$ rpki-client -vvf rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft File: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft (raw, json) Hash identifier: c16FQ8+ayMMgHP53J7hgLg/PzNlkhx7BfeSG8DAI6OM= Subject key identifier: 6D:68:05:4B:04:B9:15:D4:13:D2:01:9D:C5:54:F1:2B:0D:37:A1:5E Authority key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Certificate issuer: /CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Certificate serial: 146897E913E2038C7753EAC17540498CDF38F79B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:00:07 +0000 Manifest this update: Tue 12 May 2026 04:55:07 +0000 Manifest next update: Wed 13 May 2026 08:39:07 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: tj5GNswRthGD9Jerv3aI7edNXY0M4+btYrK4Cyrd4Ts=) 2: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: fSBmaNekEw3OBHkti8Tium+Nxe4NKA+v+f93I6eiImM=) 3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: AWpHjSJZSEnTAxNcOTOICGiGCdtga3pPphgmCcn8xjE=) 4: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: j3CCIkkkxHu9Jvfxg5BBPTNs9de+9hMDr2iWt/LPgIg=) 5: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl (hash: 8+OdNMG1wmPTylBQh9ucoVyLh3HlaZ1wYqNzhfZRH6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:68:97:e9:13:e2:03:8c:77:53:ea:c1:75:40:49:8c:df:38:f7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Validity Not Before: May 12 04:55:07 2026 GMT Not After : May 13 08:39:07 2026 GMT Subject: CN=6D68054B04B915D413D2019DC554F12B0D37A15E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:a9:6a:66:a8:82:10:4e:84:9e:13:fe:65: 49:e0:06:fd:45:31:92:f1:f1:cf:88:3c:86:81:d5: 66:47:dd:56:ff:b9:20:7b:4b:fb:67:01:01:31:a6: 90:0d:2d:09:ca:8f:81:9e:f5:e8:78:34:02:8f:eb: ba:fe:3b:2b:96:ea:27:79:5b:f9:f6:bb:61:d0:a6: 74:00:18:e2:0e:0c:e5:73:45:0a:57:74:b6:17:37: 2e:c6:45:a3:ac:16:fc:0c:ab:b5:5e:86:dc:a9:94: d7:59:cb:26:d3:ea:f2:69:8a:f7:ad:79:12:15:20: c3:3c:b8:62:81:69:b0:ae:69:c2:3a:f0:c8:3e:61: f0:53:78:ad:ee:05:a8:2c:55:1e:49:1e:ab:4d:ea: 30:48:26:0b:1b:20:ef:e8:cf:c9:94:5d:b9:e1:04: b5:b6:ee:4d:16:3c:11:79:24:b3:6e:ec:1f:af:e6: 8a:eb:fe:bf:2a:e1:0b:6f:51:d1:b5:3c:e4:a9:7a: d5:40:cf:19:96:6a:4c:7f:8e:eb:3f:76:21:b9:03: 72:3a:64:96:44:7b:db:2d:87:d2:4e:11:54:f0:65: 83:82:2f:4b:c0:e9:d5:45:7e:6f:59:ea:4e:b4:c4: 90:07:92:cd:b4:25:2f:4d:5d:ad:21:37:11:a8:2f: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:68:05:4B:04:B9:15:D4:13:D2:01:9D:C5:54:F1:2B:0D:37:A1:5E X509v3 Authority Key Identifier: keyid:AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3a:92:23:f0:7f:52:9c:b3:16:f9:0d:5f:d6:85:99:63:09: 8c:20:ab:40:7b:27:f2:c3:59:4a:61:28:ed:da:78:51:ff:45: 6d:94:dd:f0:47:ad:d8:9b:ec:04:de:68:b4:45:02:8b:b8:fb: 21:06:31:a0:cc:af:7f:5b:8a:fb:72:b5:1c:bd:02:ab:90:ee: f2:41:c0:de:d1:70:b2:da:f0:95:8f:85:4d:59:50:ab:09:21: cc:ba:59:0d:a2:61:69:7a:8f:94:f1:f2:5c:7e:67:e7:ce:ff: 24:71:2d:0c:7d:1a:84:f1:67:4d:bc:4d:2b:14:36:71:fa:59: 54:1e:58:ef:1a:4a:1d:a6:d0:7c:00:10:2a:28:1e:65:b1:24: 20:c0:6a:ff:e3:61:55:75:36:fd:7a:25:23:28:d9:83:07:8e: 70:8f:2f:71:4f:6d:14:ad:64:b0:35:48:63:4c:d1:a4:64:b4: 44:4a:b4:12:14:10:40:c3:64:51:54:39:af:55:5c:77:50:62: 7c:36:db:25:3a:86:b8:14:cc:05:bb:a4:15:8c:94:2b:ab:fd: 6e:d1:18:31:eb:28:d5:ec:cb:55:91:d8:8a:7e:5d:44:d7:1d: 1c:63:4d:7d:8d:d6:17:ab:33:7c:1e:47:42:b7:75:a9:fa:ae: 18:27:9b:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGiX6RPiA4x3U+rBdUBJjN8495swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdEQjYw NjE2MDZEMzAeFw0yNjA1MTIwNDU1MDdaFw0yNjA1MTMwODM5MDdaMDMxMTAvBgNV BAMTKDZENjgwNTRCMDRCOTE1RDQxM0QyMDE5REM1NTRGMTJCMEQzN0ExNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVqlqZqiCEE6EnhP+ZUngBv1F MZLx8c+IPIaB1WZH3Vb/uSB7S/tnAQExppANLQnKj4Ge9eh4NAKP67r+OyuW6id5 W/n2u2HQpnQAGOIODOVzRQpXdLYXNy7GRaOsFvwMq7VehtyplNdZyybT6vJpivet eRIVIMM8uGKBabCuacI68Mg+YfBTeK3uBagsVR5JHqtN6jBIJgsbIO/oz8mUXbnh BLW27k0WPBF5JLNu7B+v5orr/r8q4QtvUdG1POSpetVAzxmWakx/jus/diG5A3I6 ZJZEe9sth9JOEVTwZYOCL0vA6dVFfm9Z6k60xJAHks20JS9NXa0hNxGoL9FlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbWgFSwS5FdQT0gGdxVTxKw03oV4wHwYDVR0j BBgwFoAUrt3B06CyNqQii43fSA19tgYWBtMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBkMzRlNzctNmNmNi00MTg3LTkwODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNB MEIyMzZBNDIyOEI4RERGNDgwRDdEQjYwNjE2MDZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUREQzFEM0EwQjIzNkE0MjI4QjhEREY0ODBEN0RCNjA2MTYw NkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdE QjYwNjE2MDZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA86kiPwf1Kcsxb5DV/WhZljCYwgq0B7J/LD WUphKO3aeFH/RW2U3fBHrdib7ATeaLRFAou4+yEGMaDMr39bivtytRy9AquQ7vJB wN7RcLLa8JWPhU1ZUKsJIcy6WQ2iYWl6j5Tx8lx+Z+fO/yRxLQx9GoTxZ028TSsU NnH6WVQeWO8aSh2m0HwAECooHmWxJCDAav/jYVV1Nv16JSMo2YMHjnCPL3FPbRSt ZLA1SGNM0aRktERKtBIUEEDDZFFUOa9VXHdQYnw22yU6hrgUzAW7pBWMlCur/W7R GDHrKNXsy1WR2Ip+XUTXHRxjTX2N1herM3weR0K3dan6rhgnm5w= -----END CERTIFICATE-----Generated at Tue May 12 22:49:43 2026 by rpki-client