$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft File: ADF43E36B1768DE874BC2E4386678718C68AC58C.mft (raw, json) Hash identifier: 3FjeOuLT1bdWvpYhltA3Ma5/X8KbW63jz2SjcOKGLE0= Subject key identifier: 08:9C:DE:BE:78:43:22:04:54:25:A2:2D:46:26:AD:72:88:1B:7E:82 Authority key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C Certificate issuer: /CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Certificate serial: 70CF0B6339F4A1ACADF2048A3CD88B15CE7B0954 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 14:29:42 +0000 Manifest this update: Thu 03 Sep 2026 14:24:42 +0000 Manifest next update: Fri 04 Sep 2026 17:13:42 +0000 Files and hashes: 1: ADF43E36B1768DE874BC2E4386678718C68AC58C.crl (hash: d2cRYmnahXfZLBEyhUe0DGL50CdZvEaK1HlQ8gSb7Es=) 2: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: K8yPbAzC5p5yuBTV3LGTKzGdC+9ek4+ufDT1mYTr44E=) 3: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: HhOurlT1i9ohxjrni1AsVYHua6nriyDIMH2PNMhJi+I=) 4: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: 5KPKZA2RTu5ylHSV1TQQG9h2k3pnK+Y0k5lXF80cirU=) 5: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: YGwFwZ5ZgSYttDBh5EguczXxt0Tj6L2YYXDVT0BcXEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cf:0b:63:39:f4:a1:ac:ad:f2:04:8a:3c:d8:8b:15:ce:7b:09:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Validity Not Before: Sep 3 14:24:42 2026 GMT Not After : Sep 4 17:13:42 2026 GMT Subject: CN=089CDEBE784322045425A22D4626AD72881B7E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:b7:d7:87:15:0f:5d:98:1c:4a:37:55:41: f0:0a:96:7d:3d:80:a6:62:07:33:a1:d2:f5:aa:eb: 57:49:69:47:a4:f5:25:8b:92:1e:b0:af:c7:b1:58: c7:45:59:5f:54:73:90:b3:4a:23:94:45:f6:c1:ac: 64:d1:47:7d:ae:b1:1e:79:e0:9d:82:ec:5e:42:96: 84:65:24:21:89:ea:43:38:fe:94:01:10:a6:77:ec: 4b:6c:bd:45:3a:21:65:3e:97:e9:c5:98:ba:95:94: b9:b0:c5:49:3f:a7:ec:74:7e:c9:7a:aa:f6:0d:af: 8a:27:2c:6d:3b:53:d7:c6:20:4f:2f:06:b9:38:e6: 70:10:5d:63:5d:80:ab:cb:66:7b:49:7b:ea:70:c9: c9:81:9a:0f:ea:59:d8:55:3e:f9:92:b1:fc:58:f1: b0:79:c1:0b:aa:43:cf:8a:f7:1f:0a:ae:8b:de:4d: 52:e2:9b:70:78:55:82:c2:33:62:e5:fa:03:03:c4: c0:34:82:1f:41:c5:8c:d8:42:f9:a8:e9:e6:92:2b: 9d:e8:77:c6:64:d6:0f:86:62:73:8b:d5:ce:fb:b2: 53:7a:43:01:67:7a:f8:ef:ab:f4:94:59:df:89:4a: 9f:f6:77:e5:15:3b:eb:77:9d:fb:92:87:b8:c9:72: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9C:DE:BE:78:43:22:04:54:25:A2:2D:46:26:AD:72:88:1B:7E:82 X509v3 Authority Key Identifier: keyid:AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:8d:7a:9a:53:54:6a:b9:be:d4:42:24:31:be:71:99:df:4c: 01:0a:8c:f8:a5:f1:c4:bc:9f:5b:b1:9d:92:dd:dc:02:72:de: 87:aa:03:98:a7:f0:2e:8a:1a:e1:11:01:fb:e6:85:7b:bf:81: 24:a2:a1:bf:7f:84:69:e5:e0:19:eb:20:c2:1d:7e:8b:27:b9: ca:cf:d6:7f:58:c8:a0:9b:62:27:5d:bd:03:60:7b:e5:f9:81: c7:74:c8:69:82:9a:43:f0:e5:57:2c:42:37:24:1a:02:2a:41: 50:fb:f7:74:65:6f:75:27:05:a2:0a:e9:d8:bd:ef:25:8f:32: 2d:99:ff:dd:b7:0c:08:87:e6:74:51:da:ff:8c:cd:78:56:c2: 6d:e8:eb:67:20:ec:a0:d6:a6:46:81:c9:57:64:da:b9:5c:d0: 93:df:e9:86:7a:83:43:5d:3a:f9:9d:db:d1:c7:fa:02:66:2a: 66:32:38:93:ac:32:1d:ab:e0:93:35:50:bb:b2:b9:51:4e:80: 60:bc:1d:04:4e:5d:e0:a1:7d:31:b2:44:2a:aa:d3:28:31:7f: e4:6e:64:a4:9a:8e:1c:8c:e8:a7:ad:19:72:15:08:78:e8:5f: 5f:d6:1b:f4:41:d0:06:19:c2:e4:dd:97:ac:ce:3e:cf:33:9d: eb:37:d7:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcM8LYzn0oayt8gSKPNiLFc57CVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3MThD NjhBQzU4QzAeFw0yNjA5MDMxNDI0NDJaFw0yNjA5MDQxNzEzNDJaMDMxMTAvBgNV BAMTKDA4OUNERUJFNzg0MzIyMDQ1NDI1QTIyRDQ2MjZBRDcyODgxQjdFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh67fXhxUPXZgcSjdVQfAKln09 gKZiBzOh0vWq61dJaUek9SWLkh6wr8exWMdFWV9Uc5CzSiOURfbBrGTRR32usR55 4J2C7F5CloRlJCGJ6kM4/pQBEKZ37EtsvUU6IWU+l+nFmLqVlLmwxUk/p+x0fsl6 qvYNr4onLG07U9fGIE8vBrk45nAQXWNdgKvLZntJe+pwycmBmg/qWdhVPvmSsfxY 8bB5wQuqQ8+K9x8KroveTVLim3B4VYLCM2Ll+gMDxMA0gh9BxYzYQvmo6eaSK53o d8Zk1g+GYnOL1c77slN6QwFnevjvq/SUWd+JSp/2d+UVO+t3nfuSh7jJcsixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJzevnhDIgRUJaItRiatcogbfoIwHwYDVR0j BBgwFoAUrfQ+NrF2jeh0vC5DhmeHGMaKxYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIxYzk1NzktNTZiYS00YTcwLWJhMTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZC MTc2OERFODc0QkMyRTQzODY2Nzg3MThDNjhBQzU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREY0M0UzNkIxNzY4REU4NzRCQzJFNDM4NjY3ODcxOEM2OEFD NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3 MThDNjhBQzU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKNeppTVGq5vtRCJDG+cZnfTAEKjPil8cS8 n1uxnZLd3AJy3oeqA5in8C6KGuERAfvmhXu/gSSiob9/hGnl4BnrIMIdfosnucrP 1n9YyKCbYiddvQNge+X5gcd0yGmCmkPw5VcsQjckGgIqQVD793Rlb3UnBaIK6di9 7yWPMi2Z/923DAiH5nRR2v+MzXhWwm3o62cg7KDWpkaByVdk2rlc0JPf6YZ6g0Nd Ovmd29HH+gJmKmYyOJOsMh2r4JM1ULuyuVFOgGC8HQROXeChfTGyRCqq0ygxf+Ru ZKSajhyM6KetGXIVCHjoX1/WG/RB0AYZwuTdl6zOPs8znes311A= -----END CERTIFICATE-----Generated at Thu Sep 3 20:08:30 2026 by rpki-client