$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft File: AE003B21AF12D58F10BE6F5545672EC8E6787080.mft (raw, json) Hash identifier: 4ElQNIDjSeCoKlcGmOlFwVFAVPMXpcE+sFBKwmW6Vl4= Subject key identifier: 4C:1C:1E:73:CE:3B:AD:45:FC:74:86:FF:78:49:71:0F:A0:DF:7B:0E Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 Certificate issuer: /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Certificate serial: 09F3FC00502E7D15001AD636600025210B17669F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:47:58 +0000 Manifest this update: Tue 12 May 2026 20:42:58 +0000 Manifest next update: Wed 13 May 2026 21:58:58 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: OU61hsQm7THl5FxVFWjY1+WDAX/SnAXM5H/7moze5/s=) 2: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=) 3: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=) 4: AE003B21AF12D58F10BE6F5545672EC8E6787080.crl (hash: 4/HvIQZoNbeh3J1+uI1REn6hW+qPvKXtXH51RPgrhc8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f3:fc:00:50:2e:7d:15:00:1a:d6:36:60:00:25:21:0b:17:66:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Validity Not Before: May 12 20:42:58 2026 GMT Not After : May 13 21:58:58 2026 GMT Subject: CN=4C1C1E73CE3BAD45FC7486FF7849710FA0DF7B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:75:ee:a8:1f:03:6a:a8:d9:af:e1:6d:2b: 9d:a8:39:99:1d:69:e3:1b:90:29:11:ef:93:f4:e0: c0:88:62:91:bc:28:0f:a7:cf:88:ab:f5:e0:fc:76: 9a:c7:f0:67:b0:58:eb:42:5e:c0:88:87:94:bd:ec: 6c:2e:a7:bb:ea:82:ac:7e:cd:86:a5:da:b5:88:b6: 41:df:5c:48:db:70:f6:63:fd:6e:a2:a1:b3:40:1b: 13:c5:59:52:ea:d1:5b:1d:f2:39:1f:6d:0d:09:b7: 2e:5d:4d:12:9f:7f:a8:6f:a6:1e:11:f9:da:f0:8a: 10:7b:c3:25:af:50:ef:4e:d7:3a:77:8d:9f:e1:80: e6:b0:a0:43:17:b8:98:15:a6:31:fd:eb:12:f3:e4: 74:71:15:f8:0c:b3:dc:39:1a:c0:9e:e5:f9:3e:c2: 1a:04:2a:ed:9a:5c:20:6f:d9:73:6e:45:48:61:4a: 9d:3b:1e:01:5c:34:63:17:6d:f5:47:33:3c:a4:80: fc:e3:67:17:e7:b2:51:2e:3e:4c:d9:84:f6:be:4b: 8c:e5:d9:f6:ac:05:2c:d5:17:4c:ad:c8:9b:4f:29: 42:31:fe:d4:a7:ba:62:a5:5c:71:78:4b:65:cd:3f: 2e:37:b0:75:2e:b2:d6:40:3b:f7:1c:ec:f4:23:72: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1C:1E:73:CE:3B:AD:45:FC:74:86:FF:78:49:71:0F:A0:DF:7B:0E X509v3 Authority Key Identifier: keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fb:66:89:8a:f5:6b:8f:9a:5a:ef:7c:00:51:c1:0d:f4:3d: b7:52:25:b4:0c:31:93:32:5b:bf:6a:83:47:e6:db:64:3a:42: 63:54:44:d1:ef:f5:76:8d:b9:3e:a4:b7:9e:6d:61:50:4b:d6: 52:e8:12:f3:f3:c7:2a:e1:be:08:d4:ea:9d:21:59:38:76:98: 18:b7:26:e0:b1:52:75:17:e5:95:52:75:d3:56:ba:1b:f5:db: 09:cd:0b:6d:eb:60:ea:22:3b:a7:48:c7:93:c9:c0:16:ea:79: dc:e9:42:f1:89:07:38:ad:a3:1d:b3:b0:62:80:64:80:7c:9f: 8b:4a:b7:2b:20:a3:0a:11:1f:a7:ba:9e:bc:c0:83:80:89:b8: b5:f1:ab:42:fa:4e:2f:65:94:89:45:0e:db:d5:48:1a:5a:13: 87:a2:06:15:a4:fb:c1:2b:e1:b7:44:3d:cd:c8:77:99:2b:a9: 1a:4d:c0:35:15:a6:1a:25:c1:7c:4e:e2:28:6b:30:6b:34:71: 53:e7:24:83:78:1f:cf:01:10:03:24:24:f5:73:fb:85:6e:6d: bf:a8:36:df:4c:bc:27:05:87:a9:23:ad:30:cd:34:7f:41:07: 45:ad:2b:26:06:f2:2d:e5:ad:3e:32:92:6d:47:b1:ab:cf:86: b1:d8:63:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfP8AFAufRUAGtY2YAAlIQsXZp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhF Njc4NzA4MDAeFw0yNjA1MTIyMDQyNThaFw0yNjA1MTMyMTU4NThaMDMxMTAvBgNV BAMTKDRDMUMxRTczQ0UzQkFENDVGQzc0ODZGRjc4NDk3MTBGQTBERjdCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/nXuqB8DaqjZr+FtK52oOZkd aeMbkCkR75P04MCIYpG8KA+nz4ir9eD8dprH8GewWOtCXsCIh5S97Gwup7vqgqx+ zYal2rWItkHfXEjbcPZj/W6iobNAGxPFWVLq0Vsd8jkfbQ0Jty5dTRKff6hvph4R +drwihB7wyWvUO9O1zp3jZ/hgOawoEMXuJgVpjH96xLz5HRxFfgMs9w5GsCe5fk+ whoEKu2aXCBv2XNuRUhhSp07HgFcNGMXbfVHMzykgPzjZxfnslEuPkzZhPa+S4zl 2fasBSzVF0ytyJtPKUIx/tSnumKlXHF4S2XNPy43sHUustZAO/cc7PQjcgC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTBwec847rUX8dIb/eElxD6Dfew4wHwYDVR0j BBgwFoAUrgA7Ia8S1Y8Qvm9VRWcuyOZ4cIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFB RjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhFNjc4NzA4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAwM0IyMUFGMTJENThGMTBCRTZGNTU0NTY3MkVDOEU2Nzg3 MDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJF QzhFNjc4NzA4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj7ZomK9WuPmlrvfABRwQ30PbdSJbQMMZMy W79qg0fm22Q6QmNURNHv9XaNuT6kt55tYVBL1lLoEvPzxyrhvgjU6p0hWTh2mBi3 JuCxUnUX5ZVSddNWuhv12wnNC23rYOoiO6dIx5PJwBbqedzpQvGJBzitox2zsGKA ZIB8n4tKtysgowoRH6e6nrzAg4CJuLXxq0L6Ti9llIlFDtvVSBpaE4eiBhWk+8Er 4bdEPc3Id5krqRpNwDUVpholwXxO4ihrMGs0cVPnJIN4H88BEAMkJPVz+4Vubb+o Nt9MvCcFh6kjrTDNNH9BB0WtKyYG8i3lrT4ykm1HsavPhrHYY0k= -----END CERTIFICATE-----Generated at Wed May 13 00:44:12 2026 by rpki-client