$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: nuuJO6mwNVkF84r0yCHPGgws50w1k2yy29es6z34jVo= Subject key identifier: 7F:D7:0B:93:F6:3E:32:89:24:9B:33:A0:40:4E:3E:B8:16:D9:E2:C7 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 659984D0547490C286670DEC7B26F4B205851092 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 13:10:35 +0000 Manifest this update: Sat 13 Jun 2026 13:05:35 +0000 Manifest next update: Sun 14 Jun 2026 16:13:35 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) 3: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: D16G/2jtxpdqAF0/U+TMTfXPBrv4QKVLeLWOdkipOI0=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:99:84:d0:54:74:90:c2:86:67:0d:ec:7b:26:f4:b2:05:85:10:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: Jun 13 13:05:35 2026 GMT Not After : Jun 14 16:13:35 2026 GMT Subject: CN=7FD70B93F63E3289249B33A0404E3EB816D9E2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:ba:14:c9:b3:80:75:a3:d7:e7:80:80:64: 57:f1:ad:1f:36:48:d3:70:38:b8:d5:a5:4f:9c:ab: 05:4c:9f:ba:24:e6:87:77:20:0e:62:25:99:3a:14: 07:00:c2:26:73:64:69:36:ab:6c:f6:bd:23:5a:c6: 26:c0:cb:12:fa:22:bd:22:2e:bb:4a:b3:fc:95:a2: 04:5c:13:e6:65:47:b4:f4:bd:41:af:4f:11:ca:c1: 1e:4a:ba:0e:7e:bb:b0:73:4d:f3:f4:61:20:71:ab: 8f:a8:18:b4:b8:8a:eb:42:bc:3f:52:b7:67:db:f8: a8:15:cb:13:9b:af:c7:07:8b:b8:a9:e8:eb:e4:b6: 0a:c6:48:5d:eb:ce:e8:e7:8c:b2:04:ff:65:62:f7: 37:63:c5:ea:a3:7e:3f:55:3a:56:c1:3a:76:5f:d5: e6:97:af:c9:dd:f1:ee:9f:10:33:3b:7f:2d:65:f5: 1c:bb:a0:41:0e:c6:97:ef:86:fa:fc:a7:d7:c5:ca: b1:f1:ed:2f:25:84:6f:61:81:1a:ff:07:16:f6:38: b6:77:fe:47:05:a0:65:c9:33:20:5a:25:49:cd:66: 5b:65:8b:df:02:46:16:a1:f2:ac:5f:62:95:33:30: 98:b9:c6:2d:74:9b:81:66:74:16:d9:5a:8e:82:9b: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D7:0B:93:F6:3E:32:89:24:9B:33:A0:40:4E:3E:B8:16:D9:E2:C7 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4f:4e:1c:80:7e:8c:27:a1:f4:84:a3:70:c1:d5:27:39:59: df:12:a5:f2:e1:e3:14:19:1e:70:d6:db:1a:79:94:5e:db:31: ff:b8:9a:60:52:b7:a0:3f:67:10:f7:b2:e4:c2:ab:eb:dd:99: ca:7e:a2:7e:d0:7a:b8:a9:45:b2:a8:f1:0c:e2:e0:39:8b:28: e3:e8:58:9f:e3:8d:d2:37:6d:10:13:55:50:74:ca:e8:d6:b3: 84:87:bb:d1:5c:44:e9:2f:ce:d5:e0:35:0c:01:2f:1d:cf:3a: ec:5a:5c:a3:4d:d3:50:eb:2e:c1:b5:1a:08:82:17:6f:95:46: 6e:74:d9:04:55:f3:f7:73:da:d9:f5:2c:bc:20:fc:55:2f:e7: 75:d3:94:1a:3d:0f:8f:56:92:74:7e:af:5a:49:1e:6c:b7:a0: 72:d6:8d:9e:c3:ba:f6:82:8e:bf:cb:6f:8e:b9:55:92:3c:87: 2c:92:13:55:78:ba:f9:b8:c2:11:96:9a:6f:8b:ec:11:eb:c0: a2:92:7c:99:3a:48:9b:45:b5:b5:db:32:71:09:a3:c1:c6:72: 0a:25:19:6e:97:f6:e5:b2:ee:5d:0a:cc:65:da:a0:cd:4c:56: 06:26:93:51:eb:da:5d:c9:7c:2b:83:87:83:3c:27:2c:20:db: 20:b9:4a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZmE0FR0kMKGZw3seyb0sgWFEJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjA2MTMxMzA1MzVaFw0yNjA2MTQxNjEzMzVaMDMxMTAvBgNV BAMTKDdGRDcwQjkzRjYzRTMyODkyNDlCMzNBMDQwNEUzRUI4MTZEOUUyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK7oUybOAdaPX54CAZFfxrR82 SNNwOLjVpU+cqwVMn7ok5od3IA5iJZk6FAcAwiZzZGk2q2z2vSNaxibAyxL6Ir0i LrtKs/yVogRcE+ZlR7T0vUGvTxHKwR5Kug5+u7BzTfP0YSBxq4+oGLS4iutCvD9S t2fb+KgVyxObr8cHi7ip6OvktgrGSF3rzujnjLIE/2Vi9zdjxeqjfj9VOlbBOnZf 1eaXr8nd8e6fEDM7fy1l9Ry7oEEOxpfvhvr8p9fFyrHx7S8lhG9hgRr/Bxb2OLZ3 /kcFoGXJMyBaJUnNZltli98CRhah8qxfYpUzMJi5xi10m4FmdBbZWo6Cm4VdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9cLk/Y+MokkmzOgQE4+uBbZ4scwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBPThyAfownofSEo3DB1Sc5Wd8SpfLh4xQZ HnDW2xp5lF7bMf+4mmBSt6A/ZxD3suTCq+vdmcp+on7QeripRbKo8Qzi4DmLKOPo WJ/jjdI3bRATVVB0yujWs4SHu9FcROkvztXgNQwBLx3POuxaXKNN01DrLsG1GgiC F2+VRm502QRV8/dz2tn1LLwg/FUv53XTlBo9D49WknR+r1pJHmy3oHLWjZ7DuvaC jr/Lb465VZI8hyySE1V4uvm4whGWmm+L7BHrwKKSfJk6SJtFtbXbMnEJo8HGcgol GW6X9uWy7l0KzGXaoM1MVgYmk1Hr2l3JfCuDh4M8Jywg2yC5Sqs= -----END CERTIFICATE-----Generated at Sat Jun 13 21:52:26 2026 by rpki-client