$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: 70oefu2VKwoxbU8Px1C9pkUFGX2defA7KqmyBoXOqX4= Subject key identifier: 2E:AD:76:A2:BD:DF:DA:13:EE:DB:74:94:B4:90:7F:C1:96:58:2F:9B Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 457E3A69C231E881162CB2561884ABBFC77D5C85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: BD Signing time: Sun 20 Sep 2026 22:04:12 +0000 Manifest this update: Sun 20 Sep 2026 21:59:12 +0000 Manifest next update: Tue 22 Sep 2026 01:00:12 +0000 Files and hashes: 1: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 2: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) 3: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) 4: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) 5: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: 1KFEwRP8I9eIeDYXFPwOPYdUfHUWOrEW+DJBJ0LWJ+Q=) 6: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7e:3a:69:c2:31:e8:81:16:2c:b2:56:18:84:ab:bf:c7:7d:5c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: Sep 20 21:59:12 2026 GMT Not After : Sep 22 01:00:12 2026 GMT Subject: CN=2EAD76A2BDDFDA13EEDB7494B4907FC196582F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:15:09:64:ba:f3:fd:d8:2f:bf:8c:e1:ee: 2b:07:0a:a7:5c:f1:d3:45:1e:a7:b8:20:2e:f1:17: 72:98:d8:ec:39:3c:0b:8d:bc:47:ed:5f:75:c4:9e: bb:0b:88:ab:a9:55:f9:6e:7e:df:3f:4c:72:7b:15: 7c:aa:99:ba:30:ee:9b:cb:3c:fd:54:97:4c:81:1c: 61:57:47:1c:f0:94:af:ee:4e:6b:91:34:70:e2:53: fe:d7:9e:82:16:a2:66:cd:ce:c4:8a:aa:6a:6a:fd: ae:7b:6e:ae:f9:5f:1b:a0:23:06:ca:d0:d0:81:1f: 64:72:21:a1:27:f3:26:f6:cd:26:a9:a4:88:0d:e1: 01:4e:e6:4e:02:73:e7:fb:1c:a7:05:2e:bb:48:4a: 1e:e7:4a:70:4c:c3:31:7c:af:bd:42:8a:6b:a3:27: f2:2f:79:82:92:8e:fd:47:2b:bf:d1:3a:6a:3e:c6: a4:80:a9:c8:9e:9d:25:4f:05:9d:1f:38:b4:e7:f9: 09:85:c4:0a:92:d7:5e:31:72:7c:a4:55:53:f8:48: 3d:a0:2a:ab:36:42:65:c1:e4:97:55:fa:56:d9:5a: 08:04:d1:8c:a6:55:c1:0e:38:0f:44:e4:67:9e:89: 2c:ba:9b:bd:60:b2:b5:09:ba:b8:04:00:44:36:1d: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:76:A2:BD:DF:DA:13:EE:DB:74:94:B4:90:7F:C1:96:58:2F:9B X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:57:28:68:86:52:4c:a6:f8:5e:7b:8e:9a:fc:9a:d7:e3:91: dc:f6:dd:bf:b9:e5:6a:00:9e:3c:bf:26:e1:32:6b:11:b4:68: e4:24:d6:b4:b7:eb:43:fa:bd:c2:f1:04:52:f7:b9:ff:9b:de: d0:9f:f2:67:98:6d:10:98:96:a8:66:cf:d0:72:67:46:ee:1e: 20:49:a9:cc:91:64:b9:6b:52:e2:fc:31:a3:5c:f9:14:ef:ca: 18:f0:46:15:3d:07:cc:be:43:71:ce:d5:0d:66:f1:db:b2:c9: 08:b0:15:b5:60:b3:a1:f4:83:e8:9f:47:c4:5a:5f:46:82:a4: d6:f5:bb:3c:ea:12:69:12:2c:bf:cb:16:46:67:f3:30:f3:5f: 47:46:6c:7e:3f:14:4d:b9:3d:e6:58:51:81:86:1a:95:38:f6: e9:6a:7e:96:e5:a7:b6:18:9c:13:47:b9:7b:d4:4f:b0:68:1f: 4c:46:ae:b9:b3:df:27:30:5d:0d:2d:90:5b:57:17:5c:3e:9f: 72:d6:c9:d9:37:92:41:bc:36:ae:f2:4d:c1:a4:14:52:2b:6a: e9:c2:be:5f:4b:58:8d:70:45:9b:01:f0:e8:a3:0c:70:9d:0c: 1c:9a:9b:f2:b1:d0:cf:80:56:ee:5b:09:ca:38:0a:da:96:b6: 68:5c:fc:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURX46acIx6IEWLLJWGISrv8d9XIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjA5MjAyMTU5MTJaFw0yNjA5MjIwMTAwMTJaMDMxMTAvBgNV BAMTKDJFQUQ3NkEyQkRERkRBMTNFRURCNzQ5NEI0OTA3RkMxOTY1ODJGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFxUJZLrz/dgvv4zh7isHCqdc 8dNFHqe4IC7xF3KY2Ow5PAuNvEftX3XEnrsLiKupVfluft8/THJ7FXyqmbow7pvL PP1Ul0yBHGFXRxzwlK/uTmuRNHDiU/7XnoIWombNzsSKqmpq/a57bq75XxugIwbK 0NCBH2RyIaEn8yb2zSappIgN4QFO5k4Cc+f7HKcFLrtISh7nSnBMwzF8r71Cimuj J/IveYKSjv1HK7/ROmo+xqSAqcienSVPBZ0fOLTn+QmFxAqS114xcnykVVP4SD2g Kqs2QmXB5JdV+lbZWggE0YymVcEOOA9E5GeeiSy6m71gsrUJurgEAEQ2HZj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULq12or3f2hPu23SUtJB/wZZYL5swHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdXKGiGUkym+F57jpr8mtfjkdz23b+55WoA njy/JuEyaxG0aOQk1rS360P6vcLxBFL3uf+b3tCf8meYbRCYlqhmz9ByZ0buHiBJ qcyRZLlrUuL8MaNc+RTvyhjwRhU9B8y+Q3HO1Q1m8duyyQiwFbVgs6H0g+ifR8Ra X0aCpNb1uzzqEmkSLL/LFkZn8zDzX0dGbH4/FE25PeZYUYGGGpU49ulqfpblp7YY nBNHuXvUT7BoH0xGrrmz3ycwXQ0tkFtXF1w+n3LWydk3kkG8Nq7yTcGkFFIraunC vl9LWI1wRZsB8OijDHCdDByam/Kx0M+AVu5bCco4CtqWtmhc/IY= -----END CERTIFICATE-----Generated at Mon Sep 21 16:28:14 2026 by rpki-client