$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: GXQ9/Kelkt6m2OD2TsmanJQC1a3b0eaMquGHZO9R4lA= Subject key identifier: 5D:97:5C:BD:4A:C9:3A:15:07:F2:D5:BD:9F:54:CB:F8:52:AA:9E:63 Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 6AAF95E7DC670B83097F5DED9CF82F8F9603CA75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: 36 Signing time: Thu 11 Jun 2026 15:25:14 +0000 Manifest this update: Thu 11 Jun 2026 15:20:14 +0000 Manifest next update: Fri 12 Jun 2026 18:12:14 +0000 Files and hashes: 1: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: xv29zmXcqxUe53vJHFcBWIx5XnaMePaXnr5BmcoeDBE=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) 3: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:af:95:e7:dc:67:0b:83:09:7f:5d:ed:9c:f8:2f:8f:96:03:ca:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: Jun 11 15:20:14 2026 GMT Not After : Jun 12 18:12:14 2026 GMT Subject: CN=5D975CBD4AC93A1507F2D5BD9F54CBF852AA9E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:0b:32:45:8d:ed:cf:72:c2:05:a7:bd:f0: 5d:f0:a0:7b:70:ef:7b:ba:42:08:03:b0:21:36:1d: d3:97:d8:c2:2b:97:fc:49:5a:43:83:3a:39:06:eb: 12:04:5e:d7:4c:5f:6e:f6:5f:0a:36:9a:0c:4c:31: 4b:64:a4:21:c1:f9:9a:81:72:fd:70:17:de:ba:2f: 48:37:26:e1:5c:c1:fa:fb:1d:12:6c:8f:08:f3:74: f9:c7:a1:1f:69:c4:93:f3:c5:d6:bb:24:9a:61:a7: 00:f0:85:dd:9e:d5:92:9a:c9:52:96:3a:ad:e3:b7: da:ce:df:08:91:2f:b4:26:f5:ae:0f:dd:05:0d:73: 7b:2a:51:d2:c4:90:1e:ea:7a:8e:72:dd:e2:c3:c0: d5:da:b8:49:08:05:cd:e4:d7:ab:c5:2d:a9:33:c2: 16:43:93:6d:73:92:58:d0:2e:8b:d9:d3:60:5a:63: 69:66:c1:5a:16:c7:dd:97:b0:97:ea:4e:ec:ab:56: 16:e3:47:13:f8:4c:1d:88:9d:9b:33:8b:48:a3:f2: 12:82:65:1c:8e:76:40:16:a8:b9:6d:4e:fa:5e:e2: dd:c3:30:db:9c:51:99:17:d0:63:91:2b:2b:b3:0f: ea:39:5f:bc:67:cb:3a:e4:cc:f2:38:c8:86:33:d2: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:97:5C:BD:4A:C9:3A:15:07:F2:D5:BD:9F:54:CB:F8:52:AA:9E:63 X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9a:b7:1b:5f:86:aa:f5:1f:f3:3c:d1:2b:45:c3:bb:e8:ab: 8a:57:da:d2:a5:c7:93:b7:e5:39:a0:ff:ef:82:e5:69:70:2e: 59:7b:4e:c8:1d:b4:98:ec:df:ec:10:76:25:e4:9b:15:dd:97: 64:be:b4:a2:44:80:bc:e5:3d:7d:c8:e6:7d:82:75:43:a2:0b: e7:a3:55:6d:05:60:ae:cf:a3:98:8a:b3:9b:cc:22:e5:74:e6: 4c:d3:fd:b8:2f:e9:98:1a:41:a0:d8:49:d3:84:4f:a0:1b:a7: 9c:79:fb:2e:c6:38:49:37:4c:4e:61:73:28:c8:02:0f:b5:61: c1:45:34:c2:18:39:66:9a:6c:ae:14:4b:84:52:21:f7:24:e6: 5e:62:e2:c8:c7:e5:44:e6:8e:63:8e:17:a6:3c:6d:5b:f5:9c: f2:0e:f7:08:e6:08:f4:d0:e9:6b:eb:41:65:d6:94:57:7d:15: d3:fa:a3:34:45:e8:1e:f5:d5:8e:c4:da:1c:1d:51:aa:aa:2c: 51:fe:2b:cb:0b:61:99:2c:be:b9:a0:e8:14:a3:7b:c1:8f:c8: 45:79:0c:0f:f4:48:be:22:61:40:91:99:fb:99:6c:12:dd:63: 39:98:b9:78:ad:71:59:17:a3:ba:9f:c8:aa:a2:e8:3a:88:f9: 68:b8:8c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaq+V59xnC4MJf13tnPgvj5YDynUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjA2MTExNTIwMTRaFw0yNjA2MTIxODEyMTRaMDMxMTAvBgNV BAMTKDVEOTc1Q0JENEFDOTNBMTUwN0YyRDVCRDlGNTRDQkY4NTJBQTlFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKwsyRY3tz3LCBae98F3woHtw 73u6QggDsCE2HdOX2MIrl/xJWkODOjkG6xIEXtdMX272Xwo2mgxMMUtkpCHB+ZqB cv1wF966L0g3JuFcwfr7HRJsjwjzdPnHoR9pxJPzxda7JJphpwDwhd2e1ZKayVKW Oq3jt9rO3wiRL7Qm9a4P3QUNc3sqUdLEkB7qeo5y3eLDwNXauEkIBc3k16vFLakz whZDk21zkljQLovZ02BaY2lmwVoWx92XsJfqTuyrVhbjRxP4TB2InZszi0ij8hKC ZRyOdkAWqLltTvpe4t3DMNucUZkX0GORKyuzD+o5X7xnyzrkzPI4yIYz0txzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXZdcvUrJOhUH8tW9n1TL+FKqnmMwHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOatxtfhqr1H/M80StFw7voq4pX2tKlx5O3 5Tmg/++C5WlwLll7TsgdtJjs3+wQdiXkmxXdl2S+tKJEgLzlPX3I5n2CdUOiC+ej VW0FYK7Po5iKs5vMIuV05kzT/bgv6ZgaQaDYSdOET6Abp5x5+y7GOEk3TE5hcyjI Ag+1YcFFNMIYOWaabK4US4RSIfck5l5i4sjH5UTmjmOOF6Y8bVv1nPIO9wjmCPTQ 6WvrQWXWlFd9FdP6ozRF6B711Y7E2hwdUaqqLFH+K8sLYZksvrmg6BSje8GPyEV5 DA/0SL4iYUCRmfuZbBLdYzmYuXitcVkXo7qfyKqi6DqI+Wi4jC4= -----END CERTIFICATE-----Generated at Fri Jun 12 06:04:07 2026 by rpki-client