$ rpki-client -vvf rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft File: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft (raw, json) Hash identifier: qWb9lVKcS3ptcrjnRQjVr7kPGW51N2ocx+wc0k1Tfz0= Subject key identifier: 17:D7:7F:98:43:E1:A6:C2:A4:85:A1:B7:C3:07:E7:5A:66:5F:77:57 Authority key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Certificate issuer: /CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Certificate serial: 2956FD6EABB31F2139FB97F1AF3935E133D290CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 10:17:02 +0000 Manifest this update: Fri 24 Jul 2026 10:12:02 +0000 Manifest next update: Sat 25 Jul 2026 10:37:02 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: AWpHjSJZSEnTAxNcOTOICGiGCdtga3pPphgmCcn8xjE=) 2: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: j3CCIkkkxHu9Jvfxg5BBPTNs9de+9hMDr2iWt/LPgIg=) 3: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl (hash: UaQ96/yHo9p6QvFodCbjxu6bkYON+zL38Our3ozvl/k=) 4: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: tj5GNswRthGD9Jerv3aI7edNXY0M4+btYrK4Cyrd4Ts=) 5: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: fSBmaNekEw3OBHkti8Tium+Nxe4NKA+v+f93I6eiImM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:56:fd:6e:ab:b3:1f:21:39:fb:97:f1:af:39:35:e1:33:d2:90:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Validity Not Before: Jul 24 10:12:02 2026 GMT Not After : Jul 25 10:37:02 2026 GMT Subject: CN=17D77F9843E1A6C2A485A1B7C307E75A665F7757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:f7:dc:f0:37:95:93:3c:e4:5a:de:f8:b1: 83:1d:77:c9:91:81:7c:98:1f:00:cc:96:a6:27:4b: 70:33:0d:56:74:cb:c8:cb:af:d3:fd:e7:69:0f:c5: 78:f8:07:c5:c9:fa:88:e9:db:cf:f7:74:e3:0c:9f: 08:ec:90:b7:d9:a7:3e:78:31:2b:7b:98:1c:d4:a6: 54:91:b5:cf:1e:49:22:07:1d:32:ba:2f:b1:96:9b: d5:3a:1c:41:b3:e2:a1:b6:47:2c:78:c0:20:b7:b7: 28:cf:cc:cc:50:0c:ed:8d:cb:c2:a9:1e:3e:b0:ab: da:0d:a0:0c:f9:44:3f:1a:95:5d:ab:b5:1c:3e:9e: 1c:d5:c8:e6:57:fb:d0:36:c1:db:cc:28:01:80:b0: 22:48:f4:30:c8:52:6a:0e:6a:49:6f:45:5e:96:df: 0f:05:d9:d5:d6:e5:43:9c:e5:a5:e1:56:70:a5:3d: 8d:a1:00:f3:5a:47:4e:15:19:d4:c9:22:4b:42:87: 89:6d:f6:62:93:92:33:93:e2:87:bb:48:02:5d:91: 11:24:9b:cd:f0:c5:3d:29:21:8c:d4:95:68:a8:d7: 50:a2:0b:fc:df:30:ef:48:63:20:fc:b0:11:c1:42: b8:38:97:b3:b5:83:b3:29:a6:6a:ce:e4:f5:b4:f2: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D7:7F:98:43:E1:A6:C2:A4:85:A1:B7:C3:07:E7:5A:66:5F:77:57 X509v3 Authority Key Identifier: keyid:AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c2:6e:28:70:c3:51:5f:f6:88:14:d7:d0:06:53:c7:e3:92: af:b5:db:46:b1:b6:62:de:17:7a:be:e7:bb:de:8d:7e:76:e1: fd:8d:9a:4d:7d:e6:bc:79:b0:f8:46:26:e3:36:bb:b6:ca:81: 68:e3:79:e5:76:c6:4a:29:3e:9b:5a:98:10:f8:5d:db:f7:40: 74:81:5e:43:d6:cc:4c:07:25:27:c2:ee:5e:64:ba:5a:dd:a5: b1:3d:c7:ef:4c:f8:0f:c9:bb:ee:6e:1f:4e:13:d3:a3:ba:7d: 23:48:dc:f1:76:b5:8f:f3:d5:9f:4f:53:1f:e7:ed:3e:66:3b: a4:9e:3e:73:6b:f9:6d:0e:bf:92:f4:49:3f:12:c5:5f:aa:1b: ca:72:40:ca:02:c5:ff:39:a2:70:10:b9:6e:d4:8d:bc:c2:b6: b2:20:e3:3d:82:41:d7:d2:54:71:80:aa:a4:a2:66:ee:81:c2: fc:5e:dc:97:40:53:c2:cd:87:65:23:93:a8:f3:cd:98:77:c0: ad:fc:01:d7:db:fa:9d:51:05:00:c6:58:81:eb:60:ee:10:84: 14:71:1e:ec:90:a5:31:95:e3:a4:85:80:76:25:3d:4d:72:b6: 3c:84:e4:56:98:f6:e6:d4:0f:2a:20:a0:4d:03:c3:81:bd:59: e2:6d:f6:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVb9bquzHyE5+5fxrzk14TPSkM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdEQjYw NjE2MDZEMzAeFw0yNjA3MjQxMDEyMDJaFw0yNjA3MjUxMDM3MDJaMDMxMTAvBgNV BAMTKDE3RDc3Rjk4NDNFMUE2QzJBNDg1QTFCN0MzMDdFNzVBNjY1Rjc3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72/fc8DeVkzzkWt74sYMdd8mR gXyYHwDMlqYnS3AzDVZ0y8jLr9P952kPxXj4B8XJ+ojp28/3dOMMnwjskLfZpz54 MSt7mBzUplSRtc8eSSIHHTK6L7GWm9U6HEGz4qG2Ryx4wCC3tyjPzMxQDO2Ny8Kp Hj6wq9oNoAz5RD8alV2rtRw+nhzVyOZX+9A2wdvMKAGAsCJI9DDIUmoOaklvRV6W 3w8F2dXW5UOc5aXhVnClPY2hAPNaR04VGdTJIktCh4lt9mKTkjOT4oe7SAJdkREk m83wxT0pIYzUlWio11CiC/zfMO9IYyD8sBHBQrg4l7O1g7MppmrO5PW08h7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF9d/mEPhpsKkhaG3wwfnWmZfd1cwHwYDVR0j BBgwFoAUrt3B06CyNqQii43fSA19tgYWBtMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBkMzRlNzctNmNmNi00MTg3LTkwODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNB MEIyMzZBNDIyOEI4RERGNDgwRDdEQjYwNjE2MDZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUREQzFEM0EwQjIzNkE0MjI4QjhEREY0ODBEN0RCNjA2MTYw NkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdE QjYwNjE2MDZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLCbihww1Ff9ogU19AGU8fjkq+120axtmLe F3q+57vejX524f2Nmk195rx5sPhGJuM2u7bKgWjjeeV2xkopPptamBD4Xdv3QHSB XkPWzEwHJSfC7l5kulrdpbE9x+9M+A/Ju+5uH04T06O6fSNI3PF2tY/z1Z9PUx/n 7T5mO6SePnNr+W0Ov5L0ST8SxV+qG8pyQMoCxf85onAQuW7UjbzCtrIg4z2CQdfS VHGAqqSiZu6Bwvxe3JdAU8LNh2Ujk6jzzZh3wK38Adfb+p1RBQDGWIHrYO4QhBRx HuyQpTGV46SFgHYlPU1ytjyE5FaY9ubUDyogoE0Dw4G9WeJt9so= -----END CERTIFICATE-----Generated at Fri Jul 24 14:27:59 2026 by rpki-client