$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: 3zVxnesqmPJtX7HaDSDf3O4WuKNnmYdB+6FmflFYbIg= Subject key identifier: FF:79:C8:AB:E4:21:58:C0:57:38:96:F0:94:C5:5A:73:8E:EF:C9:DD Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 0F84D695480C9F29A1CD3DF26459378F542ABCB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:15:05 +0000 Manifest this update: Tue 12 May 2026 19:10:05 +0000 Manifest next update: Wed 13 May 2026 22:07:05 +0000 Files and hashes: 1: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) 2: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 3: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) 4: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: PvIDnZ16xukfGRh7gmPSumwYAtCmAxLT4JnBRfRqIbc=) 5: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) 6: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:84:d6:95:48:0c:9f:29:a1:cd:3d:f2:64:59:37:8f:54:2a:bc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: May 12 19:10:05 2026 GMT Not After : May 13 22:07:05 2026 GMT Subject: CN=FF79C8ABE42158C0573896F094C55A738EEFC9DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:aa:8d:a2:97:e6:56:8a:8f:2d:57:96:45: c0:de:28:15:97:b8:f0:ac:0b:80:29:5e:c4:8b:e6: 88:3d:3e:62:42:fc:87:24:85:58:5d:4a:92:27:d2: d4:d3:f8:46:64:8c:39:42:ca:18:71:e5:c1:4f:a8: 7f:9a:e5:46:67:60:75:b0:35:b9:ca:f1:2b:7b:76: 21:16:e2:98:49:f1:ea:a8:1f:57:6c:d7:53:7b:06: 0c:51:6b:79:37:e3:7e:12:73:0f:e1:79:10:49:d6: 58:c4:95:03:fc:27:e2:69:e5:a5:50:f6:c5:8c:78: 09:df:e8:b0:f7:f7:bf:3c:b5:48:3a:96:7f:f4:ff: e5:5d:9f:6d:48:d3:47:39:04:83:4b:af:a7:9a:df: c2:b9:24:28:8d:b0:82:fc:5a:1e:fd:e0:65:a5:7c: b2:85:4b:4c:3f:a2:d4:1a:9a:b0:e5:88:21:79:19: f7:b2:fd:81:e4:63:04:1a:2c:94:e6:de:81:93:37: 8a:b8:c2:bb:53:8e:10:26:03:6e:9d:32:24:34:3e: cf:c4:79:bd:72:7c:12:3f:38:c6:2b:cb:1d:12:2a: f7:5a:ae:fe:8f:37:55:4f:d3:2a:14:ae:e8:e6:21: b3:ad:8c:c0:3b:b9:7f:dc:09:3e:7f:f0:03:fc:01: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:C8:AB:E4:21:58:C0:57:38:96:F0:94:C5:5A:73:8E:EF:C9:DD X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:05:28:39:a7:fa:ce:c8:04:5d:c3:f2:e1:0e:b3:c6:bb:f7: 30:13:50:8a:cc:b2:4c:a6:d3:e7:85:9c:73:d1:e7:54:ed:47: 8c:17:3b:2b:4a:2a:75:86:20:34:53:d2:17:80:32:fc:5a:11: 0e:c7:e3:88:bf:80:c8:f9:22:c5:54:e9:e5:00:8b:40:c7:7b: 0f:80:c5:a7:68:b8:75:55:11:c9:01:fc:be:b1:b4:71:c9:72: 77:9d:fb:20:75:24:b5:cb:6c:fd:04:ff:4a:d8:ad:74:86:40: 34:1e:2a:55:65:fd:82:14:69:60:80:b4:87:a3:c0:a5:84:d2: 57:b4:10:7c:d2:02:ee:38:c4:45:6c:a1:b9:05:9d:e9:1f:9d: a3:6a:ee:4e:1e:e8:68:65:f7:64:d6:05:c6:f3:d9:47:7b:b1: 51:1a:50:c8:5f:ea:34:15:1a:ed:6c:d4:d3:ae:e6:37:c7:f6: 42:b9:31:63:02:c1:30:5b:7d:31:e2:dd:68:b5:40:b5:d4:a4: 9e:b5:fc:d4:83:ba:74:e3:d7:d0:c7:f1:fd:b5:8d:c2:8a:0a: c8:41:d8:a7:71:de:39:72:6b:2b:0b:48:45:52:06:ac:2d:ba: 4a:51:2b:6f:a4:8e:ac:c8:31:07:90:12:f1:bf:b3:f7:41:bf: de:15:37:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4TWlUgMnymhzT3yZFk3j1QqvLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjA1MTIxOTEwMDVaFw0yNjA1MTMyMjA3MDVaMDMxMTAvBgNV BAMTKEZGNzlDOEFCRTQyMTU4QzA1NzM4OTZGMDk0QzU1QTczOEVFRkM5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/qqNopfmVoqPLVeWRcDeKBWX uPCsC4ApXsSL5og9PmJC/IckhVhdSpIn0tTT+EZkjDlCyhhx5cFPqH+a5UZnYHWw NbnK8St7diEW4phJ8eqoH1ds11N7BgxRa3k3434Scw/heRBJ1ljElQP8J+Jp5aVQ 9sWMeAnf6LD39788tUg6ln/0/+Vdn21I00c5BINLr6ea38K5JCiNsIL8Wh794GWl fLKFS0w/otQamrDliCF5Gfey/YHkYwQaLJTm3oGTN4q4wrtTjhAmA26dMiQ0Ps/E eb1yfBI/OMYryx0SKvdarv6PN1VP0yoUrujmIbOtjMA7uX/cCT5/8AP8ATHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3nIq+QhWMBXOJbwlMVac47vyd0wHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUFKDmn+s7IBF3D8uEOs8a79zATUIrMskym 0+eFnHPR51TtR4wXOytKKnWGIDRT0heAMvxaEQ7H44i/gMj5IsVU6eUAi0DHew+A xadouHVVEckB/L6xtHHJcned+yB1JLXLbP0E/0rYrXSGQDQeKlVl/YIUaWCAtIej wKWE0le0EHzSAu44xEVsobkFnekfnaNq7k4e6Ghl92TWBcbz2Ud7sVEaUMhf6jQV Gu1s1NOu5jfH9kK5MWMCwTBbfTHi3Wi1QLXUpJ61/NSDunTj19DH8f21jcKKCshB 2Kdx3jlyaysLSEVSBqwtukpRK2+kjqzIMQeQEvG/s/dBv94VN+g= -----END CERTIFICATE-----Generated at Wed May 13 01:06:39 2026 by rpki-client