$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft File: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft (raw, json) Hash identifier: Cwe79cW/z4bY4JGcO5g0Lo1fiuV8ZWHeMIR01rE6l7c= Subject key identifier: 1F:F3:B0:52:24:14:53:3C:36:D2:40:3D:0C:44:CA:F6:53:AB:1B:A0 Authority key identifier: AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 Certificate issuer: /CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Certificate serial: 276FB73FAC87422C3C34B2AD4B79BDEB7DE9EC8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft Manifest number: EC Signing time: Tue 27 Oct 2026 02:53:48 +0000 Manifest this update: Tue 27 Oct 2026 02:48:48 +0000 Manifest next update: Wed 28 Oct 2026 06:36:48 +0000 Files and hashes: 1: AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl (hash: CT+LazwgpHAcIN4XFaqwtBrDefPo9w9s99brr4lKnh8=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: g/BQ9sX5QyTEMIBUdWlXsaDGdhmUJSErLLcfniwPbsw=) 3: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: 9s/KWt2GLgE9Lqh9OeA0wRdz37jZuL1+VikwLN7K/9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 06:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6f:b7:3f:ac:87:42:2c:3c:34:b2:ad:4b:79:bd:eb:7d:e9:ec:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4 Validity Not Before: Oct 27 02:48:48 2026 GMT Not After : Oct 28 06:36:48 2026 GMT Subject: CN=1FF3B0522414533C36D2403D0C44CAF653AB1BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:ec:75:5a:fe:08:5c:7c:97:19:06:a0:b7: 95:b9:41:5a:5e:a3:d9:84:4b:3a:fa:95:d9:80:60: 89:95:3d:f5:5a:d8:48:c5:cb:5d:8d:08:18:1b:ce: 8a:42:88:aa:10:b8:f3:db:f0:40:d1:90:49:d3:e3: e4:5c:a9:7b:26:36:37:b5:9a:3e:51:e0:e2:bb:c2: 39:a1:1c:32:95:a9:45:5d:5e:04:7c:de:67:82:16: 45:ab:65:22:d4:3a:06:18:f9:b8:48:37:72:a8:b0: 25:0f:01:ef:87:81:35:9e:75:da:9c:26:f5:a7:0e: 2b:9c:80:8a:06:a1:08:cd:35:18:58:b7:19:e4:64: 43:65:32:90:ee:6d:2e:c7:a1:42:da:45:06:89:24: d1:6b:b5:9e:8c:c4:fd:8b:32:ff:4f:dd:dd:11:90: 94:70:cd:bc:00:4f:6e:92:c1:83:71:91:31:a2:ad: a9:4b:bc:02:86:2d:f3:42:54:df:0c:07:69:6d:73: 42:7c:6c:fb:36:1d:61:d6:97:ae:3e:4e:a1:cb:51: f4:fa:fa:41:69:30:2e:cb:41:f1:4e:b1:cd:86:31: e8:d9:71:ba:12:93:24:a3:a9:9e:db:b8:80:32:f8: 0e:93:be:a8:1b:55:db:14:ab:93:5b:de:96:2b:a0: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F3:B0:52:24:14:53:3C:36:D2:40:3D:0C:44:CA:F6:53:AB:1B:A0 X509v3 Authority Key Identifier: keyid:AD:1D:FC:E4:E7:F1:50:75:92:9F:F6:33:D4:A2:C3:1B:6F:96:E3:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/AD1DFCE4E7F15075929FF633D4A2C31B6F96E3C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f5:a1:8c:8b:fe:2f:1b:a2:e2:64:31:6a:3e:3e:24:11:2f:f1: bc:0e:1e:9a:17:2b:a5:64:0c:60:d8:67:eb:c0:ba:ba:df:91: 7f:92:3f:fe:2d:c7:40:fc:b1:b5:16:65:13:00:d6:c2:a0:d8: 42:24:6f:f8:a7:ed:0d:2e:bc:71:42:01:85:d2:29:e4:94:72: ac:8f:66:f1:cc:32:eb:9e:83:9d:a8:4e:57:e6:30:cb:04:61: 41:81:56:26:70:6c:f5:28:f2:51:45:a3:48:7d:36:d8:d6:fd: 26:75:8b:8e:e6:9f:1c:c5:2a:d2:cf:36:0a:37:c3:53:20:ae: 33:9e:8f:0d:1f:35:13:0c:5e:6a:67:94:5f:70:bc:a6:97:9f: 59:70:74:0f:e9:af:66:01:25:35:3e:10:31:b3:ae:ed:8c:4e: d9:16:53:d8:0f:f0:02:d7:63:70:16:04:61:89:4a:67:b1:e8: bc:5c:a8:20:1f:1d:5c:52:45:16:d9:14:40:5f:bf:9a:28:3e: 7d:0e:57:c8:89:14:cc:5d:f3:f0:af:09:be:63:cf:24:85:1a: d5:9a:57:6a:32:21:cd:fe:cf:4e:22:07:5a:8d:3f:da:19:fc: 01:3b:db:2e:11:e6:18:d7:dc:15:c5:4f:c7:64:e3:07:75:07: 74:3b:8b:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2+3P6yHQiw8NLKtS3m9633p7IowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2 Rjk2RTNDNDAeFw0yNjEwMjcwMjQ4NDhaFw0yNjEwMjgwNjM2NDhaMDMxMTAvBgNV BAMTKDFGRjNCMDUyMjQxNDUzM0MzNkQyNDAzRDBDNDRDQUY2NTNBQjFCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICOx1Wv4IXHyXGQagt5W5QVpe o9mESzr6ldmAYImVPfVa2EjFy12NCBgbzopCiKoQuPPb8EDRkEnT4+RcqXsmNje1 mj5R4OK7wjmhHDKVqUVdXgR83meCFkWrZSLUOgYY+bhIN3KosCUPAe+HgTWeddqc JvWnDiucgIoGoQjNNRhYtxnkZENlMpDubS7HoULaRQaJJNFrtZ6MxP2LMv9P3d0R kJRwzbwAT26SwYNxkTGiralLvAKGLfNCVN8MB2ltc0J8bPs2HWHWl64+TqHLUfT6 +kFpMC7LQfFOsc2GMejZcboSkySjqZ7buIAy+A6TvqgbVdsUq5Nb3pYroJ0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/OwUiQUUzw20kA9DETK9lOrG6AwHwYDVR0j BBgwFoAUrR385OfxUHWSn/Yz1KLDG2+W48QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IwYTExYjUtOTQ0MS00Y2M5LWE2NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRF N0YxNTA3NTkyOUZGNjMzRDRBMkMzMUI2Rjk2RTNDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDFERkNFNEU3RjE1MDc1OTI5RkY2MzNENEEyQzMxQjZGOTZF M0M0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvQUQxREZDRTRFN0YxNTA3NTkyOUZGNjMzRDRBMkMz MUI2Rjk2RTNDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPWhjIv+Lxui4mQxaj4+JBEv8bwOHpoXK6Vk DGDYZ+vAurrfkX+SP/4tx0D8sbUWZRMA1sKg2EIkb/in7Q0uvHFCAYXSKeSUcqyP ZvHMMuueg52oTlfmMMsEYUGBViZwbPUo8lFFo0h9NtjW/SZ1i47mnxzFKtLPNgo3 w1MgrjOejw0fNRMMXmpnlF9wvKaXn1lwdA/pr2YBJTU+EDGzru2MTtkWU9gP8ALX Y3AWBGGJSmex6LxcqCAfHVxSRRbZFEBfv5ooPn0OV8iJFMxd8/CvCb5jzySFGtWa V2oyIc3+z04iB1qNP9oZ/AE72y4R5hjX3BXFT8dk4wd1B3Q7i/s= -----END CERTIFICATE-----Generated at Tue Oct 27 12:44:47 2026 by rpki-client