$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: wmVSa8hMFfP7VbRVo3JZS6EVbSNzos5gk7la6umkVdQ= Subject key identifier: B4:F2:5A:5F:C9:0C:61:8B:8B:C2:D9:37:A2:0F:2D:10:06:5B:A9:D9 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 0A9BE3E8204C260B89BDD102C4C7F367AAFC11D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 02:59:45 +0000 Manifest this update: Wed 29 Jul 2026 02:54:45 +0000 Manifest next update: Thu 30 Jul 2026 03:42:45 +0000 Files and hashes: 1: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: JrEdbolgFB+YEtVBbs/yfU1qoVVGlkxMex5eG2pdqoA=) 2: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) 3: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) 4: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9b:e3:e8:20:4c:26:0b:89:bd:d1:02:c4:c7:f3:67:aa:fc:11:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: Jul 29 02:54:45 2026 GMT Not After : Jul 30 03:42:45 2026 GMT Subject: CN=B4F25A5FC90C618B8BC2D937A20F2D10065BA9D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:b7:7f:c1:26:67:4f:fd:53:d9:8f:09:82: c2:0c:e9:37:08:c0:b7:21:bc:42:f3:c4:14:6d:4d: 89:b1:76:5c:04:16:52:b7:cc:0e:83:96:18:82:b0: 4a:08:03:3e:5a:22:86:a1:1b:e9:d0:ad:40:4c:2e: 8b:d2:28:f9:f0:c1:b9:75:d7:a7:fb:b0:59:73:97: 6f:da:8d:f1:82:e8:19:d4:25:04:55:94:c3:10:0c: 97:72:0c:af:a2:3a:f7:e6:5f:bb:31:8f:7b:bf:b3: aa:a7:02:98:cb:71:1a:33:80:10:7d:a7:3b:df:61: 2d:2f:9c:3a:b6:99:19:45:e9:2b:a7:d1:02:5f:39: 08:7c:fa:69:90:4f:e5:eb:9a:8e:00:38:b1:cb:80: bf:bf:98:03:29:81:9e:aa:2e:17:47:a4:90:4b:8e: 0e:73:ca:d0:86:cb:d7:38:95:51:83:24:8a:e6:68: 50:a3:ac:bf:4c:5e:9e:5e:22:b9:d0:94:9f:6e:56: a0:74:80:ac:4a:b4:e9:c4:b5:7f:5e:9a:64:2b:52: 0f:d1:e7:6c:6d:0f:cc:63:a0:51:87:b6:c2:fe:ca: aa:45:9b:2a:91:69:e0:56:72:f9:29:1c:32:6c:ab: 1d:78:91:07:52:7d:1a:d5:60:eb:f4:d3:95:4e:29: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F2:5A:5F:C9:0C:61:8B:8B:C2:D9:37:A2:0F:2D:10:06:5B:A9:D9 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2d:dd:53:f0:2b:03:7c:5a:77:bc:49:ad:23:84:14:8d:d7: b7:69:2a:33:ff:ef:97:a5:50:af:0c:2c:45:8d:d6:33:ec:b7: cc:9f:2f:42:26:9e:86:f3:ff:50:4c:f2:13:84:08:61:19:d7: 8e:02:5c:af:76:27:47:5c:ab:26:7c:5d:01:99:75:c1:0c:4a: fc:67:aa:c4:fc:3a:55:4d:c5:22:99:a0:86:f8:7c:a2:4f:50: dc:f5:33:71:45:88:3c:3a:38:ea:8b:1b:3a:0c:0e:80:25:41: ae:06:08:39:fc:93:77:bf:d1:1c:78:1f:03:0e:c4:b6:84:73: ab:f4:99:8e:e8:36:47:17:1f:0a:2a:ed:7a:62:15:86:1e:6a: 54:e3:13:41:12:7c:56:91:c6:4e:4b:80:1e:a5:b3:74:56:dd: d7:ba:09:b7:d6:d3:98:ef:7c:fd:b3:6c:a6:28:48:eb:70:e6: 0e:6f:58:d2:9c:9e:82:d3:eb:a0:5f:8a:82:65:57:d4:03:34: 60:44:ef:1e:4d:a2:ed:5a:10:26:ae:7d:e9:b5:18:38:7b:8b: f3:3f:71:93:a8:14:24:b4:04:8f:da:80:81:37:1d:c5:cb:94: b5:b9:4f:34:e2:d8:df:ae:ea:57:26:7b:45:a1:28:74:fe:21: d2:f1:23:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpvj6CBMJguJvdECxMfzZ6r8EdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjA3MjkwMjU0NDVaFw0yNjA3MzAwMzQyNDVaMDMxMTAvBgNV BAMTKEI0RjI1QTVGQzkwQzYxOEI4QkMyRDkzN0EyMEYyRDEwMDY1QkE5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXq7d/wSZnT/1T2Y8JgsIM6TcI wLchvELzxBRtTYmxdlwEFlK3zA6DlhiCsEoIAz5aIoahG+nQrUBMLovSKPnwwbl1 16f7sFlzl2/ajfGC6BnUJQRVlMMQDJdyDK+iOvfmX7sxj3u/s6qnApjLcRozgBB9 pzvfYS0vnDq2mRlF6Sun0QJfOQh8+mmQT+Xrmo4AOLHLgL+/mAMpgZ6qLhdHpJBL jg5zytCGy9c4lVGDJIrmaFCjrL9MXp5eIrnQlJ9uVqB0gKxKtOnEtX9emmQrUg/R 52xtD8xjoFGHtsL+yqpFmyqRaeBWcvkpHDJsqx14kQdSfRrVYOv005VOKetjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtPJaX8kMYYuLwtk3og8tEAZbqdkwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwt3VPwKwN8Wne8Sa0jhBSN17dpKjP/75el UK8MLEWN1jPst8yfL0Imnobz/1BM8hOECGEZ144CXK92J0dcqyZ8XQGZdcEMSvxn qsT8OlVNxSKZoIb4fKJPUNz1M3FFiDw6OOqLGzoMDoAlQa4GCDn8k3e/0Rx4HwMO xLaEc6v0mY7oNkcXHwoq7XpiFYYealTjE0ESfFaRxk5LgB6ls3RW3de6CbfW05jv fP2zbKYoSOtw5g5vWNKcnoLT66BfioJlV9QDNGBE7x5Nou1aECaufem1GDh7i/M/ cZOoFCS0BI/agIE3HcXLlLW5TzTi2N+u6lcme0WhKHT+IdLxI74= -----END CERTIFICATE-----Generated at Wed Jul 29 11:13:21 2026 by rpki-client