$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft File: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft (raw, json) Hash identifier: FgW5PoW4KccVKylgMv9CURcMVJYnpmYgyUXiW34JQQc= Subject key identifier: B4:9E:25:F4:C6:73:9E:8E:D8:3A:FD:81:5E:80:3A:BB:D3:1B:9E:0F Authority key identifier: AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B Certificate issuer: /CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Certificate serial: 497CF787994BBE04C8D0C1BF29F37F5F0E913863 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 11:39:19 +0000 Manifest this update: Thu 23 Jul 2026 11:34:19 +0000 Manifest next update: Fri 24 Jul 2026 15:18:19 +0000 Files and hashes: 1: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: 3op/DC1qyBMxh0jblaumBv2zXbNO6+qEazCYObpo6AY=) 2: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: 5EcCRGSNTaCKDk5LN8StILbgTTb77LqugRFtgKuHnTo=) 3: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl (hash: 6oqYA/Q3huG/24LiPdaTCXVZZnaKVKFLlHdtFcUcmMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7c:f7:87:99:4b:be:04:c8:d0:c1:bf:29:f3:7f:5f:0e:91:38:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Validity Not Before: Jul 23 11:34:19 2026 GMT Not After : Jul 24 15:18:19 2026 GMT Subject: CN=B49E25F4C6739E8ED83AFD815E803ABBD31B9E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:99:69:0f:ba:9b:02:75:07:1f:47:2f:63: c4:a1:4f:7e:fe:f7:ac:84:5b:b7:52:f9:1f:bb:15: b8:2f:0a:ae:b0:a7:ae:5c:12:02:17:25:aa:59:a7: bf:ed:d7:f9:e3:1d:29:72:88:0b:97:f2:51:8d:f6: e5:fd:8a:d8:5f:b7:64:5e:7e:e2:14:32:f2:f7:84: 4d:8a:fa:58:af:90:65:6d:ba:85:29:ab:09:33:9f: 94:7e:7d:f5:cb:1c:e9:9d:be:9f:47:28:a0:af:81: 6b:51:0b:f1:e4:f3:f2:3e:7c:6e:db:ba:be:09:11: 13:18:6e:ef:89:88:1c:b5:f4:13:85:6b:a9:f3:0c: 8e:91:4c:2a:83:3e:d6:09:23:1e:91:7c:6a:24:9b: cb:ae:80:e4:af:d6:b8:4b:ea:b1:82:72:01:62:69: 5a:1f:2c:08:13:71:62:ba:79:77:7e:e4:1a:58:5a: 41:da:ad:7d:c2:d9:ed:5a:d7:0e:61:71:b7:1e:65: a3:45:63:58:82:2e:40:b7:3b:82:e1:f5:3e:b2:13: 6c:a3:a9:ad:99:43:db:ad:f4:b6:c9:af:7d:1a:ab: 2f:67:b4:cc:ae:9f:aa:92:21:60:d1:5e:43:a0:91: 22:65:b5:6a:55:a1:ee:83:36:f2:b2:16:d9:ec:4c: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9E:25:F4:C6:73:9E:8E:D8:3A:FD:81:5E:80:3A:BB:D3:1B:9E:0F X509v3 Authority Key Identifier: keyid:AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e8:65:57:72:07:07:69:54:bf:67:4a:89:1f:81:1a:93:a4: f9:7c:bd:0d:d5:40:e3:46:72:71:62:21:a4:5e:37:2a:01:3e: 4c:7b:c5:f9:0a:8c:2c:8b:66:3e:73:b1:65:da:a8:f7:09:5f: 06:ec:78:45:3b:c9:c8:9b:14:69:37:82:88:03:06:93:4b:6f: 78:cd:d2:2d:90:de:ad:2b:3d:71:be:62:9c:42:65:a3:0a:ca: 25:76:e9:ef:ef:cb:10:2c:ca:b7:db:b3:5d:8e:f6:3a:3c:35: 7f:b9:af:56:03:d5:cb:e6:8b:00:1d:b6:8d:37:3c:f0:38:99: 17:52:78:df:16:09:01:5a:be:42:95:c7:97:38:2d:f4:de:3e: 58:25:b8:fe:d7:b1:e8:79:69:a7:85:e2:d2:e2:3c:8b:75:fe: 4f:8d:d4:f6:73:71:da:df:8f:ba:80:02:a8:34:6f:d7:4d:d3: f1:2a:21:d2:51:f1:f0:f3:ea:75:6a:e9:38:b3:3b:bf:83:96: 32:9a:2f:f1:1c:78:2d:96:ac:df:22:98:b4:14:1c:3a:9a:a0: f9:d8:04:3f:ce:f5:6e:c4:55:4e:18:e2:35:7c:d1:b6:e8:ff: 68:a1:2b:85:65:95:49:46:b1:1a:f7:b8:82:93:cb:69:37:18: 8d:bf:6e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXz3h5lLvgTI0MG/KfN/Xw6ROGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5 NDM1N0U1QjAeFw0yNjA3MjMxMTM0MTlaFw0yNjA3MjQxNTE4MTlaMDMxMTAvBgNV BAMTKEI0OUUyNUY0QzY3MzlFOEVEODNBRkQ4MTVFODAzQUJCRDMxQjlFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdIplpD7qbAnUHH0cvY8ShT37+ 96yEW7dS+R+7FbgvCq6wp65cEgIXJapZp7/t1/njHSlyiAuX8lGN9uX9ithft2Re fuIUMvL3hE2K+livkGVtuoUpqwkzn5R+ffXLHOmdvp9HKKCvgWtRC/Hk8/I+fG7b ur4JERMYbu+JiBy19BOFa6nzDI6RTCqDPtYJIx6RfGokm8uugOSv1rhL6rGCcgFi aVofLAgTcWK6eXd+5BpYWkHarX3C2e1a1w5hcbceZaNFY1iCLkC3O4Lh9T6yE2yj qa2ZQ9ut9LbJr30aqy9ntMyun6qSIWDRXkOgkSJltWpVoe6DNvKyFtnsTHVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJ4l9MZzno7YOv2BXoA6u9Mbng8wHwYDVR0j BBgwFoAUrkBzvINOssC/kqecW17ZBZQ1flswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2UxZGViOTMtYzE5MC00NmVlLWJhODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4 MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5NDM1N0U1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTQwNzNCQzgzNEVCMkMwQkY5MkE3OUM1QjVFRDkwNTk0MzU3 RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5 MDU5NDM1N0U1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABroZVdyBwdpVL9nSokfgRqTpPl8vQ3VQONG cnFiIaReNyoBPkx7xfkKjCyLZj5zsWXaqPcJXwbseEU7ycibFGk3gogDBpNLb3jN 0i2Q3q0rPXG+YpxCZaMKyiV26e/vyxAsyrfbs12O9jo8NX+5r1YD1cvmiwAdto03 PPA4mRdSeN8WCQFavkKVx5c4LfTePlgluP7Xseh5aaeF4tLiPIt1/k+N1PZzcdrf j7qAAqg0b9dN0/EqIdJR8fDz6nVq6TizO7+DljKaL/EceC2WrN8imLQUHDqaoPnY BD/O9W7EVU4Y4jV80bbo/2ihK4VllUlGsRr3uIKTy2k3GI2/bi8= -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:10 2026 by rpki-client