$ rpki-client -vvf rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft (raw, json) Hash identifier: u6VOsc4yIyPiE+vPPHO6BWXOs2UCeh2IH6LV/Ta4tyI= Subject key identifier: F5:4B:51:51:2C:D1:27:38:99:EC:AA:1B:55:D3:55:F4:65:11:24:D9 Authority key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A Certificate issuer: /CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Certificate serial: 319767E3C32E99FBB16345347B990AF7B49C6934 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:24:49 +0000 Manifest this update: Tue 05 May 2026 08:19:49 +0000 Manifest next update: Wed 06 May 2026 12:15:49 +0000 Files and hashes: 1: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: NH4yUQHyXjk48GXKuIwjhyG7vZ+Cx25bwYRUGuZituk=) 2: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: HdNzGHLZKPYzFVkh/tdlOMNe0NE8KbyBRcBVr8tLORE=) 3: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl (hash: 0dNnlzJ9C3hPkh5LGvIenhB7hVOB6zEF0J7pMKC3aWM=) 4: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K0hWr7nblRa/oP+EjsYT3ozmxs7zbRuzowY36KyLRjU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 12:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:97:67:e3:c3:2e:99:fb:b1:63:45:34:7b:99:0a:f7:b4:9c:69:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Validity Not Before: May 5 08:19:49 2026 GMT Not After : May 6 12:15:49 2026 GMT Subject: CN=F54B51512CD1273899ECAA1B55D355F4651124D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:7a:25:17:49:40:26:68:23:d9:d0:83:98: 14:b2:66:2a:37:c9:e7:12:6d:4a:bc:86:02:e5:8a: 0d:d9:ec:1a:50:91:93:c4:8f:60:da:b9:98:b9:7e: 10:d6:97:c9:b1:8f:8d:86:f0:f4:59:a0:fd:7f:c5: 13:da:2c:9a:ae:34:e3:2b:93:f4:60:d5:6c:fb:45: 56:a1:d3:4a:6e:80:17:0f:4c:5b:22:1e:19:46:fe: c0:15:ee:89:23:bf:9c:73:34:c3:ce:24:22:2e:89: 8d:08:74:46:a4:cb:d8:68:b1:3d:c2:f7:09:d8:62: 8c:1c:6f:44:00:de:47:9c:9a:89:2f:7b:84:74:ea: 12:ed:32:83:1d:5b:59:bf:ff:92:56:2d:4a:0c:26: d4:ef:91:75:90:b1:c8:8d:fe:c3:a4:0f:96:8b:a6: d8:89:84:b3:3f:1b:8b:7d:54:9f:95:38:6f:77:6c: 80:54:bf:b8:3d:42:9f:29:8a:06:e7:4e:83:a8:09: 40:f4:e2:7d:5d:c4:c3:77:75:a1:a8:ce:e7:87:9e: 51:15:52:81:8a:3c:ce:48:52:fd:64:bc:cf:b3:4e: 46:e6:ca:43:c6:a8:84:c4:68:d1:25:e7:56:69:ed: d9:41:34:06:b2:6b:11:a8:90:5b:7c:b8:2e:a8:d0: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4B:51:51:2C:D1:27:38:99:EC:AA:1B:55:D3:55:F4:65:11:24:D9 X509v3 Authority Key Identifier: keyid:AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b8:50:63:48:74:66:3e:c5:48:09:e7:07:3d:e3:5a:c6:6c: 63:0e:f3:f3:e3:76:26:b6:22:74:cc:1b:57:38:3e:7a:72:c4: c2:43:0b:1d:d9:44:fd:89:64:a5:03:44:af:39:76:fc:4e:d6: 2e:54:36:03:cb:20:b4:7b:8f:ad:74:43:ca:d6:e4:de:a1:97: ca:31:d2:09:8b:42:1e:52:87:89:e4:bd:4b:47:24:14:5c:a2: fc:83:86:a7:49:e4:35:02:c7:3a:5e:e8:8e:08:3e:1e:73:a2: a2:47:cc:e6:d4:ba:ec:fd:9a:95:df:f1:25:da:c7:a5:0c:68: 92:09:46:2f:41:ed:d9:d6:e5:d7:80:d1:57:af:ca:b1:be:a8: ff:1a:e3:e3:86:91:e6:c4:7d:e5:7a:a3:8c:d2:f2:32:17:e4: 5d:83:10:7c:a7:e4:da:1a:19:1f:74:ac:44:0a:d4:3a:55:72: 12:38:75:a8:a0:dc:bd:b4:47:b5:2b:7d:38:69:3b:0d:ae:db: 72:90:e8:26:00:4a:77:c3:d7:df:56:5e:da:a1:31:66:91:64: 74:47:af:b3:7f:a6:18:87:95:9e:67:8f:29:98:8a:6c:fc:a8: b7:7a:78:17:ae:e3:87:b9:fa:44:b9:b9:d9:2e:1b:d7:ed:0b: ee:c0:1c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZdn48MumfuxY0U0e5kK97ScaTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1 MUE2RkUyQTAeFw0yNjA1MDUwODE5NDlaFw0yNjA1MDYxMjE1NDlaMDMxMTAvBgNV BAMTKEY1NEI1MTUxMkNEMTI3Mzg5OUVDQUExQjU1RDM1NUY0NjUxMTI0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZHolF0lAJmgj2dCDmBSyZio3 yecSbUq8hgLlig3Z7BpQkZPEj2DauZi5fhDWl8mxj42G8PRZoP1/xRPaLJquNOMr k/Rg1Wz7RVah00pugBcPTFsiHhlG/sAV7okjv5xzNMPOJCIuiY0IdEaky9hosT3C 9wnYYowcb0QA3kecmokve4R06hLtMoMdW1m//5JWLUoMJtTvkXWQsciN/sOkD5aL ptiJhLM/G4t9VJ+VOG93bIBUv7g9Qp8pigbnToOoCUD04n1dxMN3daGozueHnlEV UoGKPM5IUv1kvM+zTkbmykPGqITEaNEl51Zp7dlBNAayaxGokFt8uC6o0E6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9UtRUSzRJziZ7KobVdNV9GURJNkwHwYDVR0j BBgwFoAUrWsKLQaoV3HSovGvabKaU1Gm/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY1NTFhYjktODA0MS00YTlhLTliNTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQw NkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1MUE2RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDZCMEEyRDA2QTg1NzcxRDJBMkYxQUY2OUIyOUE1MzUxQTZG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlB NTM1MUE2RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJe4UGNIdGY+xUgJ5wc941rGbGMO8/Pjdia2 InTMG1c4PnpyxMJDCx3ZRP2JZKUDRK85dvxO1i5UNgPLILR7j610Q8rW5N6hl8ox 0gmLQh5Sh4nkvUtHJBRcovyDhqdJ5DUCxzpe6I4IPh5zoqJHzObUuuz9mpXf8SXa x6UMaJIJRi9B7dnW5deA0VevyrG+qP8a4+OGkebEfeV6o4zS8jIX5F2DEHyn5Noa GR90rEQK1DpVchI4daig3L20R7UrfThpOw2u23KQ6CYASnfD199WXtqhMWaRZHRH r7N/phiHlZ5njymYimz8qLd6eBeu44e5+kS5udkuG9ftC+7AHDQ= -----END CERTIFICATE-----Generated at Tue May 5 17:52:27 2026 by rpki-client