$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft File: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft (raw, json) Hash identifier: O/FTuyy1bh0ytD7bh5eZ88BjfgRp/5LKselU+nX17Wg= Subject key identifier: C1:A2:D2:86:06:9E:71:10:C3:4E:79:38:5A:CE:F7:2E:2E:54:A4:51 Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B Certificate issuer: /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B Certificate serial: 7D06E64BE405011BC9B77E045769640BF590831C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:43:23 +0000 Manifest this update: Tue 02 Jun 2026 22:38:23 +0000 Manifest next update: Thu 04 Jun 2026 01:32:23 +0000 Files and hashes: 1: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl (hash: rrRqSo3QS4MwEemSUOgbBz+zgcYvSWUPgrbHqLf/IKA=) 2: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: mIxFRHOE8DmYRrXlDisTfwK6lb1/0VKqM0Rpgtaxvto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:06:e6:4b:e4:05:01:1b:c9:b7:7e:04:57:69:64:0b:f5:90:83:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B Validity Not Before: Jun 2 22:38:23 2026 GMT Not After : Jun 4 01:32:23 2026 GMT Subject: CN=C1A2D286069E7110C34E79385ACEF72E2E54A451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:4a:0b:78:71:48:9b:1a:6f:f5:05:5d:bf: d8:78:df:81:8a:92:43:9a:35:db:2e:df:d2:60:65: 40:6f:e9:7d:c6:4a:5f:7d:62:9b:93:6e:8c:17:51: 77:57:9b:4d:d4:80:39:66:41:5a:1b:63:39:65:72: ef:4e:e6:a4:06:96:25:a0:a6:87:09:dd:83:e5:7c: 9a:48:0a:28:81:48:97:37:17:d7:75:85:3d:65:c9: 3d:c4:9e:be:06:a4:e6:be:00:cb:0f:7f:29:e4:21: d4:ba:1f:c4:d9:fa:eb:08:8a:44:8a:29:81:86:89: 62:d6:2b:59:b0:87:44:b5:8a:b8:2c:05:dc:5d:67: 3a:30:29:70:22:8f:e9:3b:24:a9:15:d9:04:b0:7f: 91:e9:9a:f5:ce:90:2f:50:a7:fb:94:21:cc:f2:a9: 15:b9:76:7d:87:87:7c:75:f2:2b:7e:ed:20:18:7c: 43:ef:56:6b:bd:6b:13:03:08:f9:5f:6e:fe:54:9d: d6:20:01:d3:7f:72:15:ec:7f:3f:c5:20:f7:7e:30: 3f:6c:c0:45:45:ac:40:e7:3a:50:08:52:61:a8:0a: 67:40:ad:3f:2d:9b:b9:1d:7f:aa:8b:93:da:97:e8: 45:3d:b7:4e:f0:7e:04:28:26:22:7f:91:8e:04:fa: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A2:D2:86:06:9E:71:10:C3:4E:79:38:5A:CE:F7:2E:2E:54:A4:51 X509v3 Authority Key Identifier: keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5c:58:6c:14:e8:f4:10:2d:4e:64:5a:0e:e6:11:c3:3f:37: 46:40:7b:c1:1c:f7:61:ad:41:61:43:96:74:28:86:ba:30:b9: b7:70:af:40:6b:3c:64:0e:83:0d:f9:0d:3e:4d:11:8b:f8:49: 0c:fa:24:32:f3:42:b0:b8:29:aa:35:40:b9:41:77:70:5c:82: 45:f9:4c:23:31:c5:8b:80:55:9c:9e:cd:b3:0a:a8:00:35:28: 68:25:ce:cc:55:ef:2a:a0:1c:6b:23:39:f8:a6:f7:56:07:97: 57:b7:8d:d1:65:59:51:46:39:12:aa:13:6f:dc:c8:91:d4:03: 46:22:0c:50:68:1a:9d:24:48:8f:6a:7c:bb:40:28:64:0b:22: cd:cc:c8:f1:41:2f:32:3e:63:b2:78:59:94:39:d8:6b:95:b8: d9:d9:7f:95:cf:3b:9f:bd:8a:63:c3:bc:66:be:48:87:74:53: a9:34:bd:95:30:f9:0a:94:82:56:e9:c0:e0:c1:59:ca:ef:1d: 2a:76:8e:ed:00:68:76:87:03:30:2a:ad:93:ce:b8:eb:98:81: 5b:5f:fa:50:19:d8:5a:44:27:f4:12:4c:7c:eb:85:6d:30:c6: 97:86:cf:71:c4:5b:aa:ae:c4:8f:78:7b:87:a2:a4:6f:ed:67: d6:4f:64:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQbmS+QFARvJt34EV2lkC/WQgxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2MjRB QTIxMDI4QjAeFw0yNjA2MDIyMjM4MjNaFw0yNjA2MDQwMTMyMjNaMDMxMTAvBgNV BAMTKEMxQTJEMjg2MDY5RTcxMTBDMzRFNzkzODVBQ0VGNzJFMkU1NEE0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANUoLeHFImxpv9QVdv9h434GK kkOaNdsu39JgZUBv6X3GSl99YpuTbowXUXdXm03UgDlmQVobYzllcu9O5qQGliWg pocJ3YPlfJpICiiBSJc3F9d1hT1lyT3Enr4GpOa+AMsPfynkIdS6H8TZ+usIikSK KYGGiWLWK1mwh0S1irgsBdxdZzowKXAij+k7JKkV2QSwf5HpmvXOkC9Qp/uUIczy qRW5dn2Hh3x18it+7SAYfEPvVmu9axMDCPlfbv5UndYgAdN/chXsfz/FIPd+MD9s wEVFrEDnOlAIUmGoCmdArT8tm7kdf6qLk9qX6EU9t07wfgQoJiJ/kY4E+rKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwaLShgaecRDDTnk4Ws73Li5UpFEwHwYDVR0j BBgwFoAUrYzOZBLkdk+1yb34MfgGJKohAoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlNGNkOTYtY2ZjMS00NTc3LWFkM2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQx MkU0NzY0RkI1QzlCREY4MzFGODA2MjRBQTIxMDI4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDhDQ0U2NDEyRTQ3NjRGQjVDOUJERjgzMUY4MDYyNEFBMjEw MjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2 MjRBQTIxMDI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZcWGwU6PQQLU5kWg7mEcM/N0ZAe8Ec92Gt QWFDlnQohrowubdwr0BrPGQOgw35DT5NEYv4SQz6JDLzQrC4Kao1QLlBd3BcgkX5 TCMxxYuAVZyezbMKqAA1KGglzsxV7yqgHGsjOfim91YHl1e3jdFlWVFGORKqE2/c yJHUA0YiDFBoGp0kSI9qfLtAKGQLIs3MyPFBLzI+Y7J4WZQ52GuVuNnZf5XPO5+9 imPDvGa+SId0U6k0vZUw+QqUglbpwODBWcrvHSp2ju0AaHaHAzAqrZPOuOuYgVtf +lAZ2FpEJ/QSTHzrhW0wxpeGz3HEW6quxI94e4eipG/tZ9ZPZAs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:47 2026 by rpki-client