$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft File: AE003B21AF12D58F10BE6F5545672EC8E6787080.mft (raw, json) Hash identifier: NAotukrT9oUhsP9RajxHHSt6UG0Gce+07cttaGH/Ngw= Subject key identifier: EE:55:BE:CA:73:FB:A1:25:70:74:E8:55:24:98:7E:E8:04:D1:AA:AC Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 Certificate issuer: /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Certificate serial: 7857D125856365E6D412DEB25640506FD7EC9E3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 21:21:04 +0000 Manifest this update: Thu 23 Jul 2026 21:16:04 +0000 Manifest next update: Fri 24 Jul 2026 21:53:04 +0000 Files and hashes: 1: AE003B21AF12D58F10BE6F5545672EC8E6787080.crl (hash: cAir4jC2z1/Z6ZoJVgLvpVtHaULFk20xQCCBV3eCh0k=) 2: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: OU61hsQm7THl5FxVFWjY1+WDAX/SnAXM5H/7moze5/s=) 3: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=) 4: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:57:d1:25:85:63:65:e6:d4:12:de:b2:56:40:50:6f:d7:ec:9e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Validity Not Before: Jul 23 21:16:04 2026 GMT Not After : Jul 24 21:53:04 2026 GMT Subject: CN=EE55BECA73FBA1257074E85524987EE804D1AAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:a1:be:26:5e:01:59:92:04:00:2a:e3:d4: d1:b3:97:94:cf:ee:fc:6c:25:45:ac:ff:6e:5d:4b: 8f:e1:49:b5:ff:d4:3b:30:8b:a6:04:08:28:62:12: 5e:21:28:d8:0a:83:74:b4:76:b5:8d:c5:46:6e:8a: ed:b9:b4:18:8d:15:1a:c6:53:c8:40:d7:52:30:4b: 5b:82:9a:f1:19:88:7a:7c:4d:e1:e2:c0:ba:05:98: 9e:35:0e:8b:aa:f2:49:69:72:46:6a:f6:5c:77:07: 9a:37:03:91:04:b6:47:ca:67:1b:99:bf:33:9e:0f: 69:bf:d4:35:13:f4:2d:49:71:8d:33:4e:28:63:50: 87:c7:fa:6f:23:11:c9:bf:6b:ac:c8:b0:7a:14:c1: e9:31:e3:9d:3f:0c:eb:34:64:3f:7b:a0:d0:f6:4d: 5d:a1:e5:68:a7:d4:46:cc:97:43:08:c2:17:0e:dc: 00:d9:6e:8a:62:c1:f9:71:b4:90:f0:45:6d:73:04: c4:30:44:14:0b:d8:40:8b:0a:a9:8f:83:af:66:a0: dd:cd:45:bd:cf:60:c5:d5:aa:02:58:e8:39:70:f1: 50:b0:81:cd:d9:a4:ab:31:b8:ad:a5:45:c5:06:91: 4d:3f:a4:f8:a9:7f:9e:2f:fe:75:a4:65:09:b0:d0: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:55:BE:CA:73:FB:A1:25:70:74:E8:55:24:98:7E:E8:04:D1:AA:AC X509v3 Authority Key Identifier: keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:73:c0:f8:2c:36:37:36:12:ab:ab:1a:fe:19:5f:19:27:51: 45:84:b3:41:f6:d3:6f:53:7a:76:e5:97:cb:0d:c0:73:3a:28: 86:dd:fa:04:11:4e:39:57:6c:86:48:b2:54:bd:68:14:33:29: 79:b3:8e:c1:65:79:a2:35:fb:e5:f9:f9:ad:9e:71:16:06:b0: 6e:2b:5a:5e:3d:63:24:4d:a7:20:6f:eb:18:79:3e:bf:7c:f4: 94:38:23:d7:c2:f6:f4:51:3d:f3:3c:98:0c:10:e4:b5:66:85: a3:3f:37:c9:84:95:33:99:7b:48:8f:ed:cc:1c:45:fa:fd:ef: a6:f7:61:19:17:cf:b2:da:24:14:6a:75:0a:3e:ee:0a:d9:e9: 63:04:d9:a9:63:2d:79:10:89:53:7e:da:8a:64:7b:9a:5a:59: bf:91:50:43:73:5f:3b:94:4a:6e:bb:ce:5d:83:b1:24:0b:17: 1c:2c:b7:d8:1c:4a:6b:83:23:7c:63:66:34:06:b0:08:2c:49: 78:81:aa:5f:09:1c:aa:f3:20:62:92:53:63:7f:90:7b:52:cd: 86:6e:ec:c3:52:27:36:d1:cb:06:17:96:4b:11:68:85:cf:01: c5:61:22:77:24:62:a2:2d:9e:7a:42:ed:32:d5:68:8c:5d:ce: ab:68:62:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFfRJYVjZebUEt6yVkBQb9fsnjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhF Njc4NzA4MDAeFw0yNjA3MjMyMTE2MDRaFw0yNjA3MjQyMTUzMDRaMDMxMTAvBgNV BAMTKEVFNTVCRUNBNzNGQkExMjU3MDc0RTg1NTI0OTg3RUU4MDREMUFBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWB6G+Jl4BWZIEACrj1NGzl5TP 7vxsJUWs/25dS4/hSbX/1Dswi6YECChiEl4hKNgKg3S0drWNxUZuiu25tBiNFRrG U8hA11IwS1uCmvEZiHp8TeHiwLoFmJ41Douq8klpckZq9lx3B5o3A5EEtkfKZxuZ vzOeD2m/1DUT9C1JcY0zTihjUIfH+m8jEcm/a6zIsHoUwekx450/DOs0ZD97oND2 TV2h5Win1EbMl0MIwhcO3ADZbopiwflxtJDwRW1zBMQwRBQL2ECLCqmPg69moN3N Rb3PYMXVqgJY6Dlw8VCwgc3ZpKsxuK2lRcUGkU0/pPipf54v/nWkZQmw0Ex9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7lW+ynP7oSVwdOhVJJh+6ATRqqwwHwYDVR0j BBgwFoAUrgA7Ia8S1Y8Qvm9VRWcuyOZ4cIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFB RjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhFNjc4NzA4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAwM0IyMUFGMTJENThGMTBCRTZGNTU0NTY3MkVDOEU2Nzg3 MDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJF QzhFNjc4NzA4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApzwPgsNjc2EqurGv4ZXxknUUWEs0H2029T enbll8sNwHM6KIbd+gQRTjlXbIZIslS9aBQzKXmzjsFleaI1++X5+a2ecRYGsG4r Wl49YyRNpyBv6xh5Pr989JQ4I9fC9vRRPfM8mAwQ5LVmhaM/N8mElTOZe0iP7cwc Rfr976b3YRkXz7LaJBRqdQo+7grZ6WME2aljLXkQiVN+2opke5paWb+RUENzXzuU Sm67zl2DsSQLFxwst9gcSmuDI3xjZjQGsAgsSXiBql8JHKrzIGKSU2N/kHtSzYZu 7MNSJzbRywYXlksRaIXPAcVhInckYqItnnpC7TLVaIxdzqtoYjw= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:17 2026 by rpki-client