$ rpki-client -vvf rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft File: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft (raw, json) Hash identifier: oiUqKvIs7lx7kzoz3fHc2RotE0U/thm+8fhp3HMIfPI= Subject key identifier: 18:76:8E:BA:43:A6:DC:A8:02:B9:5E:41:5C:79:91:64:31:0D:85:41 Authority key identifier: AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F Certificate issuer: /CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Certificate serial: 61CFA2E9DF93C22C2A4BF5FBFF73D387D1453CC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:04:31 +0000 Manifest this update: Tue 12 May 2026 07:59:31 +0000 Manifest next update: Wed 13 May 2026 11:01:31 +0000 Files and hashes: 1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: CU3XMv/aCTAU0lNSmPec78wDsAVLMqlo9Sb+WUKv5ZY=) 2: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl (hash: W30TEPAPipWuDokI/jqcSF5acMwLgcALicl+KTybx4k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cf:a2:e9:df:93:c2:2c:2a:4b:f5:fb:ff:73:d3:87:d1:45:3c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Validity Not Before: May 12 07:59:31 2026 GMT Not After : May 13 11:01:31 2026 GMT Subject: CN=18768EBA43A6DCA802B95E415C799164310D8541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:34:00:f5:0f:58:0c:d4:cd:8c:ab:2d:f3: 33:97:20:2a:2e:38:0b:61:d3:32:8f:2f:d8:fa:90: b4:b8:f3:94:26:d8:9f:17:55:87:b2:bc:aa:d9:f9: 49:e4:c6:3c:c6:8c:57:29:2d:7e:22:1b:5a:fa:f1: 10:60:89:ab:32:b0:45:71:77:d9:3f:0e:50:fc:f6: 60:a6:da:8a:91:c8:b8:46:cf:34:a1:dd:03:dc:75: 59:c7:aa:92:9c:cd:4a:21:da:38:3f:d2:bf:0f:21: b8:d6:75:58:42:ed:b3:a9:03:d7:8c:95:98:d9:5c: fd:bd:4e:90:92:44:8f:2d:7c:21:6a:4e:b7:aa:09: cd:e7:dd:b9:26:e9:ad:a8:4d:44:77:79:a9:14:70: f1:a9:f0:00:86:9a:b2:77:e8:70:35:a5:c7:7e:a9: 58:2e:a3:69:b9:a7:b3:d9:e9:b0:b6:2b:09:e1:45: 38:51:be:bc:bf:6a:7e:5c:86:a9:72:f5:3e:21:78: 54:15:54:64:7e:6f:68:59:bb:53:96:3f:d9:b6:79: 8f:dd:41:9b:d0:21:5b:b4:de:9f:88:bb:49:dd:0e: 7d:33:db:61:b2:11:9a:4b:73:5d:af:2c:8f:75:0b: db:5d:23:9b:2e:d4:42:c1:8f:11:9e:97:f3:e0:42: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:76:8E:BA:43:A6:DC:A8:02:B9:5E:41:5C:79:91:64:31:0D:85:41 X509v3 Authority Key Identifier: keyid:AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ce:9f:28:c0:d5:38:02:4e:a7:a4:0b:96:d6:53:bc:f6:3b: a6:3e:cc:b3:d4:b6:6e:7c:b4:18:89:27:79:79:c7:2a:c7:57: d4:4b:eb:62:82:2e:bb:ec:98:93:9f:37:2b:68:19:16:46:fe: d9:75:98:ee:8d:6f:2e:6e:b9:15:21:1d:96:50:ab:1b:c4:cf: 72:78:4f:b2:30:92:92:3f:e8:47:69:c1:c5:46:e3:7b:72:03: e2:1d:df:1c:4c:a9:a6:66:fa:bc:9e:4f:70:c1:eb:88:0c:30: de:dd:b8:67:47:d0:2e:c4:29:76:b6:18:b4:a9:ee:8b:31:17: ca:df:24:11:b6:a4:dd:af:36:21:c0:e5:be:33:f0:06:44:6c: 22:d5:1c:24:81:67:0b:ab:d8:60:b8:1f:35:05:d2:4c:d5:7e: 5b:74:c2:19:f4:d9:ed:94:70:97:04:bf:7e:69:b1:8b:63:6f: c7:b4:65:9e:f6:ec:c0:f7:df:ff:80:4c:b5:8a:44:a8:cb:27: 5b:55:06:71:41:f7:62:9b:90:f3:2d:53:00:70:2d:17:57:3d: b8:60:d4:ce:03:51:e3:22:7b:d0:15:1c:54:3f:b1:79:9c:f9: 51:f2:c5:96:0d:9d:43:e6:bc:3b:b4:b4:87:a1:eb:97:0f:00: 1b:3a:04:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYc+i6d+TwiwqS/X7/3PTh9FFPMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0 NkNBNjgxRjAeFw0yNjA1MTIwNzU5MzFaFw0yNjA1MTMxMTAxMzFaMDMxMTAvBgNV BAMTKDE4NzY4RUJBNDNBNkRDQTgwMkI5NUU0MTVDNzk5MTY0MzEwRDg1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8DQA9Q9YDNTNjKst8zOXICou OAth0zKPL9j6kLS485Qm2J8XVYeyvKrZ+UnkxjzGjFcpLX4iG1r68RBgiasysEVx d9k/DlD89mCm2oqRyLhGzzSh3QPcdVnHqpKczUoh2jg/0r8PIbjWdVhC7bOpA9eM lZjZXP29TpCSRI8tfCFqTreqCc3n3bkm6a2oTUR3eakUcPGp8ACGmrJ36HA1pcd+ qVguo2m5p7PZ6bC2KwnhRThRvry/an5chqly9T4heFQVVGR+b2hZu1OWP9m2eY/d QZvQIVu03p+Iu0ndDn0z22GyEZpLc12vLI91C9tdI5su1ELBjxGel/PgQjIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGHaOukOm3KgCuV5BXHmRZDENhUEwHwYDVR0j BBgwFoAUqsk2NqavLKsCHVJjotNomkbKaB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjYxNGNlZTAtNWRmNi00YjJiLWJiM2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZB NkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0NkNBNjgxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUM5MzYzNkE2QUYyQ0FCMDIxRDUyNjNBMkQzNjg5QTQ2Q0E2 ODFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4 OUE0NkNBNjgxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnOnyjA1TgCTqekC5bWU7z2O6Y+zLPUtm58 tBiJJ3l5xyrHV9RL62KCLrvsmJOfNytoGRZG/tl1mO6Nby5uuRUhHZZQqxvEz3J4 T7IwkpI/6EdpwcVG43tyA+Id3xxMqaZm+ryeT3DB64gMMN7duGdH0C7EKXa2GLSp 7osxF8rfJBG2pN2vNiHA5b4z8AZEbCLVHCSBZwur2GC4HzUF0kzVflt0whn02e2U cJcEv35psYtjb8e0ZZ727MD33/+ATLWKRKjLJ1tVBnFB92KbkPMtUwBwLRdXPbhg 1M4DUeMie9AVHFQ/sXmc+VHyxZYNnUPmvDu0tIeh65cPABs6BDU= -----END CERTIFICATE-----Generated at Wed May 13 00:13:41 2026 by rpki-client