$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft File: ADF43E36B1768DE874BC2E4386678718C68AC58C.mft (raw, json) Hash identifier: LHeFgtzshLZcfMIPro9xUzj5/IUXeyi12IoVkVx0fcQ= Subject key identifier: BC:8A:AE:5F:B6:FD:19:CD:90:11:97:EC:A3:EA:30:FB:06:93:AE:E8 Authority key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C Certificate issuer: /CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Certificate serial: 1D7C8D02E5382D4BDCB14AA2A33AE5B132B2EE9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft Manifest number: 18 Signing time: Tue 19 May 2026 11:09:59 +0000 Manifest this update: Tue 19 May 2026 11:04:59 +0000 Manifest next update: Wed 20 May 2026 14:27:59 +0000 Files and hashes: 1: ADF43E36B1768DE874BC2E4386678718C68AC58C.crl (hash: O/QLWesALX1uRllrds977pr/nDMO4LnHzKE26DmMJhk=) 2: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: YGwFwZ5ZgSYttDBh5EguczXxt0Tj6L2YYXDVT0BcXEg=) 3: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: 5KPKZA2RTu5ylHSV1TQQG9h2k3pnK+Y0k5lXF80cirU=) 4: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: HhOurlT1i9ohxjrni1AsVYHua6nriyDIMH2PNMhJi+I=) 5: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: K8yPbAzC5p5yuBTV3LGTKzGdC+9ek4+ufDT1mYTr44E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 11:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7c:8d:02:e5:38:2d:4b:dc:b1:4a:a2:a3:3a:e5:b1:32:b2:ee:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Validity Not Before: May 19 11:04:59 2026 GMT Not After : May 20 14:27:59 2026 GMT Subject: CN=BC8AAE5FB6FD19CD901197ECA3EA30FB0693AEE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:3d:49:e8:e5:3e:7f:0c:12:f0:3b:fd:9c: d3:95:b8:d2:58:a8:ce:db:de:08:83:47:3a:9c:bb: 5d:67:96:83:85:8f:80:a1:f8:61:a2:73:0a:88:2f: eb:f2:b1:2a:8d:ee:c7:ac:e4:21:4d:af:d0:0f:94: 42:97:f6:c2:97:b4:96:7b:69:d2:1f:95:53:71:40: 85:db:01:1b:84:36:6b:78:16:a5:7e:d5:9e:b4:62: 3e:fe:eb:5e:de:9e:f4:a2:8b:42:78:46:0a:c1:df: b5:dd:52:e4:5e:ff:5e:34:a2:b3:ad:aa:0c:7c:66: 00:ea:ef:b0:36:f7:a1:bf:ea:31:d3:1c:e5:00:27: 88:22:d1:3f:9b:d7:06:96:79:ce:24:ae:19:dc:0b: cf:c1:02:72:f0:2d:a0:c5:1d:a0:09:58:dc:12:de: 5e:2a:c8:07:2d:f5:c2:57:1e:99:f1:29:b6:37:c0: ae:ec:5b:89:45:6c:f7:73:0a:52:85:ef:97:9c:ef: 59:f8:a1:c8:b3:33:6e:a0:f1:34:63:c4:cf:61:07: ff:b7:9c:8a:15:d5:22:e2:73:30:4d:72:16:f7:d0: 70:d4:78:02:63:a9:ff:58:5e:e3:4a:9e:be:3d:a5: 2f:13:ea:f3:09:47:24:5e:17:69:f3:80:98:5d:24: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8A:AE:5F:B6:FD:19:CD:90:11:97:EC:A3:EA:30:FB:06:93:AE:E8 X509v3 Authority Key Identifier: keyid:AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bc:12:05:5c:02:dd:53:ac:e9:67:33:82:73:6e:1c:94:c6: ca:f6:f3:2e:cf:9c:9d:72:aa:6a:97:81:18:5e:66:93:54:57: 81:03:06:5a:a3:23:68:25:0b:a8:67:90:b5:b7:22:e1:ab:06: 43:c5:69:6a:a4:05:8e:34:24:bd:5e:e2:70:d5:92:11:41:2f: c8:20:a0:36:f0:d9:91:8d:22:4c:91:24:2a:3a:46:5b:46:b3: f3:ea:fe:27:30:c8:bc:05:a2:b5:d4:ff:39:82:34:81:a0:10: 04:a5:ec:ec:cc:8d:93:50:74:b5:f3:f5:48:8c:1b:e3:10:12: dd:64:53:4a:a7:7e:6a:8c:59:92:5b:34:37:e2:68:11:24:ad: 2c:1b:92:77:a1:e0:94:8a:68:11:a2:f8:27:07:86:1c:d2:15: 15:f8:0d:49:9b:1e:a6:4a:00:5a:a3:99:c2:fa:92:12:54:49: ea:07:ba:62:e5:68:56:d5:20:91:4f:c6:93:da:50:3e:99:70: 17:71:cd:f4:6a:93:b9:d6:4b:26:a9:c9:01:23:ab:91:1e:6b: bf:1c:f0:2a:be:31:ed:c7:16:04:18:64:26:e7:d1:08:bf:da: 59:e2:93:34:8e:37:1d:72:67:9c:ea:7c:9d:6e:e9:27:f5:80: 7c:cc:aa:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXyNAuU4LUvcsUqiozrlsTKy7p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3MThD NjhBQzU4QzAeFw0yNjA1MTkxMTA0NTlaFw0yNjA1MjAxNDI3NTlaMDMxMTAvBgNV BAMTKEJDOEFBRTVGQjZGRDE5Q0Q5MDExOTdFQ0EzRUEzMEZCMDY5M0FFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cz1J6OU+fwwS8Dv9nNOVuNJY qM7b3giDRzqcu11nloOFj4Ch+GGicwqIL+vysSqN7ses5CFNr9APlEKX9sKXtJZ7 adIflVNxQIXbARuENmt4FqV+1Z60Yj7+617envSii0J4RgrB37XdUuRe/140orOt qgx8ZgDq77A296G/6jHTHOUAJ4gi0T+b1waWec4krhncC8/BAnLwLaDFHaAJWNwS 3l4qyAct9cJXHpnxKbY3wK7sW4lFbPdzClKF75ec71n4ocizM26g8TRjxM9hB/+3 nIoV1SLiczBNchb30HDUeAJjqf9YXuNKnr49pS8T6vMJRyReF2nzgJhdJF+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvIquX7b9Gc2QEZfso+ow+waTrugwHwYDVR0j BBgwFoAUrfQ+NrF2jeh0vC5DhmeHGMaKxYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIxYzk1NzktNTZiYS00YTcwLWJhMTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZC MTc2OERFODc0QkMyRTQzODY2Nzg3MThDNjhBQzU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREY0M0UzNkIxNzY4REU4NzRCQzJFNDM4NjY3ODcxOEM2OEFD NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3 MThDNjhBQzU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHq8EgVcAt1TrOlnM4JzbhyUxsr28y7PnJ1y qmqXgRheZpNUV4EDBlqjI2glC6hnkLW3IuGrBkPFaWqkBY40JL1e4nDVkhFBL8gg oDbw2ZGNIkyRJCo6RltGs/Pq/icwyLwForXU/zmCNIGgEASl7OzMjZNQdLXz9UiM G+MQEt1kU0qnfmqMWZJbNDfiaBEkrSwbkneh4JSKaBGi+CcHhhzSFRX4DUmbHqZK AFqjmcL6khJUSeoHumLlaFbVIJFPxpPaUD6ZcBdxzfRqk7nWSyapyQEjq5Eea78c 8Cq+Me3HFgQYZCbn0Qi/2lnikzSONx1yZ5zqfJ1u6Sf1gHzMqpQ= -----END CERTIFICATE-----Generated at Tue May 19 15:42:37 2026 by rpki-client