$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft File: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft (raw, json) Hash identifier: r3skAVO36292DgpIhmomuFui+keCbqMFNPDJlrw2Vvw= Subject key identifier: 87:A7:AF:4B:E5:45:10:41:FF:86:1C:84:1C:34:99:BD:5B:31:82:E2 Authority key identifier: AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B Certificate issuer: /CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Certificate serial: 010444D2AEF93800E3FE516DA014D3D3DED19BDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft Manifest number: BF Signing time: Tue 22 Sep 2026 19:35:42 +0000 Manifest this update: Tue 22 Sep 2026 19:30:42 +0000 Manifest next update: Wed 23 Sep 2026 22:17:42 +0000 Files and hashes: 1: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl (hash: WXHV6wdDMCC+QuViSns4Jsa9fu92j1kp6gAVAdNncNw=) 2: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: 5EcCRGSNTaCKDk5LN8StILbgTTb77LqugRFtgKuHnTo=) 3: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: 3op/DC1qyBMxh0jblaumBv2zXbNO6+qEazCYObpo6AY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:04:44:d2:ae:f9:38:00:e3:fe:51:6d:a0:14:d3:d3:de:d1:9b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Validity Not Before: Sep 22 19:30:42 2026 GMT Not After : Sep 23 22:17:42 2026 GMT Subject: CN=87A7AF4BE5451041FF861C841C3499BD5B3182E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:ea:92:2e:33:08:5c:1f:fc:ba:e3:b9:07: 37:dc:8b:32:18:e8:e3:b6:19:17:5d:6f:73:6f:5b: d2:5a:4f:97:73:16:12:9d:6f:1d:ac:22:21:2e:95: 7a:42:3c:8d:19:15:dc:db:e7:6f:be:a3:a3:89:c0: e3:ac:04:4c:df:45:ba:24:87:a2:09:41:e3:96:59: 79:72:05:9d:74:4c:44:f1:b8:01:db:fa:6a:b3:03: 46:84:27:d7:36:88:7b:8d:73:a6:bc:ef:aa:a1:11: 30:ce:3e:94:9e:47:45:f0:1e:6a:c9:2e:af:43:30: b9:cf:ed:36:f3:f7:8e:ac:aa:c1:27:2c:d8:86:33: 00:d8:ef:d6:19:c4:aa:80:ea:02:c8:1e:68:1d:30: 51:e4:de:67:4b:56:8e:12:11:bb:dc:2c:34:52:d7: 79:47:d0:43:69:70:0c:49:c1:22:4d:cc:21:c2:37: c8:a7:04:e2:8f:37:35:27:38:9a:12:c3:3c:cd:eb: 9c:10:59:98:ca:19:bb:fa:b4:f1:e8:f3:31:43:3e: 0f:24:e4:38:38:dd:1b:af:69:3e:5e:45:3a:da:f7: 92:53:12:32:f7:6f:8d:f3:ba:19:56:17:69:17:64: dd:d5:98:09:3f:44:6d:5a:8d:7d:ed:01:92:4b:ed: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A7:AF:4B:E5:45:10:41:FF:86:1C:84:1C:34:99:BD:5B:31:82:E2 X509v3 Authority Key Identifier: keyid:AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:3d:47:ce:bb:78:77:f5:a7:3d:a2:93:07:5f:88:1d:03:80: fb:ba:de:e9:a8:9e:a4:08:3f:5c:71:9e:2a:12:62:43:3e:e3: 01:a9:e4:15:94:da:f8:d0:8a:f3:e1:23:a9:23:b1:88:73:ff: fa:4f:d9:1c:36:ad:8f:cf:ab:ee:ec:82:8d:72:d0:fa:c3:20: d5:e7:63:bc:ba:75:f8:4c:e9:36:b9:15:f4:af:a9:72:6f:e9: 80:b0:09:5c:b6:75:62:c8:82:2c:63:a8:15:d8:27:5b:76:cf: 64:7d:78:ea:80:8a:4f:ae:5d:a5:36:dd:48:d3:a7:a9:cd:d1: 94:c2:2a:41:6f:0a:71:99:89:ca:4f:ae:b6:d5:ed:73:8d:67: bd:09:59:0f:3b:a4:bb:e4:21:cf:54:18:4d:44:97:c6:53:f1: fd:7f:8c:d9:ac:6b:2f:b6:8a:d7:d1:22:7e:9c:ca:f8:6c:15: 0c:b2:d1:09:2d:94:89:10:68:ac:75:dc:90:17:6a:39:e9:de: 90:db:19:b2:c1:2e:1d:68:ef:3c:98:db:8a:99:4f:34:85:3b: 16:32:40:19:ca:97:df:f1:44:3f:ab:91:68:ed:95:34:e0:06: b9:b6:0f:a9:1f:ad:ae:95:8b:18:84:c0:6f:b3:d3:73:1d:7a: b8:24:82:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQRE0q75OADj/lFtoBTT097Rm9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5 NDM1N0U1QjAeFw0yNjA5MjIxOTMwNDJaFw0yNjA5MjMyMjE3NDJaMDMxMTAvBgNV BAMTKDg3QTdBRjRCRTU0NTEwNDFGRjg2MUM4NDFDMzQ5OUJENUIzMTgyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldeqSLjMIXB/8uuO5BzfcizIY 6OO2GRddb3NvW9JaT5dzFhKdbx2sIiEulXpCPI0ZFdzb52++o6OJwOOsBEzfRbok h6IJQeOWWXlyBZ10TETxuAHb+mqzA0aEJ9c2iHuNc6a876qhETDOPpSeR0XwHmrJ Lq9DMLnP7Tbz946sqsEnLNiGMwDY79YZxKqA6gLIHmgdMFHk3mdLVo4SEbvcLDRS 13lH0ENpcAxJwSJNzCHCN8inBOKPNzUnOJoSwzzN65wQWZjKGbv6tPHo8zFDPg8k 5Dg43RuvaT5eRTra95JTEjL3b43zuhlWF2kXZN3VmAk/RG1ajX3tAZJL7bYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6evS+VFEEH/hhyEHDSZvVsxguIwHwYDVR0j BBgwFoAUrkBzvINOssC/kqecW17ZBZQ1flswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2UxZGViOTMtYzE5MC00NmVlLWJhODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4 MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5NDM1N0U1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTQwNzNCQzgzNEVCMkMwQkY5MkE3OUM1QjVFRDkwNTk0MzU3 RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5 MDU5NDM1N0U1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN09R867eHf1pz2ikwdfiB0DgPu63umonqQI P1xxnioSYkM+4wGp5BWU2vjQivPhI6kjsYhz//pP2Rw2rY/Pq+7sgo1y0PrDINXn Y7y6dfhM6Ta5FfSvqXJv6YCwCVy2dWLIgixjqBXYJ1t2z2R9eOqAik+uXaU23UjT p6nN0ZTCKkFvCnGZicpPrrbV7XONZ70JWQ87pLvkIc9UGE1El8ZT8f1/jNmsay+2 itfRIn6cyvhsFQyy0QktlIkQaKx13JAXajnp3pDbGbLBLh1o7zyY24qZTzSFOxYy QBnKl9/xRD+rkWjtlTTgBrm2D6kfra6VixiEwG+z03Mdergkgik= -----END CERTIFICATE-----Generated at Wed Sep 23 02:23:53 2026 by rpki-client