$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft File: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft (raw, json) Hash identifier: /C3iKhFQX9vdN4FQrjpQEfyaffglCIajMPNjbe5F2SY= Subject key identifier: 0C:56:73:C1:6E:0D:A3:40:70:45:83:E0:4B:6B:78:C4:46:79:5B:87 Authority key identifier: AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B Certificate issuer: /CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Certificate serial: 565D2E2EC5200F76F4DDA9139B419E01F61C7A71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft Manifest number: A6 Signing time: Fri 04 Sep 2026 06:49:42 +0000 Manifest this update: Fri 04 Sep 2026 06:44:42 +0000 Manifest next update: Sat 05 Sep 2026 07:38:42 +0000 Files and hashes: 1: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: 5EcCRGSNTaCKDk5LN8StILbgTTb77LqugRFtgKuHnTo=) 2: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl (hash: awcUoqahHITjQH0NOd2V+dqiOTVZyWh3ZTKmGjrtfxA=) 3: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: 3op/DC1qyBMxh0jblaumBv2zXbNO6+qEazCYObpo6AY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5d:2e:2e:c5:20:0f:76:f4:dd:a9:13:9b:41:9e:01:f6:1c:7a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Validity Not Before: Sep 4 06:44:42 2026 GMT Not After : Sep 5 07:38:42 2026 GMT Subject: CN=0C5673C16E0DA340704583E04B6B78C446795B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:a5:44:8b:b1:6f:0b:97:6b:4c:1a:f1:75: 6f:17:64:4a:27:95:7c:4c:25:ef:27:fc:b9:48:65: 9c:6e:7d:45:fc:9c:e0:fd:fb:83:77:56:85:82:ed: e9:5b:23:8b:bf:9f:55:71:6c:04:7d:8c:18:11:28: 2c:99:f7:7c:b4:3b:09:2c:41:69:8d:97:94:ff:73: 22:57:47:c5:6c:55:af:f7:f3:c9:67:15:35:8d:3f: c4:38:7e:79:3d:41:3d:91:a5:3d:e3:47:bc:4b:ae: f3:e4:b9:0d:e5:ed:fb:f7:8d:e0:c1:42:d2:26:53: 92:df:db:79:7c:aa:c4:1f:58:04:c9:8a:3c:9b:9b: b1:96:30:65:c0:fe:43:1f:75:ee:28:45:2d:96:2e: 84:2a:e1:93:27:e4:6a:c0:61:75:10:49:f2:d9:7f: 60:0f:b3:07:ab:fa:e5:31:5b:be:f9:9d:5f:73:c8: 0f:f2:e7:07:fc:b3:97:ea:5a:d4:1b:1f:c2:b8:b5: c7:8e:4a:bf:70:ce:9c:ca:2a:68:a4:3f:10:86:73: a9:16:49:29:7f:ce:d7:f8:63:2d:3d:f2:19:79:3c: 6d:b6:ba:12:c1:5d:fa:e3:65:f6:05:43:25:4b:a4: 9c:06:c6:f9:10:8b:09:d3:a0:8d:c8:db:ec:f1:6e: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:56:73:C1:6E:0D:A3:40:70:45:83:E0:4B:6B:78:C4:46:79:5B:87 X509v3 Authority Key Identifier: keyid:AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5a:aa:b5:b6:b9:51:1e:91:52:3c:23:9b:ff:a7:ac:31:51: f7:ea:4d:7c:ea:6e:63:cb:af:94:eb:77:76:d0:37:07:ad:71: 26:a8:d0:f4:c6:f8:98:b8:b7:31:e4:55:52:34:6a:7b:67:4a: a6:ad:86:23:6a:f5:27:f3:9c:7b:03:6c:28:d0:ca:64:48:c5: 62:14:af:0b:36:7e:7d:ac:03:39:25:a1:1c:26:80:16:d2:1a: 3e:43:00:1c:c1:85:7e:f5:98:12:f5:b6:35:54:db:0f:cd:a6: 9c:73:18:fe:ff:5c:fb:41:28:75:6f:5d:7b:16:ec:12:cf:4a: f5:42:43:8d:c1:d3:6c:0a:a5:51:6e:ec:56:d1:5a:c3:32:83: 7b:3f:05:09:31:ea:28:dc:16:c2:b0:5f:ee:85:77:03:04:da: 1c:69:7f:f4:76:92:3b:88:77:7b:60:21:c4:96:64:3f:c7:f9: 73:39:03:e6:ca:f8:a1:01:6a:31:9c:6d:ab:a0:3e:f6:28:40: c8:3f:f4:ef:15:9f:3d:b2:d9:ad:53:0a:58:5e:95:7a:31:a6: 7f:67:90:0d:1e:b7:eb:2a:7f:04:13:b7:0c:cf:d5:5b:01:cc: 72:3d:82:3b:13:24:74:e1:fd:ae:52:76:de:c5:4e:49:91:89: 4f:35:83:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVl0uLsUgD3b03akTm0GeAfYcenEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5 NDM1N0U1QjAeFw0yNjA5MDQwNjQ0NDJaFw0yNjA5MDUwNzM4NDJaMDMxMTAvBgNV BAMTKDBDNTY3M0MxNkUwREEzNDA3MDQ1ODNFMDRCNkI3OEM0NDY3OTVCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjL6VEi7FvC5drTBrxdW8XZEon lXxMJe8n/LlIZZxufUX8nOD9+4N3VoWC7elbI4u/n1VxbAR9jBgRKCyZ93y0Owks QWmNl5T/cyJXR8VsVa/388lnFTWNP8Q4fnk9QT2RpT3jR7xLrvPkuQ3l7fv3jeDB QtImU5Lf23l8qsQfWATJijybm7GWMGXA/kMfde4oRS2WLoQq4ZMn5GrAYXUQSfLZ f2APswer+uUxW775nV9zyA/y5wf8s5fqWtQbH8K4tceOSr9wzpzKKmikPxCGc6kW SSl/ztf4Yy098hl5PG22uhLBXfrjZfYFQyVLpJwGxvkQiwnToI3I2+zxbhBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDFZzwW4No0BwRYPgS2t4xEZ5W4cwHwYDVR0j BBgwFoAUrkBzvINOssC/kqecW17ZBZQ1flswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2UxZGViOTMtYzE5MC00NmVlLWJhODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4 MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5NDM1N0U1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTQwNzNCQzgzNEVCMkMwQkY5MkE3OUM1QjVFRDkwNTk0MzU3 RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5 MDU5NDM1N0U1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZaqrW2uVEekVI8I5v/p6wxUffqTXzqbmPL r5Trd3bQNwetcSao0PTG+Ji4tzHkVVI0antnSqathiNq9SfznHsDbCjQymRIxWIU rws2fn2sAzkloRwmgBbSGj5DABzBhX71mBL1tjVU2w/NppxzGP7/XPtBKHVvXXsW 7BLPSvVCQ43B02wKpVFu7FbRWsMyg3s/BQkx6ijcFsKwX+6FdwME2hxpf/R2kjuI d3tgIcSWZD/H+XM5A+bK+KEBajGcbaugPvYoQMg/9O8Vnz2y2a1TClhelXoxpn9n kA0et+sqfwQTtwzP1VsBzHI9gjsTJHTh/a5Sdt7FTkmRiU81g58= -----END CERTIFICATE-----Generated at Fri Sep 4 21:10:14 2026 by rpki-client