$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: Sdw1Gz5CZzrua7nR8gkv311fMgs/qtxmXE2QeJ97QQs= Subject key identifier: 26:68:6E:F2:59:E7:86:14:03:60:E6:88:9D:11:FE:1D:6E:C0:2C:11 Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 3810B55CE303E73733EC548F7C1856939E45E5E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:31:58 +0000 Manifest this update: Wed 17 Jun 2026 07:26:58 +0000 Manifest next update: Thu 18 Jun 2026 11:02:58 +0000 Files and hashes: 1: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) 2: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) 3: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) 4: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 5: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) 6: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: /ZMmBaKZi6jLoClaNllS/WU/elMmRx/v/uD2sprbMwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:10:b5:5c:e3:03:e7:37:33:ec:54:8f:7c:18:56:93:9e:45:e5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: Jun 17 07:26:58 2026 GMT Not After : Jun 18 11:02:58 2026 GMT Subject: CN=26686EF259E786140360E6889D11FE1D6EC02C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:7e:57:54:66:b5:29:a2:2b:f9:e2:56:b0: 5f:1e:84:26:60:86:f3:0b:91:cc:38:32:b8:cd:e3: aa:90:1e:f4:c7:3e:aa:4d:c2:7e:d1:9c:6a:d3:3b: 72:6e:ff:73:9a:7c:07:9f:d9:41:5e:13:b2:d5:b6: f3:d2:90:89:22:db:3f:4f:5b:5d:0d:df:c5:09:6f: a6:2b:06:d8:6e:06:f3:3e:4f:94:83:5f:be:0c:2f: 27:b3:23:34:89:23:0e:67:46:d9:67:b5:b3:a2:42: 88:3e:35:e2:69:1b:d7:b3:8f:84:da:3d:6e:d7:c5: 5f:e4:5c:ab:c8:56:4d:ab:89:cf:ff:fc:e7:bf:63: 13:41:d4:ee:94:fc:aa:ef:30:a5:e2:b0:7e:de:aa: e1:75:76:e4:ae:f1:90:34:86:84:46:c3:f7:f2:ae: 43:46:7d:ea:1a:af:8f:36:2b:ce:c4:52:91:90:e2: 34:82:2c:41:30:fd:12:7c:0b:2f:a1:96:5a:75:b7: e9:3a:27:14:d6:68:f6:5e:1f:2f:24:20:df:2c:1b: a4:a4:06:f9:ac:5f:52:60:f0:c9:ff:76:38:be:a9: c3:a6:3f:8e:80:0e:12:34:6b:02:64:ce:f7:78:f3: 37:d4:d7:ba:98:74:58:f5:ac:2e:6f:ff:f0:94:ee: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:68:6E:F2:59:E7:86:14:03:60:E6:88:9D:11:FE:1D:6E:C0:2C:11 X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:38:08:ec:76:ca:fd:78:0b:03:3b:f4:2e:e9:a9:30:ad:e0: 1f:97:16:1d:d8:d5:a3:fb:c6:de:3d:8c:6f:dd:f2:24:c4:aa: 7c:a1:78:13:7f:19:a9:d6:a5:cd:ce:75:7b:8d:2b:a6:4a:ae: c0:7e:53:75:72:2d:eb:77:cc:fc:ff:fa:2b:59:ad:85:90:13: 0f:63:63:f1:68:cb:74:6d:fe:b8:e0:bb:75:29:4c:b3:f5:bb: f0:b8:52:a7:3e:25:1b:74:3c:ce:69:95:07:7c:f4:a0:5d:60: d7:29:71:ae:39:02:85:71:85:16:cb:42:eb:69:4d:a0:48:84: 42:90:cc:59:2d:1c:af:ec:0e:60:c0:cb:2f:f7:38:5b:b2:35: 94:4c:54:83:29:9d:7e:c8:23:f1:08:7b:8c:25:d2:e3:ec:6e: 43:da:c0:43:3b:d2:b7:36:2f:d2:2b:72:17:6f:d2:b9:82:ed: 81:41:df:fd:02:cf:d0:a3:08:01:27:44:2b:eb:b1:a1:b8:14: 47:3d:5b:05:18:88:8a:86:b2:34:57:1a:8f:e8:cd:cb:c7:56: e7:c6:d8:5d:ae:37:cc:80:55:fc:c7:5f:94:c0:bc:b0:32:a4: 54:3c:6a:2a:84:f4:5b:5b:d7:f4:95:44:ad:67:bb:80:70:5f: 98:5a:95:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBC1XOMD5zcz7FSPfBhWk55F5eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjA2MTcwNzI2NThaFw0yNjA2MTgxMTAyNThaMDMxMTAvBgNV BAMTKDI2Njg2RUYyNTlFNzg2MTQwMzYwRTY4ODlEMTFGRTFENkVDMDJDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7H5XVGa1KaIr+eJWsF8ehCZg hvMLkcw4MrjN46qQHvTHPqpNwn7RnGrTO3Ju/3OafAef2UFeE7LVtvPSkIki2z9P W10N38UJb6YrBthuBvM+T5SDX74MLyezIzSJIw5nRtlntbOiQog+NeJpG9ezj4Ta PW7XxV/kXKvIVk2ric///Oe/YxNB1O6U/KrvMKXisH7equF1duSu8ZA0hoRGw/fy rkNGfeoar482K87EUpGQ4jSCLEEw/RJ8Cy+hllp1t+k6JxTWaPZeHy8kIN8sG6Sk BvmsX1Jg8Mn/dji+qcOmP46ADhI0awJkzvd48zfU17qYdFj1rC5v//CU7pc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJmhu8lnnhhQDYOaInRH+HW7ALBEwHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg4COx2yv14CwM79C7pqTCt4B+XFh3Y1aP7 xt49jG/d8iTEqnyheBN/GanWpc3OdXuNK6ZKrsB+U3VyLet3zPz/+itZrYWQEw9j Y/Foy3Rt/rjgu3UpTLP1u/C4Uqc+JRt0PM5plQd89KBdYNcpca45AoVxhRbLQutp TaBIhEKQzFktHK/sDmDAyy/3OFuyNZRMVIMpnX7II/EIe4wl0uPsbkPawEM70rc2 L9Irchdv0rmC7YFB3/0Cz9CjCAEnRCvrsaG4FEc9WwUYiIqGsjRXGo/ozcvHVufG 2F2uN8yAVfzHX5TAvLAypFQ8aiqE9Ftb1/SVRK1nu4BwX5halTY= -----END CERTIFICATE-----Generated at Wed Jun 17 13:11:46 2026 by rpki-client