$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft File: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft (raw, json) Hash identifier: Z60NVeDynQPhcgGAF4a4V+HO91pAEL/bjPDo60MCNIM= Subject key identifier: 04:93:5B:78:52:35:13:2F:7C:84:01:AB:4D:36:FD:7D:91:C1:3E:8B Authority key identifier: AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 Certificate issuer: /CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Certificate serial: 77C12115199BA15B703325FBFF774CC6DE31B74F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:07:20 +0000 Manifest this update: Thu 17 Sep 2026 03:02:20 +0000 Manifest next update: Fri 18 Sep 2026 06:14:20 +0000 Files and hashes: 1: ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl (hash: D7+J9s3iMUeoQAvgZhNFVQU15tksODIxwfLaU6K0il8=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: eMjrRkEiItNdv20OSL8v5DoNQVMNdFSIv45ei3rnYVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c1:21:15:19:9b:a1:5b:70:33:25:fb:ff:77:4c:c6:de:31:b7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54 Validity Not Before: Sep 17 03:02:20 2026 GMT Not After : Sep 18 06:14:20 2026 GMT Subject: CN=04935B785235132F7C8401AB4D36FD7D91C13E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:8c:71:e7:5c:53:ed:5e:fd:5d:bd:3d:7b: 5c:25:a8:60:3f:c9:c8:d4:4f:79:5c:ab:60:5f:87: 25:8f:b9:5f:da:26:22:ba:53:30:45:7d:6b:5f:b1: 33:89:1b:d5:0f:7f:96:a7:2c:1e:fa:d8:07:b8:06: 56:93:4e:ba:68:a9:50:71:a7:96:f0:6e:f8:17:6d: e7:48:94:3f:1c:fc:f1:26:2f:a5:28:fd:a8:60:92: 74:d7:d9:a0:07:3d:72:17:0a:d8:cb:c4:15:d5:c9: 44:00:b3:88:08:82:e0:ce:45:60:de:64:6f:79:9a: ed:4c:83:f9:79:c3:d7:32:11:9e:a2:80:db:40:45: 45:00:58:b0:61:3c:d4:29:e0:f9:e7:23:2a:6e:fb: ac:e7:12:2b:19:be:ab:49:54:d2:59:75:db:1d:24: a0:98:37:8e:43:70:90:22:9c:65:f2:44:4e:3b:38: 59:78:a2:a9:ab:1e:4f:16:8d:cd:36:b5:a5:4b:88: 0a:cf:41:53:bb:96:95:72:f9:bd:33:e0:4a:58:9c: 52:d2:02:8a:62:4c:11:af:11:77:ac:42:b2:cd:1a: 41:7c:52:f0:80:69:98:da:ee:fd:9e:ac:68:40:a8: 94:9e:12:78:eb:f6:84:ac:37:8c:20:3b:73:4a:79: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:93:5B:78:52:35:13:2F:7C:84:01:AB:4D:36:FD:7D:91:C1:3E:8B X509v3 Authority Key Identifier: keyid:AD:B1:53:2F:21:7D:30:F7:E7:6B:4A:46:49:EE:AF:AF:2A:DE:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/ADB1532F217D30F7E76B4A4649EEAFAF2ADE5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:08:76:90:bc:e9:84:3b:79:31:ea:c3:a5:d8:d0:ab:b0:c0: ed:fa:60:8c:a7:8b:68:60:94:79:c4:57:fe:77:d6:86:c1:56: d9:e8:f7:d2:e5:ec:27:59:43:cd:77:97:a0:46:ba:dc:bd:7d: 6c:61:a8:11:68:a0:24:42:36:bb:82:e9:a1:92:8c:7e:d5:91: 0b:16:20:c4:f8:29:30:aa:fc:ec:8c:13:bd:bd:8f:80:cb:61: b8:5d:c5:e5:a4:a0:a8:fa:f0:78:7e:b6:63:d1:5d:6e:79:2f: 6c:7d:6f:39:42:a9:38:7d:80:63:53:7a:1b:3d:94:98:e0:89: fe:01:9d:4f:a2:7e:9e:b9:34:ba:02:97:14:fa:c6:f5:e2:54: f6:c5:99:63:a8:33:cf:f5:f3:69:97:c4:51:50:5f:20:3d:48: 71:b9:0d:f7:7a:d6:56:09:8b:ec:37:95:b5:50:26:d7:d4:e9: 7c:82:38:44:0c:69:44:f1:31:a0:6c:f5:a9:60:90:ba:a7:18: 68:a7:5a:ff:c5:ec:d3:9a:28:1d:99:25:fe:70:c9:2e:80:d2: d9:d8:3e:22:b9:16:33:2f:c8:fc:ac:15:4e:31:80:7b:97:9d: 11:45:06:81:02:a1:71:2a:d8:3e:74:c8:65:0a:a4:f5:f6:92: f8:75:37:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8EhFRmboVtwMyX7/3dMxt4xt08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYy QURFNUE1NDAeFw0yNjA5MTcwMzAyMjBaFw0yNjA5MTgwNjE0MjBaMDMxMTAvBgNV BAMTKDA0OTM1Qjc4NTIzNTEzMkY3Qzg0MDFBQjREMzZGRDdEOTFDMTNFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnS4xx51xT7V79Xb09e1wlqGA/ ycjUT3lcq2BfhyWPuV/aJiK6UzBFfWtfsTOJG9UPf5anLB762Ae4BlaTTrpoqVBx p5bwbvgXbedIlD8c/PEmL6Uo/ahgknTX2aAHPXIXCtjLxBXVyUQAs4gIguDORWDe ZG95mu1Mg/l5w9cyEZ6igNtARUUAWLBhPNQp4PnnIypu+6znEisZvqtJVNJZddsd JKCYN45DcJAinGXyRE47OFl4oqmrHk8Wjc02taVLiArPQVO7lpVy+b0z4EpYnFLS AopiTBGvEXesQrLNGkF8UvCAaZja7v2erGhAqJSeEnjr9oSsN4wgO3NKeUr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJNbeFI1Ey98hAGrTTb9fZHBPoswHwYDVR0j BBgwFoAUrbFTLyF9MPfna0pGSe6vryreWlQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmExOGY4YTAtOTNhZS00MzU5LThhNWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYy MTdEMzBGN0U3NkI0QTQ2NDlFRUFGQUYyQURFNUE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BREIxNTMyRjIxN0QzMEY3RTc2QjRBNDY0OUVFQUZBRjJBREU1 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvQURCMTUzMkYyMTdEMzBGN0U3NkI0QTQ2NDlFRUFG QUYyQURFNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8IdpC86YQ7eTHqw6XY0KuwwO36YIyni2hg lHnEV/531obBVtno99Ll7CdZQ813l6BGuty9fWxhqBFooCRCNruC6aGSjH7VkQsW IMT4KTCq/OyME729j4DLYbhdxeWkoKj68Hh+tmPRXW55L2x9bzlCqTh9gGNTehs9 lJjgif4BnU+ifp65NLoClxT6xvXiVPbFmWOoM8/182mXxFFQXyA9SHG5Dfd61lYJ i+w3lbVQJtfU6XyCOEQMaUTxMaBs9algkLqnGGinWv/F7NOaKB2ZJf5wyS6A0tnY PiK5FjMvyPysFU4xgHuXnRFFBoECoXEq2D50yGUKpPX2kvh1N6c= -----END CERTIFICATE-----Generated at Thu Sep 17 08:28:41 2026 by rpki-client