIFICATE-----Generated at Wed May 13 00:14:01 2026 by rpki-client