$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft File: AE03A0FB122D3B828822172D20A923BA84A5CB76.mft (raw, json) Hash identifier: sDfzE7OaqcI67d6yNKqj1Nwj3g3461um3w42TX7iZds= Subject key identifier: 1A:2D:09:33:85:30:11:5A:A2:D1:EA:9E:DF:65:34:F2:64:4B:0F:06 Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 Certificate issuer: /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Certificate serial: 4674E6ED2B88CD455D56445F574C567A8F9112A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 22:43:37 +0000 Manifest this update: Thu 24 Sep 2026 22:38:37 +0000 Manifest next update: Sat 26 Sep 2026 00:56:37 +0000 Files and hashes: 1: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: sM8kT9+lnDp66j8gZ6lQEt5JkL6qeZtqa7PnwIaHyfU=) 2: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=) 3: AE03A0FB122D3B828822172D20A923BA84A5CB76.crl (hash: SWddqwovhRxncMr4CD+x5un3XFa0XcroTSThNd5WIOU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:74:e6:ed:2b:88:cd:45:5d:56:44:5f:57:4c:56:7a:8f:91:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Validity Not Before: Sep 24 22:38:37 2026 GMT Not After : Sep 26 00:56:37 2026 GMT Subject: CN=1A2D09338530115AA2D1EA9EDF6534F2644B0F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:ed:75:98:dc:af:6f:9c:01:e2:91:8f:39: ae:3b:de:7c:30:06:df:d7:18:57:0d:1a:6f:07:ec: 04:3b:a5:74:37:92:34:87:b9:95:1c:72:f9:00:77: e5:0d:f2:a9:a8:fa:14:2c:2a:d2:13:3a:82:cd:2f: c6:c8:77:a8:03:43:66:ec:f8:7e:f4:39:85:6a:71: a0:9a:eb:b7:5b:80:57:8c:75:62:06:dc:2a:a5:3e: d6:65:9f:0a:35:a3:f8:52:2d:91:75:68:68:dc:29: 7c:8b:58:63:fc:88:18:4a:b6:66:19:b8:d1:d7:0e: 7d:64:ee:c2:f9:4b:57:c4:be:2d:c5:b0:d1:bb:59: f7:b3:2c:fe:5c:7f:a7:fc:a5:cd:33:91:42:dc:4d: b3:8e:fb:2e:e8:10:07:e6:cf:6b:3f:db:24:23:6d: 2f:5a:bd:7b:ab:60:a2:14:c4:dd:48:b2:dc:39:b0: 13:0f:44:50:60:8a:a2:83:5f:7a:ab:2d:14:99:96: 58:80:19:c6:f4:13:aa:d1:9f:5d:8b:ae:16:15:c9: 06:b9:e5:a7:8c:89:d7:84:44:bc:8d:36:1e:09:1d: 1d:dd:1c:3d:60:82:7f:15:e1:11:0c:86:7e:b6:db: 7f:16:c2:38:4c:30:19:9c:58:04:f5:33:96:90:bd: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2D:09:33:85:30:11:5A:A2:D1:EA:9E:DF:65:34:F2:64:4B:0F:06 X509v3 Authority Key Identifier: keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:09:fb:86:eb:b8:58:fb:67:b6:2f:6d:6d:51:0d:31:3c:96: 48:2d:68:b5:3e:82:8f:54:f6:8a:3d:1e:6e:f1:c4:b8:75:ed: f3:6b:b9:6e:3d:a8:f5:44:66:5d:67:aa:1a:aa:f1:cd:83:b5: 72:90:a4:ca:7a:03:9b:a7:09:ec:f8:cd:2d:3c:8a:3e:11:1c: 34:00:a3:ab:88:dc:53:cc:1b:44:e0:db:09:94:24:06:b4:d1: 95:41:28:7c:3b:80:02:6c:67:2f:c0:49:1b:29:25:e1:e3:77: 28:2d:14:ef:53:9b:78:42:a0:eb:29:d3:8b:49:d3:38:63:e3: 6e:7f:06:9d:e2:fa:9d:3e:ee:76:71:29:2e:5e:98:b1:09:fa: 7b:95:89:fa:39:84:c3:8b:7e:5d:15:de:47:92:11:9b:2f:45: 87:46:3e:a3:f7:7b:d2:7b:a8:92:ce:e5:e5:89:08:83:df:75: 28:73:27:6b:bb:c4:1b:c3:ee:3a:42:8b:16:fc:fe:00:f7:ef: d2:32:1e:51:d3:7d:46:4a:6f:86:77:a7:8a:eb:a4:6a:49:36: b2:b5:a4:76:d3:ff:f9:bb:23:e5:36:a4:ec:69:dd:d9:25:f0: 85:ae:05:6e:87:ff:43:6a:4e:0b:c8:2c:87:9d:ec:7a:d3:7a: 46:97:80:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnTm7SuIzUVdVkRfV0xWeo+REqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4 NEE1Q0I3NjAeFw0yNjA5MjQyMjM4MzdaFw0yNjA5MjYwMDU2MzdaMDMxMTAvBgNV BAMTKDFBMkQwOTMzODUzMDExNUFBMkQxRUE5RURGNjUzNEYyNjQ0QjBGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/O11mNyvb5wB4pGPOa473nww Bt/XGFcNGm8H7AQ7pXQ3kjSHuZUccvkAd+UN8qmo+hQsKtITOoLNL8bId6gDQ2bs +H70OYVqcaCa67dbgFeMdWIG3CqlPtZlnwo1o/hSLZF1aGjcKXyLWGP8iBhKtmYZ uNHXDn1k7sL5S1fEvi3FsNG7WfezLP5cf6f8pc0zkULcTbOO+y7oEAfmz2s/2yQj bS9avXurYKIUxN1Istw5sBMPRFBgiqKDX3qrLRSZlliAGcb0E6rRn12LrhYVyQa5 5aeMideERLyNNh4JHR3dHD1ggn8V4REMhn62238WwjhMMBmcWAT1M5aQveW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGi0JM4UwEVqi0eqe32U08mRLDwYwHwYDVR0j BBgwFoAUrgOg+xItO4KIIhctIKkjuoSly3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYxZTlkZTItYTRlYy00N2EyLTliYjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIx MjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4NEE1Q0I3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAzQTBGQjEyMkQzQjgyODgyMjE3MkQyMEE5MjNCQTg0QTVD Qjc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIz QkE4NEE1Q0I3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAJ+4bruFj7Z7YvbW1RDTE8lkgtaLU+go9U 9oo9Hm7xxLh17fNruW49qPVEZl1nqhqq8c2DtXKQpMp6A5unCez4zS08ij4RHDQA o6uI3FPMG0Tg2wmUJAa00ZVBKHw7gAJsZy/ASRspJeHjdygtFO9Tm3hCoOsp04tJ 0zhj425/Bp3i+p0+7nZxKS5emLEJ+nuVifo5hMOLfl0V3keSEZsvRYdGPqP3e9J7 qJLO5eWJCIPfdShzJ2u7xBvD7jpCixb8/gD379IyHlHTfUZKb4Z3p4rrpGpJNrK1 pHbT//m7I+U2pOxp3dkl8IWuBW6H/0NqTgvILIed7HrTekaXgHA= -----END CERTIFICATE-----Generated at Fri Sep 25 17:40:29 2026 by rpki-client