$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft File: ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft (raw, json) Hash identifier: HmiRLncVmWCLr6+Nou6cdTqXbDgDmaFhHsUiMG3KL7g= Subject key identifier: 39:47:D1:9C:EB:A5:38:67:E1:C1:E8:95:D8:51:1B:F0:00:C9:A5:8E Authority key identifier: AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E Certificate issuer: /CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E Certificate serial: 787F00401BE83E66CCC1E2C97342FACC21C3F5F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 18:15:02 +0000 Manifest this update: Wed 02 Sep 2026 18:10:02 +0000 Manifest next update: Thu 03 Sep 2026 21:01:02 +0000 Files and hashes: 1: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: OVNMe4OE8mfb+ubuXXAIKWm5rCKg5fDWbzjdPw4VCv4=) 2: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: uu/0xcXb1PYlNEUXcZ5naLQoAfY3PIEB9peDrBii6OE=) 3: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: OOoHvJFdkLhmptHnukqX1ww9TIfJj00AYl9UOR0Cn10=) 4: ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl (hash: VKPWF0ntVHx4d5i33M2RqSDHDDFcub1z5OBpxEOyDA0=) 5: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: nlhGLBRQhzgZ/MpT9mzD1/9LbZWhXsE7bI4qUYh5tIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7f:00:40:1b:e8:3e:66:cc:c1:e2:c9:73:42:fa:cc:21:c3:f5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E Validity Not Before: Sep 2 18:10:02 2026 GMT Not After : Sep 3 21:01:02 2026 GMT Subject: CN=3947D19CEBA53867E1C1E895D8511BF000C9A58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:40:6a:94:5e:d7:c5:c8:30:22:f1:c7:6c: 30:23:32:94:8d:4f:37:1d:02:c5:01:be:b8:5f:95: 29:cd:5d:58:7a:8e:07:e7:d4:78:7a:10:d1:82:02: 8d:e5:56:a1:8d:7d:5e:b4:73:8c:38:23:3f:6f:85: 8c:23:b1:64:97:aa:ba:e8:3b:3f:0f:37:11:f0:4f: b1:3d:3f:18:d2:40:34:2f:7c:26:3d:a1:2d:1a:d4: ac:d1:9f:e8:48:cb:62:1e:63:55:6a:21:da:87:fd: 3f:42:6b:fc:00:b0:4c:93:5b:b1:f8:f4:93:89:5e: 88:e3:4e:04:11:32:4b:39:b3:80:09:dc:58:15:f2: 87:64:ab:97:e1:4d:61:99:7a:f9:ef:dd:0b:03:d0: dc:5b:f4:a5:b2:e8:d8:be:9f:16:d9:ab:ad:9f:a0: c5:11:cb:ee:2c:64:e8:39:aa:23:18:3d:fa:31:92: 8a:13:96:2b:3a:b4:50:a2:4e:61:58:e6:26:bf:23: 21:4d:c0:70:ed:29:34:04:cd:84:11:6f:e5:30:65: 1d:24:e6:55:c4:90:c3:d9:5c:ef:be:fb:82:dc:9e: 49:4e:1f:d4:ff:a4:59:56:26:93:f9:c1:0d:55:d8: c5:e0:11:77:56:91:18:0e:c7:0d:9d:ac:e6:bf:5f: a8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:47:D1:9C:EB:A5:38:67:E1:C1:E8:95:D8:51:1B:F0:00:C9:A5:8E X509v3 Authority Key Identifier: keyid:AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:31:57:c7:15:6b:f5:59:5b:e8:c5:8d:a6:f6:e0:57:c5:c7: 5d:f8:55:34:19:cf:7b:68:b3:27:f1:ec:79:8b:84:88:20:bb: 5c:2d:2a:13:8f:e9:19:cd:dd:8d:d1:2b:29:9b:dc:26:84:a5: c6:16:61:b3:d4:e6:f6:e3:be:22:c7:fe:c1:60:e4:e5:89:6b: 44:71:2c:37:29:68:cd:cf:ca:46:74:47:88:dc:96:af:c9:ad: 2f:b0:97:82:36:8c:7b:b4:0f:3c:0c:eb:4d:7a:bc:28:58:cf: 69:2e:5d:08:1b:ad:b7:e4:e9:7c:e2:55:eb:00:44:9c:d1:02: 99:d7:fe:0e:3a:92:e9:ab:35:b4:45:da:84:30:f9:19:24:20: db:26:9a:92:5d:b6:2e:f0:05:1e:57:ef:95:ef:6e:e4:62:4e: 64:4c:8b:e5:4e:27:60:1d:96:cf:bb:4b:e8:8f:5e:70:7c:01: a1:83:98:75:34:ba:d0:33:fc:59:2a:da:df:54:94:2a:99:19: a6:2b:bf:d1:60:77:6d:8e:0d:ca:45:e4:c2:b9:34:e3:c1:43: 91:36:50:95:e3:4c:86:49:86:cf:21:29:c3:76:81:58:1f:4b: 57:da:e5:b8:2c:76:ad:c2:aa:27:60:82:cc:0d:b3:d9:09:ba: d8:63:32:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeH8AQBvoPmbMweLJc0L6zCHD9fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGQUJFMzgwQTY1MDlGMEFFMTlGNUY5RUQ4N0MxRjBB MEE1NkMxRTAeFw0yNjA5MDIxODEwMDJaFw0yNjA5MDMyMTAxMDJaMDMxMTAvBgNV BAMTKDM5NDdEMTlDRUJBNTM4NjdFMUMxRTg5NUQ4NTExQkYwMDBDOUE1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxs0BqlF7XxcgwIvHHbDAjMpSN TzcdAsUBvrhflSnNXVh6jgfn1Hh6ENGCAo3lVqGNfV60c4w4Iz9vhYwjsWSXqrro Oz8PNxHwT7E9PxjSQDQvfCY9oS0a1KzRn+hIy2IeY1VqIdqH/T9Ca/wAsEyTW7H4 9JOJXojjTgQRMks5s4AJ3FgV8odkq5fhTWGZevnv3QsD0Nxb9KWy6Ni+nxbZq62f oMURy+4sZOg5qiMYPfoxkooTlis6tFCiTmFY5ia/IyFNwHDtKTQEzYQRb+UwZR0k 5lXEkMPZXO+++4LcnklOH9T/pFlWJpP5wQ1V2MXgEXdWkRgOxw2drOa/X6hjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOUfRnOulOGfhweiV2FEb8ADJpY4wHwYDVR0j BBgwFoAUrfq+OAplCfCuGfX57YfB8KClbB4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc3NGIxOGMtZjI2My00ZmUxLThkZjgtMWU3YzY4YmZiZWZjLzAvQURGQUJFMzgw QTY1MDlGMEFFMTlGNUY5RUQ4N0MxRjBBMEE1NkMxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREZBQkUzODBBNjUwOUYwQUUxOUY1RjlFRDg3QzFGMEEwQTU2 QzFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvQURGQUJFMzgwQTY1MDlGMEFFMTlGNUY5RUQ4N0Mx RjBBMEE1NkMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUxV8cVa/VZW+jFjab24FfFx134VTQZz3to syfx7HmLhIggu1wtKhOP6RnN3Y3RKymb3CaEpcYWYbPU5vbjviLH/sFg5OWJa0Rx LDcpaM3PykZ0R4jclq/JrS+wl4I2jHu0DzwM6016vChYz2kuXQgbrbfk6XziVesA RJzRApnX/g46kumrNbRF2oQw+RkkINsmmpJdti7wBR5X75XvbuRiTmRMi+VOJ2Ad ls+7S+iPXnB8AaGDmHU0utAz/Fkq2t9UlCqZGaYrv9Fgd22ODcpF5MK5NOPBQ5E2 UJXjTIZJhs8hKcN2gVgfS1fa5bgsdq3CqidggswNs9kJuthjMrU= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:14 2026 by rpki-client