$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: qcEDB6YMG4wjczPPDItYhypDHqeSD8aTaJL5tVqJmuc= Subject key identifier: E1:7F:34:95:60:10:D9:6E:2C:BD:91:7C:A3:B0:AA:53:B7:CA:07:31 Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 755912BD0AFD6E940B1980F929B99F47B3E92696 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: FF Signing time: Mon 09 Nov 2026 18:38:59 +0000 Manifest this update: Mon 09 Nov 2026 18:33:59 +0000 Manifest next update: Tue 10 Nov 2026 19:13:59 +0000 Files and hashes: 1: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: PZYXRBC+3vN8HdjztR2TJHkuFBTIsqISk7sRAtvfVPs=) 2: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) 3: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) 4: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) 5: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 6: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 19:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:59:12:bd:0a:fd:6e:94:0b:19:80:f9:29:b9:9f:47:b3:e9:26:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: Nov 9 18:33:59 2026 GMT Not After : Nov 10 19:13:59 2026 GMT Subject: CN=E17F34956010D96E2CBD917CA3B0AA53B7CA0731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:2b:62:47:15:ec:d6:91:b6:dd:2c:41:cb: 2e:67:4e:24:74:b9:d8:5c:95:a4:2a:cb:50:5e:a7: 2d:6c:f9:74:37:25:71:d8:bd:4d:22:a6:db:d6:36: d6:db:68:d8:c9:d7:03:23:ed:ee:1d:be:1f:bd:34: 4b:dc:55:84:8d:3a:f4:65:d1:a2:d9:47:3a:4c:bb: 93:c8:b2:d1:c0:9e:0b:a1:b5:9c:15:b0:43:46:e4: c9:8f:6c:0e:d2:77:bd:d0:a9:27:01:76:22:b2:2e: 32:13:71:0e:cb:75:18:65:d4:70:75:8b:3e:47:a6: 4e:1b:55:da:60:e7:b2:74:e8:e4:36:12:77:70:fe: 87:28:76:7f:37:d5:5d:3e:f7:9a:5b:f3:89:bf:24: 4d:39:d6:ef:07:78:fa:60:ad:7a:16:e1:af:19:da: d0:60:6a:68:24:9a:af:48:88:fd:94:80:31:4a:b1: bd:03:4a:c4:69:5b:ff:63:a5:c4:bd:fb:b7:d5:e5: 99:40:e8:d9:61:cc:25:d4:d9:3c:eb:cc:a5:2f:86: e2:cd:fc:47:01:68:1a:24:8d:a1:0b:90:8d:2c:0e: 22:3c:eb:df:6b:ed:fc:1e:fa:90:20:d5:15:7b:e1: b4:b8:ad:7f:74:2b:b1:b8:8a:71:bc:b2:b5:9b:40: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7F:34:95:60:10:D9:6E:2C:BD:91:7C:A3:B0:AA:53:B7:CA:07:31 X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fc:61:3d:c5:2e:12:f3:d4:b9:26:7d:83:79:ff:9e:23:fe: d2:34:2f:33:1c:5a:75:fd:03:f2:ff:0a:16:af:2b:35:e2:a7: eb:00:5e:3e:03:4a:c5:e0:67:8f:ec:d6:51:f9:84:ae:72:1c: 4e:4f:0e:23:70:8e:3a:cb:64:29:09:c8:6e:ce:44:fd:6d:12: e8:83:47:55:43:d9:39:bb:a4:35:b3:59:85:38:17:f8:1b:4d: 45:8d:bc:63:8a:0b:55:2f:dc:ec:67:28:a9:58:25:3e:28:e8: 07:01:1b:50:9f:eb:91:d4:74:3c:72:76:00:e0:b2:18:d8:6e: b8:97:78:9b:68:6f:ba:a5:f7:81:fe:28:6c:e4:70:07:80:4f: 11:6b:93:c1:89:51:01:91:dd:fe:fe:9e:cd:a3:3f:a8:93:32: 96:68:f6:01:86:23:2c:78:57:98:c1:ef:41:48:3f:13:b6:4f: 89:b9:e5:fa:e6:0f:21:dd:df:21:e1:4a:10:7c:72:ac:b8:c5: f2:82:0d:62:79:0c:5b:89:32:a4:74:30:b7:0d:34:61:c1:df: cf:ef:1e:d5:37:1f:26:09:2c:59:ee:7b:34:e2:55:92:9e:c1: 79:f0:67:a7:6b:da:29:9b:25:f7:00:18:0c:a1:4b:b4:e5:2d: 79:26:83:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVkSvQr9bpQLGYD5KbmfR7PpJpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjExMDkxODMzNTlaFw0yNjExMTAxOTEzNTlaMDMxMTAvBgNV BAMTKEUxN0YzNDk1NjAxMEQ5NkUyQ0JEOTE3Q0EzQjBBQTUzQjdDQTA3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BCtiRxXs1pG23SxByy5nTiR0 udhclaQqy1Bepy1s+XQ3JXHYvU0iptvWNtbbaNjJ1wMj7e4dvh+9NEvcVYSNOvRl 0aLZRzpMu5PIstHAnguhtZwVsENG5MmPbA7Sd73QqScBdiKyLjITcQ7LdRhl1HB1 iz5Hpk4bVdpg57J06OQ2Endw/ocodn831V0+95pb84m/JE051u8HePpgrXoW4a8Z 2tBgamgkmq9IiP2UgDFKsb0DSsRpW/9jpcS9+7fV5ZlA6NlhzCXU2TzrzKUvhuLN /EcBaBokjaELkI0sDiI8699r7fwe+pAg1RV74bS4rX90K7G4inG8srWbQI0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4X80lWAQ2W4svZF8o7CqU7fKBzEwHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJX8YT3FLhLz1LkmfYN5/54j/tI0LzMcWnX9 A/L/ChavKzXip+sAXj4DSsXgZ4/s1lH5hK5yHE5PDiNwjjrLZCkJyG7ORP1tEuiD R1VD2Tm7pDWzWYU4F/gbTUWNvGOKC1Uv3OxnKKlYJT4o6AcBG1Cf65HUdDxydgDg shjYbriXeJtob7ql94H+KGzkcAeATxFrk8GJUQGR3f7+ns2jP6iTMpZo9gGGIyx4 V5jB70FIPxO2T4m55frmDyHd3yHhShB8cqy4xfKCDWJ5DFuJMqR0MLcNNGHB38/v HtU3HyYJLFnuezTiVZKewXnwZ6dr2imbJfcAGAyhS7TlLXkmg7o= -----END CERTIFICATE-----Generated at Tue Nov 10 05:24:41 2026 by rpki-client