$ rpki-client -vvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft File: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json) Hash identifier: QpyuXkJYxCfuKrdA2MmJM6jmGYdtZWQj00gFtUX0rfA= Subject key identifier: 3D:1E:2D:3B:A5:A4:9D:A5:85:86:DC:6A:DD:CA:FB:13:92:F6:E7:F2 Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 Certificate issuer: /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Certificate serial: 7F9C17666F42824E172EF300219B181ACF7E60A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft Manifest number: 13 Signing time: Sat 16 May 2026 03:20:18 +0000 Manifest this update: Sat 16 May 2026 03:15:18 +0000 Manifest next update: Sun 17 May 2026 04:38:18 +0000 Files and hashes: 1: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=) 2: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=) 3: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=) 4: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=) 5: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: 24HEs/f2xbaTqjq5rT4YPZ8IPw4XGVtcVSVoX4qyIp0=) 6: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=) 7: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=) 8: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=) 9: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 04:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9c:17:66:6f:42:82:4e:17:2e:f3:00:21:9b:18:1a:cf:7e:60:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37 Validity Not Before: May 16 03:15:18 2026 GMT Not After : May 17 04:38:18 2026 GMT Subject: CN=3D1E2D3BA5A49DA58586DC6ADDCAFB1392F6E7F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:64:74:7a:14:74:81:65:de:83:e0:08:ab: 4e:dc:b7:b8:31:22:66:c7:98:ad:7a:60:c2:79:0c: 3f:db:d3:28:fe:3d:02:98:b2:5a:78:2d:73:01:3d: 8f:2f:3f:aa:38:1c:81:87:de:5c:5c:75:5b:ed:93: ed:c4:7d:b4:e0:dc:35:e3:da:a4:d7:1c:5d:ad:32: 44:f4:62:aa:f5:d2:e4:8b:50:30:c6:bd:c8:a5:f5: 10:37:97:ec:86:95:2f:11:4d:0e:73:0a:2c:0b:82: 43:13:31:22:df:32:c1:a3:fa:b9:f4:5b:ff:23:51: 59:67:86:59:db:bc:b1:e6:e5:de:f2:d4:da:45:5e: f2:bc:4e:70:a5:f8:2f:36:ef:6c:be:64:e1:c0:eb: be:54:3b:d1:20:6b:db:00:fd:4c:47:85:88:6d:77: b7:a4:01:8e:0b:9d:b3:26:cd:7e:03:21:3b:79:67: 24:58:63:c7:08:e4:a2:d8:37:20:12:1f:fd:b3:a2: b2:fb:25:a1:95:88:76:6f:a1:53:54:e8:ee:50:2f: ca:81:20:57:4d:2e:59:fa:5f:f3:71:07:6e:53:f5: 8e:02:8f:d0:70:d9:29:78:32:f5:ee:38:42:2f:d9: 75:fd:a7:da:29:cd:6f:91:22:f8:62:da:fb:1c:27: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1E:2D:3B:A5:A4:9D:A5:85:86:DC:6A:DD:CA:FB:13:92:F6:E7:F2 X509v3 Authority Key Identifier: keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:24:c4:c8:e3:54:e1:af:ab:65:29:fd:4c:89:2c:01:42:85: e6:14:56:85:7c:cd:a4:38:c7:9c:39:5a:ec:0d:d2:a0:d0:e6: f9:63:70:de:5c:29:78:12:3a:74:1f:12:d8:f5:01:c1:c8:cd: 5e:46:bd:0c:59:74:8c:e7:6b:61:91:89:78:39:7e:f6:d2:08: 5a:66:26:30:ab:f8:ab:8f:c9:f0:ea:35:ff:15:fc:33:1f:d2: bb:3b:d1:29:c7:3c:5f:74:5a:30:a9:da:3a:98:eb:a2:79:fe: 78:6e:82:4e:33:f7:62:e9:d2:fc:5d:05:fd:c4:71:7a:60:b6: 21:22:97:e4:55:5d:00:63:a1:dd:9d:fb:1c:cf:83:2d:ca:16: 84:ce:dd:d7:95:ec:b7:ed:2f:27:9a:67:95:c5:9e:b6:9b:ba: 03:96:be:fe:be:11:c4:b0:8d:47:87:dd:a3:f4:d3:a1:ef:34: 30:52:cf:a6:21:d2:c3:62:4f:6e:7c:98:a1:19:4a:cc:b1:4c: 8b:49:59:ff:da:67:75:33:41:53:58:55:40:bd:75:5d:43:87: 1d:d2:79:ce:a1:ab:a8:3c:b2:6a:1e:94:fb:26:f0:47:8b:cc: 14:83:ab:61:18:83:1a:89:5a:b7:b1:48:fa:c4:29:78:5e:55: 49:8e:6e:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5wXZm9Cgk4XLvMAIZsYGs9+YKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE OUZEN0YzNzAeFw0yNjA1MTYwMzE1MThaFw0yNjA1MTcwNDM4MThaMDMxMTAvBgNV BAMTKDNEMUUyRDNCQTVBNDlEQTU4NTg2REM2QUREQ0FGQjEzOTJGNkU3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJHWR0ehR0gWXeg+AIq07ct7gx ImbHmK16YMJ5DD/b0yj+PQKYslp4LXMBPY8vP6o4HIGH3lxcdVvtk+3EfbTg3DXj 2qTXHF2tMkT0Yqr10uSLUDDGvcil9RA3l+yGlS8RTQ5zCiwLgkMTMSLfMsGj+rn0 W/8jUVlnhlnbvLHm5d7y1NpFXvK8TnCl+C8272y+ZOHA675UO9Ega9sA/UxHhYht d7ekAY4LnbMmzX4DITt5ZyRYY8cI5KLYNyASH/2zorL7JaGViHZvoVNU6O5QL8qB IFdNLln6X/NxB25T9Y4Cj9Bw2Sl4MvXuOEIv2XX9p9opzW+RIvhi2vscJ3VvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPR4tO6WknaWFhtxq3cr7E5L25/IwHwYDVR0j BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0 REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3 RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0 RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0kxMjjVOGvq2Up/UyJLAFCheYUVoV8zaQ4 x5w5WuwN0qDQ5vljcN5cKXgSOnQfEtj1AcHIzV5GvQxZdIzna2GRiXg5fvbSCFpm JjCr+KuPyfDqNf8V/DMf0rs70SnHPF90WjCp2jqY66J5/nhugk4z92Lp0vxdBf3E cXpgtiEil+RVXQBjod2d+xzPgy3KFoTO3deV7LftLyeaZ5XFnrabugOWvv6+EcSw jUeH3aP006HvNDBSz6Yh0sNiT258mKEZSsyxTItJWf/aZ3UzQVNYVUC9dV1Dhx3S ec6hq6g8smoelPsm8EeLzBSDq2EYgxqJWrexSPrEKXheVUmObh8= -----END CERTIFICATE-----Generated at Sat May 16 13:22:57 2026 by rpki-client