$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: 7O8fe78CjIYUCvKlNSvbPKtuqGYYQCXhR9gRbRW0mRo= Subject key identifier: 38:6D:32:AF:DE:8B:AD:1B:C3:10:81:19:C7:1B:14:65:8A:CE:D5:F5 Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 43E4FA8C78D9451185971A8098C385ED496E8593 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: AF Signing time: Thu 10 Sep 2026 22:54:51 +0000 Manifest this update: Thu 10 Sep 2026 22:49:51 +0000 Manifest next update: Sat 12 Sep 2026 02:12:51 +0000 Files and hashes: 1: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: /RZMTpQL0T0hTBvxKGYX5lJLv2RpCj1J7rYBv/jbIYs=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) 3: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e4:fa:8c:78:d9:45:11:85:97:1a:80:98:c3:85:ed:49:6e:85:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: Sep 10 22:49:51 2026 GMT Not After : Sep 12 02:12:51 2026 GMT Subject: CN=386D32AFDE8BAD1BC3108119C71B14658ACED5F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:93:b5:1d:95:28:68:b7:13:bd:c9:56:b4: 4c:75:21:53:80:d0:ae:ab:75:cb:1b:db:64:71:69: 83:20:ed:8a:88:53:45:df:37:2d:69:bb:30:4c:1a: 30:e5:24:73:1c:73:a7:b6:96:63:e8:66:2e:48:bd: 86:2e:20:0a:13:06:d5:70:ae:dc:94:16:7c:57:b6: dc:c3:84:d2:a7:65:69:e0:06:90:03:b5:b4:92:26: 46:f1:f4:71:f8:82:c9:13:83:1a:b3:eb:88:25:9f: dd:b5:f2:11:a0:88:7e:b0:a9:80:45:6b:c5:df:b2: c1:cc:01:cc:ed:63:45:f3:08:b5:8d:a9:74:d0:0e: e5:e2:2c:47:0f:77:8b:c2:d0:2f:7b:56:28:14:c4: de:8c:42:18:8e:8a:7f:a7:af:3f:13:b0:f7:74:f3: 36:e3:64:4a:db:7f:b5:ff:e2:f7:81:65:28:31:d3: 3e:24:7a:18:c5:d3:44:bf:11:38:ed:04:12:33:83: 57:51:40:cc:25:a2:46:5f:ce:b9:3a:00:97:89:a7: 54:95:17:08:a7:a8:9c:74:be:be:bf:95:cb:99:ef: e2:d9:e2:4e:13:95:20:68:54:35:ef:1b:82:82:f8: 7d:4c:8a:a2:67:65:3e:b8:9c:fe:97:03:33:55:ed: 0a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6D:32:AF:DE:8B:AD:1B:C3:10:81:19:C7:1B:14:65:8A:CE:D5:F5 X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1d:0b:06:16:3f:d0:81:54:b4:4c:3d:31:3d:0b:6e:3c:36: 43:5c:c9:02:7d:f2:bc:e4:99:e2:63:44:85:cc:88:f9:4a:ab: de:5c:fa:6d:a2:c0:fb:e4:84:79:cb:85:4c:0e:58:71:07:71: 72:2b:ba:3b:a1:13:5b:c3:a1:95:1f:2c:22:54:0d:57:4a:cb: 0f:4b:72:ba:50:5e:94:bc:52:65:42:e0:75:f1:a4:0a:21:5c: 4d:b6:d4:50:e1:db:2a:11:45:a9:34:ef:1d:f2:c3:e2:03:47: 4c:d1:f4:f8:62:cf:ab:29:4e:6c:fa:3f:4f:4a:86:4a:fe:ac: 34:c1:d5:68:91:ed:c2:41:ee:5a:24:eb:2c:83:87:a4:ed:c7: 3a:95:44:e8:44:10:88:7f:66:fe:7f:7f:fd:92:1b:be:af:e8: f4:68:e6:d4:ce:db:ec:bf:ca:65:1a:8b:9c:63:40:64:86:33: 27:5c:cd:82:2d:17:9b:bf:1d:03:2d:ce:7b:ee:f3:0a:c4:b0: 88:7a:7a:69:2f:28:5d:1f:2d:67:01:e1:3d:f3:58:1f:70:31: e3:85:fb:e7:29:58:65:55:e6:18:61:43:0d:33:23:23:2d:6f: f9:58:0a:00:36:12:90:6a:eb:b1:e0:a0:14:a8:fc:6b:44:ee: d9:64:28:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+T6jHjZRRGFlxqAmMOF7UluhZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjA5MTAyMjQ5NTFaFw0yNjA5MTIwMjEyNTFaMDMxMTAvBgNV BAMTKDM4NkQzMkFGREU4QkFEMUJDMzEwODExOUM3MUIxNDY1OEFDRUQ1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9y5O1HZUoaLcTvclWtEx1IVOA 0K6rdcsb22RxaYMg7YqIU0XfNy1puzBMGjDlJHMcc6e2lmPoZi5IvYYuIAoTBtVw rtyUFnxXttzDhNKnZWngBpADtbSSJkbx9HH4gskTgxqz64gln9218hGgiH6wqYBF a8XfssHMAcztY0XzCLWNqXTQDuXiLEcPd4vC0C97VigUxN6MQhiOin+nrz8TsPd0 8zbjZErbf7X/4veBZSgx0z4kehjF00S/ETjtBBIzg1dRQMwlokZfzrk6AJeJp1SV FwinqJx0vr6/lcuZ7+LZ4k4TlSBoVDXvG4KC+H1MiqJnZT64nP6XAzNV7Qp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOG0yr96LrRvDEIEZxxsUZYrO1fUwHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAdCwYWP9CBVLRMPTE9C248NkNcyQJ98rzk meJjRIXMiPlKq95c+m2iwPvkhHnLhUwOWHEHcXIrujuhE1vDoZUfLCJUDVdKyw9L crpQXpS8UmVC4HXxpAohXE221FDh2yoRRak07x3yw+IDR0zR9Phiz6spTmz6P09K hkr+rDTB1WiR7cJB7lok6yyDh6TtxzqVROhEEIh/Zv5/f/2SG76v6PRo5tTO2+y/ ymUai5xjQGSGMydczYItF5u/HQMtznvu8wrEsIh6emkvKF0fLWcB4T3zWB9wMeOF ++cpWGVV5hhhQw0zIyMtb/lYCgA2EpBq67HgoBSo/GtE7tlkKMc= -----END CERTIFICATE-----Generated at Fri Sep 11 02:07:28 2026 by rpki-client