$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft File: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft (raw, json) Hash identifier: 5u0jLN7+AZyKOgQ18Gq+suWBy5XWs5ElAbX1rqtyxfA= Subject key identifier: E9:75:06:E7:3D:68:EE:B0:B9:89:E9:C4:F9:29:B3:8E:8F:10:75:45 Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 Certificate issuer: /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Certificate serial: 50BE04A194DA09CB52D60074C51BE2492646EB26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 03:25:21 +0000 Manifest this update: Wed 23 Sep 2026 03:20:21 +0000 Manifest next update: Thu 24 Sep 2026 06:35:21 +0000 Files and hashes: 1: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: gyHsfmW6KN8Q0altXeM0ynZaoGDZjnrHl/TgsA39vQ8=) 2: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Jz250gHnK9wmceEyoEa7ZzH19MTY0j2TTvLScjld8Z4=) 3: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl (hash: FxTIWrKd/7TD0Liw7VUSGE+gp+vp0hzw/mGxMQubUBw=) 4: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: ffbCXyninBGio9BOygv4p476TIGMpl53kSauEjC/roA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:be:04:a1:94:da:09:cb:52:d6:00:74:c5:1b:e2:49:26:46:eb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Validity Not Before: Sep 23 03:20:21 2026 GMT Not After : Sep 24 06:35:21 2026 GMT Subject: CN=E97506E73D68EEB0B989E9C4F929B38E8F107545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:eb:36:75:a4:1b:ec:2d:59:09:38:aa:87:a0: de:8d:63:e0:db:91:03:45:9c:0f:ff:cf:dd:93:e9: 2a:5f:6b:8b:8d:b7:c1:c8:5c:17:15:a1:d6:d3:f2: 76:09:03:2d:6c:95:dd:c9:cf:6f:a4:a9:71:51:41: 48:55:08:af:b5:dc:60:ea:b5:9b:8f:08:a9:f9:61: b5:56:d1:ac:b4:3f:60:88:46:5b:7c:fd:e2:5c:88: 08:10:b6:54:83:54:aa:4c:c2:cc:08:14:91:a0:57: 57:58:61:1b:6c:f0:4e:af:5e:2b:9c:e5:3c:b4:ec: ea:fe:b3:e3:78:c8:14:da:ee:64:19:2d:62:be:86: 60:d8:6f:7b:e2:d4:8b:65:06:c4:b7:70:1a:18:d6: ec:8b:4b:ce:5f:09:94:57:d5:67:21:70:4b:55:21: 65:bf:82:d2:ce:7c:57:b8:7e:80:0c:31:98:c7:d3: a5:a9:11:b4:cf:2e:3b:51:93:7a:f1:00:37:72:b7: 1a:21:07:fd:2c:21:89:be:22:81:57:e3:cc:95:a4: b8:a8:f6:c6:20:40:94:4b:52:5c:26:eb:42:3f:ea: d6:29:cd:9d:dc:76:a4:09:63:6f:c3:bd:4b:62:ff: c8:d5:cc:2a:8f:63:ee:46:29:94:1a:f4:d3:80:f2: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:75:06:E7:3D:68:EE:B0:B9:89:E9:C4:F9:29:B3:8E:8F:10:75:45 X509v3 Authority Key Identifier: keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:39:63:49:e4:6e:c1:af:86:af:39:03:44:6e:3a:30:cb:78: fe:d0:e7:1c:ae:e9:a5:43:34:d3:6a:0e:69:1a:3a:91:6d:6c: 53:9c:af:4d:a4:b9:8e:d7:40:0f:83:d2:39:20:44:7b:ad:d3: 76:4c:3c:6d:e2:81:fe:f5:20:ee:6f:74:64:09:45:1f:11:8b: da:c0:9c:98:a5:76:4f:a0:39:92:0f:18:b6:c8:ca:f4:b7:cf: bc:27:e1:38:51:33:b0:83:a3:cb:0b:a6:60:8f:05:83:28:6a: 61:c8:bb:d2:1c:bd:c9:67:fd:06:a6:35:bc:65:1f:1f:1a:c5: 88:34:4c:b8:fb:77:06:33:d2:ba:40:18:3c:b5:60:d2:31:73: a8:95:91:80:9a:36:79:c5:b2:bc:96:33:23:a4:c6:9c:8d:db: 78:c1:95:40:c2:b9:2b:76:4a:81:0f:a3:a2:73:c7:2c:bd:3e: cd:f4:cb:c9:fb:e0:3c:89:53:fd:8e:a1:c2:37:e1:eb:f3:fa: 8b:8c:6d:be:2a:a3:24:fe:c5:a3:77:b7:3b:cf:d3:5a:13:20: 5d:53:eb:73:f6:71:79:13:25:9d:b4:43:fd:ce:70:02:96:e3: f8:b1:7d:c3:f0:1a:1f:fb:79:41:7f:6d:49:70:37:b2:68:bf: 3b:a1:df:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUL4EoZTaCctS1gB0xRviSSZG6yYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4 NzRFOTBFMTAeFw0yNjA5MjMwMzIwMjFaFw0yNjA5MjQwNjM1MjFaMDMxMTAvBgNV BAMTKEU5NzUwNkU3M0Q2OEVFQjBCOTg5RTlDNEY5MjlCMzhFOEYxMDc1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm6zZ1pBvsLVkJOKqHoN6NY+Db kQNFnA//z92T6Spfa4uNt8HIXBcVodbT8nYJAy1sld3Jz2+kqXFRQUhVCK+13GDq tZuPCKn5YbVW0ay0P2CIRlt8/eJciAgQtlSDVKpMwswIFJGgV1dYYRts8E6vXiuc 5Ty07Or+s+N4yBTa7mQZLWK+hmDYb3vi1ItlBsS3cBoY1uyLS85fCZRX1WchcEtV IWW/gtLOfFe4foAMMZjH06WpEbTPLjtRk3rxADdytxohB/0sIYm+IoFX48yVpLio 9sYgQJRLUlwm60I/6tYpzZ3cdqQJY2/DvUti/8jVzCqPY+5GKZQa9NOA8j8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XUG5z1o7rC5ienE+Smzjo8QdUUwHwYDVR0j BBgwFoAUrYMjDenp1Qqc32ozLgPcWIdOkOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjkwMDNkNmMtOTVmMS00N2E0LTlkNWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERF OUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4NzRFOTBFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDgzMjMwREU5RTlENTBBOUNERjZBMzMyRTAzREM1ODg3NEU5 MEUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RD NTg4NzRFOTBFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC85Y0nkbsGvhq85A0RuOjDLeP7Q5xyu6aVD NNNqDmkaOpFtbFOcr02kuY7XQA+D0jkgRHut03ZMPG3igf71IO5vdGQJRR8Ri9rA nJildk+gOZIPGLbIyvS3z7wn4ThRM7CDo8sLpmCPBYMoamHIu9Icvcln/QamNbxl Hx8axYg0TLj7dwYz0rpAGDy1YNIxc6iVkYCaNnnFsryWMyOkxpyN23jBlUDCuSt2 SoEPo6Jzxyy9Ps30y8n74DyJU/2OocI34evz+ouMbb4qoyT+xaN3tzvP01oTIF1T 63P2cXkTJZ20Q/3OcAKW4/ixfcPwGh/7eUF/bUlwN7Jovzuh3x0= -----END CERTIFICATE-----Generated at Wed Sep 23 22:28:01 2026 by rpki-client