$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft File: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft (raw, json) Hash identifier: 4J4RahxePdv5XQqift2cxvTHxhh+PNgAAPdtPU89+eY= Subject key identifier: 46:7B:DF:B9:61:91:46:B2:BD:72:7F:85:59:BB:AC:E9:8B:CE:B8:E6 Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B Certificate issuer: /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B Certificate serial: 080127A28CBE11D456D35F5273E887EBCC1F9445 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 03:14:36 +0000 Manifest this update: Thu 24 Sep 2026 03:09:36 +0000 Manifest next update: Fri 25 Sep 2026 04:40:36 +0000 Files and hashes: 1: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl (hash: /gECL6inBfynSui1SFUcwZW7IoM8oi4HLufxesOp1As=) 2: 3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (hash: eouhZL8KRzKxSED1dcGBFmzqWDAKHQivhxiq0mmIE9Y=) 3: 3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (hash: BPYAzlmVCSDysVPnzRbriP0ZO+KBD1gNQiYmmJ0AsGc=) 4: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: mIxFRHOE8DmYRrXlDisTfwK6lb1/0VKqM0Rpgtaxvto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:01:27:a2:8c:be:11:d4:56:d3:5f:52:73:e8:87:eb:cc:1f:94:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B Validity Not Before: Sep 24 03:09:36 2026 GMT Not After : Sep 25 04:40:36 2026 GMT Subject: CN=467BDFB9619146B2BD727F8559BBACE98BCEB8E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:31:72:c7:79:36:65:8c:e6:e2:3f:46:e3:a6: 93:bf:0e:c7:9f:7e:03:26:05:4d:43:ad:1f:9a:41: ff:a0:3c:2a:31:e5:00:e7:d9:05:0b:3c:77:92:56: ba:e6:06:eb:1c:33:3d:12:6b:9b:16:2e:84:06:ac: 53:42:14:05:c5:6f:26:23:30:9e:bc:94:93:ee:e6: 5b:90:74:5d:b2:20:69:3b:b2:74:ed:f8:db:42:c1: 7d:26:37:b5:df:1d:9a:55:49:f9:a5:94:b2:15:31: 44:a5:4f:df:f1:8f:50:53:44:6d:3f:e0:a7:5f:6e: 73:98:da:19:1b:72:de:fd:44:92:34:d7:7e:3d:6b: 10:bd:21:46:d8:8d:af:a7:1a:1c:87:c1:37:eb:42: bf:94:c0:37:5f:70:7e:d2:f9:bb:91:3d:a1:82:35: 04:59:33:02:a3:4a:07:86:67:eb:0b:11:6e:a8:67: b3:9c:67:40:76:81:49:16:bd:e2:39:41:a8:ee:35: 7c:11:fd:67:60:b7:c1:a5:c9:1b:aa:04:32:bb:e2: bc:e3:f7:f6:41:2c:93:3c:3c:0d:45:6c:a4:fa:53: f6:d6:10:8f:75:c0:9b:e4:96:d4:d7:1f:72:25:ab: d3:d7:11:2e:16:12:c8:df:22:ae:2e:b2:9e:0f:91: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7B:DF:B9:61:91:46:B2:BD:72:7F:85:59:BB:AC:E9:8B:CE:B8:E6 X509v3 Authority Key Identifier: keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ba:0a:21:06:5e:1d:52:ec:0b:5c:d6:11:b1:21:b9:fb:e6: 78:19:c9:c0:ff:78:44:f1:20:43:0a:4f:75:1e:13:5b:87:a1: 2c:d5:42:b7:99:70:67:2c:c3:46:7e:3e:c9:21:0a:2e:2e:eb: 41:70:3e:36:15:da:e1:c3:39:05:2b:15:ad:54:d0:5e:31:59: 60:23:ab:ea:17:b8:0e:1e:57:98:3d:45:ff:19:be:fd:39:ab: f1:c5:e5:04:86:81:7d:f0:c4:a7:92:6e:1a:e9:e0:eb:9a:1b: b4:f6:9c:42:03:11:c0:c4:ae:8c:3d:d5:78:ac:b4:77:dc:3a: cf:cd:b9:c4:08:30:ca:ae:bb:ed:1c:e4:25:dd:b7:8f:bb:de: a5:6e:7f:16:ce:49:6f:0a:b4:26:dd:32:cf:db:59:6c:35:9d: 24:5b:29:20:da:69:08:c0:df:fd:0b:39:c9:df:44:3e:dd:8d: a7:fd:db:93:7e:73:8c:7a:e8:1c:01:26:ee:cd:5f:fc:ec:88: f3:83:b6:79:d0:e7:8c:2f:67:53:e3:39:2e:f3:25:1b:c1:3f: 71:59:74:e0:ca:a1:56:d0:d1:dd:54:09:36:e4:33:39:c3:1e: c6:bf:aa:8e:c8:1f:24:d4:f0:da:eb:04:0f:0e:09:22:f5:0d: 5f:73:9d:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAEnooy+EdRW019Sc+iH68wflEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2MjRB QTIxMDI4QjAeFw0yNjA5MjQwMzA5MzZaFw0yNjA5MjUwNDQwMzZaMDMxMTAvBgNV BAMTKDQ2N0JERkI5NjE5MTQ2QjJCRDcyN0Y4NTU5QkJBQ0U5OEJDRUI4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrMXLHeTZljObiP0bjppO/Dsef fgMmBU1DrR+aQf+gPCox5QDn2QULPHeSVrrmBuscMz0Sa5sWLoQGrFNCFAXFbyYj MJ68lJPu5luQdF2yIGk7snTt+NtCwX0mN7XfHZpVSfmllLIVMUSlT9/xj1BTRG0/ 4KdfbnOY2hkbct79RJI01349axC9IUbYja+nGhyHwTfrQr+UwDdfcH7S+buRPaGC NQRZMwKjSgeGZ+sLEW6oZ7OcZ0B2gUkWveI5QajuNXwR/Wdgt8GlyRuqBDK74rzj 9/ZBLJM8PA1FbKT6U/bWEI91wJvkltTXH3Ilq9PXES4WEsjfIq4usp4PkWczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURnvfuWGRRrK9cn+FWbus6YvOuOYwHwYDVR0j BBgwFoAUrYzOZBLkdk+1yb34MfgGJKohAoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlNGNkOTYtY2ZjMS00NTc3LWFkM2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQx MkU0NzY0RkI1QzlCREY4MzFGODA2MjRBQTIxMDI4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDhDQ0U2NDEyRTQ3NjRGQjVDOUJERjgzMUY4MDYyNEFBMjEw MjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2 MjRBQTIxMDI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG6CiEGXh1S7Atc1hGxIbn75ngZycD/eETx IEMKT3UeE1uHoSzVQreZcGcsw0Z+PskhCi4u60FwPjYV2uHDOQUrFa1U0F4xWWAj q+oXuA4eV5g9Rf8Zvv05q/HF5QSGgX3wxKeSbhrp4OuaG7T2nEIDEcDErow91Xis tHfcOs/NucQIMMquu+0c5CXdt4+73qVufxbOSW8KtCbdMs/bWWw1nSRbKSDaaQjA 3/0LOcnfRD7djaf925N+c4x66BwBJu7NX/zsiPODtnnQ54wvZ1PjOS7zJRvBP3FZ dODKoVbQ0d1UCTbkMznDHsa/qo7IHyTU8NrrBA8OCSL1DV9znQc= -----END CERTIFICATE-----Generated at Thu Sep 24 12:04:13 2026 by rpki-client