$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft File: AD238D07A804B8783FEA2C95818033D3F37F9B13.mft (raw, json) Hash identifier: uBsKvPaV8Iv0ov/XVin5+2rZZbOzru/BwRH0Xd0kWvc= Subject key identifier: 5A:C2:81:25:B1:77:20:72:2F:02:57:4E:5E:B9:B6:B2:5A:52:A8:85 Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 Certificate issuer: /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Certificate serial: 6B98453BF3EC0A7311B041CAA2B6061D78EED7E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft Manifest number: AF Signing time: Thu 10 Sep 2026 23:30:29 +0000 Manifest this update: Thu 10 Sep 2026 23:25:29 +0000 Manifest next update: Sat 12 Sep 2026 02:11:29 +0000 Files and hashes: 1: AD238D07A804B8783FEA2C95818033D3F37F9B13.crl (hash: Sk75PIuNQQmzkizBlLVtYMYKuFT0Bs/OxerHoozL9q8=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:98:45:3b:f3:ec:0a:73:11:b0:41:ca:a2:b6:06:1d:78:ee:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13 Validity Not Before: Sep 10 23:25:29 2026 GMT Not After : Sep 12 02:11:29 2026 GMT Subject: CN=5AC28125B17720722F02574E5EB9B6B25A52A885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:b5:32:cb:d1:01:58:09:e6:95:0a:2d:45: 0e:04:bd:1e:33:16:8d:9c:dd:c7:f8:6c:10:6a:77: 46:a7:dd:63:c9:43:5e:87:3b:e3:22:28:e0:ca:ec: c5:ad:b4:24:71:a0:60:0d:3f:ac:e0:51:8f:4f:4d: 68:79:97:93:35:fa:16:4a:2b:43:5a:52:84:ce:b3: ee:5f:50:5c:24:40:95:95:38:4c:af:e3:d3:d2:f8: 10:0a:f2:56:10:76:7f:92:76:46:4c:d8:22:62:7d: 9e:6c:1a:95:ab:42:0d:db:a0:4b:bc:c6:26:78:d1: d0:10:a0:2e:4f:20:ff:a2:e5:26:ac:0d:a0:c7:6e: 81:ce:4e:9e:9c:3c:2e:14:c2:a3:6e:b5:bf:93:0b: 35:46:ec:d2:79:34:77:59:90:43:09:d6:79:1e:68: 2e:9f:11:0d:d9:59:3f:c2:1f:96:54:9e:83:63:06: 82:9e:f4:4b:0b:f1:f6:0a:53:01:a6:ea:56:d2:51: 31:f2:e3:7a:68:3c:4f:4f:9a:59:42:00:ec:7f:10: 9d:49:58:63:22:16:ab:10:22:42:b0:6a:4b:1e:d7: 59:93:ad:6d:3e:e8:ca:29:f4:1f:c9:94:a6:d4:78: e3:94:0a:2b:b7:2c:bb:f3:b7:94:55:6e:bd:79:77: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C2:81:25:B1:77:20:72:2F:02:57:4E:5E:B9:B6:B2:5A:52:A8:85 X509v3 Authority Key Identifier: keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ea:28:ca:89:90:e6:34:fe:9e:ec:f9:67:5d:8a:db:1e:33: 65:9a:e9:20:53:dd:f8:68:d9:33:48:7f:35:09:5c:2b:86:72: 5a:82:b6:ac:a6:ef:4d:9a:86:3e:25:17:e8:b7:c9:63:ba:38: 73:4b:46:64:e8:3c:c1:b6:e4:3e:1a:76:b6:e9:e8:b0:1d:8b: 2d:21:e7:bf:a6:7a:97:bd:32:4d:3a:ce:d2:dc:eb:08:2e:47: 38:8d:bc:5a:22:6b:7a:c1:d0:02:f6:b7:58:4f:65:e9:99:d8: e4:ca:10:d5:d0:b6:5a:c3:5e:c8:63:81:6f:4e:55:5a:4e:f9: 62:0e:67:00:1c:16:79:52:a3:4c:2d:2c:d6:82:3e:60:88:71: 26:5c:2f:21:77:80:d2:80:80:2b:32:c3:f0:6d:94:59:a9:7f: dc:79:f3:71:5b:3c:2a:b5:5d:78:42:91:a9:90:78:1b:c8:27: 7e:f0:38:c5:bb:b6:68:73:53:10:c3:5f:17:f2:4b:5a:b6:ce: 4a:cc:5a:d5:66:5a:11:e8:5a:05:36:79:2e:98:a8:e5:f1:cb: 5c:32:ed:9e:90:f9:1e:f4:29:3b:4a:81:d5:d8:1f:7f:4a:90: 0c:b7:ac:5d:56:43:18:ff:0c:a2:21:23:1b:f3:d8:7e:95:a3: 9d:06:74:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5hFO/PsCnMRsEHKorYGHXju1+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNG MzdGOUIxMzAeFw0yNjA5MTAyMzI1MjlaFw0yNjA5MTIwMjExMjlaMDMxMTAvBgNV BAMTKDVBQzI4MTI1QjE3NzIwNzIyRjAyNTc0RTVFQjlCNkIyNUE1MkE4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNf7Uyy9EBWAnmlQotRQ4EvR4z Fo2c3cf4bBBqd0an3WPJQ16HO+MiKODK7MWttCRxoGANP6zgUY9PTWh5l5M1+hZK K0NaUoTOs+5fUFwkQJWVOEyv49PS+BAK8lYQdn+SdkZM2CJifZ5sGpWrQg3boEu8 xiZ40dAQoC5PIP+i5SasDaDHboHOTp6cPC4UwqNutb+TCzVG7NJ5NHdZkEMJ1nke aC6fEQ3ZWT/CH5ZUnoNjBoKe9EsL8fYKUwGm6lbSUTHy43poPE9PmllCAOx/EJ1J WGMiFqsQIkKwakse11mTrW0+6Mop9B/JlKbUeOOUCiu3LLvzt5RVbr15d/WDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWsKBJbF3IHIvAldOXrm2slpSqIUwHwYDVR0j BBgwFoAUrSONB6gEuHg/6iyVgYAz0/N/mxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU0NWM5ZWItM2JiNi00MjAzLThjODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdB ODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNGMzdGOUIxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDIzOEQwN0E4MDRCODc4M0ZFQTJDOTU4MTgwMzNEM0YzN0Y5 QjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMz RDNGMzdGOUIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3qKMqJkOY0/p7s+WdditseM2Wa6SBT3fho 2TNIfzUJXCuGclqCtqym702ahj4lF+i3yWO6OHNLRmToPMG25D4adrbp6LAdiy0h 57+mepe9Mk06ztLc6wguRziNvFoia3rB0AL2t1hPZemZ2OTKENXQtlrDXshjgW9O VVpO+WIOZwAcFnlSo0wtLNaCPmCIcSZcLyF3gNKAgCsyw/BtlFmpf9x583FbPCq1 XXhCkamQeBvIJ37wOMW7tmhzUxDDXxfyS1q2zkrMWtVmWhHoWgU2eS6YqOXxy1wy 7Z6Q+R70KTtKgdXYH39KkAy3rF1WQxj/DKIhIxvz2H6Vo50GdJ4= -----END CERTIFICATE-----Generated at Fri Sep 11 09:05:58 2026 by rpki-client