$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft File: AD238D07A804B8783FEA2C95818033D3F37F9B13.mft (raw, json) Hash identifier: gPOC9hr6nZgoriEi6fKkArginfd+ZtyA2ChSFVPVGiY= Subject key identifier: B1:E8:92:1B:93:FD:4B:C7:B0:92:49:81:4A:45:CA:38:3B:B7:51:2B Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 Certificate issuer: /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Certificate serial: 714196142A6394006C97390DDA73BF57F6294066 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft Manifest number: 73 Signing time: Mon 27 Jul 2026 07:11:59 +0000 Manifest this update: Mon 27 Jul 2026 07:06:59 +0000 Manifest next update: Tue 28 Jul 2026 10:52:59 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=) 2: AD238D07A804B8783FEA2C95818033D3F37F9B13.crl (hash: 1F7H2IEyJ5cGk1Pqfk5+18OiV8i/phyqpO/p6BY/kLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:41:96:14:2a:63:94:00:6c:97:39:0d:da:73:bf:57:f6:29:40:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Validity Not Before: Jul 27 07:06:59 2026 GMT Not After : Jul 28 10:52:59 2026 GMT Subject: CN=B1E8921B93FD4BC7B09249814A45CA383BB7512B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:5e:29:54:1d:59:ab:08:21:0e:a6:22:6d: 3e:fa:c2:5b:6e:cf:1e:03:51:e8:2f:57:f4:1c:73: 60:ad:79:d5:ea:33:47:bb:48:a0:21:d0:80:fc:0d: 88:cb:7c:99:5c:02:e0:19:bf:83:eb:95:6d:83:8e: 25:c7:76:20:48:4a:83:ba:f3:01:13:ad:c4:3b:fd: b9:b9:f4:8c:eb:a7:24:dc:86:db:51:16:7a:5c:0b: ff:2a:ce:e7:b6:9c:35:5f:0b:96:ee:9a:69:13:b1: 8f:db:fe:7b:2c:b6:2f:cd:77:4a:99:1b:68:eb:2a: 14:5e:6f:df:f2:b9:bb:99:56:98:b6:64:16:58:03: c9:38:dd:7b:0e:f6:65:20:e8:e6:5e:7f:50:3d:cc: ee:ed:9d:2a:fa:e8:76:7b:80:43:d8:f7:46:8b:09: c8:f5:40:19:b9:ee:ab:70:fd:99:aa:87:55:ab:9f: 04:41:03:c4:7c:c5:65:9d:e5:5d:c2:8f:4d:2c:9b: ba:84:07:6d:65:94:6c:91:99:e2:5a:6d:1e:c5:a1: 04:7b:24:1e:f9:c6:58:5d:0c:de:8a:c6:48:d0:24: 03:29:dc:0c:21:9d:a0:82:f5:6c:4a:56:9b:89:e3: e4:e6:97:11:72:f8:e0:5a:3c:6f:d9:e5:50:73:36: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E8:92:1B:93:FD:4B:C7:B0:92:49:81:4A:45:CA:38:3B:B7:51:2B X509v3 Authority Key Identifier: keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ff:d3:9c:17:c2:5c:cb:9f:b4:21:e9:71:5a:a6:01:cc:56: 29:a5:01:76:d7:b6:4f:9e:30:62:b7:ea:cd:c9:c3:15:b1:e5: 6c:2e:8e:93:c0:11:4c:9b:36:07:fc:f7:a4:f0:84:80:7a:9f: 35:0e:66:02:ca:11:22:36:74:7a:0a:ca:51:e1:0d:53:8e:70: 9e:3d:ea:b8:4a:6b:39:58:a9:85:2b:11:fb:64:c8:03:63:b3: 9b:7b:7f:5e:b7:e2:79:cc:bb:27:28:45:39:19:75:de:1e:a1: fb:ce:4c:2e:5d:1e:ee:5d:12:7e:b3:f3:ad:cd:35:b6:b6:45: 6d:06:9a:eb:5e:64:34:e6:6c:21:9e:fc:70:05:11:c2:94:ce: 7e:e9:de:6f:a3:ba:03:98:75:50:96:63:66:9e:59:8b:8e:04: 9f:b5:2d:0c:e7:52:08:29:f3:5d:a3:79:d2:81:f2:fb:83:7c: 9f:84:69:a6:93:06:9e:64:bd:66:e5:68:b3:19:49:c1:05:fd: 2b:35:a4:8c:da:4c:1e:63:66:5b:2e:8e:bb:8c:0b:8f:8d:56: c6:f9:4b:a4:e0:0f:8d:63:16:fc:f0:79:dc:87:dd:31:fb:06: 50:31:78:55:d4:d6:a0:19:2e:b5:42:1e:80:5f:35:b7:d0:df: b6:dd:3f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUGWFCpjlABslzkN2nO/V/YpQGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNG MzdGOUIxMzAeFw0yNjA3MjcwNzA2NTlaFw0yNjA3MjgxMDUyNTlaMDMxMTAvBgNV BAMTKEIxRTg5MjFCOTNGRDRCQzdCMDkyNDk4MTRBNDVDQTM4M0JCNzUxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZV4pVB1ZqwghDqYibT76wltu zx4DUegvV/Qcc2CtedXqM0e7SKAh0ID8DYjLfJlcAuAZv4PrlW2DjiXHdiBISoO6 8wETrcQ7/bm59IzrpyTchttRFnpcC/8qzue2nDVfC5bummkTsY/b/nssti/Nd0qZ G2jrKhReb9/yubuZVpi2ZBZYA8k43XsO9mUg6OZef1A9zO7tnSr66HZ7gEPY90aL Ccj1QBm57qtw/Zmqh1WrnwRBA8R8xWWd5V3Cj00sm7qEB21llGyRmeJabR7FoQR7 JB75xlhdDN6KxkjQJAMp3AwhnaCC9WxKVpuJ4+TmlxFy+OBaPG/Z5VBzNpsnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseiSG5P9S8ewkkmBSkXKODu3USswHwYDVR0j BBgwFoAUrSONB6gEuHg/6iyVgYAz0/N/mxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU0NWM5ZWItM2JiNi00MjAzLThjODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdB ODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNGMzdGOUIxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDIzOEQwN0E4MDRCODc4M0ZFQTJDOTU4MTgwMzNEM0YzN0Y5 QjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMz RDNGMzdGOUIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGP/05wXwlzLn7Qh6XFapgHMVimlAXbXtk+e MGK36s3JwxWx5WwujpPAEUybNgf896TwhIB6nzUOZgLKESI2dHoKylHhDVOOcJ49 6rhKazlYqYUrEftkyANjs5t7f1634nnMuycoRTkZdd4eofvOTC5dHu5dEn6z863N Nba2RW0GmuteZDTmbCGe/HAFEcKUzn7p3m+jugOYdVCWY2aeWYuOBJ+1LQznUggp 812jedKB8vuDfJ+EaaaTBp5kvWblaLMZScEF/Ss1pIzaTB5jZlsujruMC4+NVsb5 S6TgD41jFvzwedyH3TH7BlAxeFXU1qAZLrVCHoBfNbfQ37bdPyU= -----END CERTIFICATE-----Generated at Mon Jul 27 14:32:43 2026 by rpki-client