$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft File: AAB4671D9735066964F008C9DDFC52C3A710E040.mft (raw, json) Hash identifier: 9q8yMCI0+1ScctdRLUveGbTKIE7R5rSXgm39biqPoo8= Subject key identifier: 18:65:2D:82:E7:21:62:64:46:F4:E4:6D:34:39:FE:8F:2F:89:C7:42 Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Certificate serial: 0181040D0F08D7991E321E7A9F5138F530E25373 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:13:24 +0000 Manifest this update: Tue 12 May 2026 18:08:24 +0000 Manifest next update: Wed 13 May 2026 21:14:24 +0000 Files and hashes: 1: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=) 2: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 42yHJRCL2UkIYvPUKITyhrxYXg51+0nJdl91wdx0sEk=) 3: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: aJngYofxYM8aRo7ASuGSX++bpTmrKYXt3y7dtT5WC2Y=) 4: AAB4671D9735066964F008C9DDFC52C3A710E040.crl (hash: oKsfHqFfDA7GbGoe/IpSH6GRZXhzGzfjqpmDv9KC6AY=) 5: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA=) 6: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=) 7: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: unzh605AgxMrS8kL6fN+yePqm6X/AD3ox4pCc7I8/VY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:81:04:0d:0f:08:d7:99:1e:32:1e:7a:9f:51:38:f5:30:e2:53:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Validity Not Before: May 12 18:08:24 2026 GMT Not After : May 13 21:14:24 2026 GMT Subject: CN=18652D82E721626446F4E46D3439FE8F2F89C742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:21:fd:48:6b:71:be:42:5c:7d:9b:e1:c4: 09:94:d6:8e:00:5f:c8:fd:7f:d4:22:fd:62:87:4a: 01:3f:ab:f6:c5:a5:41:53:c5:fd:3b:8b:5c:c6:01: a5:d4:0a:27:a4:c1:b9:a6:bd:a1:ba:01:f3:3d:b7: 57:87:d3:c3:e9:2c:d7:53:b7:1e:55:4e:06:3e:81: 56:6f:78:a7:83:35:d9:f6:ee:ee:f4:2c:60:c9:88: e5:03:1a:78:fe:ce:e7:37:59:46:7f:29:e2:0a:5e: b3:90:4a:c2:63:35:d2:03:a6:19:fd:7b:98:61:39: c8:07:c0:50:5a:9d:fb:bc:d9:41:d8:09:3d:de:13: fe:d5:a4:b3:78:b2:1f:7f:c4:db:e2:67:73:8a:d7: db:4d:da:bd:24:0f:39:76:38:af:4d:b7:12:35:b0: 7f:a7:98:d9:9b:a0:c6:0a:cc:3e:7c:43:16:08:52: 9c:71:2e:16:c6:cd:ef:ef:fd:e7:fd:34:76:a6:0a: cf:ac:7d:49:50:ba:99:ad:c6:fc:d3:e8:0c:ef:e8: ff:6a:a2:69:76:43:fc:81:2f:9a:21:17:25:7e:e7: 7f:5c:24:45:b2:8b:24:60:9f:45:2e:35:bd:1e:d3: 0e:e5:82:a8:53:60:c1:34:ba:e9:f7:fd:48:af:83: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:65:2D:82:E7:21:62:64:46:F4:E4:6D:34:39:FE:8F:2F:89:C7:42 X509v3 Authority Key Identifier: keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f1:ef:33:cb:80:d0:0f:50:2d:28:ac:c2:47:15:a3:0b:94: 0f:b6:da:ad:33:fe:e1:4a:1f:01:bc:c7:da:4c:8f:f9:b9:82: dc:35:58:3c:ee:3d:7b:1b:5a:a7:6a:eb:84:3d:71:b3:3b:1b: 33:3f:63:b7:0a:c6:88:0e:4d:7b:59:27:ba:97:54:67:c8:e0: 0a:9a:d3:f9:6d:d1:19:29:aa:16:42:aa:84:57:64:48:a7:74: c6:14:87:f1:60:39:4c:82:be:33:5a:bc:71:b4:23:d3:fa:f7: 1c:e1:ed:a9:af:d4:8b:ed:66:1b:a6:54:2b:7f:e8:43:c3:27: 8c:a6:ab:e1:4f:45:e8:a4:e2:37:c0:e8:79:e1:9a:0f:ec:e3: 80:b9:62:74:73:1f:18:be:23:88:9d:6e:5e:f7:db:bc:78:6c: 0f:e2:2e:a1:f5:83:3f:5c:fc:31:c5:01:06:93:e6:a4:0f:61: 4f:19:d9:d8:45:87:eb:60:b3:17:14:51:66:a6:a0:78:5c:cf: e6:91:26:e7:8a:33:01:78:e6:6c:3b:ae:25:df:59:c3:ab:d5: ce:2c:8a:ec:07:fa:f0:3f:80:21:3b:d1:73:0d:96:0e:13:1d: a6:b7:c5:53:38:7a:01:e4:8f:e1:e5:20:a4:71:90:9f:4c:9e: cc:bd:5c:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYEEDQ8I15keMh56n1E49TDiU3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNB NzEwRTA0MDAeFw0yNjA1MTIxODA4MjRaFw0yNjA1MTMyMTE0MjRaMDMxMTAvBgNV BAMTKDE4NjUyRDgyRTcyMTYyNjQ0NkY0RTQ2RDM0MzlGRThGMkY4OUM3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfnyH9SGtxvkJcfZvhxAmU1o4A X8j9f9Qi/WKHSgE/q/bFpUFTxf07i1zGAaXUCiekwbmmvaG6AfM9t1eH08PpLNdT tx5VTgY+gVZveKeDNdn27u70LGDJiOUDGnj+zuc3WUZ/KeIKXrOQSsJjNdIDphn9 e5hhOcgHwFBanfu82UHYCT3eE/7VpLN4sh9/xNviZ3OK19tN2r0kDzl2OK9NtxI1 sH+nmNmboMYKzD58QxYIUpxxLhbGze/v/ef9NHamCs+sfUlQupmtxvzT6Azv6P9q oml2Q/yBL5ohFyV+539cJEWyiyRgn0UuNb0e0w7lgqhTYME0uun3/Uivg4wDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGGUtguchYmRG9ORtNDn+jy+Jx0IwHwYDVR0j BBgwFoAUqrRnHZc1Bmlk8AjJ3fxSw6cQ4EAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU0NmEzMDUtZGY3Ny00NTg3LTg3MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5 NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNBNzEwRTA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUI0NjcxRDk3MzUwNjY5NjRGMDA4QzlEREZDNTJDM0E3MTBF MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUy QzNBNzEwRTA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLx7zPLgNAPUC0orMJHFaMLlA+22q0z/uFK HwG8x9pMj/m5gtw1WDzuPXsbWqdq64Q9cbM7GzM/Y7cKxogOTXtZJ7qXVGfI4Aqa 0/lt0RkpqhZCqoRXZEindMYUh/FgOUyCvjNavHG0I9P69xzh7amv1IvtZhumVCt/ 6EPDJ4ymq+FPReik4jfA6Hnhmg/s44C5YnRzHxi+I4idbl7327x4bA/iLqH1gz9c /DHFAQaT5qQPYU8Z2dhFh+tgsxcUUWamoHhcz+aRJueKMwF45mw7riXfWcOr1c4s iuwH+vA/gCE70XMNlg4THaa3xVM4egHkj+HlIKRxkJ9Mnsy9XDs= -----END CERTIFICATE-----Generated at Wed May 13 04:36:27 2026 by rpki-client