$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json) Hash identifier: 1IxKj9toMfy86mEtCAsUpF0cZc5qv0buGZQ1ueTdOD0= Subject key identifier: 2D:11:C6:2B:12:83:1D:A3:FE:43:62:F6:56:2F:B7:4C:F0:46:B9:DA Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Certificate serial: 3E682B930112A6A3C13997851B25C17A313F2006 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 09:44:53 +0000 Manifest this update: Mon 02 Nov 2026 09:39:53 +0000 Manifest next update: Tue 03 Nov 2026 12:27:53 +0000 Files and hashes: 1: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=) 2: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=) 3: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: csteCLP7nU55XUOBOHRqBIR2qAqrPEbI+JxeMllRVGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:68:2b:93:01:12:a6:a3:c1:39:97:85:1b:25:c1:7a:31:3f:20:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Validity Not Before: Nov 2 09:39:53 2026 GMT Not After : Nov 3 12:27:53 2026 GMT Subject: CN=2D11C62B12831DA3FE4362F6562FB74CF046B9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:6f:8a:c7:a4:de:5e:ef:af:62:7a:b6:5c: 51:00:d6:6a:46:9a:85:8c:1e:e2:62:a4:e5:d6:a1: a8:b0:17:b5:bc:1a:97:66:f8:f1:d4:bf:a2:30:ce: ae:90:cb:1d:97:fd:92:77:a1:ac:c3:c5:ef:f0:1a: 3d:fd:5a:70:4e:e1:56:ea:d3:fe:a5:0d:0a:f7:ec: 73:63:1b:d6:7e:f7:3f:c5:fb:1c:a2:78:5c:12:5e: 03:7e:15:55:0b:ea:fb:92:58:a9:cf:1c:57:4b:c9: 8f:d2:2d:cc:87:1b:d5:52:b2:03:a2:df:1e:ee:37: 71:ff:2f:46:19:16:4e:bd:a8:b7:5b:c4:7d:a1:01: f6:38:e4:d9:72:fc:07:02:60:48:9d:a0:ef:83:ef: d9:72:ba:0d:06:b7:c8:60:d6:a5:15:ab:46:42:ea: 99:ee:35:e4:f6:eb:52:71:f8:99:d4:60:a5:a8:14: 0d:d6:ea:d1:fa:cf:f9:45:63:85:1d:5e:e9:86:00: 2d:f5:1a:1e:8e:22:e3:38:45:f7:8f:1f:55:04:17: dd:9f:65:b4:26:25:a6:38:14:7e:30:38:ab:52:ad: a4:13:69:53:20:e7:5d:72:7e:d9:4b:ef:b2:39:34: 8a:32:04:84:6d:a6:47:44:b5:04:01:35:9b:85:41: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:11:C6:2B:12:83:1D:A3:FE:43:62:F6:56:2F:B7:4C:F0:46:B9:DA X509v3 Authority Key Identifier: keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:42:fe:53:60:55:af:0e:26:68:f9:bd:55:e2:d0:d6:d2:92: 02:fd:ba:02:46:08:28:70:44:af:86:40:26:1d:44:68:4a:3c: 1a:c4:d7:ef:9a:2a:d8:1c:9b:64:0e:66:da:d5:05:ae:93:2b: e9:e1:6f:e7:e8:63:ca:0a:36:96:cb:38:28:0b:c0:43:7b:bf: b4:6d:8a:5d:20:11:43:05:97:53:68:ff:d8:af:8b:58:5e:e8: 42:94:18:25:29:b7:e5:4b:c0:7e:f2:cd:56:6a:ba:b2:64:5e: cf:24:53:39:8c:c9:10:b3:02:49:4e:29:25:39:75:55:00:b3: 05:74:13:07:26:a5:1f:6c:0b:bd:2a:6d:bb:9d:65:28:46:18: 3f:49:d0:02:91:1f:46:19:31:69:1e:a3:db:3e:83:a6:62:9d: 78:ae:c0:ca:42:b7:c5:8c:ed:83:f4:90:2e:a0:16:9e:e6:57: c9:92:8b:57:17:f7:2f:1f:4a:60:4b:f8:56:d8:61:96:73:4c: b8:0b:3d:a1:1f:8c:e1:39:f7:a2:75:5c:dd:25:e2:d3:cc:13: 33:0f:5d:4c:0b:f9:05:e2:59:c5:ca:e7:62:db:6c:09:30:f5: 25:f8:70:0b:96:f2:16:a3:e6:00:c1:43:42:4d:17:16:1e:a2: ea:be:f8:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmgrkwESpqPBOZeFGyXBejE/IAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5 QkMyRjIxRjAeFw0yNjExMDIwOTM5NTNaFw0yNjExMDMxMjI3NTNaMDMxMTAvBgNV BAMTKDJEMTFDNjJCMTI4MzFEQTNGRTQzNjJGNjU2MkZCNzRDRjA0NkI5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEG+Kx6TeXu+vYnq2XFEA1mpG moWMHuJipOXWoaiwF7W8Gpdm+PHUv6Iwzq6Qyx2X/ZJ3oazDxe/wGj39WnBO4Vbq 0/6lDQr37HNjG9Z+9z/F+xyieFwSXgN+FVUL6vuSWKnPHFdLyY/SLcyHG9VSsgOi 3x7uN3H/L0YZFk69qLdbxH2hAfY45Nly/AcCYEidoO+D79lyug0Gt8hg1qUVq0ZC 6pnuNeT261Jx+JnUYKWoFA3W6tH6z/lFY4UdXumGAC31Gh6OIuM4RfePH1UEF92f ZbQmJaY4FH4wOKtSraQTaVMg511yftlL77I5NIoyBIRtpkdEtQQBNZuFQSyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRHGKxKDHaP+Q2L2Vi+3TPBGudowHwYDVR0j BBgwFoAUrRnSJkiQA/CStp1X8q7khJvC8h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNiMTc4NTctYmUzZC00MTMyLThmMTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0 ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5QkMyRjIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRDE5RDIyNjQ4OTAwM0YwOTJCNjlENTdGMkFFRTQ4NDlCQzJG MjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0 ODQ5QkMyRjIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9C/lNgVa8OJmj5vVXi0NbSkgL9ugJGCChw RK+GQCYdRGhKPBrE1++aKtgcm2QOZtrVBa6TK+nhb+foY8oKNpbLOCgLwEN7v7Rt il0gEUMFl1No/9ivi1he6EKUGCUpt+VLwH7yzVZqurJkXs8kUzmMyRCzAklOKSU5 dVUAswV0EwcmpR9sC70qbbudZShGGD9J0AKRH0YZMWkeo9s+g6ZinXiuwMpCt8WM 7YP0kC6gFp7mV8mSi1cX9y8fSmBL+FbYYZZzTLgLPaEfjOE596J1XN0l4tPMEzMP XUwL+QXiWcXK52LbbAkw9SX4cAuW8haj5gDBQ0JNFxYeouq++Iw= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:22 2026 by rpki-client