$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft File: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft (raw, json) Hash identifier: RLAoa3nuj+ryVOexgqQ93XiJAQ0+5A8CSWyh0Kg8gzA= Subject key identifier: 91:15:D5:80:F1:FF:38:9A:93:25:D7:8D:B2:45:07:61:8F:4C:C2:28 Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 Certificate issuer: /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Certificate serial: 4CB6BFC91DB84612F86D1DEFD6563E32C8893261 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft Manifest number: E8 Signing time: Fri 23 Oct 2026 08:29:22 +0000 Manifest this update: Fri 23 Oct 2026 08:24:22 +0000 Manifest next update: Sat 24 Oct 2026 11:53:22 +0000 Files and hashes: 1: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: gyHsfmW6KN8Q0altXeM0ynZaoGDZjnrHl/TgsA39vQ8=) 2: AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl (hash: 5wuVlJVEvgTR94dwuDwmJrABc/FIkNQrrvJjpe/W2VM=) 3: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: ffbCXyninBGio9BOygv4p476TIGMpl53kSauEjC/roA=) 4: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: Jz250gHnK9wmceEyoEa7ZzH19MTY0j2TTvLScjld8Z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 11:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b6:bf:c9:1d:b8:46:12:f8:6d:1d:ef:d6:56:3e:32:c8:89:32:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1 Validity Not Before: Oct 23 08:24:22 2026 GMT Not After : Oct 24 11:53:22 2026 GMT Subject: CN=9115D580F1FF389A9325D78DB24507618F4CC228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:f7:e8:03:e7:df:84:05:95:ea:5f:47:55: d2:b7:4e:3c:ee:55:aa:9b:6c:41:16:d7:1e:39:b4: 53:13:98:af:be:85:51:25:f8:ae:b1:21:b1:f4:80: ae:c9:fc:02:78:d1:80:22:b7:2c:11:35:9f:a4:f1: 3e:89:26:c5:f1:13:fd:c6:43:26:17:d2:f6:42:57: d0:03:fb:ac:58:66:a4:6e:c9:61:24:41:98:2e:b6: ab:1e:4f:f6:95:e5:ec:4b:c6:75:45:2a:0c:21:58: 03:b3:a0:b0:fd:65:14:c7:35:24:55:b0:95:ba:21: 12:4c:7d:5d:f9:62:54:61:f9:a8:73:7e:7d:3d:d4: 57:68:02:3d:8b:74:41:a6:cf:01:10:c7:99:f8:e5: 29:04:e9:4f:55:35:a4:d7:52:4a:7b:b6:d6:c7:dd: e3:f3:30:d2:d3:8e:0a:1e:16:b4:7c:77:62:42:b0: d3:46:3d:c7:37:e9:ac:5f:2a:df:57:de:0d:28:b1: 9d:9f:90:6b:4f:1c:12:8b:da:07:d5:a3:b1:09:7f: 70:c1:d7:02:a6:2d:89:bd:b3:27:d9:da:fb:ae:7e: 22:16:58:4a:27:a8:91:ec:ef:3d:34:e3:0d:58:18: fc:1c:40:ab:dd:35:b6:8f:1d:fa:71:86:c6:dc:09: 7d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:15:D5:80:F1:FF:38:9A:93:25:D7:8D:B2:45:07:61:8F:4C:C2:28 X509v3 Authority Key Identifier: keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8d:c9:8f:de:c6:7c:90:1d:67:d3:d1:93:b4:80:a5:88:97: 98:dd:59:a7:50:a4:5d:aa:91:14:72:ce:97:7d:18:64:fe:63: aa:48:2b:18:ef:db:20:3d:1c:68:31:2f:ee:28:7a:40:80:03: d8:63:61:38:f1:b6:03:f5:3e:85:28:8b:d5:82:ba:d2:5d:a0: 6b:e0:d5:2e:08:e3:56:c4:ec:c3:3f:03:0c:e7:17:1e:60:29: fe:69:5c:da:d7:9d:0b:d8:1f:cf:e9:6f:3f:e8:78:d3:bd:5e: 8c:a4:6e:94:1b:b9:33:58:cc:41:7e:87:ee:09:4d:7f:fd:64: 60:67:d8:fc:35:37:ff:fb:80:37:9b:b6:dd:30:0b:f6:61:c0: fd:1f:52:84:bc:57:82:22:3d:a2:70:c0:53:83:a7:ff:af:04: 1a:ef:56:1c:9d:8a:cd:38:4a:11:92:2a:39:85:74:5d:90:9d: fc:1e:a0:6c:74:48:dd:b6:f7:30:3c:c8:09:f5:8b:8b:e9:22: b8:ff:fc:92:bb:5b:21:38:df:35:8b:1c:9a:12:38:fd:ef:61: 10:94:e5:4e:e5:49:1e:37:ba:9a:8d:74:08:88:62:b7:9d:ff: 3a:cd:82:74:b4:7d:a8:fa:ba:da:9d:9f:e2:44:53:8a:b1:f3: 13:68:8f:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLa/yR24RhL4bR3v1lY+MsiJMmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4 NzRFOTBFMTAeFw0yNjEwMjMwODI0MjJaFw0yNjEwMjQxMTUzMjJaMDMxMTAvBgNV BAMTKDkxMTVENTgwRjFGRjM4OUE5MzI1RDc4REIyNDUwNzYxOEY0Q0MyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPvfoA+ffhAWV6l9HVdK3Tjzu VaqbbEEW1x45tFMTmK++hVEl+K6xIbH0gK7J/AJ40YAitywRNZ+k8T6JJsXxE/3G QyYX0vZCV9AD+6xYZqRuyWEkQZgutqseT/aV5exLxnVFKgwhWAOzoLD9ZRTHNSRV sJW6IRJMfV35YlRh+ahzfn091FdoAj2LdEGmzwEQx5n45SkE6U9VNaTXUkp7ttbH 3ePzMNLTjgoeFrR8d2JCsNNGPcc36axfKt9X3g0osZ2fkGtPHBKL2gfVo7EJf3DB 1wKmLYm9syfZ2vuufiIWWEonqJHs7z004w1YGPwcQKvdNbaPHfpxhsbcCX1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkRXVgPH/OJqTJdeNskUHYY9MwigwHwYDVR0j BBgwFoAUrYMjDenp1Qqc32ozLgPcWIdOkOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjkwMDNkNmMtOTVmMS00N2E0LTlkNWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERF OUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4NzRFOTBFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDgzMjMwREU5RTlENTBBOUNERjZBMzMyRTAzREM1ODg3NEU5 MEUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RD NTg4NzRFOTBFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGNyY/exnyQHWfT0ZO0gKWIl5jdWadQpF2q kRRyzpd9GGT+Y6pIKxjv2yA9HGgxL+4oekCAA9hjYTjxtgP1PoUoi9WCutJdoGvg 1S4I41bE7MM/AwznFx5gKf5pXNrXnQvYH8/pbz/oeNO9XoykbpQbuTNYzEF+h+4J TX/9ZGBn2Pw1N//7gDebtt0wC/ZhwP0fUoS8V4IiPaJwwFODp/+vBBrvVhydis04 ShGSKjmFdF2QnfweoGx0SN229zA8yAn1i4vpIrj//JK7WyE43zWLHJoSOP3vYRCU 5U7lSR43upqNdAiIYred/zrNgnS0faj6utqdn+JEU4qx8xNoj6U= -----END CERTIFICATE-----Generated at Sat Oct 24 05:23:57 2026 by rpki-client