$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft File: AD238D07A804B8783FEA2C95818033D3F37F9B13.mft (raw, json) Hash identifier: Qrh8u3b84EdvQ5hrnQ6IQWTEmEsgLSESdYSMJYi0wxk= Subject key identifier: EC:10:07:E6:20:27:C4:02:43:F9:22:3E:45:72:1D:A9:D1:FE:8B:51 Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 Certificate issuer: /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Certificate serial: 6655C213D98B7F88AAF61029363A9A35C1CB309E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft Manifest number: F0 Signing time: Thu 29 Oct 2026 06:23:14 +0000 Manifest this update: Thu 29 Oct 2026 06:18:14 +0000 Manifest next update: Fri 30 Oct 2026 07:15:14 +0000 Files and hashes: 1: AD238D07A804B8783FEA2C95818033D3F37F9B13.crl (hash: mcTJZAdKB0WZjdBgFMe9/XgZDKlFGK7ahg2BC8hifV8=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 07:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:55:c2:13:d9:8b:7f:88:aa:f6:10:29:36:3a:9a:35:c1:cb:30:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Validity Not Before: Oct 29 06:18:14 2026 GMT Not After : Oct 30 07:15:14 2026 GMT Subject: CN=EC1007E62027C40243F9223E45721DA9D1FE8B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:80:91:84:c0:02:bd:6b:46:60:94:1e:79: d9:22:d6:6a:94:43:8e:bd:eb:c9:68:2f:a9:f5:8c: 6e:ee:16:83:5a:ea:83:d0:57:42:cc:15:3c:b3:04: 31:20:76:e5:58:8e:ea:e2:c2:97:df:b3:25:dc:4b: aa:79:fb:6a:43:f9:e1:a4:fd:5e:6d:55:e6:ff:e8: f7:3e:4a:3b:d1:81:2a:92:36:bd:62:c8:de:4a:54: 06:81:b7:0d:45:14:56:b2:99:5e:a5:4d:19:eb:44: 44:6c:70:da:48:95:cf:72:51:83:89:f9:d2:ee:2d: 4a:1d:e4:31:04:3a:db:4d:2d:ab:71:1d:79:b2:0b: ba:8c:21:9b:7f:2c:70:a0:90:6a:02:9a:5a:1a:ed: 8f:9f:07:b9:d2:9b:99:98:ea:33:7a:29:10:7f:51: 64:98:91:6b:4f:7c:e0:42:37:cb:36:70:a3:1d:5c: e0:c1:fd:38:0e:8f:b0:34:8d:a5:49:4f:5a:d9:9b: 6c:4f:a8:a5:95:92:14:33:2d:09:6a:37:6e:ac:da: 74:53:63:2d:1d:1b:04:ef:1c:db:92:df:00:c6:a9: 09:12:76:d5:10:87:e0:bd:e0:e5:c0:7a:82:f1:31: a6:12:68:40:eb:25:ce:a7:ad:89:3a:04:f3:ed:f1: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:10:07:E6:20:27:C4:02:43:F9:22:3E:45:72:1D:A9:D1:FE:8B:51 X509v3 Authority Key Identifier: keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:54:22:3f:4f:7d:c6:1c:9b:1d:bc:57:3f:0d:72:ad:d5:50: 99:44:ef:76:4c:27:89:9c:b8:4a:f8:e2:f9:86:c3:39:b9:25: 43:f7:3d:d0:42:17:ef:4f:97:65:42:30:15:38:13:ab:40:51: 74:16:ac:9d:72:35:e1:d6:ba:70:f6:b1:74:ff:e4:1d:fc:3f: 09:35:8e:94:b1:a0:2a:a6:6b:49:b3:00:b8:2e:fd:f2:fc:78: 06:1d:47:81:1a:c6:3f:d0:a2:12:4f:11:77:ab:d2:0a:d9:8c: bb:71:3b:84:c8:2d:4e:7b:b1:93:43:60:81:6a:58:3b:f9:f0: f6:f0:2f:c4:55:af:69:c7:00:e4:01:63:09:44:93:e3:52:e4: d1:a1:32:98:43:8f:9d:1b:00:29:85:25:d6:b0:44:e4:24:6f: d3:5a:be:56:70:ff:86:c2:27:40:3c:92:15:a3:e9:23:00:c4: 4f:e4:75:a9:99:14:62:9b:6f:d9:8d:dd:28:ed:9e:72:ef:14: 67:36:2c:64:25:ce:34:41:e9:d8:34:fd:25:77:fb:18:b0:51: 54:b9:ce:cd:2e:b5:35:8f:20:32:84:a1:9e:95:ad:98:c5:64: 7c:dd:9a:f3:0f:69:be:6a:7f:1f:b4:1c:5f:11:82:b3:65:b4: ba:22:14:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZlXCE9mLf4iq9hApNjqaNcHLMJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNG MzdGOUIxMzAeFw0yNjEwMjkwNjE4MTRaFw0yNjEwMzAwNzE1MTRaMDMxMTAvBgNV BAMTKEVDMTAwN0U2MjAyN0M0MDI0M0Y5MjIzRTQ1NzIxREE5RDFGRThCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsoCRhMACvWtGYJQeedki1mqU Q46968loL6n1jG7uFoNa6oPQV0LMFTyzBDEgduVYjuriwpffsyXcS6p5+2pD+eGk /V5tVeb/6Pc+SjvRgSqSNr1iyN5KVAaBtw1FFFaymV6lTRnrRERscNpIlc9yUYOJ +dLuLUod5DEEOttNLatxHXmyC7qMIZt/LHCgkGoCmloa7Y+fB7nSm5mY6jN6KRB/ UWSYkWtPfOBCN8s2cKMdXODB/TgOj7A0jaVJT1rZm2xPqKWVkhQzLQlqN26s2nRT Yy0dGwTvHNuS3wDGqQkSdtUQh+C94OXAeoLxMaYSaEDrJc6nrYk6BPPt8VDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7BAH5iAnxAJD+SI+RXIdqdH+i1EwHwYDVR0j BBgwFoAUrSONB6gEuHg/6iyVgYAz0/N/mxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU0NWM5ZWItM2JiNi00MjAzLThjODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdB ODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNGMzdGOUIxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDIzOEQwN0E4MDRCODc4M0ZFQTJDOTU4MTgwMzNEM0YzN0Y5 QjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMz RDNGMzdGOUIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZUIj9PfcYcmx28Vz8Ncq3VUJlE73ZMJ4mc uEr44vmGwzm5JUP3PdBCF+9Pl2VCMBU4E6tAUXQWrJ1yNeHWunD2sXT/5B38Pwk1 jpSxoCqma0mzALgu/fL8eAYdR4Eaxj/QohJPEXer0grZjLtxO4TILU57sZNDYIFq WDv58PbwL8RVr2nHAOQBYwlEk+NS5NGhMphDj50bACmFJdawROQkb9NavlZw/4bC J0A8khWj6SMAxE/kdamZFGKbb9mN3SjtnnLvFGc2LGQlzjRB6dg0/SV3+xiwUVS5 zs0utTWPIDKEoZ6VrZjFZHzdmvMPab5qfx+0HF8RgrNltLoiFCk= -----END CERTIFICATE-----Generated at Thu Oct 29 13:49:04 2026 by rpki-client