$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft File: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft (raw, json) Hash identifier: YrANFh8efEVZZJwPbhGnf+JUh8mOmeM64H5uRutUCHE= Subject key identifier: 83:03:02:ED:E6:99:10:2A:D2:36:BE:49:58:9E:28:2E:58:33:24:96 Authority key identifier: AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B Certificate issuer: /CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Certificate serial: 7BA6CBA2966D209BD3FD960E5816903AFEE770FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:25:40 +0000 Manifest this update: Fri 25 Sep 2026 00:20:40 +0000 Manifest next update: Sat 26 Sep 2026 01:40:40 +0000 Files and hashes: 1: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl (hash: JIOv5NPbfgoNXdN0vBhZnZ8qKUJJ0Azg3lYri/QcEZw=) 2: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: 5EcCRGSNTaCKDk5LN8StILbgTTb77LqugRFtgKuHnTo=) 3: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: 3op/DC1qyBMxh0jblaumBv2zXbNO6+qEazCYObpo6AY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a6:cb:a2:96:6d:20:9b:d3:fd:96:0e:58:16:90:3a:fe:e7:70:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Validity Not Before: Sep 25 00:20:40 2026 GMT Not After : Sep 26 01:40:40 2026 GMT Subject: CN=830302EDE699102AD236BE49589E282E58332496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:aa:ed:4d:ec:61:9e:79:fb:b4:d1:6f:e5: 1c:6e:e0:5e:a7:2e:5a:7d:c6:9c:61:ed:2a:58:56: d0:a0:7f:52:88:8e:47:7b:9d:0b:b2:c8:b9:d3:c8: e0:59:67:97:c7:87:33:e7:93:b9:b9:d3:ca:bf:35: 92:8b:21:50:cb:e9:f5:a1:7f:b5:44:d7:be:43:6d: 64:6d:e8:c9:db:93:84:7c:0e:63:ab:4d:a5:87:18: 23:cc:93:73:96:88:08:cc:e4:ed:20:73:23:22:22: ac:7f:e9:1d:43:b5:f8:d7:68:55:6e:03:d5:b7:10: 66:d1:83:3e:a8:7b:4f:88:eb:82:fd:22:7c:00:c2: 09:2c:72:53:8c:f8:59:b2:66:6f:f0:a4:6f:ea:17: 11:7a:2f:cc:aa:fc:b3:17:a4:35:5c:91:9b:81:80: a5:3e:36:72:3b:3c:db:7c:65:f0:c9:99:08:2f:9a: 81:f9:8f:2f:bf:12:6f:04:79:d3:63:d7:e9:4d:e2: 36:3c:14:3c:47:46:76:c9:df:a3:d7:c8:c3:a6:a7: c7:47:36:49:a0:c5:d4:1b:ee:0a:e3:f3:49:0e:45: 6a:98:be:70:64:b3:b7:b6:4e:07:9d:1e:db:e6:4c: 70:e1:66:ff:83:25:68:cd:f1:da:7b:5a:14:35:75: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:03:02:ED:E6:99:10:2A:D2:36:BE:49:58:9E:28:2E:58:33:24:96 X509v3 Authority Key Identifier: keyid:AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d1:55:b9:ba:87:ca:d0:d6:03:19:8e:f4:fb:af:56:0c:67: 3b:5c:63:26:1c:41:9e:de:ee:c3:4b:55:7f:de:d5:9c:c9:c2: d2:1e:59:2d:be:86:c0:6c:54:4a:59:bf:46:2a:6c:fb:ab:5a: 53:2e:ba:ef:33:1d:f4:87:c7:65:f5:07:86:e2:91:fd:e0:ff: 34:45:fe:7a:66:7c:44:b1:93:0d:5e:39:36:49:40:24:83:ba: 23:0c:0f:c5:46:8e:7c:6b:17:a8:74:14:3c:81:b3:6c:64:6e: ad:b2:8f:0c:d9:9d:03:4c:90:3f:53:58:d4:ab:7f:6b:22:1b: 85:6e:cf:51:c7:ff:4d:b5:af:c6:ec:75:6d:e0:31:46:62:c3: 9c:1c:61:03:1e:8d:d6:ce:b9:57:48:66:2c:bc:f7:72:f9:0f: 91:42:80:cb:f2:8b:2d:e2:c3:5a:57:42:d8:92:e3:45:12:46: 3a:35:41:77:7b:3f:7a:fd:90:eb:76:a7:5d:fb:0c:ff:d9:c6: de:38:ef:07:d9:6a:c1:da:8a:53:d3:9a:5d:a7:e9:30:57:a0: eb:e3:43:cc:34:0d:78:4b:fd:51:9a:0a:66:f6:bb:ca:80:7b: c4:da:b9:dd:3a:45:77:2f:27:f8:35:4b:b4:de:5b:94:20:67: 23:96:98:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6bLopZtIJvT/ZYOWBaQOv7ncPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5 NDM1N0U1QjAeFw0yNjA5MjUwMDIwNDBaFw0yNjA5MjYwMTQwNDBaMDMxMTAvBgNV BAMTKDgzMDMwMkVERTY5OTEwMkFEMjM2QkU0OTU4OUUyODJFNTgzMzI0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00artTexhnnn7tNFv5Rxu4F6n Llp9xpxh7SpYVtCgf1KIjkd7nQuyyLnTyOBZZ5fHhzPnk7m508q/NZKLIVDL6fWh f7VE175DbWRt6Mnbk4R8DmOrTaWHGCPMk3OWiAjM5O0gcyMiIqx/6R1DtfjXaFVu A9W3EGbRgz6oe0+I64L9InwAwgksclOM+FmyZm/wpG/qFxF6L8yq/LMXpDVckZuB gKU+NnI7PNt8ZfDJmQgvmoH5jy+/Em8EedNj1+lN4jY8FDxHRnbJ36PXyMOmp8dH NkmgxdQb7grj80kORWqYvnBks7e2TgedHtvmTHDhZv+DJWjN8dp7WhQ1dYtPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgwMC7eaZECrSNr5JWJ4oLlgzJJYwHwYDVR0j BBgwFoAUrkBzvINOssC/kqecW17ZBZQ1flswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2UxZGViOTMtYzE5MC00NmVlLWJhODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4 MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5NDM1N0U1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTQwNzNCQzgzNEVCMkMwQkY5MkE3OUM1QjVFRDkwNTk0MzU3 RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5 MDU5NDM1N0U1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnRVbm6h8rQ1gMZjvT7r1YMZztcYyYcQZ7e 7sNLVX/e1ZzJwtIeWS2+hsBsVEpZv0YqbPurWlMuuu8zHfSHx2X1B4bikf3g/zRF /npmfESxkw1eOTZJQCSDuiMMD8VGjnxrF6h0FDyBs2xkbq2yjwzZnQNMkD9TWNSr f2siG4Vuz1HH/021r8bsdW3gMUZiw5wcYQMejdbOuVdIZiy893L5D5FCgMvyiy3i w1pXQtiS40USRjo1QXd7P3r9kOt2p137DP/Zxt447wfZasHailPTml2n6TBXoOvj Q8w0DXhL/VGaCmb2u8qAe8Taud06RXcvJ/g1S7TeW5QgZyOWmLk= -----END CERTIFICATE-----Generated at Fri Sep 25 14:23:46 2026 by rpki-client