$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft File: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft (raw, json) Hash identifier: U9BqpdilM15/g7/0v8vk3s+4COQUGHB42ki6Lw3HcCw= Subject key identifier: E1:74:2D:77:19:85:C9:80:31:EC:F6:55:37:2F:10:94:27:1D:39:EB Authority key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Certificate issuer: /CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Certificate serial: 68F8CF2E2FF181E23821EBD7D15B1342DC3B5D13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:49:13 +0000 Manifest this update: Thu 24 Sep 2026 06:44:13 +0000 Manifest next update: Fri 25 Sep 2026 10:41:13 +0000 Files and hashes: 1: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl (hash: THM8l+Go01TToJlmRbsmhX53i8z4gtJSgGI/Rl+GUHY=) 2: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: fSBmaNekEw3OBHkti8Tium+Nxe4NKA+v+f93I6eiImM=) 3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: AWpHjSJZSEnTAxNcOTOICGiGCdtga3pPphgmCcn8xjE=) 4: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: j3CCIkkkxHu9Jvfxg5BBPTNs9de+9hMDr2iWt/LPgIg=) 5: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: tj5GNswRthGD9Jerv3aI7edNXY0M4+btYrK4Cyrd4Ts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f8:cf:2e:2f:f1:81:e2:38:21:eb:d7:d1:5b:13:42:dc:3b:5d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Validity Not Before: Sep 24 06:44:13 2026 GMT Not After : Sep 25 10:41:13 2026 GMT Subject: CN=E1742D771985C98031ECF655372F1094271D39EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:15:02:59:3a:4f:fe:6e:55:3d:1c:30:30: 93:24:e0:13:7b:80:cd:ab:5c:95:a9:2b:68:74:a9: ee:ca:0b:2f:81:d9:74:0a:10:aa:18:0a:76:77:57: 70:e6:0e:c1:86:e5:6d:2f:ea:cd:de:b1:3e:99:0d: 63:27:9d:aa:f3:31:e1:46:87:f0:08:c0:e7:8c:47: bc:56:bc:f7:df:2a:2b:48:73:7d:6a:17:f0:be:97: 6c:2d:97:e5:bf:f4:5c:a0:6f:d6:3f:fe:57:c9:70: e2:6a:4f:78:79:ea:bc:cb:4d:22:b3:60:56:84:12: d5:47:26:8b:20:43:86:35:78:42:c8:11:91:9e:7f: 09:a1:5e:09:62:f8:f0:7b:ea:c9:2c:ed:08:80:0e: 77:70:6a:fc:4d:ae:17:05:d2:d9:7a:b1:6e:ae:4b: a9:3a:6e:6e:b7:2c:aa:58:e6:e4:ad:58:b8:1c:42: 64:0b:a1:da:c6:dd:c1:5e:61:a0:29:ed:85:58:84: fe:da:2d:ad:6e:16:70:c3:b1:69:61:b8:ca:fd:28: c3:ba:7a:31:71:c8:5a:c5:45:a6:1d:3d:28:18:18: d4:c3:f7:81:a5:61:81:76:0c:84:4c:84:16:a3:9e: a0:05:d4:96:46:22:f1:4e:77:df:da:a9:ee:d2:be: 13:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:2D:77:19:85:C9:80:31:EC:F6:55:37:2F:10:94:27:1D:39:EB X509v3 Authority Key Identifier: keyid:AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7c:d1:32:d0:19:c1:c1:60:9b:06:6b:88:d9:89:db:55:32: e5:bc:59:c7:e7:bb:58:be:b0:d3:0b:d4:07:2d:ef:ab:af:df: 5f:33:66:cb:ed:0d:23:79:41:0f:08:c9:8e:7c:71:30:60:00: 89:53:18:4e:5d:6e:09:ae:19:85:67:bc:34:9e:e6:12:48:0c: ce:a6:e0:49:f6:af:b5:5f:e6:30:bc:b8:5f:14:af:fc:51:c4: c9:5f:82:46:19:0c:03:80:9f:2c:72:c2:60:74:6e:23:a4:25: 05:a8:3a:d9:67:8a:68:b0:c0:0c:8d:5d:05:51:b8:55:cc:29: 17:de:12:78:3e:d6:e6:a9:34:52:55:c4:d3:92:31:55:fe:ea: 81:93:7a:35:f2:20:ba:e9:f8:e2:d7:18:ea:fa:09:ee:90:6c: 30:ec:1b:45:93:a6:4d:e1:b3:2c:84:30:b5:14:9c:59:f9:3b: 9f:68:e5:cb:7f:f0:df:0b:69:bd:6f:82:95:34:2a:c5:99:2f: 11:29:b2:9f:86:82:96:01:3c:6c:af:d8:e9:f5:8a:0b:83:dc: c2:e7:8c:bc:37:d5:39:b8:6a:32:60:44:cf:b0:5b:5c:17:4f: 0b:6d:b7:b8:a5:6e:f8:bd:05:52:08:07:d8:c6:f9:94:3e:30: 36:b5:0e:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPjPLi/xgeI4IevX0VsTQtw7XRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdEQjYw NjE2MDZEMzAeFw0yNjA5MjQwNjQ0MTNaFw0yNjA5MjUxMDQxMTNaMDMxMTAvBgNV BAMTKEUxNzQyRDc3MTk4NUM5ODAzMUVDRjY1NTM3MkYxMDk0MjcxRDM5RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KhUCWTpP/m5VPRwwMJMk4BN7 gM2rXJWpK2h0qe7KCy+B2XQKEKoYCnZ3V3DmDsGG5W0v6s3esT6ZDWMnnarzMeFG h/AIwOeMR7xWvPffKitIc31qF/C+l2wtl+W/9Fygb9Y//lfJcOJqT3h56rzLTSKz YFaEEtVHJosgQ4Y1eELIEZGefwmhXgli+PB76sks7QiADndwavxNrhcF0tl6sW6u S6k6bm63LKpY5uStWLgcQmQLodrG3cFeYaAp7YVYhP7aLa1uFnDDsWlhuMr9KMO6 ejFxyFrFRaYdPSgYGNTD94GlYYF2DIRMhBajnqAF1JZGIvFOd9/aqe7SvhNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XQtdxmFyYAx7PZVNy8QlCcdOeswHwYDVR0j BBgwFoAUrt3B06CyNqQii43fSA19tgYWBtMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBkMzRlNzctNmNmNi00MTg3LTkwODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNB MEIyMzZBNDIyOEI4RERGNDgwRDdEQjYwNjE2MDZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUREQzFEM0EwQjIzNkE0MjI4QjhEREY0ODBEN0RCNjA2MTYw NkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdE QjYwNjE2MDZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJd80TLQGcHBYJsGa4jZidtVMuW8Wcfnu1i+ sNML1Act76uv318zZsvtDSN5QQ8IyY58cTBgAIlTGE5dbgmuGYVnvDSe5hJIDM6m 4En2r7Vf5jC8uF8Ur/xRxMlfgkYZDAOAnyxywmB0biOkJQWoOtlnimiwwAyNXQVR uFXMKRfeEng+1uapNFJVxNOSMVX+6oGTejXyILrp+OLXGOr6Ce6QbDDsG0WTpk3h syyEMLUUnFn5O59o5ct/8N8Lab1vgpU0KsWZLxEpsp+GgpYBPGyv2On1iguD3MLn jLw31Tm4ajJgRM+wW1wXTwttt7ilbvi9BVIIB9jG+ZQ+MDa1DvI= -----END CERTIFICATE-----Generated at Thu Sep 24 12:58:44 2026 by rpki-client