$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: Swh5I6MMf0nMxY9n1WnTTY8A/ZHg8iZgKriTi+wJzQc= Subject key identifier: 1B:6A:BF:D4:38:A0:20:FA:8A:6B:BD:96:12:C6:1C:24:89:B4:D5:11 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 248FC5A740B32C4481F2D2E70700FB675FDF6A76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:14:59 +0000 Manifest this update: Tue 12 May 2026 19:09:59 +0000 Manifest next update: Wed 13 May 2026 20:26:59 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) 3: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: 5RzNI7EHade6uzFl+I8hrL/W2dTtoctR38kiaFfPDg0=) 4: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8f:c5:a7:40:b3:2c:44:81:f2:d2:e7:07:00:fb:67:5f:df:6a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: May 12 19:09:59 2026 GMT Not After : May 13 20:26:59 2026 GMT Subject: CN=1B6ABFD438A020FA8A6BBD9612C61C2489B4D511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:20:a4:08:d3:ca:cc:92:40:e1:e0:0d:05: ad:98:6d:91:4f:60:aa:de:a1:02:79:3f:20:b5:dd: 39:0c:15:39:8f:96:49:f1:c2:8f:c3:df:bd:8b:74: 69:e3:14:02:10:2e:82:ee:57:13:c1:20:1a:0c:a3: 3e:b3:8b:54:1d:b3:32:b3:94:49:11:01:df:35:34: 9a:42:86:89:7c:bd:2d:c5:98:1d:dc:2a:3b:2b:97: 9a:36:18:98:b3:98:c7:1e:45:40:0f:a4:ba:5a:61: 86:eb:22:ad:01:80:da:c4:1a:c7:3b:65:57:d2:ca: ea:4c:78:06:43:d4:e3:5f:73:56:0e:64:f3:05:7e: 33:10:30:dd:e8:c7:99:c9:3b:89:06:b0:69:ad:a0: 2c:1b:4f:c4:3e:76:bd:52:1b:65:7d:99:0a:0c:7e: 72:b1:85:2d:66:22:e7:89:01:25:0f:98:e4:ac:b8: 90:0b:a4:37:ae:94:59:3c:78:52:60:75:4d:4a:83: 36:0f:cd:d7:15:b9:d2:a6:f2:d6:7c:de:5e:f7:4b: e1:5a:1a:09:c1:d4:42:39:ab:a1:10:22:8d:f5:61: 62:46:d1:90:17:4f:41:e0:87:c8:0f:ab:ef:fa:96: 75:59:69:70:88:90:32:69:c9:20:62:d0:f5:df:d2: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6A:BF:D4:38:A0:20:FA:8A:6B:BD:96:12:C6:1C:24:89:B4:D5:11 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:47:cc:2c:d4:99:ef:ef:da:d7:62:44:53:e7:02:cc:cd:85: 62:2b:01:a3:4f:41:fb:41:db:fc:ea:ce:e1:1a:00:78:1a:b6: d1:68:0b:05:e3:b9:71:55:37:7b:d7:c9:f6:ed:f1:cb:a2:e5: e7:4b:c7:8c:e6:6a:dc:8e:ed:fb:94:33:da:c2:91:d8:a8:37: e8:d5:1d:8f:3d:8c:fa:ea:fc:59:d6:37:50:74:95:ab:69:72: cb:cd:c6:7e:f1:82:92:bf:bd:c0:a3:d7:4a:2b:52:14:af:aa: fb:7e:38:ae:a8:c5:d9:84:3f:39:6c:2d:f3:b4:1b:1c:a8:bf: 26:c0:7b:36:db:92:ec:38:79:15:30:a5:6e:fc:19:de:ae:33: 4a:fa:d7:c0:5b:dc:68:4c:98:cd:e0:ce:f1:7c:4a:6a:84:ac: 1f:42:7c:c1:c2:ee:c5:74:97:a2:a4:f1:68:fc:55:ab:76:84: d0:1d:36:7f:16:37:f7:1a:4d:a7:7c:7c:16:f2:0c:6e:c7:9e: 24:2f:26:59:61:6b:04:33:27:2c:d7:f0:85:41:37:95:86:2c: 5b:01:18:dd:b0:7a:49:17:a3:ea:60:34:14:97:d4:ea:87:1d: bf:e8:9b:3a:d1:a0:5f:d1:ea:cd:7a:7e:01:ab:d2:93:52:06: 03:5f:42:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJI/Fp0CzLESB8tLnBwD7Z1/fanYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjA1MTIxOTA5NTlaFw0yNjA1MTMyMDI2NTlaMDMxMTAvBgNV BAMTKDFCNkFCRkQ0MzhBMDIwRkE4QTZCQkQ5NjEyQzYxQzI0ODlCNEQ1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkiCkCNPKzJJA4eANBa2YbZFP YKreoQJ5PyC13TkMFTmPlknxwo/D372LdGnjFAIQLoLuVxPBIBoMoz6zi1QdszKz lEkRAd81NJpChol8vS3FmB3cKjsrl5o2GJizmMceRUAPpLpaYYbrIq0BgNrEGsc7 ZVfSyupMeAZD1ONfc1YOZPMFfjMQMN3ox5nJO4kGsGmtoCwbT8Q+dr1SG2V9mQoM fnKxhS1mIueJASUPmOSsuJALpDeulFk8eFJgdU1KgzYPzdcVudKm8tZ83l73S+Fa GgnB1EI5q6EQIo31YWJG0ZAXT0Hgh8gPq+/6lnVZaXCIkDJpySBi0PXf0uTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2q/1DigIPqKa72WEsYcJIm01REwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRHzCzUme/v2tdiRFPnAszNhWIrAaNPQftB 2/zqzuEaAHgattFoCwXjuXFVN3vXyfbt8cui5edLx4zmatyO7fuUM9rCkdioN+jV HY89jPrq/FnWN1B0latpcsvNxn7xgpK/vcCj10orUhSvqvt+OK6oxdmEPzlsLfO0 GxyovybAezbbkuw4eRUwpW78Gd6uM0r618Bb3GhMmM3gzvF8SmqErB9CfMHC7sV0 l6Kk8Wj8Vat2hNAdNn8WN/caTad8fBbyDG7HniQvJllhawQzJyzX8IVBN5WGLFsB GN2wekkXo+pgNBSX1OqHHb/omzrRoF/R6s16fgGr0pNSBgNfQqU= -----END CERTIFICATE-----Generated at Wed May 13 02:19:17 2026 by rpki-client