$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft File: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft (raw, json) Hash identifier: 5eDtApi1eodmHvpvt3gAD7E8I8J1iYYYJKHs+nmE038= Subject key identifier: 8E:E4:36:67:43:D0:5E:B3:02:E4:31:FA:6F:6D:DB:28:64:8E:AF:02 Authority key identifier: AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B Certificate issuer: /CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Certificate serial: 02B64EC76C5EF9A5DCADBFE19015B80630966065 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:56:56 +0000 Manifest this update: Tue 16 Jun 2026 22:51:56 +0000 Manifest next update: Thu 18 Jun 2026 00:39:56 +0000 Files and hashes: 1: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: 5EcCRGSNTaCKDk5LN8StILbgTTb77LqugRFtgKuHnTo=) 2: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl (hash: S0XIjh1TPNHMX5tVGoEys7PFjAWiSvKoudiSuv9tpa0=) 3: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: 3op/DC1qyBMxh0jblaumBv2zXbNO6+qEazCYObpo6AY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b6:4e:c7:6c:5e:f9:a5:dc:ad:bf:e1:90:15:b8:06:30:96:60:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Validity Not Before: Jun 16 22:51:56 2026 GMT Not After : Jun 18 00:39:56 2026 GMT Subject: CN=8EE4366743D05EB302E431FA6F6DDB28648EAF02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:8c:be:5d:91:ee:a2:30:7f:7d:0f:42:ec: bf:3f:20:f4:1a:92:ba:81:2e:d5:e7:1f:e2:03:5f: ac:57:bb:47:41:0c:ac:c8:30:5b:d2:0c:73:b1:08: cd:90:1c:e1:9b:1a:ad:03:11:17:ca:8a:7e:54:c7: 58:21:b0:ca:71:23:17:52:49:9d:80:b0:a1:0a:fe: 69:32:60:58:2b:bb:00:b9:f1:16:6f:d6:c4:6c:43: 47:47:0a:3a:ce:b5:91:c8:29:2b:4c:ba:48:7f:cd: 00:ca:da:bb:77:9b:a7:b3:c5:e2:6e:47:d1:3b:10: 3f:ad:de:1a:fa:c9:64:c3:d4:c5:e1:0e:5c:0d:92: 3c:04:cb:fd:01:f0:a3:e3:c3:b4:e2:30:42:5b:43: 27:c4:54:ac:a8:35:d2:2c:4c:9a:5f:f5:b7:a6:af: 54:4e:bf:d8:aa:0a:b8:3a:80:68:33:df:eb:73:f8: f5:aa:14:90:65:d5:ed:a4:35:f0:50:bf:91:c4:13: b3:b1:d5:29:86:5b:1f:56:5f:0c:7a:13:07:85:e6: b7:8e:9d:39:00:80:8f:03:6f:1f:6f:98:48:20:65: 6e:9b:dc:49:2c:2f:cf:35:49:a6:78:df:1a:b6:06: 88:47:55:a4:6c:bd:03:8b:9f:90:3f:ac:af:7d:e4: a8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E4:36:67:43:D0:5E:B3:02:E4:31:FA:6F:6D:DB:28:64:8E:AF:02 X509v3 Authority Key Identifier: keyid:AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d2:b8:f9:2b:43:4c:4c:9b:43:af:51:ea:e1:16:70:5e:84: a0:13:d1:5d:c0:a6:8d:49:a8:87:3d:03:06:fa:6f:d5:4a:15: 37:f1:3d:07:2d:a4:47:af:cf:b1:19:b2:f0:88:f7:9a:a2:88: c5:e1:ce:8e:48:ab:82:bd:be:b0:09:47:28:c7:1e:d5:a0:54: b7:b3:b4:d6:66:89:7b:72:16:22:bb:7a:a5:55:fa:af:1b:4e: f1:c1:9d:b3:58:de:c4:a9:3c:46:55:eb:ac:4f:eb:4c:4e:6f: 86:28:31:6c:93:79:6e:00:66:f8:9f:fd:cb:36:6a:79:e2:6d: a5:7b:3e:49:bf:f3:4f:c6:ea:93:4b:f0:9f:24:ce:6a:6d:3a: a3:7e:8f:6c:82:24:08:02:3a:df:45:1d:56:8d:34:56:60:7a: b2:76:aa:7e:3d:19:d3:1c:6e:fc:c2:ca:96:f7:50:d7:bd:08: 6d:3a:25:21:4f:56:1f:ca:04:ea:1a:c6:de:f7:bc:4c:6f:ff: 51:f9:0a:00:0c:2a:44:cf:1a:99:d3:e4:cd:91:84:53:2b:7b: cd:5d:89:82:82:20:ae:e6:3d:d0:a0:89:41:a5:5c:be:92:40: c5:da:04:eb:96:14:a3:27:46:79:af:fe:11:29:4a:62:a1:8e: aa:4f:4b:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArZOx2xe+aXcrb/hkBW4BjCWYGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5 NDM1N0U1QjAeFw0yNjA2MTYyMjUxNTZaFw0yNjA2MTgwMDM5NTZaMDMxMTAvBgNV BAMTKDhFRTQzNjY3NDNEMDVFQjMwMkU0MzFGQTZGNkREQjI4NjQ4RUFGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTy4y+XZHuojB/fQ9C7L8/IPQa krqBLtXnH+IDX6xXu0dBDKzIMFvSDHOxCM2QHOGbGq0DERfKin5Ux1ghsMpxIxdS SZ2AsKEK/mkyYFgruwC58RZv1sRsQ0dHCjrOtZHIKStMukh/zQDK2rt3m6ezxeJu R9E7ED+t3hr6yWTD1MXhDlwNkjwEy/0B8KPjw7TiMEJbQyfEVKyoNdIsTJpf9bem r1ROv9iqCrg6gGgz3+tz+PWqFJBl1e2kNfBQv5HEE7Ox1SmGWx9WXwx6EweF5reO nTkAgI8Dbx9vmEggZW6b3EksL881SaZ43xq2BohHVaRsvQOLn5A/rK995KjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjuQ2Z0PQXrMC5DH6b23bKGSOrwIwHwYDVR0j BBgwFoAUrkBzvINOssC/kqecW17ZBZQ1flswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2UxZGViOTMtYzE5MC00NmVlLWJhODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4 MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5NDM1N0U1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTQwNzNCQzgzNEVCMkMwQkY5MkE3OUM1QjVFRDkwNTk0MzU3 RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5 MDU5NDM1N0U1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXSuPkrQ0xMm0OvUerhFnBehKAT0V3Apo1J qIc9Awb6b9VKFTfxPQctpEevz7EZsvCI95qiiMXhzo5Iq4K9vrAJRyjHHtWgVLez tNZmiXtyFiK7eqVV+q8bTvHBnbNY3sSpPEZV66xP60xOb4YoMWyTeW4AZvif/cs2 annibaV7Pkm/80/G6pNL8J8kzmptOqN+j2yCJAgCOt9FHVaNNFZgerJ2qn49GdMc bvzCypb3UNe9CG06JSFPVh/KBOoaxt73vExv/1H5CgAMKkTPGpnT5M2RhFMre81d iYKCIK7mPdCgiUGlXL6SQMXaBOuWFKMnRnmv/hEpSmKhjqpPS2s= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:06 2026 by rpki-client