$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: j+qKQpWzGdGque9iWQa10ntoz71+o9ENGjfgZgsVSbM= Subject key identifier: 00:93:4F:2B:54:85:43:42:93:D3:D8:2D:9E:2A:D5:49:41:98:9F:E1 Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 3E870CA22C041E2CCFADD365D23F12D56ED66533 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:17:40 +0000 Manifest this update: Thu 23 Jul 2026 10:12:40 +0000 Manifest next update: Fri 24 Jul 2026 13:27:40 +0000 Files and hashes: 1: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: 9I/Z63vT1rFb335j62hyiXX6eY0qc20hz2DQ3+5z0l8=) 2: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 3: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) 4: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) 5: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) 6: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:87:0c:a2:2c:04:1e:2c:cf:ad:d3:65:d2:3f:12:d5:6e:d6:65:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: Jul 23 10:12:40 2026 GMT Not After : Jul 24 13:27:40 2026 GMT Subject: CN=00934F2B5485434293D3D82D9E2AD54941989FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e9:bf:ba:d6:3b:47:1d:37:f5:2f:c5:d1:50: c5:07:d6:46:16:53:0d:85:c2:e3:ee:78:a7:5a:5a: 96:b5:da:c6:ce:53:29:f9:1d:e6:09:d8:37:50:e4: e2:6d:a4:be:69:8f:f9:3a:7e:03:4d:3c:81:a1:f4: 4f:26:37:72:a6:73:7c:32:47:20:bd:ee:11:34:e1: 52:55:0d:24:06:f1:90:86:70:ae:bd:50:fa:34:33: 5c:e8:de:a2:81:02:71:0b:e6:62:a4:68:b5:79:1d: 9e:2b:18:85:9a:45:60:09:21:4b:12:c1:49:7b:07: 65:ec:96:f1:8e:38:e4:2a:a3:83:82:79:82:c7:c2: a0:28:a6:fa:80:93:7b:8d:32:37:40:73:19:63:40: d7:03:3c:ed:94:e0:3c:0f:29:cb:ad:33:a0:ea:a9: b1:f1:1f:a0:a0:c4:9b:52:91:09:68:4b:07:48:56: 1a:47:ba:91:59:6f:d0:b9:89:0f:cf:4f:82:95:a5: bc:d8:9a:89:37:51:a6:81:b3:4f:dd:35:49:50:af: dc:bd:3d:59:cb:36:cc:83:40:ef:a6:b3:c9:2c:26: 28:72:83:7b:cc:9c:8d:bb:f9:48:da:02:b0:69:64: 99:00:b3:a0:04:59:fa:e9:81:2a:d2:a6:80:f4:be: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:93:4F:2B:54:85:43:42:93:D3:D8:2D:9E:2A:D5:49:41:98:9F:E1 X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:86:29:aa:ff:de:2b:ef:8d:df:ee:e2:7f:05:d0:c5:5a:92: 09:c6:05:09:e5:aa:51:04:91:03:2f:18:06:f3:c3:60:c1:26: b6:e8:0f:70:56:45:df:48:cc:1e:12:83:c1:c2:cd:9b:ff:d2: 8c:63:43:6e:b5:ea:3c:9b:b4:f4:2d:93:58:95:99:28:44:a9: d6:de:73:96:93:0f:eb:d2:36:c7:02:01:f7:63:b2:18:cc:68: 31:d0:73:47:d6:de:19:82:a1:df:dc:72:b1:d2:de:27:39:77: 9f:3d:5b:88:d6:e9:61:01:ec:0c:db:48:cb:83:33:f8:7f:fb: 86:bb:bd:7a:ee:09:84:fd:9d:d7:37:b3:8a:f2:81:b5:d9:b5: f8:c0:e5:31:1b:e2:69:29:c9:0a:f3:8b:0f:9a:8b:d1:7e:f5: 8e:4c:15:b1:87:24:9f:75:47:8a:06:30:4b:2d:d3:a4:9d:12: a3:86:f4:55:4f:65:6c:a9:de:17:5c:90:19:c1:17:74:2d:a7: 3b:71:60:78:c7:15:33:25:69:22:df:4c:e5:ff:d1:33:52:21: 48:d3:c8:ad:74:15:e2:0f:a7:db:ac:a1:45:c1:25:9a:4e:7e: 3e:b5:64:cd:4d:2a:3d:b4:d5:2b:81:8c:bc:00:bc:39:87:bd: d4:a5:68:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPocMoiwEHizPrdNl0j8S1W7WZTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjA3MjMxMDEyNDBaFw0yNjA3MjQxMzI3NDBaMDMxMTAvBgNV BAMTKDAwOTM0RjJCNTQ4NTQzNDI5M0QzRDgyRDlFMkFENTQ5NDE5ODlGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6b+61jtHHTf1L8XRUMUH1kYW Uw2FwuPueKdaWpa12sbOUyn5HeYJ2DdQ5OJtpL5pj/k6fgNNPIGh9E8mN3Kmc3wy RyC97hE04VJVDSQG8ZCGcK69UPo0M1zo3qKBAnEL5mKkaLV5HZ4rGIWaRWAJIUsS wUl7B2XslvGOOOQqo4OCeYLHwqAopvqAk3uNMjdAcxljQNcDPO2U4DwPKcutM6Dq qbHxH6CgxJtSkQloSwdIVhpHupFZb9C5iQ/PT4KVpbzYmok3UaaBs0/dNUlQr9y9 PVnLNsyDQO+ms8ksJihyg3vMnI27+UjaArBpZJkAs6AEWfrpgSrSpoD0viWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAJNPK1SFQ0KT09gtnirVSUGYn+EwHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+GKar/3ivvjd/u4n8F0MVakgnGBQnlqlEE kQMvGAbzw2DBJrboD3BWRd9IzB4Sg8HCzZv/0oxjQ2616jybtPQtk1iVmShEqdbe c5aTD+vSNscCAfdjshjMaDHQc0fW3hmCod/ccrHS3ic5d589W4jW6WEB7AzbSMuD M/h/+4a7vXruCYT9ndc3s4rygbXZtfjA5TEb4mkpyQrziw+ai9F+9Y5MFbGHJJ91 R4oGMEst06SdEqOG9FVPZWyp3hdckBnBF3QtpztxYHjHFTMlaSLfTOX/0TNSIUjT yK10FeIPp9usoUXBJZpOfj61ZM1NKj201SuBjLwAvDmHvdSlaDQ= -----END CERTIFICATE-----Generated at Fri Jul 24 01:16:54 2026 by rpki-client