$ rpki-client -vvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft File: AE03A0FB122D3B828822172D20A923BA84A5CB76.mft (raw, json) Hash identifier: 4FgGDOD3HF320ZPS2xhR15y99slpDj+otAtH1n0g+ZE= Subject key identifier: 2B:B8:D9:3A:40:4D:8B:80:17:4E:E7:6B:99:D1:34:25:C8:F7:1C:35 Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 Certificate issuer: /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Certificate serial: 200AD972FAB6CDFD19CBB8A781F341B67C0A25AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:07:12 +0000 Manifest this update: Tue 16 Jun 2026 19:02:12 +0000 Manifest next update: Wed 17 Jun 2026 21:55:12 +0000 Files and hashes: 1: AE03A0FB122D3B828822172D20A923BA84A5CB76.crl (hash: AtKcDQGdDZicwxDsGevsJHBj1/XWQixZd0kngwknvik=) 2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: sM8kT9+lnDp66j8gZ6lQEt5JkL6qeZtqa7PnwIaHyfU=) 3: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0a:d9:72:fa:b6:cd:fd:19:cb:b8:a7:81:f3:41:b6:7c:0a:25:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Validity Not Before: Jun 16 19:02:12 2026 GMT Not After : Jun 17 21:55:12 2026 GMT Subject: CN=2BB8D93A404D8B80174EE76B99D13425C8F71C35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:4b:43:17:55:91:ea:2a:4b:56:a6:bf:97: 61:04:db:33:38:3e:a2:71:3c:97:d5:89:0a:4e:42: c6:fa:9a:e5:22:04:fb:6e:f2:d1:b5:57:b6:61:d2: 8d:95:ab:7e:4b:2c:c2:e9:44:1c:f3:27:f9:2e:0f: c4:3e:7d:5c:aa:cb:34:0e:6b:80:54:17:96:22:be: a1:8a:bf:31:91:8b:4a:b9:e3:9a:53:9a:2b:66:41: ef:80:e5:46:b6:7a:f2:c6:3a:f3:62:16:f4:f5:4f: b2:03:47:8a:06:50:68:f8:d6:a7:02:2a:e7:e1:c5: a8:76:65:18:ca:c0:39:23:32:c3:3c:60:b8:e7:77: 3b:fb:13:b5:3b:03:17:7f:ac:1a:6b:69:5f:1f:cf: 77:dd:a4:dc:f0:cf:61:7d:c9:de:6d:13:68:c9:27: 9e:ba:7d:1e:d4:be:5d:32:f7:a0:58:51:1c:16:aa: 76:8a:47:d1:10:33:6f:59:a6:2d:72:6b:07:62:83: 80:2e:f3:10:33:99:ad:14:e5:90:c7:59:17:d9:c2: 77:b5:7f:a2:36:2e:8b:b2:37:60:40:38:ee:e5:ac: 65:11:77:e4:34:63:8f:29:74:3b:be:8c:a6:97:eb: b9:50:fa:05:d3:6d:7f:6a:82:4d:71:cf:f6:39:39: 06:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B8:D9:3A:40:4D:8B:80:17:4E:E7:6B:99:D1:34:25:C8:F7:1C:35 X509v3 Authority Key Identifier: keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:04:5f:0f:69:a6:60:86:3d:4b:e1:15:0b:8f:69:c8:f1:a3: 4f:71:3b:75:d6:12:cd:bf:17:16:a2:0b:b5:b6:89:39:ef:16: ba:19:05:f8:f8:75:11:4c:e2:51:3c:4c:d7:b0:44:46:d2:22: 06:64:53:82:4b:aa:5b:11:75:b6:7d:2b:91:e5:bb:9d:27:37: ad:c1:11:4d:e2:7e:9a:ab:5a:98:31:21:54:6e:cc:79:5a:38: ac:2f:7e:16:d4:9d:4d:50:6c:ff:b9:fa:54:76:f9:f0:2f:d5: ab:84:15:d4:5c:e1:d1:cf:82:c2:d6:10:d1:c2:0d:51:b5:b0: 4d:01:a0:92:6e:fb:0f:c3:a0:4d:6a:c1:e5:12:c1:f3:15:80: 4c:5f:d9:e1:cf:18:83:19:4e:0d:b6:71:96:37:01:6c:01:55: 03:ff:b5:a7:cc:5a:e9:87:ac:3f:e2:f4:c7:38:6c:dd:24:7f: b4:3b:88:8a:75:0c:f2:1d:3b:70:81:84:93:33:d1:74:42:68: f7:c0:8c:3d:d7:06:e5:4e:ae:02:0b:b2:5c:25:5d:c8:75:1d: aa:8e:ec:f5:be:85:e2:8b:50:db:79:e7:ee:3f:d2:48:7e:5f: b6:56:69:d6:5e:14:fa:27:8f:3b:2b:69:ac:47:a9:69:16:33: 31:fe:16:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIArZcvq2zf0Zy7ingfNBtnwKJaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4 NEE1Q0I3NjAeFw0yNjA2MTYxOTAyMTJaFw0yNjA2MTcyMTU1MTJaMDMxMTAvBgNV BAMTKDJCQjhEOTNBNDA0RDhCODAxNzRFRTc2Qjk5RDEzNDI1QzhGNzFDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWktDF1WR6ipLVqa/l2EE2zM4 PqJxPJfViQpOQsb6muUiBPtu8tG1V7Zh0o2Vq35LLMLpRBzzJ/kuD8Q+fVyqyzQO a4BUF5YivqGKvzGRi0q545pTmitmQe+A5Ua2evLGOvNiFvT1T7IDR4oGUGj41qcC Kufhxah2ZRjKwDkjMsM8YLjndzv7E7U7Axd/rBpraV8fz3fdpNzwz2F9yd5tE2jJ J566fR7Uvl0y96BYURwWqnaKR9EQM29Zpi1yawdig4Au8xAzma0U5ZDHWRfZwne1 f6I2LouyN2BAOO7lrGURd+Q0Y48pdDu+jKaX67lQ+gXTbX9qgk1xz/Y5OQZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK7jZOkBNi4AXTudrmdE0Jcj3HDUwHwYDVR0j BBgwFoAUrgOg+xItO4KIIhctIKkjuoSly3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYxZTlkZTItYTRlYy00N2EyLTliYjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIx MjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4NEE1Q0I3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAzQTBGQjEyMkQzQjgyODgyMjE3MkQyMEE5MjNCQTg0QTVD Qjc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIz QkE4NEE1Q0I3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkEXw9ppmCGPUvhFQuPacjxo09xO3XWEs2/ FxaiC7W2iTnvFroZBfj4dRFM4lE8TNewREbSIgZkU4JLqlsRdbZ9K5Hlu50nN63B EU3ifpqrWpgxIVRuzHlaOKwvfhbUnU1QbP+5+lR2+fAv1auEFdRc4dHPgsLWENHC DVG1sE0BoJJu+w/DoE1qweUSwfMVgExf2eHPGIMZTg22cZY3AWwBVQP/tafMWumH rD/i9Mc4bN0kf7Q7iIp1DPIdO3CBhJMz0XRCaPfAjD3XBuVOrgILslwlXch1HaqO 7PW+heKLUNt55+4/0kh+X7ZWadZeFPonjzsraaxHqWkWMzH+FjE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:07 2026 by rpki-client