$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: RfmqAyGXlTniGCK+j0HrvCBqSHtxrXFoW0mzfdD5QHI= Subject key identifier: 9C:89:4F:34:AC:11:14:30:1D:9B:C8:43:FD:68:B3:BC:2C:A7:FF:0C Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 422FCCE60ED3A5450E50F01AC66794A3611EBC8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 07:51:02 +0000 Manifest this update: Wed 23 Sep 2026 07:46:02 +0000 Manifest next update: Thu 24 Sep 2026 10:58:02 +0000 Files and hashes: 1: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) 2: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: HrjVrVRmfFEQQBL6gFyopDSSohpLQQ5l/lg+izZbJds=) 3: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 4: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) 5: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) 6: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2f:cc:e6:0e:d3:a5:45:0e:50:f0:1a:c6:67:94:a3:61:1e:bc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: Sep 23 07:46:02 2026 GMT Not After : Sep 24 10:58:02 2026 GMT Subject: CN=9C894F34AC1114301D9BC843FD68B3BC2CA7FF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:03:09:db:f8:59:9b:83:e8:a0:a6:f0:fa: 95:35:93:fc:c0:ce:e1:05:5e:44:11:da:ec:9a:2a: 0d:41:e5:a1:6c:bb:e0:fc:99:da:b6:58:8b:62:19: dd:b3:37:cd:bc:80:f7:e5:e7:23:35:41:47:9c:19: f4:22:45:74:23:dc:60:2a:c6:91:e1:95:95:41:a6: e4:e9:ea:f7:28:ea:61:2d:99:90:c6:3e:25:d1:05: 5b:a6:85:f5:7f:4c:58:c3:23:c2:f1:a5:5f:2e:c3: c4:ba:4d:aa:c7:88:55:de:8c:62:4d:6a:99:c0:2a: 86:84:71:3f:88:28:75:cd:c4:7e:f0:3d:47:27:6b: ac:8c:ba:42:51:12:04:89:9a:d0:9b:38:8a:39:4e: e9:e1:11:cd:5c:47:d1:10:cf:c2:2b:4d:7c:4b:c9: d5:69:6f:59:30:3c:ec:2f:c0:22:5c:a2:da:39:52: ff:21:cf:fd:41:08:62:49:33:9a:f7:5e:62:cf:a5: f9:79:b0:06:11:7b:71:6a:c4:54:0a:0d:e9:d7:fb: ed:9b:52:e4:01:60:0c:e9:31:ca:b0:3d:a8:d2:4c: c4:d9:92:6f:0e:34:b1:c9:b8:7d:7e:7f:39:e5:38: 95:2c:12:6a:b4:c5:5d:dd:90:8d:67:5d:c9:d1:1e: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:89:4F:34:AC:11:14:30:1D:9B:C8:43:FD:68:B3:BC:2C:A7:FF:0C X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:46:eb:76:6d:9d:7e:ee:1b:23:91:45:40:d5:eb:9a:81:16: f3:14:f1:3d:6c:ec:c6:90:80:d3:e5:70:44:01:4d:ab:67:6c: 0b:44:76:47:6f:53:a6:da:4e:58:04:d1:d1:34:06:fb:78:4d: 65:48:9b:7d:10:48:3b:a5:cd:70:26:c1:57:47:15:d4:9e:d2: 7b:ab:0d:f3:ed:b2:49:5e:1b:bd:ce:85:31:ae:e9:de:5a:4c: f0:39:fb:c1:57:ea:05:37:64:de:f8:5c:a4:60:1f:1d:ed:35: 9b:e5:09:7c:f8:0b:5b:cb:7e:ab:e1:ea:37:39:fd:e1:47:48: 9d:4d:03:34:e2:a7:2e:90:f1:dd:30:50:ac:92:1a:83:f0:8e: 44:41:2f:bb:54:c2:41:da:e3:4d:51:5d:7f:7c:cc:87:8c:8b: fe:4a:27:ee:39:e1:8b:66:4c:12:64:ce:3d:de:0f:03:b0:bf: ee:94:12:93:1a:14:4d:95:bd:8f:2e:31:03:28:71:35:e4:7e: 16:d1:61:72:3d:a8:00:a1:18:1e:b6:55:08:3c:30:89:71:0c: 47:b4:da:69:c1:c6:a4:30:cf:86:f0:8f:27:e7:e4:2b:c0:11: 1f:1c:59:d0:0b:cc:42:0c:ce:30:ec:f3:26:69:b2:fe:5d:f7: 38:13:72:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQi/M5g7TpUUOUPAaxmeUo2EevI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjA5MjMwNzQ2MDJaFw0yNjA5MjQxMDU4MDJaMDMxMTAvBgNV BAMTKDlDODk0RjM0QUMxMTE0MzAxRDlCQzg0M0ZENjhCM0JDMkNBN0ZGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNgMJ2/hZm4PooKbw+pU1k/zA zuEFXkQR2uyaKg1B5aFsu+D8mdq2WItiGd2zN828gPfl5yM1QUecGfQiRXQj3GAq xpHhlZVBpuTp6vco6mEtmZDGPiXRBVumhfV/TFjDI8LxpV8uw8S6TarHiFXejGJN apnAKoaEcT+IKHXNxH7wPUcna6yMukJREgSJmtCbOIo5TunhEc1cR9EQz8IrTXxL ydVpb1kwPOwvwCJcoto5Uv8hz/1BCGJJM5r3XmLPpfl5sAYRe3FqxFQKDenX++2b UuQBYAzpMcqwPajSTMTZkm8ONLHJuH1+fznlOJUsEmq0xV3dkI1nXcnRHuOjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnIlPNKwRFDAdm8hD/WizvCyn/wwwHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBG63ZtnX7uGyORRUDV65qBFvMU8T1s7MaQ gNPlcEQBTatnbAtEdkdvU6baTlgE0dE0Bvt4TWVIm30QSDulzXAmwVdHFdSe0nur DfPtskleG73OhTGu6d5aTPA5+8FX6gU3ZN74XKRgHx3tNZvlCXz4C1vLfqvh6jc5 /eFHSJ1NAzTipy6Q8d0wUKySGoPwjkRBL7tUwkHa401RXX98zIeMi/5KJ+454Ytm TBJkzj3eDwOwv+6UEpMaFE2VvY8uMQMocTXkfhbRYXI9qAChGB62VQg8MIlxDEe0 2mnBxqQwz4bwjyfn5CvAER8cWdALzEIMzjDs8yZpsv5d9zgTcpE= -----END CERTIFICATE-----Generated at Thu Sep 24 02:30:20 2026 by rpki-client