$ rpki-client -vvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft File: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft (raw, json) Hash identifier: Tr2QNIVhFZjHS7nkCba8h2DSFmz6y/Rp/qNQajhsskU= Subject key identifier: 06:B1:3E:BA:F0:33:9E:BC:34:3D:55:FE:D1:C2:C5:87:EC:F8:39:5F Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Certificate serial: 2F894511AA130355121612304B8DE047F06F355E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 03:09:43 +0000 Manifest this update: Tue 21 Jul 2026 03:04:43 +0000 Manifest next update: Wed 22 Jul 2026 04:27:43 +0000 Files and hashes: 1: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=) 2: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl (hash: zabUibF62A3HNMbZECxmfqxUmFmgotA0aCZ6n/RxT6Y=) 3: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: W+AAZvdz9uWMtockMX6VSZJ0oNmTRpeghrirQa/hfSI=) 4: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: 7PEJXW7RMfgjbRMHoDP/Q67ewQubnf7QvBInIps/U3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:89:45:11:aa:13:03:55:12:16:12:30:4b:8d:e0:47:f0:6f:35:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Validity Not Before: Jul 21 03:04:43 2026 GMT Not After : Jul 22 04:27:43 2026 GMT Subject: CN=06B13EBAF0339EBC343D55FED1C2C587ECF8395F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:13:05:c4:9a:3e:15:ae:87:16:3e:60:fa: 0a:a9:43:49:16:80:32:7c:de:98:46:3a:d1:b1:e5: 14:b9:d1:f2:55:6c:fd:c8:22:2e:35:1b:bb:a1:60: 38:d9:87:46:db:d7:08:5e:5d:a8:cb:77:bb:81:16: 08:61:1e:a6:7d:8a:e0:1a:8b:1f:c4:f6:9f:e4:45: e9:5c:ef:d1:b3:07:c0:a1:eb:55:35:79:43:4d:2c: 93:80:17:3d:6d:41:4a:91:5f:d3:04:3c:43:dc:ae: b7:56:68:0f:3b:ea:65:5c:9c:cd:a3:d9:60:f6:36: e3:cc:8f:ad:35:23:f4:48:e9:1e:b7:81:c8:a6:b8: 13:06:22:df:16:01:d2:b5:10:02:4c:0d:25:32:44: b8:5a:eb:37:9a:a6:e0:a1:3f:49:2d:c5:18:40:bf: 84:6e:73:3e:53:90:c7:9a:fc:a9:0c:78:0b:ef:17: 31:ca:7f:39:6b:35:cd:04:41:7c:b0:d9:50:41:e8: e9:23:76:1f:f1:34:84:9b:0c:96:c7:78:87:4f:ad: 9e:37:1f:c0:cc:19:5b:de:34:66:6d:90:e7:7a:fd: 1f:57:fd:5d:c4:9b:49:ec:00:21:dc:57:e6:b0:52: ad:1c:fc:1c:8b:a3:2c:91:d9:0b:5b:7e:58:9d:52: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B1:3E:BA:F0:33:9E:BC:34:3D:55:FE:D1:C2:C5:87:EC:F8:39:5F X509v3 Authority Key Identifier: keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:de:b8:a0:4b:c8:2a:30:06:0c:a2:39:4e:29:23:55:0a:70: a6:de:ac:e9:ba:06:09:95:cd:7c:33:c9:69:20:04:9d:4d:ce: e7:2b:e1:81:00:f7:73:5e:00:97:22:98:d6:ac:23:74:c3:85: 2e:cd:02:a9:09:d0:80:d6:66:8f:ee:7a:e5:fa:b3:a7:7e:86: 70:98:e9:59:30:69:84:4a:35:a4:75:f8:f4:05:a1:a0:59:15: 10:85:3a:75:07:74:e7:fb:df:7f:93:1a:24:bc:32:19:bc:87: 8c:6d:92:bb:51:2e:e1:ee:bf:70:83:10:3f:27:b6:3c:86:b6: c5:fa:25:d6:20:be:7c:07:44:3b:8f:31:76:3a:e3:75:92:f8: 0c:60:41:92:27:4a:0a:49:3f:79:7a:f2:73:65:8b:d5:34:e6: e9:17:8f:c6:e9:be:cb:e7:7c:47:38:27:90:65:2d:a6:82:5f: ed:37:c9:c0:1b:ae:ff:1f:09:88:bd:e4:5c:42:57:f1:a3:61: e2:4e:0b:c3:f9:33:ec:4f:08:3f:cf:9b:23:f3:4d:e5:82:51: 83:2c:87:d6:ec:a8:72:7f:ff:1a:78:13:9b:36:de:7b:d3:bc: 5b:fd:9d:87:bb:13:87:c0:21:e3:da:6d:ac:e3:27:67:77:cb: 6c:10:5d:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4lFEaoTA1USFhIwS43gR/BvNV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjNDODND ODZCMEEyNzAeFw0yNjA3MjEwMzA0NDNaFw0yNjA3MjIwNDI3NDNaMDMxMTAvBgNV BAMTKDA2QjEzRUJBRjAzMzlFQkMzNDNENTVGRUQxQzJDNTg3RUNGODM5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BxMFxJo+Fa6HFj5g+gqpQ0kW gDJ83phGOtGx5RS50fJVbP3IIi41G7uhYDjZh0bb1wheXajLd7uBFghhHqZ9iuAa ix/E9p/kRelc79GzB8Ch61U1eUNNLJOAFz1tQUqRX9MEPEPcrrdWaA876mVcnM2j 2WD2NuPMj601I/RI6R63gcimuBMGIt8WAdK1EAJMDSUyRLha6zeapuChP0ktxRhA v4Rucz5TkMea/KkMeAvvFzHKfzlrNc0EQXyw2VBB6Okjdh/xNISbDJbHeIdPrZ43 H8DMGVveNGZtkOd6/R9X/V3Em0nsACHcV+awUq0c/ByLoyyR2QtbflidUlQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBrE+uvAznrw0PVX+0cLFh+z4OV8wHwYDVR0j BBgwFoAUrXpdeG1cVAfEXxCCvtY8g8hrCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlNjAzZTMtZjIzZS00YzZhLWJiM2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2 RDVDNTQwN0M0NUYxMDgyQkVENjNDODNDODZCMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDdBNUQ3ODZENUM1NDA3QzQ1RjEwODJCRUQ2M0M4M0M4NkIw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjND ODNDODZCMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbeuKBLyCowBgyiOU4pI1UKcKberOm6BgmV zXwzyWkgBJ1Nzucr4YEA93NeAJcimNasI3TDhS7NAqkJ0IDWZo/ueuX6s6d+hnCY 6VkwaYRKNaR1+PQFoaBZFRCFOnUHdOf733+TGiS8Mhm8h4xtkrtRLuHuv3CDED8n tjyGtsX6JdYgvnwHRDuPMXY643WS+AxgQZInSgpJP3l68nNli9U05ukXj8bpvsvn fEc4J5BlLaaCX+03ycAbrv8fCYi95FxCV/GjYeJOC8P5M+xPCD/PmyPzTeWCUYMs h9bsqHJ//xp4E5s23nvTvFv9nYe7E4fAIePabazjJ2d3y2wQXdk= -----END CERTIFICATE-----Generated at Tue Jul 21 08:41:38 2026 by rpki-client