$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft File: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft (raw, json) Hash identifier: quzrth225VsOH3Tjx/4m/1rPTuqU649W0ruyAmtYAPI= Subject key identifier: D6:A3:BB:8F:76:00:30:42:05:F8:A1:37:42:EC:73:5F:24:D7:38:4D Authority key identifier: AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 Certificate issuer: /CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Certificate serial: 292E9F8DF8A8C576F5C5618F3A3BFFAE48F370DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:48:25 +0000 Manifest this update: Tue 02 Jun 2026 10:43:25 +0000 Manifest next update: Wed 03 Jun 2026 12:20:25 +0000 Files and hashes: 1: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl (hash: MKq0UAfW9y77IGMLh/W9+wjb4E6v6wHeYKFeCIWgqJk=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: eMjrRkEiItNdv20OSL8v5DoNQVMNdFSIv45ei3rnYVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2e:9f:8d:f8:a8:c5:76:f5:c5:61:8f:3a:3b:ff:ae:48:f3:70:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Validity Not Before: Jun 2 10:43:25 2026 GMT Not After : Jun 3 12:20:25 2026 GMT Subject: CN=D6A3BB8F7600304205F8A13742EC735F24D7384D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:54:4c:92:85:c2:95:65:27:ac:3c:59:02: e4:89:24:34:d3:b3:ea:26:b5:3d:df:02:66:6b:bd: 02:2c:91:8b:9a:0b:c6:99:27:22:db:21:ff:c2:5f: e3:f1:4c:a7:19:92:e6:47:45:e0:e9:9f:07:b7:66: b3:99:9a:17:9c:af:9d:da:cc:14:19:c9:75:26:e4: 7e:5c:16:26:30:2e:80:dc:f6:a2:ad:99:29:46:50: b5:2f:e2:7f:30:76:a2:cf:39:77:18:3a:27:3e:f5: 25:6c:0c:f8:59:9d:c7:6c:45:36:c6:69:3f:bd:f5: 24:6b:ac:8b:3f:45:34:a2:89:b4:df:e4:4e:33:3a: 38:e6:ac:0d:21:3b:5f:46:2c:ef:09:52:ba:0c:1b: 77:e0:0c:a1:e4:b9:88:b4:5e:a6:4d:dc:cd:16:6b: c1:4a:57:8b:de:bd:7e:76:4a:2a:45:aa:72:3b:27: 78:3b:35:4d:46:c7:0b:ec:9e:6c:73:67:0a:d6:35: db:83:25:c9:fd:26:37:7a:3d:11:16:57:4c:84:53: d2:a7:b4:6f:da:2c:f1:e7:cf:55:af:94:20:94:44: e4:9e:c7:54:c4:56:d1:38:6d:b3:4f:3d:a8:8e:80: 85:4e:00:3c:49:f4:e4:f1:69:7a:a9:b5:db:21:05: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A3:BB:8F:76:00:30:42:05:F8:A1:37:42:EC:73:5F:24:D7:38:4D X509v3 Authority Key Identifier: keyid:AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e5:6a:08:30:76:f4:75:d3:37:93:3a:9f:19:b9:b3:0b:14: 38:f4:8e:50:26:a3:8d:cc:d9:2b:1c:78:08:9d:8a:a4:ce:e9: 3a:fb:3c:17:32:43:0e:7b:48:7a:d2:5f:e0:be:eb:c5:a2:ce: 41:55:51:38:50:3b:2b:90:3e:98:bd:6d:d3:e7:9c:87:e0:17: 61:19:d0:e8:d1:b5:c5:c8:ca:c1:d0:09:6e:77:b2:93:8e:fd: 5b:6c:a8:bd:c7:55:66:bc:fa:95:2a:e1:9b:b6:50:a5:a5:fd: be:0f:66:d0:e8:82:17:ab:b9:28:8b:55:0f:76:40:0d:cc:72: 20:b2:b0:a2:37:13:1a:14:31:d9:bd:45:4d:1f:57:a0:ea:c9: d0:78:17:f8:3f:cc:17:32:1d:9c:a7:c4:45:a9:4b:1e:2d:d3: 58:52:26:71:f2:60:91:29:ce:d2:30:43:c0:bb:a7:ff:75:07: 46:ce:eb:53:af:78:91:bf:37:55:a0:10:81:78:a2:95:e0:44: 99:6c:61:a2:1c:78:0b:ad:2b:1d:59:3b:f3:85:db:ec:07:b1: ed:8c:c8:42:d8:a6:79:b3:01:8d:a2:95:cf:13:17:c1:e1:a8: 69:d4:51:8c:95:ee:4b:a4:28:8c:a4:0d:13:36:3e:0c:88:62: e7:10:3c:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKS6fjfioxXb1xWGPOjv/rkjzcN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYy QURFNUE1NDAeFw0yNjA2MDIxMDQzMjVaFw0yNjA2MDMxMjIwMjVaMDMxMTAvBgNV BAMTKEQ2QTNCQjhGNzYwMDMwNDIwNUY4QTEzNzQyRUM3MzVGMjRENzM4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIGFRMkoXClWUnrDxZAuSJJDTT s+omtT3fAmZrvQIskYuaC8aZJyLbIf/CX+PxTKcZkuZHReDpnwe3ZrOZmhecr53a zBQZyXUm5H5cFiYwLoDc9qKtmSlGULUv4n8wdqLPOXcYOic+9SVsDPhZncdsRTbG aT+99SRrrIs/RTSiibTf5E4zOjjmrA0hO19GLO8JUroMG3fgDKHkuYi0XqZN3M0W a8FKV4vevX52SipFqnI7J3g7NU1GxwvsnmxzZwrWNduDJcn9Jjd6PREWV0yEU9Kn tG/aLPHnz1WvlCCUROSex1TEVtE4bbNPPaiOgIVOADxJ9OTxaXqptdshBQYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qO7j3YAMEIF+KE3QuxzXyTXOE0wHwYDVR0j BBgwFoAUrbFTLyF9MPfna0pGSe6vryreWlQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmExOGY4YTAtOTNhZS00MzU5LThhNWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYy MTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYyQURFNUE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREIxNTMyRjIxN0QzMEY3RTc2QjRBNDY0OUVFQUZBRjJBREU1 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFG QUYyQURFNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjlaggwdvR10zeTOp8ZubMLFDj0jlAmo43M 2SsceAidiqTO6Tr7PBcyQw57SHrSX+C+68WizkFVUThQOyuQPpi9bdPnnIfgF2EZ 0OjRtcXIysHQCW53spOO/VtsqL3HVWa8+pUq4Zu2UKWl/b4PZtDogheruSiLVQ92 QA3MciCysKI3ExoUMdm9RU0fV6DqydB4F/g/zBcyHZynxEWpSx4t01hSJnHyYJEp ztIwQ8C7p/91B0bO61OveJG/N1WgEIF4opXgRJlsYaIceAutKx1ZO/OF2+wHse2M yELYpnmzAY2ilc8TF8HhqGnUUYyV7kukKIykDRM2PgyIYucQPJU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:18:45 2026 by rpki-client