$ rpki-client -vvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft File: AE03A0FB122D3B828822172D20A923BA84A5CB76.mft (raw, json) Hash identifier: qC3MB6QNbmZpRzhI7Zp5ncKU/HJEtz5UvA7+76eExXQ= Subject key identifier: 28:C9:3B:B8:DD:DF:99:83:64:49:80:AC:74:30:D8:08:BE:E7:A9:12 Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 Certificate issuer: /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Certificate serial: 275863254C5938304CC3186B2D97969F72CD3A1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:46:24 +0000 Manifest this update: Tue 12 May 2026 16:41:24 +0000 Manifest next update: Wed 13 May 2026 20:44:24 +0000 Files and hashes: 1: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=) 2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: sM8kT9+lnDp66j8gZ6lQEt5JkL6qeZtqa7PnwIaHyfU=) 3: AE03A0FB122D3B828822172D20A923BA84A5CB76.crl (hash: OfKsPmMNAbOVD86iw/V91iNM/N5nxuptOOyktFvEiFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:58:63:25:4c:59:38:30:4c:c3:18:6b:2d:97:96:9f:72:cd:3a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Validity Not Before: May 12 16:41:24 2026 GMT Not After : May 13 20:44:24 2026 GMT Subject: CN=28C93BB8DDDF9983644980AC7430D808BEE7A912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:0c:5a:73:d8:cd:fd:32:dc:3a:07:ee:73: f8:43:17:45:83:5f:73:40:2c:08:97:ae:11:b7:48: 70:5e:78:6b:9b:3b:7b:3c:d2:6d:e7:d7:01:38:9b: ae:1c:e5:10:7c:ab:47:92:52:c6:4c:54:7d:63:4d: 60:48:ec:50:0e:47:84:5e:96:90:3c:d7:da:fb:42: aa:3e:d3:2b:d1:48:a7:6c:f7:72:9a:92:47:a8:34: 67:f2:1f:c7:07:2a:80:cf:be:29:4d:06:b3:63:37: 31:92:b0:2f:2e:9a:f8:8e:f7:37:61:b7:8a:a2:80: 5a:0f:a1:70:7b:b2:e0:19:02:be:3a:48:b7:05:3a: 45:66:46:77:06:23:e3:6d:e3:ea:e3:51:a1:cd:47: 80:34:9c:b0:38:f6:b7:95:3d:09:e7:2a:c6:fd:44: 82:13:75:32:c0:f7:f0:16:82:10:e4:b9:5a:42:51: 18:e0:b0:23:54:f2:41:c6:2f:35:c9:bb:95:1e:95: 76:be:e4:f5:f7:05:d2:c3:8a:36:3b:86:72:84:86: 5c:dd:42:74:4a:b2:0d:25:30:13:9c:6b:b3:16:9d: ed:be:7d:77:b9:db:b9:24:3c:2c:5c:58:9b:63:d8: 2a:34:80:68:e1:c0:37:38:a2:e1:6a:8f:d6:19:9b: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C9:3B:B8:DD:DF:99:83:64:49:80:AC:74:30:D8:08:BE:E7:A9:12 X509v3 Authority Key Identifier: keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:56:b6:5f:db:82:b1:93:10:c9:c5:0b:e6:ef:b1:3b:bf:2f: cb:e0:c8:9a:21:08:c0:95:90:06:57:a5:1a:f4:30:a3:41:7e: 88:4c:24:39:c8:84:ca:e4:b7:43:bd:fe:d5:a4:40:d8:72:4a: 43:68:22:29:2e:e0:f0:61:ba:f1:ae:83:de:0e:d1:bf:0b:e7: ad:38:d2:4c:c9:60:40:cb:3f:0a:35:fd:ac:51:5f:2b:61:c7: aa:b5:ad:68:c9:75:72:a2:61:57:f6:8b:d8:c8:64:77:4a:ab: 61:62:89:50:53:0a:4d:d8:2d:d0:fd:4d:dc:57:f5:e5:c2:bb: 71:d1:dd:d2:79:5c:88:ba:42:a5:57:b9:9e:f3:27:b8:7e:15: 14:4c:57:2a:1b:6a:51:f8:9e:3c:07:72:dd:db:07:6e:86:4a: 8e:e0:60:4f:ed:0f:45:18:16:10:26:9e:b6:ee:92:ed:60:3e: ab:04:f0:2d:d7:ab:1e:98:b5:a4:59:66:c3:f2:6e:f4:cf:d1: f7:36:71:30:98:66:34:c3:8d:9a:14:78:d0:6f:9d:d1:40:89: 37:35:91:59:c6:23:d9:51:de:85:95:a8:25:a0:33:ec:a5:74: 4f:f0:20:77:a9:e6:e7:e1:82:cb:ee:93:fe:ac:ff:6f:05:c1: 7a:ca:d6:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1hjJUxZODBMwxhrLZeWn3LNOh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4 NEE1Q0I3NjAeFw0yNjA1MTIxNjQxMjRaFw0yNjA1MTMyMDQ0MjRaMDMxMTAvBgNV BAMTKDI4QzkzQkI4RERERjk5ODM2NDQ5ODBBQzc0MzBEODA4QkVFN0E5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxQxac9jN/TLcOgfuc/hDF0WD X3NALAiXrhG3SHBeeGubO3s80m3n1wE4m64c5RB8q0eSUsZMVH1jTWBI7FAOR4Re lpA819r7Qqo+0yvRSKds93KakkeoNGfyH8cHKoDPvilNBrNjNzGSsC8umviO9zdh t4qigFoPoXB7suAZAr46SLcFOkVmRncGI+Nt4+rjUaHNR4A0nLA49reVPQnnKsb9 RIITdTLA9/AWghDkuVpCURjgsCNU8kHGLzXJu5UelXa+5PX3BdLDijY7hnKEhlzd QnRKsg0lMBOca7MWne2+fXe527kkPCxcWJtj2Co0gGjhwDc4ouFqj9YZm0cbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMk7uN3fmYNkSYCsdDDYCL7nqRIwHwYDVR0j BBgwFoAUrgOg+xItO4KIIhctIKkjuoSly3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYxZTlkZTItYTRlYy00N2EyLTliYjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIx MjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4NEE1Q0I3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAzQTBGQjEyMkQzQjgyODgyMjE3MkQyMEE5MjNCQTg0QTVD Qjc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIz QkE4NEE1Q0I3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpWtl/bgrGTEMnFC+bvsTu/L8vgyJohCMCV kAZXpRr0MKNBfohMJDnIhMrkt0O9/tWkQNhySkNoIiku4PBhuvGug94O0b8L5604 0kzJYEDLPwo1/axRXythx6q1rWjJdXKiYVf2i9jIZHdKq2FiiVBTCk3YLdD9TdxX 9eXCu3HR3dJ5XIi6QqVXuZ7zJ7h+FRRMVyobalH4njwHct3bB26GSo7gYE/tD0UY FhAmnrbuku1gPqsE8C3Xqx6YtaRZZsPybvTP0fc2cTCYZjTDjZoUeNBvndFAiTc1 kVnGI9lR3oWVqCWgM+yldE/wIHep5ufhgsvuk/6s/28FwXrK1jo= -----END CERTIFICATE-----Generated at Tue May 12 22:50:03 2026 by rpki-client