$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft File: AE003B21AF12D58F10BE6F5545672EC8E6787080.mft (raw, json) Hash identifier: Aoeacj06kie1fd6R7YfeP2V8CJJ1nB8zROIb/9zAtoE= Subject key identifier: 79:9D:EE:F7:D3:EE:B5:26:88:F6:8D:AF:53:C4:BA:01:06:BB:A7:4C Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 Certificate issuer: /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Certificate serial: 2B3EBACDA0AAD6587F8DB2AE38B422E6AEA8C92B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft Manifest number: BF Signing time: Sun 20 Sep 2026 21:03:00 +0000 Manifest this update: Sun 20 Sep 2026 20:58:00 +0000 Manifest next update: Mon 21 Sep 2026 22:42:00 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: OU61hsQm7THl5FxVFWjY1+WDAX/SnAXM5H/7moze5/s=) 2: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=) 3: AE003B21AF12D58F10BE6F5545672EC8E6787080.crl (hash: zqrDwQkwmuPFXJ+P3BM9WiaHhRSayVM1sM6CLD2x7ro=) 4: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3e:ba:cd:a0:aa:d6:58:7f:8d:b2:ae:38:b4:22:e6:ae:a8:c9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Validity Not Before: Sep 20 20:58:00 2026 GMT Not After : Sep 21 22:42:00 2026 GMT Subject: CN=799DEEF7D3EEB52688F68DAF53C4BA0106BBA74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5f:9e:6a:fe:85:3b:4d:0e:7a:d2:76:34:6c: 0a:b7:e0:c5:8b:59:99:3f:33:f0:21:ff:52:20:62: ad:5a:6f:12:ea:ac:3f:04:c6:e4:c4:ad:df:ea:c3: c0:2c:29:69:05:18:af:d9:52:4a:81:75:be:8d:b2: e2:23:b5:aa:8b:a7:20:9f:13:80:b6:81:ad:c9:b2: 73:4e:e1:35:14:60:fe:25:68:20:5f:32:40:46:9b: fa:02:c7:89:0d:13:fd:64:4a:ad:81:4e:73:4b:07: b9:e1:20:4c:57:5b:65:47:be:be:d0:bc:54:bf:29: 27:06:57:c5:3e:ae:c2:ca:91:f3:40:c1:56:05:f3: 64:f0:99:97:bb:e7:64:c8:02:2f:32:c2:f6:49:1f: 59:b0:a7:7c:08:12:5c:2e:fb:72:d3:76:37:08:53: 9c:2b:56:ad:c4:23:cd:bd:cc:f4:3f:ed:31:3c:b4: 7d:5c:37:9a:1e:2a:cc:20:50:72:80:55:00:7f:e5: ce:4f:3f:eb:0e:ab:4b:12:41:ee:c9:ee:a8:00:c3: 7f:4f:db:bf:8a:8a:ac:0b:8f:61:10:68:01:65:3f: 1c:f8:e8:7c:18:0a:89:f3:03:50:ac:c9:5c:7c:b5: 17:d7:dd:22:99:8a:0a:e7:e2:5c:8b:a6:19:b8:9f: 10:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9D:EE:F7:D3:EE:B5:26:88:F6:8D:AF:53:C4:BA:01:06:BB:A7:4C X509v3 Authority Key Identifier: keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b8:ef:78:3e:e4:5d:7f:7b:84:12:41:73:40:0d:65:89:c1: 38:7b:dc:9c:83:67:71:0a:b8:87:e2:ec:92:3d:99:7d:21:43: 26:b7:7e:76:68:57:22:5d:19:1d:42:33:c1:a7:1a:20:ae:5e: 8e:dc:8f:a8:06:76:ed:00:2a:5b:f9:55:c2:6b:02:aa:64:49: 75:ef:e8:8c:40:a4:dd:33:ee:e7:65:22:6a:c0:83:89:fc:ca: 17:21:f2:f9:7c:1d:da:74:7d:f7:6e:4d:dd:81:72:32:ce:e8: 6c:ff:16:5e:13:3b:c5:36:94:05:ec:14:57:3d:87:e2:d4:31: 58:06:44:e3:95:9d:eb:c2:a0:a7:1a:90:7f:04:e4:1a:a5:8b: 95:da:71:b8:cb:f7:26:20:df:d7:45:75:18:b6:e5:a3:36:a9: 23:c5:4d:ba:05:e6:e4:b4:c2:1c:2c:9c:cd:e9:b8:c6:23:58: 06:96:91:66:05:fb:3c:f5:ee:da:c7:e3:08:1e:f9:3a:eb:4d: 04:9a:11:b2:42:8e:cc:67:da:f0:06:e5:9d:f5:2a:2e:39:2d: 22:ef:61:73:9f:15:3a:55:f7:45:45:18:c1:81:c0:c3:52:6e: fd:53:f2:d7:23:29:ca:e1:4c:ac:48:07:6a:3d:51:36:30:e1: 09:0c:55:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKz66zaCq1lh/jbKuOLQi5q6oySswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhF Njc4NzA4MDAeFw0yNjA5MjAyMDU4MDBaFw0yNjA5MjEyMjQyMDBaMDMxMTAvBgNV BAMTKDc5OURFRUY3RDNFRUI1MjY4OEY2OERBRjUzQzRCQTAxMDZCQkE3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgX55q/oU7TQ560nY0bAq34MWL WZk/M/Ah/1IgYq1abxLqrD8ExuTErd/qw8AsKWkFGK/ZUkqBdb6NsuIjtaqLpyCf E4C2ga3JsnNO4TUUYP4laCBfMkBGm/oCx4kNE/1kSq2BTnNLB7nhIExXW2VHvr7Q vFS/KScGV8U+rsLKkfNAwVYF82TwmZe752TIAi8ywvZJH1mwp3wIElwu+3LTdjcI U5wrVq3EI829zPQ/7TE8tH1cN5oeKswgUHKAVQB/5c5PP+sOq0sSQe7J7qgAw39P 27+KiqwLj2EQaAFlPxz46HwYConzA1CsyVx8tRfX3SKZigrn4lyLphm4nxCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeZ3u99PutSaI9o2vU8S6AQa7p0wwHwYDVR0j BBgwFoAUrgA7Ia8S1Y8Qvm9VRWcuyOZ4cIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFB RjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhFNjc4NzA4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAwM0IyMUFGMTJENThGMTBCRTZGNTU0NTY3MkVDOEU2Nzg3 MDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJF QzhFNjc4NzA4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq473g+5F1/e4QSQXNADWWJwTh73JyDZ3EK uIfi7JI9mX0hQya3fnZoVyJdGR1CM8GnGiCuXo7cj6gGdu0AKlv5VcJrAqpkSXXv 6IxApN0z7udlImrAg4n8yhch8vl8Hdp0ffduTd2BcjLO6Gz/Fl4TO8U2lAXsFFc9 h+LUMVgGROOVnevCoKcakH8E5Bqli5XacbjL9yYg39dFdRi25aM2qSPFTboF5uS0 whwsnM3puMYjWAaWkWYF+zz17trH4wge+TrrTQSaEbJCjsxn2vAG5Z31Ki45LSLv YXOfFTpV90VFGMGBwMNSbv1T8tcjKcrhTKxIB2o9UTYw4QkMVV4= -----END CERTIFICATE-----Generated at Mon Sep 21 09:10:32 2026 by rpki-client