$ rpki-client -vvf rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft (raw, json) Hash identifier: g4AJFOXHAYnPR+7vv+CbZw+ReXLDVawxtknEApKtQGc= Subject key identifier: AC:76:50:72:B7:63:FC:00:0C:36:18:97:CB:1C:1F:9E:B4:DE:4B:09 Authority key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A Certificate issuer: /CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Certificate serial: 2FDD19301F5EC3C2499895219DFBE7AEBF4F7F00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 23:08:56 +0000 Manifest this update: Fri 19 Jun 2026 23:03:56 +0000 Manifest next update: Sun 21 Jun 2026 01:42:56 +0000 Files and hashes: 1: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K0hWr7nblRa/oP+EjsYT3ozmxs7zbRuzowY36KyLRjU=) 2: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl (hash: Dxgxh1jv2mftKzAW4Jqi8/ylmTM2UL8cUSvQNJQL0KM=) 3: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: NH4yUQHyXjk48GXKuIwjhyG7vZ+Cx25bwYRUGuZituk=) 4: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: HdNzGHLZKPYzFVkh/tdlOMNe0NE8KbyBRcBVr8tLORE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:dd:19:30:1f:5e:c3:c2:49:98:95:21:9d:fb:e7:ae:bf:4f:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A Validity Not Before: Jun 19 23:03:56 2026 GMT Not After : Jun 21 01:42:56 2026 GMT Subject: CN=AC765072B763FC000C361897CB1C1F9EB4DE4B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:91:63:2e:c8:ec:d8:11:2f:65:a0:5e:a4: ec:61:49:1c:dc:a3:21:c2:bc:a5:a5:cb:48:ed:6a: 75:c1:c9:eb:87:c5:30:0d:e7:9c:0e:7d:7e:09:21: e8:6d:9b:3a:92:fc:74:2e:54:49:02:43:b3:ee:37: e8:8e:18:0e:68:c5:01:be:30:ae:d0:21:7c:a9:19: e0:37:90:40:2d:56:e9:6f:d8:e9:cd:71:82:e6:6f: dc:4f:39:f6:ed:18:48:0c:42:a5:e8:80:bf:71:69: ff:c0:85:ab:01:5c:bf:06:bb:8f:b3:8e:70:e7:25: 4d:da:e1:44:f6:ff:b6:9e:28:ba:2c:7c:57:00:2c: 31:b9:56:4a:f6:a6:5c:e8:9a:d7:4d:69:51:82:a8: f1:ca:99:2f:08:1c:77:98:bf:03:63:2b:2c:e2:f2: 59:56:50:e7:cc:80:2a:59:ad:5b:d2:88:27:68:b4: 28:1f:51:ae:5e:7d:36:fc:ba:f7:aa:35:3c:97:40: 0f:e8:b8:84:f4:0b:d7:12:71:97:5c:41:66:81:64: c5:4d:38:0a:ef:17:37:b1:e6:31:dc:bd:91:9c:45: ef:4d:92:50:5d:e9:a2:e2:a5:17:6f:3b:c4:00:22: b6:ea:e5:86:98:2a:81:a5:d7:3e:0d:ce:95:b0:89: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:76:50:72:B7:63:FC:00:0C:36:18:97:CB:1C:1F:9E:B4:DE:4B:09 X509v3 Authority Key Identifier: keyid:AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:39:da:e7:0c:aa:ff:b4:b4:57:35:bc:44:7c:3d:56:b7:78: ea:9c:f3:2d:96:54:9e:bf:1a:48:24:2a:09:06:bf:e8:16:11: 14:97:0c:f7:d7:70:ab:9e:08:7a:04:4f:fa:6f:e3:f8:25:5c: aa:e7:9f:5a:62:28:dd:77:e7:07:f6:40:1a:bc:a4:5f:a9:19: a6:9b:b6:17:2f:99:85:16:df:e1:1a:5f:e1:3d:1f:85:24:5d: 5e:6f:d6:84:c3:fd:5c:6c:79:fb:3c:c6:c5:94:16:d8:f4:e1: a2:ba:42:c5:35:16:59:ea:b0:40:a5:97:d5:d2:85:96:b3:36: 2e:11:00:6d:57:9a:c8:4c:60:3f:26:bb:5d:83:f5:5b:73:53: 29:1b:df:c0:40:fc:27:49:64:a2:f1:af:6b:2d:fe:5a:cc:e9: 69:28:5c:0c:13:a8:88:51:7d:45:f2:33:21:4c:aa:18:0c:3b: 98:af:15:57:21:d5:ff:d1:f9:be:b7:8f:4c:a3:6f:ee:c3:bc: 55:e6:8d:0d:d1:58:7a:7d:cc:ba:2e:d8:1b:d4:33:4a:a7:76: 76:2c:5c:6a:73:3b:42:87:ab:49:22:a6:1b:eb:ad:09:a0:9f: 66:3f:0e:7f:be:e6:28:54:62:fb:c4:f2:51:79:c3:be:59:21: db:c6:03:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL90ZMB9ew8JJmJUhnfvnrr9PfwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1 MUE2RkUyQTAeFw0yNjA2MTkyMzAzNTZaFw0yNjA2MjEwMTQyNTZaMDMxMTAvBgNV BAMTKEFDNzY1MDcyQjc2M0ZDMDAwQzM2MTg5N0NCMUMxRjlFQjRERTRCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT95FjLsjs2BEvZaBepOxhSRzc oyHCvKWly0jtanXByeuHxTAN55wOfX4JIehtmzqS/HQuVEkCQ7PuN+iOGA5oxQG+ MK7QIXypGeA3kEAtVulv2OnNcYLmb9xPOfbtGEgMQqXogL9xaf/AhasBXL8Gu4+z jnDnJU3a4UT2/7aeKLosfFcALDG5Vkr2plzomtdNaVGCqPHKmS8IHHeYvwNjKyzi 8llWUOfMgCpZrVvSiCdotCgfUa5efTb8uveqNTyXQA/ouIT0C9cScZdcQWaBZMVN OArvFzex5jHcvZGcRe9NklBd6aLipRdvO8QAIrbq5YaYKoGl1z4NzpWwiSgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHZQcrdj/AAMNhiXyxwfnrTeSwkwHwYDVR0j BBgwFoAUrWsKLQaoV3HSovGvabKaU1Gm/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY1NTFhYjktODA0MS00YTlhLTliNTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQw NkE4NTc3MUQyQTJGMUFGNjlCMjlBNTM1MUE2RkUyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDZCMEEyRDA2QTg1NzcxRDJBMkYxQUY2OUIyOUE1MzUxQTZG RTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvQUQ2QjBBMkQwNkE4NTc3MUQyQTJGMUFGNjlCMjlB NTM1MUE2RkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK052ucMqv+0tFc1vER8PVa3eOqc8y2WVJ6/ GkgkKgkGv+gWERSXDPfXcKueCHoET/pv4/glXKrnn1piKN135wf2QBq8pF+pGaab thcvmYUW3+EaX+E9H4UkXV5v1oTD/Vxsefs8xsWUFtj04aK6QsU1FlnqsECll9XS hZazNi4RAG1XmshMYD8mu12D9VtzUykb38BA/CdJZKLxr2st/lrM6WkoXAwTqIhR fUXyMyFMqhgMO5ivFVch1f/R+b63j0yjb+7DvFXmjQ3RWHp9zLou2BvUM0qndnYs XGpzO0KHq0kiphvrrQmgn2Y/Dn++5ihUYvvE8lF5w75ZIdvGA2k= -----END CERTIFICATE-----Generated at Sat Jun 20 13:12:40 2026 by rpki-client