$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: EJAvrNqPF+PgMX+0VSN8B8+P4kdXK6o8hguf0o9LiTE= Subject key identifier: 61:5C:42:C1:F0:50:D1:DB:A3:66:D3:BC:98:7E:38:3C:D8:FC:E0:42 Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 20CD757B4D8776F16B56FBFD3D14C8A2BDE8FF24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: 68 Signing time: Sun 19 Jul 2026 11:51:30 +0000 Manifest this update: Sun 19 Jul 2026 11:46:30 +0000 Manifest next update: Mon 20 Jul 2026 15:02:30 +0000 Files and hashes: 1: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 2: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) 3: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 4: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) 5: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) 6: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 7: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) 8: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: Ng6lZJuB/9I+k9AJrh5DzKVZn1RP/Sna2r97TdrnOaU=) 9: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:cd:75:7b:4d:87:76:f1:6b:56:fb:fd:3d:14:c8:a2:bd:e8:ff:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: Jul 19 11:46:30 2026 GMT Not After : Jul 20 15:02:30 2026 GMT Subject: CN=615C42C1F050D1DBA366D3BC987E383CD8FCE042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6a:b4:3e:44:72:7a:44:4c:2e:05:15:46:17: ae:84:d7:69:a2:d8:c9:19:de:99:e6:8f:54:99:f1: 52:cc:ca:93:19:33:a6:88:81:bc:78:3f:87:97:a5: 74:65:96:50:c6:3e:23:36:72:71:68:e5:b8:35:98: 90:b1:73:c5:aa:43:0b:9a:73:14:10:c1:38:d6:06: fb:7a:35:ca:a6:de:16:e0:5f:c0:8e:0a:24:34:68: 39:be:29:be:20:61:a1:6e:da:49:9c:85:72:5c:d3: 6c:1b:62:61:ab:01:7e:3b:dc:28:46:f3:88:e0:ad: f3:d0:3b:07:c5:06:a0:7b:42:56:ae:14:dc:0d:30: 35:7a:36:57:c9:65:77:91:57:a6:c9:fd:f4:fc:eb: 41:40:71:a5:c0:31:87:84:0e:1f:0c:a1:9c:fb:fe: 58:6f:58:e7:5f:3a:0b:51:24:6c:f1:e2:a7:0f:ef: eb:3f:62:3a:3e:a9:e7:71:32:6c:1e:a5:27:b2:ef: 6c:20:a8:d9:8a:b1:b9:85:8e:e8:31:eb:17:c1:f9: 87:d2:92:4f:dc:e9:af:ba:51:1c:df:0c:7f:55:c3: 98:cd:bb:3b:c9:63:f7:09:4e:d2:93:f3:17:15:54: 40:a3:d5:fe:2b:08:e7:a5:d9:64:0f:fa:3d:e0:e0: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:42:C1:F0:50:D1:DB:A3:66:D3:BC:98:7E:38:3C:D8:FC:E0:42 X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1d:d8:16:c8:f8:38:97:bc:e3:b1:96:2c:71:f6:a3:75:4c: 57:32:71:dc:a6:28:25:a3:e6:54:be:92:7d:a0:d2:55:66:6d: 01:60:1b:6d:5f:24:45:4c:b0:59:95:dc:40:41:01:22:88:27: b2:2c:7f:5c:5c:a7:df:f3:e7:ed:55:aa:80:ed:48:a2:31:d4: 51:60:46:20:5c:94:30:c6:bc:31:e2:3f:61:74:ae:40:0c:2f: 39:4b:10:41:e0:39:27:94:ba:ec:bf:b5:e4:6d:8a:c8:82:a6: 2d:2b:9e:cb:d5:49:0b:9e:d5:cb:1b:bd:7e:1c:e9:9e:e7:06: 00:98:f0:9b:d9:64:b8:03:9c:2c:30:5b:9e:20:52:b6:c3:3d: 5b:b6:1d:f0:3a:26:db:6f:69:d7:24:5b:45:5b:c2:ac:41:d9: 77:b7:2d:33:41:b4:88:e9:d5:a2:a4:b3:58:f3:0b:76:2c:d2: f0:9d:74:d7:b8:26:63:fd:1a:77:22:42:d8:f2:39:35:c5:43: 32:d4:31:ce:b6:bb:12:2e:b5:7a:f6:3f:5a:95:03:c9:a7:d9: de:b1:a4:ff:35:c0:05:6a:ad:15:09:28:56:b9:27:c5:fa:51: 7a:3c:58:eb:65:76:cd:89:35:71:92:4a:b5:e9:7e:17:22:ca: 60:51:69:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIM11e02HdvFrVvv9PRTIor3o/yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjA3MTkxMTQ2MzBaFw0yNjA3MjAxNTAyMzBaMDMxMTAvBgNV BAMTKDYxNUM0MkMxRjA1MEQxREJBMzY2RDNCQzk4N0UzODNDRDhGQ0UwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiarQ+RHJ6REwuBRVGF66E12mi 2MkZ3pnmj1SZ8VLMypMZM6aIgbx4P4eXpXRlllDGPiM2cnFo5bg1mJCxc8WqQwua cxQQwTjWBvt6Ncqm3hbgX8COCiQ0aDm+Kb4gYaFu2kmchXJc02wbYmGrAX473ChG 84jgrfPQOwfFBqB7QlauFNwNMDV6NlfJZXeRV6bJ/fT860FAcaXAMYeEDh8MoZz7 /lhvWOdfOgtRJGzx4qcP7+s/Yjo+qedxMmwepSey72wgqNmKsbmFjugx6xfB+YfS kk/c6a+6URzfDH9Vw5jNuzvJY/cJTtKT8xcVVECj1f4rCOel2WQP+j3g4LU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYVxCwfBQ0dujZtO8mH44PNj84EIwHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwd2BbI+DiXvOOxlixx9qN1TFcycdymKCWj 5lS+kn2g0lVmbQFgG21fJEVMsFmV3EBBASKIJ7Isf1xcp9/z5+1VqoDtSKIx1FFg RiBclDDGvDHiP2F0rkAMLzlLEEHgOSeUuuy/teRtisiCpi0rnsvVSQue1csbvX4c 6Z7nBgCY8JvZZLgDnCwwW54gUrbDPVu2HfA6JttvadckW0VbwqxB2Xe3LTNBtIjp 1aKks1jzC3Ys0vCddNe4JmP9GnciQtjyOTXFQzLUMc62uxIutXr2P1qVA8mn2d6x pP81wAVqrRUJKFa5J8X6UXo8WOtlds2JNXGSSrXpfhciymBRaeo= -----END CERTIFICATE-----Generated at Sun Jul 19 23:06:06 2026 by rpki-client