$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft File: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft (raw, json) Hash identifier: fUJTuTjxifHu5M/fGpNxJKyDcy7LC8p+JdbIn/pkPWQ= Subject key identifier: CA:80:99:01:CB:4E:2E:D7:BB:7A:3B:7E:41:5F:64:98:FC:12:4D:26 Authority key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Certificate issuer: /CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Certificate serial: 44F0093208D0709F49EF47C3296B363682289D04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:48:46 +0000 Manifest this update: Mon 21 Sep 2026 09:43:46 +0000 Manifest next update: Tue 22 Sep 2026 12:18:46 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: AWpHjSJZSEnTAxNcOTOICGiGCdtga3pPphgmCcn8xjE=) 2: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl (hash: c/V/18EVW8A47ysahgXqWBU8T4h2lofvUPsFfxbhIgw=) 3: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: j3CCIkkkxHu9Jvfxg5BBPTNs9de+9hMDr2iWt/LPgIg=) 4: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: fSBmaNekEw3OBHkti8Tium+Nxe4NKA+v+f93I6eiImM=) 5: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: tj5GNswRthGD9Jerv3aI7edNXY0M4+btYrK4Cyrd4Ts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f0:09:32:08:d0:70:9f:49:ef:47:c3:29:6b:36:36:82:28:9d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Validity Not Before: Sep 21 09:43:46 2026 GMT Not After : Sep 22 12:18:46 2026 GMT Subject: CN=CA809901CB4E2ED7BB7A3B7E415F6498FC124D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:cd:2f:21:16:25:5d:26:62:97:63:0c:a3: 8e:be:f2:d2:41:f1:f8:a7:86:87:d1:f0:9e:af:80: 94:33:f7:b6:55:2b:e7:ae:7b:c7:dc:1a:7f:f7:5f: 93:f2:38:a7:8c:56:52:60:86:90:ab:c6:b1:8a:69: 07:05:9a:01:fc:02:2a:64:75:a7:91:c1:d9:a1:93: 3a:b0:6a:5e:60:43:48:be:af:96:3d:7e:03:8b:43: af:77:d8:dd:88:a8:1b:99:51:57:c1:2d:76:ee:87: 96:9a:98:30:64:34:2b:21:49:bd:bc:ad:0d:bd:6c: 7c:c6:99:f9:58:83:3d:8e:7f:be:8b:5c:c1:33:80: ee:64:c4:7e:64:1d:89:db:52:b3:cc:62:e6:0d:b1: 14:cc:43:b7:8a:f8:8a:24:43:d8:22:6e:fd:5a:8a: 28:9e:57:01:e6:b6:75:79:5f:36:b8:2a:09:a1:0d: 43:92:d6:8f:15:7a:c8:98:5e:72:7e:85:7b:23:ca: 60:02:b9:22:a1:25:f9:7e:40:0e:d5:33:f6:a6:b3: 08:aa:da:3c:81:36:63:51:b1:4d:f8:c1:ae:a4:02: 15:3a:cc:f7:56:0d:2d:67:47:20:87:3b:b2:4e:c0: a6:4c:e2:81:33:12:13:ff:04:55:e0:b3:70:6e:60: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:80:99:01:CB:4E:2E:D7:BB:7A:3B:7E:41:5F:64:98:FC:12:4D:26 X509v3 Authority Key Identifier: keyid:AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1a:db:74:cc:5a:82:ab:3d:4f:a2:d5:39:29:e9:fe:49:14: 01:f0:f6:6f:3b:f8:3d:3f:9d:f5:0b:22:bd:25:82:18:f9:ac: 02:d3:5d:06:4a:01:6d:c5:4c:46:f0:8a:cf:0c:14:16:56:cb: ff:cf:9f:65:c3:3c:1d:b4:9d:12:2a:66:cb:f0:a6:17:90:f5: 8c:06:de:dc:13:b3:10:13:ad:fc:2f:c2:af:ce:a1:55:dd:30: dd:68:a7:89:f5:85:d7:51:58:a2:e6:6a:68:9d:67:2f:41:30: 9a:d3:b7:b7:3f:7e:5d:c7:ef:23:ba:06:37:f8:3d:f4:2d:1e: f3:9a:73:d9:82:d2:b6:c9:e4:70:8a:24:16:c3:c3:94:33:96: 51:42:61:2b:c4:1b:27:24:d1:77:bc:ea:e4:42:94:66:c3:42: 5b:74:70:69:c5:f2:68:76:5c:2d:d5:39:82:8b:f2:93:39:04: e8:73:59:38:ba:06:61:63:53:01:3f:cf:6a:e5:3e:35:5e:02: a2:7d:e4:0b:ad:0a:12:9a:6e:bf:a5:f5:5a:d5:d3:4b:77:3b: c3:ee:9d:69:01:66:3d:99:4d:83:ea:6d:07:f1:13:3b:0f:69: bc:54:79:43:c5:0d:d2:37:2b:75:9b:a0:aa:c0:97:0d:28:38: 8b:31:31:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPAJMgjQcJ9J70fDKWs2NoIonQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdEQjYw NjE2MDZEMzAeFw0yNjA5MjEwOTQzNDZaFw0yNjA5MjIxMjE4NDZaMDMxMTAvBgNV BAMTKENBODA5OTAxQ0I0RTJFRDdCQjdBM0I3RTQxNUY2NDk4RkMxMjREMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcc0vIRYlXSZil2MMo46+8tJB 8finhofR8J6vgJQz97ZVK+eue8fcGn/3X5PyOKeMVlJghpCrxrGKaQcFmgH8Aipk daeRwdmhkzqwal5gQ0i+r5Y9fgOLQ6932N2IqBuZUVfBLXbuh5aamDBkNCshSb28 rQ29bHzGmflYgz2Of76LXMEzgO5kxH5kHYnbUrPMYuYNsRTMQ7eK+IokQ9gibv1a iiieVwHmtnV5Xza4KgmhDUOS1o8VesiYXnJ+hXsjymACuSKhJfl+QA7VM/amswiq 2jyBNmNRsU34wa6kAhU6zPdWDS1nRyCHO7JOwKZM4oEzEhP/BFXgs3BuYKHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyoCZActOLte7ejt+QV9kmPwSTSYwHwYDVR0j BBgwFoAUrt3B06CyNqQii43fSA19tgYWBtMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBkMzRlNzctNmNmNi00MTg3LTkwODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNB MEIyMzZBNDIyOEI4RERGNDgwRDdEQjYwNjE2MDZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUREQzFEM0EwQjIzNkE0MjI4QjhEREY0ODBEN0RCNjA2MTYw NkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdE QjYwNjE2MDZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIa23TMWoKrPU+i1Tkp6f5JFAHw9m87+D0/ nfULIr0lghj5rALTXQZKAW3FTEbwis8MFBZWy//Pn2XDPB20nRIqZsvwpheQ9YwG 3twTsxATrfwvwq/OoVXdMN1op4n1hddRWKLmamidZy9BMJrTt7c/fl3H7yO6Bjf4 PfQtHvOac9mC0rbJ5HCKJBbDw5QzllFCYSvEGyck0Xe86uRClGbDQlt0cGnF8mh2 XC3VOYKL8pM5BOhzWTi6BmFjUwE/z2rlPjVeAqJ95AutChKabr+l9VrV00t3O8Pu nWkBZj2ZTYPqbQfxEzsPabxUeUPFDdI3K3WboKrAlw0oOIsxMf4= -----END CERTIFICATE-----Generated at Mon Sep 21 13:24:33 2026 by rpki-client