$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft File: AEBADFA06D76BE480430EDC8D27F4BE636880149.mft (raw, json) Hash identifier: eCLL8x5MbChcJ++Dleyu9G6XgWC3CIcOj4cxLHVBr1g= Subject key identifier: B8:42:37:0F:CA:A5:A4:53:78:B8:8B:ED:B6:1D:82:E9:84:69:0C:B6 Authority key identifier: AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49 Certificate issuer: /CN=AEBADFA06D76BE480430EDC8D27F4BE636880149 Certificate serial: 7A21824F80075ED90225F257B2B539ED6B06EFD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:56:58 +0000 Manifest this update: Wed 23 Sep 2026 20:51:58 +0000 Manifest next update: Fri 25 Sep 2026 00:21:58 +0000 Files and hashes: 1: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: nG5fCmE925uHgYNeygfmhhegb7zX/kDvlyw/SCpRN+I=) 2: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: aC5Jcybn/WcmcwFTZT+cimtZCI1Cj8w+b53oH5W6Fw4=) 3: AEBADFA06D76BE480430EDC8D27F4BE636880149.crl (hash: x5gaO5tCHlej6N7R8CFIS3GvSQkF0E8ZSEGGPKS5WQ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:21:82:4f:80:07:5e:d9:02:25:f2:57:b2:b5:39:ed:6b:06:ef:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEBADFA06D76BE480430EDC8D27F4BE636880149 Validity Not Before: Sep 23 20:51:58 2026 GMT Not After : Sep 25 00:21:58 2026 GMT Subject: CN=B842370FCAA5A45378B88BEDB61D82E984690CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:da:f1:dd:4e:4e:b9:e9:7e:97:67:b4:74: 51:d2:40:c1:95:3c:d5:62:40:03:4e:dc:73:c7:8f: 07:a2:17:74:49:3f:db:65:57:ce:0c:20:e1:ca:5f: 78:81:e1:fb:92:19:44:1f:f3:3e:54:21:da:87:fc: 16:52:a9:89:cc:20:82:c6:5b:c7:ab:b0:c3:9a:8a: ac:05:89:70:03:e5:15:c7:ca:7c:43:9e:d5:19:d9: f4:b5:fb:a1:a4:12:7e:91:e0:ea:a0:94:47:bd:65: 72:e4:82:28:24:82:20:4c:7c:04:08:9f:39:80:a4: 44:71:26:31:ab:c4:63:ff:49:e1:75:a6:66:f3:cf: 7d:04:a3:8d:31:5e:6c:22:1d:8e:b7:ff:1a:33:53: 37:25:0d:b3:57:6b:a9:21:4d:ea:57:93:8a:6b:b9: 9e:91:8a:7f:c3:b9:b6:23:ac:ea:6d:52:43:2a:3a: 7f:ff:41:ae:ab:4b:4b:33:f0:71:f1:b7:52:73:c6: a2:8f:c0:dd:de:d6:87:c8:4e:17:b6:42:9b:df:20: 39:bb:76:d6:60:71:e1:83:18:44:8f:33:b2:bd:3e: d4:5e:a3:d3:30:5b:23:20:03:c6:09:4d:bd:63:c4: 2b:b9:2f:bf:83:c3:58:bd:a0:35:f8:b5:f8:6b:eb: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:42:37:0F:CA:A5:A4:53:78:B8:8B:ED:B6:1D:82:E9:84:69:0C:B6 X509v3 Authority Key Identifier: keyid:AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:06:4a:30:94:66:32:c2:7a:27:ab:8c:f1:b8:73:76:43:54: 07:9d:38:8a:0b:cd:46:ab:32:c9:d8:df:08:cc:3a:28:72:3f: 0b:82:30:d1:90:c4:e0:85:56:72:d1:cf:c8:94:0e:1c:0f:0a: 94:64:b6:dc:2d:dc:31:6c:1d:6d:4a:56:40:72:a4:0f:05:aa: c8:c7:97:a1:ea:c5:48:11:2f:79:01:77:78:55:59:4a:d5:e8: 13:f6:bd:5b:c0:4c:d6:45:31:79:73:90:dc:24:b6:45:60:55: e3:aa:4a:db:1e:d1:1b:18:ce:e0:25:f8:71:f6:cc:cf:ef:a1: a8:59:e0:89:6b:99:97:88:d0:da:e0:40:d2:bb:db:eb:f4:be: 03:db:03:e1:71:6c:d2:48:70:8b:bc:0e:9c:d2:e2:23:89:a8: c3:3d:a6:f8:12:46:18:51:a6:12:f5:93:6e:1f:4d:a9:43:d2: 9a:ad:91:7d:19:92:db:83:f9:3f:cc:91:bc:1c:36:ba:70:a8: fa:23:c4:3f:99:c4:34:10:3f:40:47:01:d4:f0:e3:f3:41:0d: 5c:d6:61:99:c1:91:cf:ea:28:f1:cd:78:bb:53:f1:c9:98:1f: 67:2e:b4:21:f5:06:92:82:a0:f4:49:0b:01:f4:17:41:68:4d: cf:11:99:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiGCT4AHXtkCJfJXsrU57WsG79gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCQURGQTA2RDc2QkU0ODA0MzBFREM4RDI3RjRCRTYz Njg4MDE0OTAeFw0yNjA5MjMyMDUxNThaFw0yNjA5MjUwMDIxNThaMDMxMTAvBgNV BAMTKEI4NDIzNzBGQ0FBNUE0NTM3OEI4OEJFREI2MUQ4MkU5ODQ2OTBDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4Nrx3U5Ouel+l2e0dFHSQMGV PNViQANO3HPHjweiF3RJP9tlV84MIOHKX3iB4fuSGUQf8z5UIdqH/BZSqYnMIILG W8ersMOaiqwFiXAD5RXHynxDntUZ2fS1+6GkEn6R4OqglEe9ZXLkgigkgiBMfAQI nzmApERxJjGrxGP/SeF1pmbzz30Eo40xXmwiHY63/xozUzclDbNXa6khTepXk4pr uZ6Rin/DubYjrOptUkMqOn//Qa6rS0sz8HHxt1JzxqKPwN3e1ofIThe2QpvfIDm7 dtZgceGDGESPM7K9PtReo9MwWyMgA8YJTb1jxCu5L7+Dw1i9oDX4tfhr66UjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEI3D8qlpFN4uIvtth2C6YRpDLYwHwYDVR0j BBgwFoAUrrrfoG12vkgEMO3I0n9L5jaIAUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTViOGU3NzQtMTY4My00NTZkLWJiYzAtMzQzMjI1ZjE3ZjRjLzAvQUVCQURGQTA2 RDc2QkU0ODA0MzBFREM4RDI3RjRCRTYzNjg4MDE0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUJBREZBMDZENzZCRTQ4MDQzMEVEQzhEMjdGNEJFNjM2ODgw MTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvQUVCQURGQTA2RDc2QkU0ODA0MzBFREM4RDI3RjRC RTYzNjg4MDE0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwGSjCUZjLCeierjPG4c3ZDVAedOIoLzUar MsnY3wjMOihyPwuCMNGQxOCFVnLRz8iUDhwPCpRkttwt3DFsHW1KVkBypA8FqsjH l6HqxUgRL3kBd3hVWUrV6BP2vVvATNZFMXlzkNwktkVgVeOqStse0RsYzuAl+HH2 zM/voahZ4IlrmZeI0NrgQNK72+v0vgPbA+FxbNJIcIu8DpzS4iOJqMM9pvgSRhhR phL1k24fTalD0pqtkX0ZktuD+T/MkbwcNrpwqPojxD+ZxDQQP0BHAdTw4/NBDVzW YZnBkc/qKPHNeLtT8cmYH2cutCH1BpKCoPRJCwH0F0FoTc8Rmc8= -----END CERTIFICATE-----Generated at Thu Sep 24 06:33:34 2026 by rpki-client