$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json) Hash identifier: 4d3XN/Yyg92sX9oQODnLw2Xb8DsoYKdFdPmgy4Wmpkg= Subject key identifier: F6:B1:AD:E7:47:AE:BA:76:66:74:D8:0E:E5:9A:48:F4:A3:7B:2A:03 Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Certificate serial: 5CC78BD3B10C0C2BB154CCE711A6111990AF8A9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft Manifest number: BA Signing time: Thu 17 Sep 2026 01:04:57 +0000 Manifest this update: Thu 17 Sep 2026 00:59:57 +0000 Manifest next update: Fri 18 Sep 2026 02:04:57 +0000 Files and hashes: 1: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: JknZR1Kz5pgj4FQ1nMljvOnlKAcuvX+I84pjmcXKW9s=) 2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=) 3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c7:8b:d3:b1:0c:0c:2b:b1:54:cc:e7:11:a6:11:19:90:af:8a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Validity Not Before: Sep 17 00:59:57 2026 GMT Not After : Sep 18 02:04:57 2026 GMT Subject: CN=F6B1ADE747AEBA766674D80EE59A48F4A37B2A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:37:dd:b2:0e:ac:ac:a0:c6:df:10:67:b2:31: 45:2a:55:75:b8:63:13:c2:87:2e:c2:56:76:7f:9b: 3b:4c:ee:16:03:11:28:69:89:08:1b:91:af:18:f9: fc:fb:b4:5a:c4:5e:fe:7f:1a:5c:7c:63:b9:f8:76: a4:39:20:0c:6e:46:df:c0:c8:07:04:0b:ef:7a:63: dd:32:17:86:96:73:c8:53:7a:7d:19:7a:87:b0:96: d8:e3:a3:43:71:bc:54:ba:96:4a:0c:8d:bf:37:78: 2c:f1:3f:36:fd:35:27:90:e5:c8:df:60:0a:3b:47: 17:2a:a8:ef:4a:06:d2:05:ec:41:54:d8:32:ba:47: bc:18:5d:68:21:55:ec:08:6f:6e:ea:82:c1:ab:aa: c4:c3:01:fe:70:53:32:5b:00:48:c1:7c:5b:98:ea: cc:db:fb:b9:28:6a:9e:61:f1:ec:ca:d7:92:02:40: 20:b8:61:63:c1:cb:74:ea:ae:d7:85:05:e3:a4:d5: bf:97:de:5e:e3:7a:d9:c9:82:c7:41:c4:f1:04:08: b4:70:c3:d4:bb:f0:23:48:f2:a5:69:2b:56:03:3c: 7c:dc:1a:db:9e:b1:59:fc:f5:8a:46:ce:ca:29:c9: f1:d9:5b:93:46:47:96:63:aa:0c:37:fb:c4:98:2d: bf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B1:AD:E7:47:AE:BA:76:66:74:D8:0E:E5:9A:48:F4:A3:7B:2A:03 X509v3 Authority Key Identifier: keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:60:e3:87:53:c6:ef:e2:fb:35:9f:91:8a:6b:50:71:21:46: 3a:5b:a7:42:65:a8:74:c9:e6:9a:0b:51:53:7f:b6:16:cf:8d: 90:ff:83:5c:fc:78:cd:77:1b:f6:7f:83:b8:5b:53:ed:36:28: 08:27:f8:0b:54:a6:58:d3:d5:17:89:27:98:c8:44:f4:d7:c1: 0d:50:09:8f:53:cd:ae:c1:0f:98:4b:20:1b:fe:90:0a:51:0b: 95:56:d4:d6:1a:a3:e8:34:2b:1b:64:53:66:ae:34:e7:e4:fa: 27:f6:ba:4c:44:cb:c3:e1:dd:46:31:12:e4:c6:16:1b:b2:26: 9a:59:70:2d:a0:25:4b:05:f5:7e:bf:16:11:d8:ac:1e:f1:ef: 62:52:84:61:7b:81:f8:c4:20:e1:5a:bf:c6:6f:2c:6b:8c:78: f4:2d:2b:30:e3:9d:9f:b1:21:68:cd:67:36:7d:13:67:c7:09: c4:13:d8:6f:40:ed:9c:e9:23:4a:e7:35:d4:e3:0e:3e:66:2e: 45:47:95:65:f5:88:22:26:ff:32:85:59:43:70:66:1b:8e:4a: 04:51:f9:4d:3a:c2:a4:8d:b4:74:61:78:c0:28:15:c4:d9:a3: e7:0e:ba:ca:d8:77:aa:b9:08:00:11:59:4d:17:45:bc:be:85: d4:c7:cf:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMeL07EMDCuxVMznEaYRGZCvip8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5 QkMyRjIxRjAeFw0yNjA5MTcwMDU5NTdaFw0yNjA5MTgwMjA0NTdaMDMxMTAvBgNV BAMTKEY2QjFBREU3NDdBRUJBNzY2Njc0RDgwRUU1OUE0OEY0QTM3QjJBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsN92yDqysoMbfEGeyMUUqVXW4 YxPChy7CVnZ/mztM7hYDEShpiQgbka8Y+fz7tFrEXv5/Glx8Y7n4dqQ5IAxuRt/A yAcEC+96Y90yF4aWc8hTen0Zeoewltjjo0NxvFS6lkoMjb83eCzxPzb9NSeQ5cjf YAo7RxcqqO9KBtIF7EFU2DK6R7wYXWghVewIb27qgsGrqsTDAf5wUzJbAEjBfFuY 6szb+7koap5h8ezK15ICQCC4YWPBy3TqrteFBeOk1b+X3l7jetnJgsdBxPEECLRw w9S78CNI8qVpK1YDPHzcGtuesVn89YpGzsopyfHZW5NGR5Zjqgw3+8SYLb8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9rGt50euunZmdNgO5ZpI9KN7KgMwHwYDVR0j BBgwFoAUrRnSJkiQA/CStp1X8q7khJvC8h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNiMTc4NTctYmUzZC00MTMyLThmMTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0 ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5QkMyRjIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRDE5RDIyNjQ4OTAwM0YwOTJCNjlENTdGMkFFRTQ4NDlCQzJG MjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0 ODQ5QkMyRjIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFg44dTxu/i+zWfkYprUHEhRjpbp0JlqHTJ 5poLUVN/thbPjZD/g1z8eM13G/Z/g7hbU+02KAgn+AtUpljT1ReJJ5jIRPTXwQ1Q CY9Tza7BD5hLIBv+kApRC5VW1NYao+g0KxtkU2auNOfk+if2ukxEy8Ph3UYxEuTG FhuyJppZcC2gJUsF9X6/FhHYrB7x72JShGF7gfjEIOFav8ZvLGuMePQtKzDjnZ+x IWjNZzZ9E2fHCcQT2G9A7ZzpI0rnNdTjDj5mLkVHlWX1iCIm/zKFWUNwZhuOSgRR +U06wqSNtHRheMAoFcTZo+cOusrYd6q5CAARWU0XRby+hdTHz8g= -----END CERTIFICATE-----Generated at Thu Sep 17 10:56:52 2026 by rpki-client