$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft File: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft (raw, json) Hash identifier: mjjwM6o/gkz65xbAVe4d8daoUFe4PUqhjQ+3XhYf9HA= Subject key identifier: DE:13:17:CC:E1:01:BC:55:9E:1D:DA:55:18:8A:67:5B:1B:FA:01:C8 Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 Certificate issuer: /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Certificate serial: 60CBDA94BB117FF32253186B678CF674A9B6C915 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 08:26:39 +0000 Manifest this update: Fri 04 Sep 2026 08:21:39 +0000 Manifest next update: Sat 05 Sep 2026 10:29:39 +0000 Files and hashes: 1: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl (hash: OU2ks7q4RqDEIZeFGJNvTMYm3fQ18h9KiXPpwnrEw28=) 2: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: ffbCXyninBGio9BOygv4p476TIGMpl53kSauEjC/roA=) 3: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: gyHsfmW6KN8Q0altXeM0ynZaoGDZjnrHl/TgsA39vQ8=) 4: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Jz250gHnK9wmceEyoEa7ZzH19MTY0j2TTvLScjld8Z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cb:da:94:bb:11:7f:f3:22:53:18:6b:67:8c:f6:74:a9:b6:c9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Validity Not Before: Sep 4 08:21:39 2026 GMT Not After : Sep 5 10:29:39 2026 GMT Subject: CN=DE1317CCE101BC559E1DDA55188A675B1BFA01C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:55:96:82:20:11:7c:ba:4c:ae:60:26:d9: 68:a5:ef:e8:bb:5b:d3:ee:6b:12:14:4b:42:1b:b1: 5a:04:88:21:1c:9b:69:4e:69:e2:ba:c0:c9:d9:80: 21:49:29:0d:6a:5e:3f:a1:5b:fc:a8:78:6e:d5:88: 92:a5:f8:cc:b0:14:56:f8:16:8e:42:48:3f:05:83: e5:b7:9a:b8:ff:a4:55:67:be:c2:d2:39:df:35:2f: 1e:38:f7:f8:58:65:9a:b9:0a:31:6f:06:93:90:b2: d7:55:9c:40:0e:a1:f2:fc:75:65:03:46:ba:39:e3: b6:7a:23:4a:ce:ae:ca:db:24:09:a2:fb:3b:0f:e3: a2:f4:ef:b0:01:cb:fc:b1:37:1c:85:a1:0d:85:05: 46:03:2c:47:72:6f:10:4f:d2:b6:53:f1:e4:74:59: 36:bd:9f:14:b5:bd:0f:6a:db:bf:8c:b2:e2:d6:5a: 67:a0:71:2d:70:fe:ca:14:5a:55:d2:1f:1c:77:7f: 41:b6:68:c8:97:41:42:1f:12:ec:75:23:24:68:70: 8f:cf:64:cb:6a:e2:42:66:b0:15:4d:ce:eb:36:b2: b4:79:06:50:ed:f4:06:ea:79:88:c4:73:0f:96:4a: 41:6f:c2:5e:66:e3:9c:d8:f2:ec:40:90:79:22:0e: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:13:17:CC:E1:01:BC:55:9E:1D:DA:55:18:8A:67:5B:1B:FA:01:C8 X509v3 Authority Key Identifier: keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c7:81:10:8c:62:4e:be:ae:bc:39:a3:87:8a:99:88:84:be: 84:d2:d5:f9:de:52:03:79:c6:9b:92:51:3e:87:3a:30:05:17: cc:44:79:01:e6:e6:ac:37:86:2b:a7:02:48:d3:25:56:99:52: 1d:6a:f0:dd:97:6a:0d:66:10:be:46:90:e0:9b:6a:f3:67:23: f6:d2:ac:78:9a:3b:8f:68:99:8f:6b:f8:57:2e:ca:7b:7e:a3: 71:ce:4a:0f:12:21:8c:fc:a1:72:f4:64:c8:4b:89:0d:99:ca: c8:3f:c3:e2:88:23:5e:bd:35:e0:54:b5:05:48:f5:c5:96:43: 0e:50:a6:5a:b3:63:7f:dd:4a:60:62:3b:a2:71:7b:09:d6:31: 6d:07:eb:9f:98:29:33:5c:52:ef:63:90:90:65:83:66:8e:eb: be:14:18:7d:ff:d4:76:4d:94:9c:3a:6f:14:33:54:f9:11:64: a6:22:7f:b6:1a:85:70:04:8b:48:44:de:60:fe:a7:21:04:cc: 9f:e5:89:c3:58:e8:c8:34:4c:0a:0b:7e:60:ed:18:90:ba:1e: 08:77:9a:b5:d6:70:9d:57:32:00:f4:86:c7:da:23:22:1b:13: d7:f7:f8:74:2e:a0:1a:e6:e0:69:80:2b:fa:10:32:26:01:ee: 4b:2d:a2:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMvalLsRf/MiUxhrZ4z2dKm2yRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4 NzRFOTBFMTAeFw0yNjA5MDQwODIxMzlaFw0yNjA5MDUxMDI5MzlaMDMxMTAvBgNV BAMTKERFMTMxN0NDRTEwMUJDNTU5RTFEREE1NTE4OEE2NzVCMUJGQTAxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrz1WWgiARfLpMrmAm2Wil7+i7 W9PuaxIUS0IbsVoEiCEcm2lOaeK6wMnZgCFJKQ1qXj+hW/yoeG7ViJKl+MywFFb4 Fo5CSD8Fg+W3mrj/pFVnvsLSOd81Lx449/hYZZq5CjFvBpOQstdVnEAOofL8dWUD Rro547Z6I0rOrsrbJAmi+zsP46L077ABy/yxNxyFoQ2FBUYDLEdybxBP0rZT8eR0 WTa9nxS1vQ9q27+MsuLWWmegcS1w/soUWlXSHxx3f0G2aMiXQUIfEux1IyRocI/P ZMtq4kJmsBVNzus2srR5BlDt9AbqeYjEcw+WSkFvwl5m45zY8uxAkHkiDrBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hMXzOEBvFWeHdpVGIpnWxv6AcgwHwYDVR0j BBgwFoAUrYMjDenp1Qqc32ozLgPcWIdOkOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjkwMDNkNmMtOTVmMS00N2E0LTlkNWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERF OUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4NzRFOTBFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDgzMjMwREU5RTlENTBBOUNERjZBMzMyRTAzREM1ODg3NEU5 MEUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RD NTg4NzRFOTBFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnHgRCMYk6+rrw5o4eKmYiEvoTS1fneUgN5 xpuSUT6HOjAFF8xEeQHm5qw3hiunAkjTJVaZUh1q8N2Xag1mEL5GkOCbavNnI/bS rHiaO49omY9r+Fcuynt+o3HOSg8SIYz8oXL0ZMhLiQ2Zysg/w+KII169NeBUtQVI 9cWWQw5QplqzY3/dSmBiO6JxewnWMW0H65+YKTNcUu9jkJBlg2aO674UGH3/1HZN lJw6bxQzVPkRZKYif7YahXAEi0hE3mD+pyEEzJ/licNY6Mg0TAoLfmDtGJC6Hgh3 mrXWcJ1XMgD0hsfaIyIbE9f3+HQuoBrm4GmAK/oQMiYB7kstoms= -----END CERTIFICATE-----Generated at Fri Sep 4 15:25:39 2026 by rpki-client