$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft File: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft (raw, json) Hash identifier: w97j8dViaViTp1Y0FCo2/1nw+5rOaaQ8FNmuaiiYTok= Subject key identifier: E2:00:68:DC:8B:6D:4F:C8:A5:D5:42:A2:B1:54:F6:6E:C9:C8:A1:5B Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B Certificate issuer: /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B Certificate serial: 455AD3273EC27ACF11BA1DC54E2BCD042962DDA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 15:43:30 +0000 Manifest this update: Wed 16 Sep 2026 15:38:30 +0000 Manifest next update: Thu 17 Sep 2026 18:52:30 +0000 Files and hashes: 1: 3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (hash: BPYAzlmVCSDysVPnzRbriP0ZO+KBD1gNQiYmmJ0AsGc=) 2: 3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (hash: eouhZL8KRzKxSED1dcGBFmzqWDAKHQivhxiq0mmIE9Y=) 3: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl (hash: nRU+uCSU5I6JcTwsFl0gK6kwFyylafm0qMfvztXoACo=) 4: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: mIxFRHOE8DmYRrXlDisTfwK6lb1/0VKqM0Rpgtaxvto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:5a:d3:27:3e:c2:7a:cf:11:ba:1d:c5:4e:2b:cd:04:29:62:dd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B Validity Not Before: Sep 16 15:38:30 2026 GMT Not After : Sep 17 18:52:30 2026 GMT Subject: CN=E20068DC8B6D4FC8A5D542A2B154F66EC9C8A15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:ca:a7:5d:fd:07:42:ce:0a:b1:10:d2:77: ab:30:f8:5f:df:fb:db:06:b2:29:f6:d9:28:ba:cb: 10:0d:e4:16:f7:95:b2:97:f2:b2:29:4e:7d:8e:35: 2c:e8:64:48:ae:43:bb:df:46:0c:e9:b0:a6:8e:3e: c2:01:09:85:54:eb:a6:d3:53:99:0a:67:44:7c:4b: f3:00:24:39:06:f6:b5:eb:6e:e8:70:43:ac:cb:58: f4:a9:76:0d:8c:82:d2:87:b8:4a:13:c4:f1:7d:ce: ef:a2:36:5a:a8:96:3c:a9:c6:39:2b:b9:01:d8:b9: 6b:b2:b5:2c:da:1e:ce:32:61:c4:8f:a8:18:4d:86: 32:dd:06:e5:74:fc:dc:1b:86:ea:be:0f:63:ef:1a: 81:b9:2a:e6:30:25:dd:86:6e:0a:82:16:c6:78:7c: c3:59:b2:2b:c6:d0:2d:dd:e6:0f:b1:1b:6d:af:02: 95:58:5b:bb:11:da:cb:f0:e6:13:ab:d0:8e:82:ef: ec:52:e8:4f:46:2d:58:2e:f0:58:c2:9d:9c:d2:67: 36:7b:11:23:e0:e7:db:b0:3c:25:0d:64:fd:ff:04: 2b:a0:e1:43:26:56:5d:bf:e0:06:b8:03:2b:90:ba: c1:ca:0f:02:54:c1:5a:21:71:21:b2:2b:54:ed:1f: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:00:68:DC:8B:6D:4F:C8:A5:D5:42:A2:B1:54:F6:6E:C9:C8:A1:5B X509v3 Authority Key Identifier: keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b9:3b:3c:e0:25:e4:60:34:19:38:f0:a1:df:e1:43:27:00: c7:b4:6a:46:a2:4c:b7:5a:5e:a4:dd:0c:14:07:f3:37:c9:4a: 58:50:dd:df:1f:0e:98:69:c4:0c:1f:a0:43:a5:ff:be:9f:16: d3:a9:22:ce:0b:a2:e2:f5:95:ff:eb:18:6b:33:21:b3:7a:e1: ab:9d:1e:8a:b7:31:05:50:f8:8c:9e:10:d2:df:04:5c:00:67: ea:9c:9a:cf:96:07:ad:16:7a:b7:d4:51:eb:93:35:1e:c0:c7: 04:e4:17:b2:6a:35:52:80:35:a6:d0:c6:f1:1f:95:cc:85:46: a1:6c:5b:8b:ca:57:52:12:9c:9f:68:af:6f:cc:8d:f2:a0:9f: 44:97:a8:cb:90:0f:78:2d:4b:ee:ee:d6:20:4f:d5:9b:01:e9: 94:67:2c:2b:96:0e:4a:d1:2c:94:b7:20:7c:d5:32:c5:a2:4a: a0:ac:34:f8:8b:d7:5c:9c:6f:c8:84:d8:40:bf:b3:0f:3e:ea: 87:9e:b7:a0:af:cb:cb:b4:65:81:25:4c:32:0a:51:4c:45:88: ba:8d:48:3b:f2:99:d2:97:2f:70:44:6e:17:fa:b9:0f:20:12: 4b:52:7b:8c:cd:cd:b5:18:2c:cd:d8:52:aa:03:a6:4b:41:e5: 58:11:0c:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVrTJz7Ces8Ruh3FTivNBCli3aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2MjRB QTIxMDI4QjAeFw0yNjA5MTYxNTM4MzBaFw0yNjA5MTcxODUyMzBaMDMxMTAvBgNV BAMTKEUyMDA2OERDOEI2RDRGQzhBNUQ1NDJBMkIxNTRGNjZFQzlDOEExNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3sqnXf0HQs4KsRDSd6sw+F/f +9sGsin22Si6yxAN5Bb3lbKX8rIpTn2ONSzoZEiuQ7vfRgzpsKaOPsIBCYVU66bT U5kKZ0R8S/MAJDkG9rXrbuhwQ6zLWPSpdg2MgtKHuEoTxPF9zu+iNlqoljypxjkr uQHYuWuytSzaHs4yYcSPqBhNhjLdBuV0/Nwbhuq+D2PvGoG5KuYwJd2GbgqCFsZ4 fMNZsivG0C3d5g+xG22vApVYW7sR2svw5hOr0I6C7+xS6E9GLVgu8FjCnZzSZzZ7 ESPg59uwPCUNZP3/BCug4UMmVl2/4Aa4AyuQusHKDwJUwVohcSGyK1TtH01dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4gBo3IttT8il1UKisVT2bsnIoVswHwYDVR0j BBgwFoAUrYzOZBLkdk+1yb34MfgGJKohAoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlNGNkOTYtY2ZjMS00NTc3LWFkM2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQx MkU0NzY0RkI1QzlCREY4MzFGODA2MjRBQTIxMDI4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRDhDQ0U2NDEyRTQ3NjRGQjVDOUJERjgzMUY4MDYyNEFBMjEw MjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2 MjRBQTIxMDI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAi5OzzgJeRgNBk48KHf4UMnAMe0akaiTLda XqTdDBQH8zfJSlhQ3d8fDphpxAwfoEOl/76fFtOpIs4LouL1lf/rGGszIbN64aud Hoq3MQVQ+IyeENLfBFwAZ+qcms+WB60WerfUUeuTNR7AxwTkF7JqNVKANabQxvEf lcyFRqFsW4vKV1ISnJ9or2/MjfKgn0SXqMuQD3gtS+7u1iBP1ZsB6ZRnLCuWDkrR LJS3IHzVMsWiSqCsNPiL11ycb8iE2EC/sw8+6oeet6Cvy8u0ZYElTDIKUUxFiLqN SDvymdKXL3BEbhf6uQ8gEktSe4zNzbUYLM3YUqoDpktB5VgRDCQ= -----END CERTIFICATE-----Generated at Thu Sep 17 10:56:44 2026 by rpki-client