$ rpki-client -vvf rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft File: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft (raw, json) Hash identifier: w6K1zipGV3JSJ7YTpk/4D8b6tKJloLMThqmsWDVjygE= Subject key identifier: 60:F1:4A:4D:5E:AE:CC:6E:D1:79:E3:14:97:E9:6E:A4:46:AC:FE:CE Authority key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Certificate issuer: /CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Certificate serial: 58DB3216A645AF7C28C521C5B9EB23ED275D0635 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:09:29 +0000 Manifest this update: Tue 02 Jun 2026 16:04:29 +0000 Manifest next update: Wed 03 Jun 2026 18:27:29 +0000 Files and hashes: 1: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl (hash: YLHfow+htnqdwrU9o9dqillKJw7QGR3njSbruhEdMrY=) 2: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: AWpHjSJZSEnTAxNcOTOICGiGCdtga3pPphgmCcn8xjE=) 3: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: fSBmaNekEw3OBHkti8Tium+Nxe4NKA+v+f93I6eiImM=) 4: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: j3CCIkkkxHu9Jvfxg5BBPTNs9de+9hMDr2iWt/LPgIg=) 5: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: tj5GNswRthGD9Jerv3aI7edNXY0M4+btYrK4Cyrd4Ts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:db:32:16:a6:45:af:7c:28:c5:21:c5:b9:eb:23:ed:27:5d:06:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Validity Not Before: Jun 2 16:04:29 2026 GMT Not After : Jun 3 18:27:29 2026 GMT Subject: CN=60F14A4D5EAECC6ED179E31497E96EA446ACFECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:e3:70:7c:82:0e:77:69:20:55:d3:5c:e2: a9:3f:58:db:22:98:aa:a2:40:ba:7f:1d:b8:c0:2c: df:80:d5:fe:b0:90:3b:bf:ea:9b:8a:4f:6b:ac:f5: 8a:5e:77:ed:67:48:b5:f8:22:50:c7:77:48:77:8a: 1a:35:fe:e0:3d:ec:9a:32:0f:d4:2f:65:a8:5c:e5: 5a:1d:35:87:9e:a0:63:3c:fe:94:a6:8d:db:bf:3a: 58:47:e9:5f:d6:02:53:48:05:de:6f:f3:c1:00:d7: a3:dc:5c:5c:87:23:20:03:75:78:88:4a:79:82:15: 09:22:a9:a4:18:7b:00:c1:29:17:c7:ce:13:b8:99: f0:22:5a:cb:6b:6b:fb:d4:b1:05:74:30:c8:a9:46: 47:84:e7:d9:76:f4:78:a3:94:ac:28:a1:8f:6a:94: 9a:2d:84:97:82:6c:db:c8:8f:81:77:fe:48:c2:2a: 76:5c:a9:9e:18:6d:3a:06:1e:89:a2:c7:20:d2:25: ab:30:ab:ca:10:e3:c0:91:cb:02:ee:e1:2c:3c:c5: ee:33:27:eb:27:79:c6:63:4c:2d:f3:e5:a0:8c:7f: 15:2b:bf:14:f6:cf:e6:9d:cc:2f:fd:5d:6b:25:68: b7:6c:d1:0a:59:ab:31:41:99:71:6a:24:da:9c:dc: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F1:4A:4D:5E:AE:CC:6E:D1:79:E3:14:97:E9:6E:A4:46:AC:FE:CE X509v3 Authority Key Identifier: keyid:AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d0:b8:53:f4:d3:c7:1f:eb:bc:21:bd:8e:6b:1d:3f:66:6f: dc:5a:b3:eb:f0:c2:f2:9f:17:1f:43:2b:38:0e:00:69:cc:30: 8e:27:64:53:6d:3a:91:a0:89:8a:ac:6b:3c:a5:81:41:fb:e1: 8f:af:3a:db:de:e0:f3:87:45:7c:7d:98:7d:cb:c9:f2:b8:00: 80:7a:99:26:61:70:2a:94:37:93:14:4f:2e:30:59:94:ae:65: 94:c0:fa:f3:00:20:65:83:6e:2c:00:0f:ae:20:cf:5e:45:a5: b9:79:e9:c4:b9:17:37:16:fd:e5:18:ff:de:25:3a:c4:ee:3a: 88:04:b1:3f:57:b5:ea:ff:b3:a4:0c:0f:6a:c9:17:65:83:d7: 03:58:e8:48:cc:cd:b4:24:59:80:a6:c8:ea:dd:ec:5e:79:30: 77:20:f8:ea:33:3d:3f:6d:02:5a:7e:a8:de:bd:53:df:6c:4f: 3e:3a:b9:aa:f4:04:59:3f:bf:65:3a:00:16:f4:d7:a7:b8:b6: 5b:c8:de:11:c1:95:66:f6:15:c4:30:e6:47:d8:44:48:c3:0a: 1c:1e:a7:1a:75:2d:a5:01:d5:ba:42:cb:05:57:05:69:e0:99: a2:b6:70:5d:e1:81:71:61:12:ac:99:65:60:01:5f:2e:a8:de: 32:fb:f6:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNsyFqZFr3woxSHFuesj7SddBjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdEQjYw NjE2MDZEMzAeFw0yNjA2MDIxNjA0MjlaFw0yNjA2MDMxODI3MjlaMDMxMTAvBgNV BAMTKDYwRjE0QTRENUVBRUNDNkVEMTc5RTMxNDk3RTk2RUE0NDZBQ0ZFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpuNwfIIOd2kgVdNc4qk/WNsi mKqiQLp/HbjALN+A1f6wkDu/6puKT2us9Yped+1nSLX4IlDHd0h3iho1/uA97Joy D9QvZahc5VodNYeeoGM8/pSmjdu/OlhH6V/WAlNIBd5v88EA16PcXFyHIyADdXiI SnmCFQkiqaQYewDBKRfHzhO4mfAiWstra/vUsQV0MMipRkeE59l29HijlKwooY9q lJothJeCbNvIj4F3/kjCKnZcqZ4YbToGHomixyDSJaswq8oQ48CRywLu4Sw8xe4z J+snecZjTC3z5aCMfxUrvxT2z+adzC/9XWslaLds0QpZqzFBmXFqJNqc3Nh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPFKTV6uzG7ReeMUl+lupEas/s4wHwYDVR0j BBgwFoAUrt3B06CyNqQii43fSA19tgYWBtMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBkMzRlNzctNmNmNi00MTg3LTkwODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNB MEIyMzZBNDIyOEI4RERGNDgwRDdEQjYwNjE2MDZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUREQzFEM0EwQjIzNkE0MjI4QjhEREY0ODBEN0RCNjA2MTYw NkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdE QjYwNjE2MDZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnQuFP008cf67whvY5rHT9mb9xas+vwwvKf Fx9DKzgOAGnMMI4nZFNtOpGgiYqsazylgUH74Y+vOtve4POHRXx9mH3LyfK4AIB6 mSZhcCqUN5MUTy4wWZSuZZTA+vMAIGWDbiwAD64gz15Fpbl56cS5FzcW/eUY/94l OsTuOogEsT9Xter/s6QMD2rJF2WD1wNY6EjMzbQkWYCmyOrd7F55MHcg+OozPT9t Alp+qN69U99sTz46uar0BFk/v2U6ABb016e4tlvI3hHBlWb2FcQw5kfYREjDChwe pxp1LaUB1bpCywVXBWngmaK2cF3hgXFhEqyZZWABXy6o3jL79ng= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:53 2026 by rpki-client