$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft File: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft (raw, json) Hash identifier: ypnQVViUvf/M1X8quktwh5uqiTvgLYYJU/7uyZZbd3g= Subject key identifier: FA:50:9C:6F:46:C1:42:16:11:F9:89:E3:49:E3:9D:84:29:D1:7E:3F Authority key identifier: AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 Certificate issuer: /CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Certificate serial: 30FBB068374BD2B5BF7F27DD3380861CE104BFDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 23:22:51 +0000 Manifest this update: Wed 16 Sep 2026 23:17:51 +0000 Manifest next update: Fri 18 Sep 2026 01:30:51 +0000 Files and hashes: 1: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: 7PEJXW7RMfgjbRMHoDP/Q67ewQubnf7QvBInIps/U3k=) 2: AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl (hash: fBmjdqhaHoFsX7MmLoJNyKeEP69euVT2JLYOszmHYqk=) 3: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: t8Za87lSHjFY3IEP4fG6LW03mFmJ1FnBoJ5/LeJNcH4=) 4: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: W+AAZvdz9uWMtockMX6VSZJ0oNmTRpeghrirQa/hfSI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fb:b0:68:37:4b:d2:b5:bf:7f:27:dd:33:80:86:1c:e1:04:bf:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD7A5D786D5C5407C45F1082BED63C83C86B0A27 Validity Not Before: Sep 16 23:17:51 2026 GMT Not After : Sep 18 01:30:51 2026 GMT Subject: CN=FA509C6F46C1421611F989E349E39D8429D17E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:c0:02:11:dc:f0:f4:08:e1:ed:8e:ab:f9: 42:03:1a:35:d3:b6:cd:05:b0:4a:5b:02:c5:b6:ce: c9:39:8f:72:f1:aa:d9:ca:c2:52:d4:fb:d8:fe:46: fe:50:c5:2d:63:87:e1:3d:a5:e3:ae:00:47:7d:e8: 7e:00:28:54:c2:c1:14:e7:6b:79:fc:bf:f1:1f:a1: e8:87:95:a3:93:f1:ff:5d:7b:a5:f9:d6:df:ee:d5: b1:aa:4e:7a:53:0b:2d:a2:ca:59:62:a8:41:c6:fe: 74:c3:36:7e:c8:91:80:14:3a:40:3e:63:b7:31:e0: d7:28:7e:25:e4:47:4b:bd:49:c7:5d:39:7d:d4:42: f8:50:ee:01:d0:d7:72:7f:11:ca:d8:e4:db:76:a3: eb:92:30:d3:04:e7:3e:ee:70:b4:e9:fb:cf:45:fc: c0:38:fe:35:fa:0a:39:33:1f:40:82:52:cc:da:7a: c8:18:17:ed:d1:4b:6e:db:ac:7d:ac:24:49:ff:12: a0:b4:9b:db:48:0c:d6:86:0a:2d:b4:90:63:62:51: ef:28:8b:e2:45:53:16:2a:9f:70:ae:b0:33:34:ca: 7b:61:cf:e9:e7:2a:da:22:17:b0:9b:48:ad:97:c6: 21:5c:53:ca:33:79:e1:ab:58:00:fe:1e:a4:ae:b0: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:50:9C:6F:46:C1:42:16:11:F9:89:E3:49:E3:9D:84:29:D1:7E:3F X509v3 Authority Key Identifier: keyid:AD:7A:5D:78:6D:5C:54:07:C4:5F:10:82:BE:D6:3C:83:C8:6B:0A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/AD7A5D786D5C5407C45F1082BED63C83C86B0A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b7:c2:51:23:43:d2:aa:fd:cf:ac:1a:d3:07:41:f5:d0:a8: b2:08:a2:ab:3d:55:e1:cb:3b:fb:fa:ff:4d:fb:98:f6:2b:1f: 9f:fb:80:0c:01:99:d9:93:9d:e5:92:c3:ae:cb:5e:54:75:a0: dd:68:a3:48:8d:74:c8:60:63:b5:f9:53:20:01:ad:34:b6:96: 7b:0d:b2:1e:68:e5:cc:7c:e7:87:59:c0:bf:f9:e4:37:9c:27: b5:f1:9c:c9:cc:7c:88:02:b7:b2:5c:fa:67:cf:d2:43:c1:1c: 64:d4:be:ad:6d:49:c4:b0:ed:e8:94:e8:f3:43:67:0c:83:05: c3:28:37:39:2a:0e:3f:bb:82:cf:32:d5:8c:14:fd:ff:9d:94: df:8c:37:b6:94:04:e1:7e:0d:17:85:08:3f:63:da:ee:cc:32: c2:fd:4d:3e:9e:a0:33:e3:31:6e:60:b9:58:58:97:1b:2b:84: e4:83:76:b0:24:1e:42:df:9a:d7:82:95:3c:d7:bf:ff:b6:f2: 71:1f:7b:ed:a9:63:7b:c1:17:f4:5a:a8:43:64:e8:f7:89:33: 5c:30:66:1d:91:ac:d2:37:bf:d8:8c:4d:a4:82:1d:61:01:12: 5f:1b:74:6b:9e:4c:1c:34:97:bd:8d:66:ab:da:44:a5:65:de: c8:48:76:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPuwaDdL0rW/fyfdM4CGHOEEv94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjNDODND ODZCMEEyNzAeFw0yNjA5MTYyMzE3NTFaFw0yNjA5MTgwMTMwNTFaMDMxMTAvBgNV BAMTKEZBNTA5QzZGNDZDMTQyMTYxMUY5ODlFMzQ5RTM5RDg0MjlEMTdFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/MACEdzw9Ajh7Y6r+UIDGjXT ts0FsEpbAsW2zsk5j3LxqtnKwlLU+9j+Rv5QxS1jh+E9peOuAEd96H4AKFTCwRTn a3n8v/EfoeiHlaOT8f9de6X51t/u1bGqTnpTCy2iylliqEHG/nTDNn7IkYAUOkA+ Y7cx4NcofiXkR0u9ScddOX3UQvhQ7gHQ13J/EcrY5Nt2o+uSMNME5z7ucLTp+89F /MA4/jX6CjkzH0CCUszaesgYF+3RS27brH2sJEn/EqC0m9tIDNaGCi20kGNiUe8o i+JFUxYqn3CusDM0ynthz+nnKtoiF7CbSK2XxiFcU8ozeeGrWAD+HqSusPcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lCcb0bBQhYR+YnjSeOdhCnRfj8wHwYDVR0j BBgwFoAUrXpdeG1cVAfEXxCCvtY8g8hrCicwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlNjAzZTMtZjIzZS00YzZhLWJiM2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2 RDVDNTQwN0M0NUYxMDgyQkVENjNDODNDODZCMEEyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDdBNUQ3ODZENUM1NDA3QzQ1RjEwODJCRUQ2M0M4M0M4NkIw QTI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvQUQ3QTVENzg2RDVDNTQwN0M0NUYxMDgyQkVENjND ODNDODZCMEEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADa3wlEjQ9Kq/c+sGtMHQfXQqLIIoqs9VeHL O/v6/037mPYrH5/7gAwBmdmTneWSw67LXlR1oN1oo0iNdMhgY7X5UyABrTS2lnsN sh5o5cx854dZwL/55DecJ7XxnMnMfIgCt7Jc+mfP0kPBHGTUvq1tScSw7eiU6PND ZwyDBcMoNzkqDj+7gs8y1YwU/f+dlN+MN7aUBOF+DReFCD9j2u7MMsL9TT6eoDPj MW5guVhYlxsrhOSDdrAkHkLfmteClTzXv/+28nEfe+2pY3vBF/RaqENk6PeJM1ww Zh2RrNI3v9iMTaSCHWEBEl8bdGueTBw0l72NZqvaRKVl3shIdnw= -----END CERTIFICATE-----Generated at Thu Sep 17 16:49:39 2026 by rpki-client