$ rpki-client -vvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft File: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft (raw, json) Hash identifier: vnqrYEbBruM1GNLrbZ3IPyQ9ARffg4JqJqcXtuEQFjs= Subject key identifier: 0D:6A:FB:49:F4:4B:7B:C2:70:7A:CD:22:6A:24:14:E7:21:2B:AB:80 Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Certificate serial: 21A093F60773A0D951458CC597DACCCB5DFC6103 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 09:37:00 +0000 Manifest this update: Tue 02 Jun 2026 09:32:00 +0000 Manifest next update: Wed 03 Jun 2026 10:57:00 +0000 Files and hashes: 1: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl (hash: shYhdE5DdA5Yh5+JpmTA7ZK1mJKg92qH+pYKleMEig8=) 2: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=) 3: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: 7PEJXW7RMfgjbRMHoDP/Q67ewQubnf7QvBInIps/U3k=) 4: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: W+AAZvdz9uWMtockMX6VSZJ0oNmTRpeghrirQa/hfSI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a0:93:f6:07:73:a0:d9:51:45:8c:c5:97:da:cc:cb:5d:fc:61:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Validity Not Before: Jun 2 09:32:00 2026 GMT Not After : Jun 3 10:57:00 2026 GMT Subject: CN=0D6AFB49F44B7BC2707ACD226A2414E7212BAB80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:21:98:d3:bf:4a:5c:b9:48:09:95:76:7a: 98:bb:16:c9:b6:de:43:91:f3:2a:57:92:ac:4f:e8: 3e:56:7a:32:65:53:e3:60:08:6e:0b:89:37:80:58: cf:02:c9:a8:4a:85:e7:49:fa:a3:0c:97:49:29:04: 66:25:28:ac:b1:3a:01:a5:26:23:e0:a3:12:97:d9: 54:d9:08:92:c5:ac:1f:e2:21:73:fe:b0:e2:cb:08: 52:85:a4:97:49:4a:89:1b:1f:da:f7:f8:35:92:c4: ad:52:6e:8a:cc:87:9c:56:fd:5f:93:e0:64:12:49: bb:54:7e:32:09:0c:f1:27:2a:53:0d:fb:72:20:bf: b7:cb:8b:f6:73:a4:3a:96:62:2e:39:10:c9:61:b1: 01:af:e9:c5:2a:18:62:c0:5a:c7:37:18:21:fb:e3: 0e:57:43:98:e3:12:1c:9c:e1:e5:e0:6e:9e:82:23: 01:21:36:41:a0:7b:0e:4f:f7:82:76:f8:a2:25:b3: b4:2e:9e:ba:18:f7:94:9a:89:a9:3a:b9:25:48:2b: 16:5b:85:99:5b:c5:5f:3d:2f:8c:6a:e8:4d:c9:5e: b5:da:a8:38:57:d8:38:6b:d2:85:48:67:08:0a:2a: 46:1c:21:b9:cf:b6:fe:f0:87:54:5b:57:17:f1:72: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6A:FB:49:F4:4B:7B:C2:70:7A:CD:22:6A:24:14:E7:21:2B:AB:80 X509v3 Authority Key Identifier: keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8d:8f:16:d3:b6:92:be:99:18:9d:50:7a:da:d0:82:f9:b1: 07:cd:c1:4d:62:c9:3f:5f:44:78:67:35:1d:2e:c1:4d:fa:4b: 25:6b:a2:65:e5:6b:dd:fa:10:b1:6e:56:db:36:c3:fc:8b:8b: 7f:ac:b6:7d:bc:1d:11:4a:1e:6e:58:3f:89:06:99:71:8c:39: b3:8f:50:40:af:8c:4c:53:be:ed:25:7f:fc:85:45:94:b9:cc: 15:c7:b5:64:69:d9:aa:20:5f:c2:57:67:db:d4:e3:52:80:97: 24:6f:19:ec:5c:c1:17:98:20:cf:a3:78:5e:99:41:af:21:0a: e9:b4:ba:a6:85:60:1b:ef:75:d9:c9:65:8c:ad:85:5b:79:dc: 50:e9:81:42:03:3c:73:69:e2:35:fd:c1:b6:c1:5d:ad:a8:f8: bd:c8:1c:06:c9:28:45:46:ef:ac:55:8c:b0:ec:94:b9:27:01: 00:d3:11:14:2a:ca:5a:74:3c:f3:ee:27:03:ed:ef:dc:0a:d8: 3f:5e:5e:70:c5:c5:69:ae:8b:64:47:9b:2d:52:ee:e5:d0:52: a5:36:19:1b:8c:89:0f:d6:a6:49:f1:4d:fd:e3:87:5d:48:d5: c9:0a:44:e2:85:c0:77:03:35:23:72:c0:df:0e:f2:8f:72:2a: e6:9c:90:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaCT9gdzoNlRRYzFl9rMy138YQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjNDODND ODZCMEEyNzAeFw0yNjA2MDIwOTMyMDBaFw0yNjA2MDMxMDU3MDBaMDMxMTAvBgNV BAMTKDBENkFGQjQ5RjQ0QjdCQzI3MDdBQ0QyMjZBMjQxNEU3MjEyQkFCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvCGY079KXLlICZV2epi7Fsm2 3kOR8ypXkqxP6D5WejJlU+NgCG4LiTeAWM8CyahKhedJ+qMMl0kpBGYlKKyxOgGl JiPgoxKX2VTZCJLFrB/iIXP+sOLLCFKFpJdJSokbH9r3+DWSxK1SborMh5xW/V+T 4GQSSbtUfjIJDPEnKlMN+3Igv7fLi/ZzpDqWYi45EMlhsQGv6cUqGGLAWsc3GCH7 4w5XQ5jjEhyc4eXgbp6CIwEhNkGgew5P94J2+KIls7QunroY95Saiak6uSVIKxZb hZlbxV89L4xq6E3JXrXaqDhX2Dhr0oVIZwgKKkYcIbnPtv7wh1RbVxfxclkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWr7SfRLe8Jwes0iaiQU5yErq4AwHwYDVR0j BBgwFoAUrXpdeG1cVAfEXxCCvtY8g8hrCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlNjAzZTMtZjIzZS00YzZhLWJiM2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2 RDVDNTQwN0M0NUYxMDgyQkVENjNDODNDODZCMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDdBNUQ3ODZENUM1NDA3QzQ1RjEwODJCRUQ2M0M4M0M4NkIw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjND ODNDODZCMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6NjxbTtpK+mRidUHra0IL5sQfNwU1iyT9f RHhnNR0uwU36SyVromXla936ELFuVts2w/yLi3+stn28HRFKHm5YP4kGmXGMObOP UECvjExTvu0lf/yFRZS5zBXHtWRp2aogX8JXZ9vU41KAlyRvGexcwReYIM+jeF6Z Qa8hCum0uqaFYBvvddnJZYythVt53FDpgUIDPHNp4jX9wbbBXa2o+L3IHAbJKEVG 76xVjLDslLknAQDTERQqylp0PPPuJwPt79wK2D9eXnDFxWmui2RHmy1S7uXQUqU2 GRuMiQ/WpknxTf3jh11I1ckKROKFwHcDNSNywN8O8o9yKuackIc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:50 2026 by rpki-client