$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft File: AE03A0FB122D3B828822172D20A923BA84A5CB76.mft (raw, json) Hash identifier: M9nNTBLVTwCwtwdscNpnOQ6ttOGZVgAINYSWwvIJAHY= Subject key identifier: 45:40:0B:39:DA:AD:B0:F8:76:9A:FC:72:72:8F:FE:DD:CC:04:B8:E2 Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 Certificate issuer: /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Certificate serial: 02701467659916EB00B171D9C1A76DB709F4693D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 15:25:26 +0000 Manifest this update: Tue 22 Sep 2026 15:20:26 +0000 Manifest next update: Wed 23 Sep 2026 17:01:26 +0000 Files and hashes: 1: AE03A0FB122D3B828822172D20A923BA84A5CB76.crl (hash: Tq/SnK8cM5edQ5l3wGJfcO1wpwCr0snyWBPprA+ioks=) 2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: sM8kT9+lnDp66j8gZ6lQEt5JkL6qeZtqa7PnwIaHyfU=) 3: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:70:14:67:65:99:16:eb:00:b1:71:d9:c1:a7:6d:b7:09:f4:69:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Validity Not Before: Sep 22 15:20:26 2026 GMT Not After : Sep 23 17:01:26 2026 GMT Subject: CN=45400B39DAADB0F8769AFC72728FFEDDCC04B8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:82:4f:fe:b1:93:b7:86:69:d2:5d:cb:95: e0:1c:e3:ba:40:f5:52:5c:08:c1:30:6c:20:f4:1a: 3b:72:d8:56:00:a2:45:7c:b4:99:b8:d2:cc:68:29: 81:c8:e5:b8:f2:85:f2:9d:1d:a5:da:46:1a:8e:0e: df:95:ff:1f:2c:b9:7e:0d:a6:e1:ec:80:e6:12:4c: 9b:53:79:82:7d:e6:3d:0c:38:68:1b:db:e6:2d:6d: ea:cd:2b:9f:6c:d9:1c:4c:a8:42:2a:2d:50:cc:97: 52:45:c8:fd:29:c3:46:de:17:c8:3d:ae:2f:bc:87: d0:5b:ea:ef:0f:99:1c:d4:b4:7f:70:7f:18:a7:79: 37:83:3c:9b:ee:16:13:f3:05:69:67:84:66:e6:68: 5a:31:2c:f1:62:5f:95:89:97:41:10:0e:3c:62:7c: 8a:93:ca:10:34:b9:c8:f2:4d:33:96:d8:01:2a:99: ca:e2:a0:e0:26:b5:89:f8:45:4b:b6:68:b6:89:78: 65:e1:65:d0:31:32:2f:97:ed:3e:14:f6:32:2f:71: 1c:06:23:0e:b2:00:77:60:b2:9f:30:aa:a7:26:dd: b1:a0:89:9a:43:ec:66:1f:3c:49:2b:73:b6:96:4c: bc:a4:bc:56:18:9f:2a:1f:28:10:23:dc:d2:38:9c: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:40:0B:39:DA:AD:B0:F8:76:9A:FC:72:72:8F:FE:DD:CC:04:B8:E2 X509v3 Authority Key Identifier: keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5b:99:83:85:d5:30:dd:c3:4c:33:7d:0d:31:12:06:1b:ed: ce:c1:65:99:ee:de:13:68:73:d9:e7:d0:28:91:60:69:8e:44: ce:84:22:ff:8c:4d:73:89:90:2c:6e:15:cd:46:df:61:2c:e4: c7:ce:1c:de:85:ba:4e:52:4b:cd:df:86:43:f5:0b:c1:f1:96: 57:a9:eb:09:36:8c:19:6b:d6:ed:99:a2:fc:72:5b:bc:c9:c5: c6:9b:31:ef:c8:e2:2c:9e:c9:6a:97:cc:9e:28:49:7d:45:0e: ef:44:4e:9d:b6:c5:77:4d:82:f6:c7:7f:c7:4e:1f:75:e3:79: 31:9c:60:2f:91:e0:6a:6e:b4:de:d1:85:de:ec:67:f6:f0:7c: b4:6a:8e:f2:fb:d9:c1:55:94:9c:85:dd:0d:67:a9:d0:93:f1: 36:7a:9e:07:96:b6:af:15:df:55:4b:8d:c7:3f:a5:b8:da:82: 60:f4:a8:f2:82:6e:e9:b0:33:67:2b:ef:54:f6:36:9a:c4:d6: 52:48:18:c2:ae:1c:b6:73:11:5a:87:33:8f:dd:36:8c:01:51: 5b:49:14:c9:f5:e8:b9:04:4b:a6:88:b5:e5:73:83:30:5d:3d: b5:3e:9d:65:83:a6:ec:0b:82:55:18:43:fe:92:b3:ef:b2:9c: 6d:23:9f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnAUZ2WZFusAsXHZwadttwn0aT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4 NEE1Q0I3NjAeFw0yNjA5MjIxNTIwMjZaFw0yNjA5MjMxNzAxMjZaMDMxMTAvBgNV BAMTKDQ1NDAwQjM5REFBREIwRjg3NjlBRkM3MjcyOEZGRUREQ0MwNEI4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7oJP/rGTt4Zp0l3LleAc47pA 9VJcCMEwbCD0Gjty2FYAokV8tJm40sxoKYHI5bjyhfKdHaXaRhqODt+V/x8suX4N puHsgOYSTJtTeYJ95j0MOGgb2+YtberNK59s2RxMqEIqLVDMl1JFyP0pw0beF8g9 ri+8h9Bb6u8PmRzUtH9wfxineTeDPJvuFhPzBWlnhGbmaFoxLPFiX5WJl0EQDjxi fIqTyhA0ucjyTTOW2AEqmcrioOAmtYn4RUu2aLaJeGXhZdAxMi+X7T4U9jIvcRwG Iw6yAHdgsp8wqqcm3bGgiZpD7GYfPEkrc7aWTLykvFYYnyofKBAj3NI4nNoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURUALOdqtsPh2mvxyco/+3cwEuOIwHwYDVR0j BBgwFoAUrgOg+xItO4KIIhctIKkjuoSly3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYxZTlkZTItYTRlYy00N2EyLTliYjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIx MjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4NEE1Q0I3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAzQTBGQjEyMkQzQjgyODgyMjE3MkQyMEE5MjNCQTg0QTVD Qjc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIz QkE4NEE1Q0I3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtbmYOF1TDdw0wzfQ0xEgYb7c7BZZnu3hNo c9nn0CiRYGmORM6EIv+MTXOJkCxuFc1G32Es5MfOHN6Fuk5SS83fhkP1C8Hxllep 6wk2jBlr1u2ZovxyW7zJxcabMe/I4iyeyWqXzJ4oSX1FDu9ETp22xXdNgvbHf8dO H3XjeTGcYC+R4GputN7Rhd7sZ/bwfLRqjvL72cFVlJyF3Q1nqdCT8TZ6ngeWtq8V 31VLjcc/pbjagmD0qPKCbumwM2cr71T2NprE1lJIGMKuHLZzEVqHM4/dNowBUVtJ FMn16LkES6aIteVzgzBdPbU+nWWDpuwLglUYQ/6Ss++ynG0jnxw= -----END CERTIFICATE-----Generated at Wed Sep 23 08:32:28 2026 by rpki-client