$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft File: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft (raw, json) Hash identifier: IehJF0o3jzGlVi7FNLNW5E1dkBC4+74tBkcHCGQoNyo= Subject key identifier: CD:2A:1F:AB:DA:9F:43:DA:0F:7E:92:02:BD:DD:67:56:50:11:EB:CD Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 Certificate issuer: /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Certificate serial: 11489A6AB96E141A2E6F2E0A58D22E3EB1318D16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:17:04 +0000 Manifest this update: Fri 24 Jul 2026 10:12:04 +0000 Manifest next update: Sat 25 Jul 2026 13:30:04 +0000 Files and hashes: 1: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: gyHsfmW6KN8Q0altXeM0ynZaoGDZjnrHl/TgsA39vQ8=) 2: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: ffbCXyninBGio9BOygv4p476TIGMpl53kSauEjC/roA=) 3: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl (hash: wbn4+OQf50KbWmhS3vbagMk012xkrcb+nCIyXtRG/eM=) 4: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Jz250gHnK9wmceEyoEa7ZzH19MTY0j2TTvLScjld8Z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:48:9a:6a:b9:6e:14:1a:2e:6f:2e:0a:58:d2:2e:3e:b1:31:8d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Validity Not Before: Jul 24 10:12:04 2026 GMT Not After : Jul 25 13:30:04 2026 GMT Subject: CN=CD2A1FABDA9F43DA0F7E9202BDDD67565011EBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:7a:7c:79:95:aa:84:96:25:e3:b3:07:c6: 1d:71:00:f9:32:b2:94:e7:58:a7:11:83:9c:ca:fa: dd:0e:58:60:cd:fd:f9:57:ec:c5:45:66:c4:85:e9: 67:e9:7d:30:e2:80:16:5e:f2:54:bb:f5:6d:c4:4e: 9b:42:01:6e:75:0e:13:64:98:c9:ad:22:95:c1:79: bd:66:49:5d:c0:af:dd:b0:29:7b:6c:47:f4:0e:60: eb:8e:e7:80:d6:36:72:94:37:a3:38:88:9c:e8:c5: 43:4c:7a:f0:c8:3f:89:27:1f:1e:91:2b:f4:6d:42: 5c:48:dd:37:a2:97:a7:8e:d7:23:81:b8:91:3f:07: fe:4f:38:6a:7c:b5:6c:d7:fa:3a:6a:e4:62:c0:11: 9b:9c:ec:d7:40:29:07:50:e7:e5:2b:2b:b8:e6:c7: fa:ad:77:74:4c:f4:6a:4a:77:a5:6f:34:80:b7:c4: fe:84:16:a4:0f:ca:08:89:a1:06:13:99:42:a7:54: c7:49:40:e7:9c:61:38:26:76:4f:e7:e4:db:38:64: 2c:05:0d:18:16:ca:06:50:42:fc:7a:42:21:4b:06: 36:9b:de:98:55:79:0b:e5:c3:6f:e1:3e:7f:11:e1: 56:09:a6:3a:00:e0:ef:1f:b3:53:18:26:33:f0:70: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2A:1F:AB:DA:9F:43:DA:0F:7E:92:02:BD:DD:67:56:50:11:EB:CD X509v3 Authority Key Identifier: keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:32:76:ec:b9:ee:1a:45:a6:05:31:b7:1d:89:a7:f4:cf:fb: b0:ab:1b:90:52:ad:48:55:8f:7e:b5:0a:c3:f0:8b:7e:a1:55: 2f:6f:1f:19:a2:89:24:52:c8:af:a3:4f:0c:e0:23:bc:43:ef: 24:92:8c:cb:af:b7:82:77:95:1b:c6:d9:27:8c:a8:a1:c0:e7: b2:f8:c1:b5:99:84:a9:18:00:0a:c3:2b:a9:17:84:3a:5c:e5: 5d:8e:8e:99:a7:96:f3:f5:42:b5:7f:25:39:b9:2a:02:15:5a: 50:ea:ca:a2:46:37:ef:14:ad:15:b5:91:a7:ee:90:92:50:64: 54:00:b9:8d:76:38:35:49:c6:fb:5a:5b:33:b7:aa:e2:28:72: aa:7d:83:17:13:e8:8c:e1:6f:97:1e:5e:07:2e:92:12:bb:28: a2:9c:4d:6f:6a:5e:17:5f:7b:13:f8:b5:02:0b:3f:d2:6d:6a: 3b:9c:27:7b:60:91:d0:28:41:8a:dd:42:0e:a8:bd:e4:f2:7d: 40:e6:8e:62:49:5f:3c:95:ce:d3:f1:92:af:20:90:c2:35:f1: 7e:22:d1:f2:6b:06:af:df:1a:ea:e2:70:8c:a6:6e:6f:f8:9d: 4d:46:f4:b4:56:3c:b0:03:d5:19:70:f0:91:80:16:51:ee:5d: 64:c5:ee:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUiaarluFBouby4KWNIuPrExjRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4 NzRFOTBFMTAeFw0yNjA3MjQxMDEyMDRaFw0yNjA3MjUxMzMwMDRaMDMxMTAvBgNV BAMTKENEMkExRkFCREE5RjQzREEwRjdFOTIwMkJEREQ2NzU2NTAxMUVCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWEnp8eZWqhJYl47MHxh1xAPky spTnWKcRg5zK+t0OWGDN/flX7MVFZsSF6WfpfTDigBZe8lS79W3ETptCAW51DhNk mMmtIpXBeb1mSV3Ar92wKXtsR/QOYOuO54DWNnKUN6M4iJzoxUNMevDIP4knHx6R K/RtQlxI3Teil6eO1yOBuJE/B/5POGp8tWzX+jpq5GLAEZuc7NdAKQdQ5+UrK7jm x/qtd3RM9GpKd6VvNIC3xP6EFqQPygiJoQYTmUKnVMdJQOecYTgmdk/n5Ns4ZCwF DRgWygZQQvx6QiFLBjab3phVeQvlw2/hPn8R4VYJpjoA4O8fs1MYJjPwcOLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSofq9qfQ9oPfpICvd1nVlAR680wHwYDVR0j BBgwFoAUrYMjDenp1Qqc32ozLgPcWIdOkOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjkwMDNkNmMtOTVmMS00N2E0LTlkNWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERF OUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4NzRFOTBFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDgzMjMwREU5RTlENTBBOUNERjZBMzMyRTAzREM1ODg3NEU5 MEUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RD NTg4NzRFOTBFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0yduy57hpFpgUxtx2Jp/TP+7CrG5BSrUhV j361CsPwi36hVS9vHxmiiSRSyK+jTwzgI7xD7ySSjMuvt4J3lRvG2SeMqKHA57L4 wbWZhKkYAArDK6kXhDpc5V2OjpmnlvP1QrV/JTm5KgIVWlDqyqJGN+8UrRW1kafu kJJQZFQAuY12ODVJxvtaWzO3quIocqp9gxcT6Izhb5ceXgcukhK7KKKcTW9qXhdf exP4tQILP9JtajucJ3tgkdAoQYrdQg6oveTyfUDmjmJJXzyVztPxkq8gkMI18X4i 0fJrBq/fGuricIymbm/4nU1G9LRWPLAD1Rlw8JGAFlHuXWTF7gU= -----END CERTIFICATE-----Generated at Fri Jul 24 12:43:37 2026 by rpki-client