$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft File: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft (raw, json) Hash identifier: PzU3uf7htzdAN1VI3NZRUQOSKpdyxmDmUZx3lCONffY= Subject key identifier: 26:D2:7D:5E:45:4E:9B:22:2C:0D:D1:77:E8:81:C9:C2:7B:20:AE:DD Authority key identifier: AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 Certificate issuer: /CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Certificate serial: 706021B5F56E2AD6C21833C93FE544982CF79715 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:52:22 +0000 Manifest this update: Mon 20 Jul 2026 16:47:22 +0000 Manifest next update: Tue 21 Jul 2026 17:15:22 +0000 Files and hashes: 1: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl (hash: XOGqMibun0cGXRB7f6wjUhhkEuPnrcQ+KP7zv1Gh2WU=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: eMjrRkEiItNdv20OSL8v5DoNQVMNdFSIv45ei3rnYVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:60:21:b5:f5:6e:2a:d6:c2:18:33:c9:3f:e5:44:98:2c:f7:97:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Validity Not Before: Jul 20 16:47:22 2026 GMT Not After : Jul 21 17:15:22 2026 GMT Subject: CN=26D27D5E454E9B222C0DD177E881C9C27B20AEDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:b3:e8:77:45:42:42:55:06:15:93:47:34: 3f:4b:29:70:70:ba:87:ce:2c:b5:6e:82:e7:07:74: 4e:6d:d8:af:77:2a:ba:29:36:f5:94:d2:79:13:18: 1e:f9:12:22:67:cd:d9:65:ab:87:42:15:f1:2b:f7: ed:f6:31:72:38:ec:b1:c4:18:37:7d:6c:8c:4b:4e: f3:94:5e:fc:17:d3:29:d9:bd:9f:22:7d:31:e4:f5: 05:c1:70:02:c2:7d:12:d0:45:91:6d:f9:a1:60:59: d7:65:04:5f:c3:61:74:05:51:f5:8b:b9:db:f4:76: 0f:8d:dd:63:cb:a8:62:fd:49:b2:6e:13:b2:e0:17: 39:9e:52:fb:89:77:0b:db:69:bf:90:60:e2:00:31: 22:9c:e7:6b:44:7b:7b:e1:fd:d0:37:59:a2:b5:76: 39:03:e6:b6:d0:82:16:12:ce:b0:52:f6:94:f7:49: 09:5b:1c:52:79:76:a4:4a:f1:fe:ef:21:eb:b7:bb: 04:3c:b0:27:78:01:29:2e:4f:de:af:89:c8:0a:04: 37:e9:38:95:da:7e:82:d7:4d:72:e1:0d:72:ea:3d: dd:74:fa:e9:62:a4:74:80:35:8a:d2:41:22:51:91: fe:c2:07:a3:62:a0:f3:10:2c:90:f2:39:d8:93:5e: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D2:7D:5E:45:4E:9B:22:2C:0D:D1:77:E8:81:C9:C2:7B:20:AE:DD X509v3 Authority Key Identifier: keyid:AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:94:26:cf:b7:1d:c1:b1:27:a6:45:a7:0b:4b:5b:a5:40:17: 19:6f:48:d9:f1:21:96:b9:cb:2e:78:4a:6b:30:d0:3b:8d:51: 07:3f:4f:02:a6:9c:a8:24:7c:2e:17:3f:ce:e8:7b:05:19:02: 64:a9:3d:d3:10:6f:c0:d6:f9:56:38:da:96:64:c6:97:a1:ee: 88:8f:58:40:58:50:ab:e8:6f:68:d9:5c:29:61:6c:26:f9:d4: 33:9e:fb:f6:95:2e:1a:3c:59:1b:1c:4e:d7:b4:47:a4:20:1f: f2:77:78:8f:c5:09:3d:38:5f:2a:6b:05:17:10:99:c7:37:b8: 24:55:5f:95:c1:a8:a2:64:50:9b:4a:b6:6d:41:78:ed:de:f7: 19:46:35:53:bb:db:5e:85:b2:9e:86:6e:90:f9:8f:62:bc:13: 6e:55:c9:d5:58:f7:7a:7c:5a:21:3e:3c:14:d6:5a:9c:ce:c3: 10:5b:9e:8f:b7:9e:cf:8d:6f:59:6f:11:dc:43:41:18:ba:15: b0:e8:2d:fe:50:3e:7d:a4:63:3e:e3:13:f6:b8:56:8a:02:0b: 01:45:38:fc:d2:ab:d6:92:a0:79:93:b6:02:2f:0f:e5:86:02: f6:0f:38:3c:d6:61:87:fd:96:c8:1f:c0:20:e9:f2:b7:fb:f7: 08:c9:98:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGAhtfVuKtbCGDPJP+VEmCz3lxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYy QURFNUE1NDAeFw0yNjA3MjAxNjQ3MjJaFw0yNjA3MjExNzE1MjJaMDMxMTAvBgNV BAMTKDI2RDI3RDVFNDU0RTlCMjIyQzBERDE3N0U4ODFDOUMyN0IyMEFFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeL7Pod0VCQlUGFZNHND9LKXBw uofOLLVugucHdE5t2K93KropNvWU0nkTGB75EiJnzdllq4dCFfEr9+32MXI47LHE GDd9bIxLTvOUXvwX0ynZvZ8ifTHk9QXBcALCfRLQRZFt+aFgWddlBF/DYXQFUfWL udv0dg+N3WPLqGL9SbJuE7LgFzmeUvuJdwvbab+QYOIAMSKc52tEe3vh/dA3WaK1 djkD5rbQghYSzrBS9pT3SQlbHFJ5dqRK8f7vIeu3uwQ8sCd4ASkuT96vicgKBDfp OJXafoLXTXLhDXLqPd10+ulipHSANYrSQSJRkf7CB6NioPMQLJDyOdiTXr75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJtJ9XkVOmyIsDdF36IHJwnsgrt0wHwYDVR0j BBgwFoAUrbFTLyF9MPfna0pGSe6vryreWlQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmExOGY4YTAtOTNhZS00MzU5LThhNWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYy MTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYyQURFNUE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREIxNTMyRjIxN0QzMEY3RTc2QjRBNDY0OUVFQUZBRjJBREU1 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFG QUYyQURFNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSUJs+3HcGxJ6ZFpwtLW6VAFxlvSNnxIZa5 yy54Smsw0DuNUQc/TwKmnKgkfC4XP87oewUZAmSpPdMQb8DW+VY42pZkxpeh7oiP WEBYUKvob2jZXClhbCb51DOe+/aVLho8WRscTte0R6QgH/J3eI/FCT04XyprBRcQ mcc3uCRVX5XBqKJkUJtKtm1BeO3e9xlGNVO7216Fsp6GbpD5j2K8E25VydVY93p8 WiE+PBTWWpzOwxBbno+3ns+Nb1lvEdxDQRi6FbDoLf5QPn2kYz7jE/a4VooCCwFF OPzSq9aSoHmTtgIvD+WGAvYPODzWYYf9lsgfwCDp8rf79wjJmN8= -----END CERTIFICATE-----Generated at Tue Jul 21 08:43:11 2026 by rpki-client