$ rpki-client -vvf rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft File: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft (raw, json) Hash identifier: 9ItOPTn7HhuYs1zokjoaVPYxZYWhzghJ61eMQlOI42E= Subject key identifier: 80:B9:0C:69:76:9A:73:83:A4:7F:12:62:A9:87:B9:76:26:A7:9B:13 Authority key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Certificate issuer: /CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Certificate serial: 2DD4F016E065CF2C40FF997D690980DFB18643BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:26:53 +0000 Manifest this update: Mon 20 Jul 2026 16:21:53 +0000 Manifest next update: Tue 21 Jul 2026 18:41:53 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: AWpHjSJZSEnTAxNcOTOICGiGCdtga3pPphgmCcn8xjE=) 2: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl (hash: VTvYXuvMw4LEN+dCpBWmMHSfO4GTp33tXKgBAaiUm8E=) 3: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: j3CCIkkkxHu9Jvfxg5BBPTNs9de+9hMDr2iWt/LPgIg=) 4: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: fSBmaNekEw3OBHkti8Tium+Nxe4NKA+v+f93I6eiImM=) 5: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: tj5GNswRthGD9Jerv3aI7edNXY0M4+btYrK4Cyrd4Ts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d4:f0:16:e0:65:cf:2c:40:ff:99:7d:69:09:80:df:b1:86:43:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Validity Not Before: Jul 20 16:21:53 2026 GMT Not After : Jul 21 18:41:53 2026 GMT Subject: CN=80B90C69769A7383A47F1262A987B97626A79B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:7b:ab:7a:41:2c:24:6a:03:03:f0:c6:fe: ed:92:dd:d6:60:77:57:c7:d7:80:2f:b5:00:c7:a6: ee:51:c0:ae:4a:ef:dd:d3:23:68:90:b6:1f:6e:56: d2:85:41:a0:e2:f6:4e:41:6e:83:96:d0:2f:f9:13: 07:26:80:9e:07:a4:ec:49:8f:c0:23:dd:a1:06:c9: e2:25:12:e5:e9:d1:0f:07:07:12:b9:b5:77:b5:43: 55:74:08:2b:b5:a8:3e:89:1a:f0:15:d5:4d:6a:02: ff:f2:df:ef:61:a5:91:19:5b:24:d9:25:44:8d:c6: a6:09:01:03:a4:9a:2d:9c:16:ce:1d:4c:a1:d8:8c: a6:9b:2d:24:6f:e8:25:fb:e5:e6:5c:a3:3e:e9:02: 08:84:81:4a:ab:a5:b2:fd:b1:d5:38:51:6b:d6:a2: c0:56:74:d8:cf:8a:96:c2:96:ab:93:9f:ef:b9:80: 6d:03:51:8c:5c:83:19:83:0f:db:5c:28:63:98:ba: 26:f6:77:7a:b7:cc:04:86:a7:77:78:7b:d8:cf:15: 73:32:be:78:2a:5c:65:a1:7d:b1:18:1e:ee:84:44: 6c:9a:98:98:3c:38:0f:b9:3a:ca:86:bf:b0:4d:f7: 95:cc:b7:cc:e9:7e:40:fa:d2:d8:a1:d8:05:2a:32: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B9:0C:69:76:9A:73:83:A4:7F:12:62:A9:87:B9:76:26:A7:9B:13 X509v3 Authority Key Identifier: keyid:AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f9:d9:58:40:e8:92:d5:0f:1a:74:67:5d:12:05:30:33:1b: 84:1a:45:0b:a9:70:2f:66:42:91:69:6f:16:f6:79:62:b5:12: 00:3d:2f:c2:5e:1d:1a:09:8d:e8:ae:c7:01:36:31:be:d5:95: 29:85:6e:5a:a7:08:29:d7:85:3e:39:8a:5e:0b:ae:58:bf:db: 89:95:72:25:50:a1:8f:f8:68:c7:c2:e3:2d:95:90:68:99:21: 94:76:b2:32:f2:d9:92:98:45:66:ef:95:a5:83:16:6e:e2:66: 4e:59:98:f0:e4:47:e1:e9:fd:0e:ab:56:42:23:a0:d4:72:a4: 6b:32:a6:fd:3f:52:f7:29:1c:ea:d9:86:a5:54:14:b6:7c:83: 12:5d:ca:44:ce:d8:71:d6:7f:30:52:db:13:3a:cb:24:c6:76: 4b:c8:d5:77:0c:9d:61:fb:c9:83:0e:28:e3:fa:b6:e7:34:2a: 87:53:c0:13:04:42:66:48:61:04:e3:92:33:6b:61:57:76:68: e3:8b:a7:08:55:4c:23:89:57:15:50:ac:2a:31:99:f8:bc:6b: 0b:02:7e:52:09:79:14:70:3e:94:ee:b5:22:ef:65:20:45:43: 11:c4:8f:49:3e:6b:cc:ff:f8:a0:20:1e:50:2c:ae:91:3c:29: 6c:4a:e5:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdTwFuBlzyxA/5l9aQmA37GGQ7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdEQjYw NjE2MDZEMzAeFw0yNjA3MjAxNjIxNTNaFw0yNjA3MjExODQxNTNaMDMxMTAvBgNV BAMTKDgwQjkwQzY5NzY5QTczODNBNDdGMTI2MkE5ODdCOTc2MjZBNzlCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPH3urekEsJGoDA/DG/u2S3dZg d1fH14AvtQDHpu5RwK5K793TI2iQth9uVtKFQaDi9k5BboOW0C/5EwcmgJ4HpOxJ j8Aj3aEGyeIlEuXp0Q8HBxK5tXe1Q1V0CCu1qD6JGvAV1U1qAv/y3+9hpZEZWyTZ JUSNxqYJAQOkmi2cFs4dTKHYjKabLSRv6CX75eZcoz7pAgiEgUqrpbL9sdU4UWvW osBWdNjPipbClquTn++5gG0DUYxcgxmDD9tcKGOYuib2d3q3zASGp3d4e9jPFXMy vngqXGWhfbEYHu6ERGyamJg8OA+5OsqGv7BN95XMt8zpfkD60tih2AUqMnefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLkMaXaac4OkfxJiqYe5dianmxMwHwYDVR0j BBgwFoAUrt3B06CyNqQii43fSA19tgYWBtMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBkMzRlNzctNmNmNi00MTg3LTkwODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNB MEIyMzZBNDIyOEI4RERGNDgwRDdEQjYwNjE2MDZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUREQzFEM0EwQjIzNkE0MjI4QjhEREY0ODBEN0RCNjA2MTYw NkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdE QjYwNjE2MDZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj52VhA6JLVDxp0Z10SBTAzG4QaRQupcC9m QpFpbxb2eWK1EgA9L8JeHRoJjeiuxwE2Mb7VlSmFblqnCCnXhT45il4Lrli/24mV ciVQoY/4aMfC4y2VkGiZIZR2sjLy2ZKYRWbvlaWDFm7iZk5ZmPDkR+Hp/Q6rVkIj oNRypGsypv0/UvcpHOrZhqVUFLZ8gxJdykTO2HHWfzBS2xM6yyTGdkvI1XcMnWH7 yYMOKOP6tuc0KodTwBMEQmZIYQTjkjNrYVd2aOOLpwhVTCOJVxVQrCoxmfi8awsC flIJeRRwPpTutSLvZSBFQxHEj0k+a8z/+KAgHlAsrpE8KWxK5Zw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:49:59 2026 by rpki-client