$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft File: AE003B21AF12D58F10BE6F5545672EC8E6787080.mft (raw, json) Hash identifier: VO0tEw8p5fPGKN6x4XjJZ3nJFqcrikXnrUm+gLk/muE= Subject key identifier: D2:6D:D9:D2:1E:D5:EC:63:4D:83:7E:9B:EC:1A:23:76:C9:4C:B3:77 Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 Certificate issuer: /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Certificate serial: 7088B149AECE345C19CDD191FC670B81B5354C1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 13:32:40 +0000 Manifest this update: Thu 24 Sep 2026 13:27:40 +0000 Manifest next update: Fri 25 Sep 2026 15:09:40 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=) 2: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: OU61hsQm7THl5FxVFWjY1+WDAX/SnAXM5H/7moze5/s=) 3: AE003B21AF12D58F10BE6F5545672EC8E6787080.crl (hash: mbli0jZ+qMgovQZp/PLDt67kz4VKWUb9oSU2bg07PBQ=) 4: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:88:b1:49:ae:ce:34:5c:19:cd:d1:91:fc:67:0b:81:b5:35:4c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Validity Not Before: Sep 24 13:27:40 2026 GMT Not After : Sep 25 15:09:40 2026 GMT Subject: CN=D26DD9D21ED5EC634D837E9BEC1A2376C94CB377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:31:6d:9d:0a:4c:91:57:aa:f6:cb:1e:89: 6a:5e:9a:ec:e6:53:d0:1d:78:90:a9:92:dd:bf:cc: 56:63:00:13:7e:d8:f2:35:49:df:7d:28:ef:11:2f: f5:10:87:f3:3b:11:0a:18:8e:0a:ee:f5:bd:7a:43: e0:f7:a2:dc:5b:ac:71:ff:24:9f:a2:c4:f5:a2:db: 4c:49:9f:a5:9b:91:ee:72:72:7e:da:2c:aa:ba:e7: 54:d5:6a:74:9d:2b:d0:26:36:58:95:02:95:a7:09: ed:5b:42:c9:28:e8:7c:db:d0:a0:f5:68:20:15:ac: 3f:90:4d:4c:b1:a4:a0:42:f6:ae:3b:62:88:7a:40: 27:3b:40:c8:bf:69:b3:f8:13:e9:88:f2:77:e9:77: d0:4a:ae:b7:ec:60:04:ca:43:6b:64:5f:94:23:b2: 42:21:f3:26:e2:e2:d3:19:33:ff:a5:11:0a:e4:89: cd:7d:84:82:b0:86:aa:28:3f:a0:f3:b1:ff:e8:e6: 1b:71:cf:a6:46:5c:4f:24:83:9f:2b:be:4b:5c:f7: 65:18:19:f8:80:bb:ff:76:f9:30:dc:d9:d1:13:f1: 57:df:4a:b2:3a:fb:09:29:87:e9:82:86:ef:fc:82: e4:32:58:03:4b:de:3a:b4:d4:94:3f:fc:50:32:8c: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:D9:D2:1E:D5:EC:63:4D:83:7E:9B:EC:1A:23:76:C9:4C:B3:77 X509v3 Authority Key Identifier: keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:30:6f:ce:3d:d3:dd:92:74:61:32:6f:40:21:47:65:e1:06: 50:ce:74:d7:4c:eb:7a:2f:96:eb:36:62:13:3f:2a:7f:75:2e: 53:63:1f:0b:37:f6:0c:3b:fa:44:05:47:96:ed:b5:c3:89:59: 09:0e:99:86:6c:52:a4:73:24:66:75:86:6e:24:1e:34:7d:24: c0:7a:ed:85:ab:0b:0a:22:6d:4a:af:31:c5:af:2e:08:33:9a: 1f:40:c2:24:86:42:76:4a:3f:86:22:46:af:2a:36:23:c2:ca: d3:57:8b:c7:2d:ba:cd:7c:15:69:87:db:fd:13:7f:a8:ad:80: eb:a4:c9:7a:db:bc:c4:f5:39:d3:30:b3:5d:e4:c1:af:df:db: 05:c5:24:07:68:05:27:bb:1a:64:f3:86:dc:96:4f:45:95:fc: 23:68:bc:4f:81:59:1e:82:9b:af:f1:13:42:89:52:8e:87:09: 8d:22:1c:18:d8:a9:78:5a:72:51:83:b0:16:66:da:26:db:ec: 6a:b1:80:c3:70:a4:75:05:e2:be:cf:3a:e6:87:4c:96:8e:0b: fb:0a:d9:4b:c5:7b:dd:f2:18:b5:12:7d:38:5b:e1:7c:04:64: aa:08:11:f7:da:b1:fc:98:55:5d:b9:2b:7b:3e:0d:d5:70:ea: a1:93:c5:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIixSa7ONFwZzdGR/GcLgbU1TBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhF Njc4NzA4MDAeFw0yNjA5MjQxMzI3NDBaFw0yNjA5MjUxNTA5NDBaMDMxMTAvBgNV BAMTKEQyNkREOUQyMUVENUVDNjM0RDgzN0U5QkVDMUEyMzc2Qzk0Q0IzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfZDFtnQpMkVeq9sseiWpemuzm U9AdeJCpkt2/zFZjABN+2PI1Sd99KO8RL/UQh/M7EQoYjgru9b16Q+D3otxbrHH/ JJ+ixPWi20xJn6Wbke5ycn7aLKq651TVanSdK9AmNliVApWnCe1bQsko6Hzb0KD1 aCAVrD+QTUyxpKBC9q47Yoh6QCc7QMi/abP4E+mI8nfpd9BKrrfsYATKQ2tkX5Qj skIh8ybi4tMZM/+lEQrkic19hIKwhqooP6Dzsf/o5htxz6ZGXE8kg58rvktc92UY GfiAu/92+TDc2dET8VffSrI6+wkph+mChu/8guQyWANL3jq01JQ//FAyjCFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0m3Z0h7V7GNNg36b7BojdslMs3cwHwYDVR0j BBgwFoAUrgA7Ia8S1Y8Qvm9VRWcuyOZ4cIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFB RjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhFNjc4NzA4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAwM0IyMUFGMTJENThGMTBCRTZGNTU0NTY3MkVDOEU2Nzg3 MDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJF QzhFNjc4NzA4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0wb849092SdGEyb0AhR2XhBlDOdNdM63ov lus2YhM/Kn91LlNjHws39gw7+kQFR5bttcOJWQkOmYZsUqRzJGZ1hm4kHjR9JMB6 7YWrCwoibUqvMcWvLggzmh9AwiSGQnZKP4YiRq8qNiPCytNXi8ctus18FWmH2/0T f6itgOukyXrbvMT1OdMws13kwa/f2wXFJAdoBSe7GmTzhtyWT0WV/CNovE+BWR6C m6/xE0KJUo6HCY0iHBjYqXhaclGDsBZm2ibb7GqxgMNwpHUF4r7POuaHTJaOC/sK 2UvFe93yGLUSfThb4XwEZKoIEffasfyYVV25K3s+DdVw6qGTxT0= -----END CERTIFICATE-----Generated at Fri Sep 25 04:46:16 2026 by rpki-client