$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft File: AAB4671D9735066964F008C9DDFC52C3A710E040.mft (raw, json) Hash identifier: rPv7nAmMDApS/jelB0J3D7GI5Z7v1FrFd50KJgI3fpI= Subject key identifier: 95:49:BB:AF:8A:E7:DB:02:19:E0:FA:D8:20:19:35:E5:5A:1C:DB:D9 Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Certificate serial: 0EAF96BBCC69502AD1666ED92194EDBC3F01C919 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:32:54 +0000 Manifest this update: Wed 03 Jun 2026 02:27:54 +0000 Manifest next update: Thu 04 Jun 2026 04:08:54 +0000 Files and hashes: 1: AAB4671D9735066964F008C9DDFC52C3A710E040.crl (hash: GahwVl+QnZX3kuF9pCEwkn7C7lpiGrxZquYZjfIsbq0=) 2: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA=) 3: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 42yHJRCL2UkIYvPUKITyhrxYXg51+0nJdl91wdx0sEk=) 4: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: unzh605AgxMrS8kL6fN+yePqm6X/AD3ox4pCc7I8/VY=) 5: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=) 6: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=) 7: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: aJngYofxYM8aRo7ASuGSX++bpTmrKYXt3y7dtT5WC2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:af:96:bb:cc:69:50:2a:d1:66:6e:d9:21:94:ed:bc:3f:01:c9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Validity Not Before: Jun 3 02:27:54 2026 GMT Not After : Jun 4 04:08:54 2026 GMT Subject: CN=9549BBAF8AE7DB0219E0FAD8201935E55A1CDBD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:5d:b3:45:df:e6:4f:4d:36:39:3f:af:25: d4:aa:98:f7:e9:0e:f4:9c:20:0a:04:87:f1:61:27: c3:2f:f8:bb:29:93:09:d6:45:d6:c0:37:01:a8:74: b3:73:6b:1d:51:93:3c:e5:0b:82:7e:ed:ab:68:a0: 26:f3:5c:4d:2e:bd:f3:2e:c4:47:e6:cf:13:a6:7d: 40:16:f1:8b:f9:38:2c:4d:be:52:6e:71:a7:24:bd: 3e:dc:d7:9f:48:da:92:2b:7b:22:fd:24:5d:28:49: d1:46:68:90:2f:31:50:da:96:5a:2e:eb:40:0f:c5: 91:cf:a2:14:15:4d:6e:a2:ec:e1:fb:98:c5:b4:f2: 73:51:f3:90:b9:ef:d7:90:22:e9:17:4b:98:fe:55: 06:30:37:d0:9a:c6:c5:88:59:60:23:df:9c:34:95: 66:69:38:b0:42:91:ea:47:49:40:ef:2b:48:6e:95: 52:00:ee:b1:e2:53:7a:08:79:04:4a:a1:cd:a2:9d: 6b:0e:aa:24:fb:f7:56:e3:37:3b:50:15:e6:68:78: a4:0c:66:2b:a4:be:08:18:98:76:e0:34:34:5a:25: 0e:bb:73:55:36:b1:b0:c9:6a:92:0f:03:0a:3f:98: 4b:6f:dd:c9:2c:00:78:33:a2:9b:81:4d:d5:08:11: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:49:BB:AF:8A:E7:DB:02:19:E0:FA:D8:20:19:35:E5:5A:1C:DB:D9 X509v3 Authority Key Identifier: keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:28:6a:f9:64:52:d9:02:89:a4:d4:f7:ab:ba:b0:34:65:8a: 64:49:fc:78:92:7e:f1:32:01:13:52:83:af:67:f2:61:4f:43: 75:12:00:56:62:4a:60:41:28:6e:b6:4b:29:05:6c:cb:48:d6: ac:a3:56:72:6b:6b:5d:80:11:23:f9:fa:aa:48:8b:8f:36:ad: 7a:98:aa:34:4a:5c:4a:73:45:d1:c3:6f:05:93:43:3a:5d:f5: 1a:ff:47:74:56:04:0a:58:f6:14:ae:8d:56:c4:6a:b3:cb:63: 36:f3:59:36:63:3b:ba:bb:d9:b3:e0:91:91:1a:78:58:4d:b8: 75:1e:46:f8:d3:aa:8f:6d:e9:a5:2d:10:eb:e4:22:7e:ce:b0: b6:1d:94:c3:45:c1:3f:a2:38:54:31:e8:4e:62:56:30:0f:98: 81:df:d5:6b:4a:3a:ea:0f:b4:0e:f2:41:59:37:39:34:5b:91: 81:b5:66:5b:2e:a3:50:0e:1f:4f:a3:03:21:8b:d9:da:7f:0f: 78:26:d6:3e:be:d6:5f:c6:60:b7:12:45:e6:c9:a0:1a:bf:70: e4:b2:b0:0b:f7:32:10:e3:6c:a4:05:37:f2:57:0b:0a:c2:51: ed:da:d6:52:9f:14:79:09:0f:9e:4e:30:60:62:69:36:90:30: ce:48:f5:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDq+Wu8xpUCrRZm7ZIZTtvD8ByRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNB NzEwRTA0MDAeFw0yNjA2MDMwMjI3NTRaFw0yNjA2MDQwNDA4NTRaMDMxMTAvBgNV BAMTKDk1NDlCQkFGOEFFN0RCMDIxOUUwRkFEODIwMTkzNUU1NUExQ0RCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5F2zRd/mT002OT+vJdSqmPfp DvScIAoEh/FhJ8Mv+LspkwnWRdbANwGodLNzax1RkzzlC4J+7atooCbzXE0uvfMu xEfmzxOmfUAW8Yv5OCxNvlJucackvT7c159I2pIreyL9JF0oSdFGaJAvMVDallou 60APxZHPohQVTW6i7OH7mMW08nNR85C579eQIukXS5j+VQYwN9CaxsWIWWAj35w0 lWZpOLBCkepHSUDvK0hulVIA7rHiU3oIeQRKoc2inWsOqiT791bjNztQFeZoeKQM ZiukvggYmHbgNDRaJQ67c1U2sbDJapIPAwo/mEtv3cksAHgzopuBTdUIEXkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlUm7r4rn2wIZ4PrYIBk15Voc29kwHwYDVR0j BBgwFoAUqrRnHZc1Bmlk8AjJ3fxSw6cQ4EAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU0NmEzMDUtZGY3Ny00NTg3LTg3MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5 NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNBNzEwRTA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUI0NjcxRDk3MzUwNjY5NjRGMDA4QzlEREZDNTJDM0E3MTBF MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUy QzNBNzEwRTA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8oavlkUtkCiaTU96u6sDRlimRJ/HiSfvEy ARNSg69n8mFPQ3USAFZiSmBBKG62SykFbMtI1qyjVnJra12AESP5+qpIi482rXqY qjRKXEpzRdHDbwWTQzpd9Rr/R3RWBApY9hSujVbEarPLYzbzWTZjO7q72bPgkZEa eFhNuHUeRvjTqo9t6aUtEOvkIn7OsLYdlMNFwT+iOFQx6E5iVjAPmIHf1WtKOuoP tA7yQVk3OTRbkYG1Zlsuo1AOH0+jAyGL2dp/D3gm1j6+1l/GYLcSRebJoBq/cOSy sAv3MhDjbKQFN/JXCwrCUe3a1lKfFHkJD55OMGBiaTaQMM5I9Ws= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:13 2026 by rpki-client