$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft File: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft (raw, json) Hash identifier: QZBKIp3+QAnZUyya8Ec6AGHWRzlymJyw0aDzFQzMF+k= Subject key identifier: 0E:C8:A5:F9:F7:BE:3A:B5:38:B4:FC:89:45:93:2F:76:F2:62:F7:F8 Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB Certificate issuer: /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Certificate serial: 609FB33DC3579B8DFF5ADCF5438E536AD3841270 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:32:45 +0000 Manifest this update: Wed 23 Sep 2026 21:27:45 +0000 Manifest next update: Fri 25 Sep 2026 00:09:45 +0000 Files and hashes: 1: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: l6rGkO8MgVJkambdkAclMvjE+aQSvltuGia3hhd605M=) 2: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: fZTmTy6g2R28mCtJrpoBFkv/RRFL2DWAt0Cexpbh3bM=) 3: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: q33gUCSA+x8ZeBcPhedwaAdIwEj0Ce99+sYJUQuSC9s=) 4: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: S3aT7VcLJ0ssRGTP1ygDwW7+AIQVYKqNTkFjIYTg3fg=) 5: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl (hash: udjdTxwY4E3C8GGbQIRnA6/nvgzAWtIj7DmEGa4AoEA=) 6: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: aXgaQBkXNr3WgkNnT1bbV4Z/rSlPnLbxkffq9PBogAU=) 7: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: Ee7WWGSltwyaFMHxIIgEvgkLf4dnjnHrFVC5UDqWks8=) 8: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: dHemt/X+4p/vn34sn9wPgB+Rsu5EmHnVv8RmTO5DvKE=) 9: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: 7CW/WrucWkwMy6n5L6l1Fl9wsuT6MqzAnA/bZ5ATe84=) 10: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: yyYOlJ0fwzxGoTlSm81JuoIInjVRI/GeCaxTrgVohIA=) 11: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: od92otk1ZBfK/DphT8D9p9Tw3yqgeInTJA8T3zh0m9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9f:b3:3d:c3:57:9b:8d:ff:5a:dc:f5:43:8e:53:6a:d3:84:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Validity Not Before: Sep 23 21:27:45 2026 GMT Not After : Sep 25 00:09:45 2026 GMT Subject: CN=0EC8A5F9F7BE3AB538B4FC8945932F76F262F7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:10:ff:7c:a3:34:80:0e:dc:d7:df:09:80:a2: 93:c6:e0:c6:97:87:45:51:4c:a3:e3:89:dd:b3:72: 80:fe:a5:96:31:72:a5:91:5e:a3:bd:0b:e1:0b:b0: f3:84:2c:df:42:e1:7b:a2:67:40:82:fb:1a:2e:2e: 1f:d9:d7:f7:08:ae:d6:8d:06:a3:5b:20:35:65:b1: ab:61:46:e3:78:85:1e:15:11:8c:43:e0:06:79:7b: 6c:ed:c8:a0:df:d9:16:c8:17:ba:59:60:e3:47:3e: 3a:4d:51:5a:bb:9e:1e:4b:30:96:0d:eb:b8:22:96: 53:70:5d:f5:04:e8:4a:fb:33:4d:aa:44:cd:43:49: 50:8f:a3:c9:fe:3c:48:94:ef:e5:1b:44:9a:7d:06: c8:81:cd:3c:f0:d6:81:e4:a2:15:07:1f:38:54:6a: 94:1a:10:d1:1e:dc:db:cc:83:29:f0:ad:54:c0:23: db:de:da:06:38:71:ab:b1:d4:3a:48:7a:44:f5:43: bb:8a:2f:2e:3a:17:f8:b2:ea:b0:82:2d:56:8d:cb: c5:82:dc:a5:e6:73:bb:fd:46:bb:38:be:db:72:8f: b7:86:b3:44:8f:e8:d5:92:43:b6:ad:5c:cd:00:1d: 1d:1e:fe:2a:ad:e5:20:d0:c0:67:29:5f:4b:b2:df: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C8:A5:F9:F7:BE:3A:B5:38:B4:FC:89:45:93:2F:76:F2:62:F7:F8 X509v3 Authority Key Identifier: keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:37:fd:6d:59:9e:68:10:11:b7:d1:09:70:42:8e:6a:48:68: 75:e2:ce:ed:f6:49:97:ae:a0:a0:2d:6c:91:03:44:99:4e:66: 7e:20:44:87:1e:8c:cc:10:69:2d:1d:f0:98:b9:8a:83:94:cd: e5:13:08:51:5e:b0:62:4d:90:15:22:13:ba:42:95:fe:c7:b6: 2b:15:5f:3d:9c:0f:a0:b1:e9:73:f6:f6:42:ee:1b:c3:ae:a6: 4f:7e:04:52:79:fc:d9:8c:c9:f4:1d:77:f9:ff:81:eb:3f:15: bf:70:72:a3:6a:73:93:e4:e2:f5:67:d7:0c:4b:cc:b9:f0:4d: d5:69:76:48:ee:ae:52:92:19:6a:42:3a:35:cb:81:61:11:3a: 94:80:26:38:64:fc:36:d1:67:1f:25:29:cc:c6:20:9f:77:c7: e8:dc:9c:5c:46:bc:6f:b1:37:a1:f2:c0:5c:b1:fd:97:14:6c: 2f:f2:76:d1:b9:d8:f8:24:e0:56:2c:cf:d4:55:07:a7:34:b0: 8e:73:3b:88:14:02:da:94:43:e3:da:e6:3e:ac:47:96:fa:0c: 19:de:c8:47:e3:0a:3d:08:8a:ec:3e:11:3f:94:1a:43:75:b5: c2:47:a9:bf:32:55:fb:7e:72:91:93:ff:68:9a:f7:7a:51:11: 2c:58:4e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJ+zPcNXm43/Wtz1Q45TatOEEnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3RDkyN0Y0NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFC Q0Y0QzRCQjAeFw0yNjA5MjMyMTI3NDVaFw0yNjA5MjUwMDA5NDVaMDMxMTAvBgNV BAMTKDBFQzhBNUY5RjdCRTNBQjUzOEI0RkM4OTQ1OTMyRjc2RjI2MkY3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOEP98ozSADtzX3wmAopPG4MaX h0VRTKPjid2zcoD+pZYxcqWRXqO9C+ELsPOELN9C4XuiZ0CC+xouLh/Z1/cIrtaN BqNbIDVlsathRuN4hR4VEYxD4AZ5e2ztyKDf2RbIF7pZYONHPjpNUVq7nh5LMJYN 67gillNwXfUE6Er7M02qRM1DSVCPo8n+PEiU7+UbRJp9BsiBzTzw1oHkohUHHzhU apQaENEe3NvMgynwrVTAI9ve2gY4caux1DpIekT1Q7uKLy46F/iy6rCCLVaNy8WC 3KXmc7v9Rrs4vttyj7eGs0SP6NWSQ7atXM0AHR0e/iqt5SDQwGcpX0uy3xfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDsil+fe+OrU4tPyJRZMvdvJi9/gwHwYDVR0j BBgwFoAUrn2Sf0d8PSzme7ClJEA42rz0xLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjlkNmFjYzYtMGFmMy00Yjk3LTk5YTQtMGY0NWU4ZWNmNTc2LzAvQUU3RDkyN0Y0 NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFCQ0Y0QzRCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTdEOTI3RjQ3N0MzRDJDRTY3QkIwQTUyNDQwMzhEQUJDRjRD NEJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvQUU3RDkyN0Y0NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4 REFCQ0Y0QzRCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw3/W1ZnmgQEbfRCXBCjmpIaHXizu32SZeu oKAtbJEDRJlOZn4gRIcejMwQaS0d8Ji5ioOUzeUTCFFesGJNkBUiE7pClf7HtisV Xz2cD6Cx6XP29kLuG8Oupk9+BFJ5/NmMyfQdd/n/ges/Fb9wcqNqc5Pk4vVn1wxL zLnwTdVpdkjurlKSGWpCOjXLgWEROpSAJjhk/DbRZx8lKczGIJ93x+jcnFxGvG+x N6HywFyx/ZcUbC/ydtG52Pgk4FYsz9RVB6c0sI5zO4gUAtqUQ+Pa5j6sR5b6DBne yEfjCj0Iiuw+ET+UGkN1tcJHqb8yVft+cpGT/2ia93pRESxYThM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:07:06 2026 by rpki-client