$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft File: ADF43E36B1768DE874BC2E4386678718C68AC58C.mft (raw, json) Hash identifier: ZoPRenjZ+SwpK3evb67JcwwDCLqZjGMrHYG/4yRmGnw= Subject key identifier: 28:10:29:81:14:4B:87:48:48:EB:3F:DD:F4:0A:E6:25:EC:F2:B1:C8 Authority key identifier: AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C Certificate issuer: /CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Certificate serial: 5F8505804C2DDE63F87E6074BA74B59EC8982EE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft Manifest number: ED Signing time: Mon 26 Oct 2026 07:46:41 +0000 Manifest this update: Mon 26 Oct 2026 07:41:41 +0000 Manifest next update: Tue 27 Oct 2026 11:06:41 +0000 Files and hashes: 1: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: K8yPbAzC5p5yuBTV3LGTKzGdC+9ek4+ufDT1mYTr44E=) 2: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: 5KPKZA2RTu5ylHSV1TQQG9h2k3pnK+Y0k5lXF80cirU=) 3: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: HhOurlT1i9ohxjrni1AsVYHua6nriyDIMH2PNMhJi+I=) 4: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: YGwFwZ5ZgSYttDBh5EguczXxt0Tj6L2YYXDVT0BcXEg=) 5: ADF43E36B1768DE874BC2E4386678718C68AC58C.crl (hash: SpuV18HtQnIUY595mNZUS/ZDMcmPYnrmgNynG4Q1CdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 11:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:85:05:80:4c:2d:de:63:f8:7e:60:74:ba:74:b5:9e:c8:98:2e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADF43E36B1768DE874BC2E4386678718C68AC58C Validity Not Before: Oct 26 07:41:41 2026 GMT Not After : Oct 27 11:06:41 2026 GMT Subject: CN=28102981144B874848EB3FDDF40AE625ECF2B1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:e8:10:b5:cf:40:70:27:71:d6:bb:80:7d: 10:88:c2:7c:b5:cf:f4:a2:fe:4b:48:07:4e:91:28: 95:bf:71:2a:87:2a:8f:f1:25:a9:f3:b3:93:b9:c4: 52:87:85:8f:bd:ff:d5:be:d1:dc:d3:73:c1:a2:46: 33:41:ad:25:9f:e1:94:d4:db:c0:7c:57:a8:04:76: 26:ba:1f:ba:4f:5b:d8:e5:11:62:19:1b:0d:15:29: 94:78:32:7f:48:44:6b:93:20:ca:e1:95:dd:a6:e5: 58:e1:14:6a:49:bd:1e:03:57:8f:b4:61:40:60:16: 0a:d3:d6:52:18:ff:69:46:73:19:cd:08:83:e0:1d: 49:86:a4:65:d4:06:1d:8f:02:63:ca:b7:45:e2:e2: f1:c4:b4:6a:56:19:c0:9f:8c:3c:a8:db:04:7e:0e: 22:da:cb:fa:56:b2:69:d4:73:b1:c1:2a:05:5c:69: 9f:b0:ad:50:9c:68:9a:90:20:a2:76:67:70:fc:37: 44:4b:f5:8b:21:27:94:9d:d4:83:b1:80:a8:6d:78: 37:1a:3a:eb:98:68:ac:24:07:06:21:90:7d:a9:f5: e7:a1:8b:a5:7b:d9:5b:62:2b:b7:92:61:93:48:c4: 79:f6:c0:b3:d4:eb:c4:1f:fb:8a:7a:08:ef:5b:cb: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:29:81:14:4B:87:48:48:EB:3F:DD:F4:0A:E6:25:EC:F2:B1:C8 X509v3 Authority Key Identifier: keyid:AD:F4:3E:36:B1:76:8D:E8:74:BC:2E:43:86:67:87:18:C6:8A:C5:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADF43E36B1768DE874BC2E4386678718C68AC58C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/ADF43E36B1768DE874BC2E4386678718C68AC58C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d6:1a:29:bc:0f:78:41:86:4b:cd:8a:1b:9b:91:6d:31:0e: 9b:40:bc:79:5c:39:e6:7c:96:43:f5:e4:00:e3:0c:c1:7b:e0: 69:cd:3c:75:4e:fd:10:d8:bf:ce:2f:dd:48:bf:4b:89:04:bd: 7d:f0:fd:c0:f0:2a:21:80:91:40:98:c3:48:14:95:9f:17:27: 9d:35:e0:f1:b4:40:07:85:5b:4f:5e:8b:08:c0:be:b7:1a:ae: 20:1b:c2:72:83:08:5c:52:70:1e:81:ca:4d:b2:c0:42:8f:81: 30:5c:2d:e4:18:0c:3e:2b:c7:5f:1c:82:a9:f4:81:03:49:a1: 0d:a5:a8:1c:c5:30:22:01:9e:f8:da:ef:4e:f2:87:0c:a0:73: 13:92:67:bf:e4:db:21:fd:98:13:0c:30:a6:1a:3f:fe:d3:9a: 85:85:5a:ca:fa:35:60:ad:65:10:87:96:ee:f2:34:10:1f:5f: 30:dc:d8:98:61:97:a1:8e:52:77:9e:9c:7b:b2:5a:8d:e3:33: 19:d5:38:51:33:26:55:0c:87:45:b2:a1:bc:2c:04:3a:8b:12: 17:f5:5c:fb:28:05:03:f9:dc:11:d5:a6:9e:f7:94:6d:11:37: e1:dc:81:4b:b5:97:6b:f6:af:11:12:ef:0d:fc:4b:f6:98:57: 08:89:32:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4UFgEwt3mP4fmB0unS1nsiYLuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3MThD NjhBQzU4QzAeFw0yNjEwMjYwNzQxNDFaFw0yNjEwMjcxMTA2NDFaMDMxMTAvBgNV BAMTKDI4MTAyOTgxMTQ0Qjg3NDg0OEVCM0ZEREY0MEFFNjI1RUNGMkIxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyugQtc9AcCdx1ruAfRCIwny1 z/Si/ktIB06RKJW/cSqHKo/xJanzs5O5xFKHhY+9/9W+0dzTc8GiRjNBrSWf4ZTU 28B8V6gEdia6H7pPW9jlEWIZGw0VKZR4Mn9IRGuTIMrhld2m5VjhFGpJvR4DV4+0 YUBgFgrT1lIY/2lGcxnNCIPgHUmGpGXUBh2PAmPKt0Xi4vHEtGpWGcCfjDyo2wR+ DiLay/pWsmnUc7HBKgVcaZ+wrVCcaJqQIKJ2Z3D8N0RL9YshJ5Sd1IOxgKhteDca OuuYaKwkBwYhkH2p9eehi6V72VtiK7eSYZNIxHn2wLPU68Qf+4p6CO9by12pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKBApgRRLh0hI6z/d9ArmJezyscgwHwYDVR0j BBgwFoAUrfQ+NrF2jeh0vC5DhmeHGMaKxYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIxYzk1NzktNTZiYS00YTcwLWJhMTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZC MTc2OERFODc0QkMyRTQzODY2Nzg3MThDNjhBQzU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREY0M0UzNkIxNzY4REU4NzRCQzJFNDM4NjY3ODcxOEM2OEFD NThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvQURGNDNFMzZCMTc2OERFODc0QkMyRTQzODY2Nzg3 MThDNjhBQzU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbWGim8D3hBhkvNihubkW0xDptAvHlcOeZ8 lkP15ADjDMF74GnNPHVO/RDYv84v3Ui/S4kEvX3w/cDwKiGAkUCYw0gUlZ8XJ501 4PG0QAeFW09eiwjAvrcariAbwnKDCFxScB6Byk2ywEKPgTBcLeQYDD4rx18cgqn0 gQNJoQ2lqBzFMCIBnvja707yhwygcxOSZ7/k2yH9mBMMMKYaP/7TmoWFWsr6NWCt ZRCHlu7yNBAfXzDc2Jhhl6GOUneenHuyWo3jMxnVOFEzJlUMh0WyobwsBDqLEhf1 XPsoBQP53BHVpp73lG0RN+HcgUu1l2v2rxES7w38S/aYVwiJMlk= -----END CERTIFICATE-----Generated at Mon Oct 26 17:52:40 2026 by rpki-client