$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft File: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft (raw, json) Hash identifier: HJ5G1FK3FeBgUZYSqLPqsTmUbXJRUJYrzOf0EoV89zw= Subject key identifier: 4D:C6:C4:2E:0E:91:CC:0C:6F:39:CA:71:FB:BD:5F:64:00:54:53:29 Authority key identifier: AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B Certificate issuer: /CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Certificate serial: 68CE0753F2A0D6E0B6B3FBB6E04AB8D531758FBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 21:15:47 +0000 Manifest this update: Tue 02 Jun 2026 21:10:47 +0000 Manifest next update: Wed 03 Jun 2026 23:05:47 +0000 Files and hashes: 1: AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl (hash: AmhlXBV5gSuuipqYi6r/U4ORO+I9oA6C3lv/QfRVZ7o=) 2: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: 5EcCRGSNTaCKDk5LN8StILbgTTb77LqugRFtgKuHnTo=) 3: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: 3op/DC1qyBMxh0jblaumBv2zXbNO6+qEazCYObpo6AY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ce:07:53:f2:a0:d6:e0:b6:b3:fb:b6:e0:4a:b8:d5:31:75:8f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4073BC834EB2C0BF92A79C5B5ED90594357E5B Validity Not Before: Jun 2 21:10:47 2026 GMT Not After : Jun 3 23:05:47 2026 GMT Subject: CN=4DC6C42E0E91CC0C6F39CA71FBBD5F6400545329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:15:6e:4d:78:ce:90:32:58:c2:b0:4a:6e: c0:f9:f2:ff:71:12:55:5a:f9:9c:d5:c7:c9:d8:70: ba:c9:d9:8b:84:09:2c:78:b0:78:67:91:55:47:64: 25:16:f6:89:05:61:99:29:8d:07:5c:03:43:d6:43: 97:5e:85:8d:a2:5f:af:94:9a:cc:08:94:e6:b1:b9: 25:7c:02:06:e7:38:21:b8:7c:b7:16:6b:70:82:4f: e3:a9:3e:43:36:26:4b:8d:c5:0a:15:38:88:6b:b9: a6:6f:fd:31:ea:ed:69:91:83:4d:09:72:ae:39:2c: 9a:f9:15:84:6c:52:df:6e:17:c5:9e:39:61:3b:c9: e3:fc:26:7f:c2:b2:cb:7c:b3:6e:02:92:13:e4:b2: 1f:9b:45:c1:42:4d:69:78:46:07:c1:8c:50:e4:0c: ce:46:30:f6:7e:2d:13:03:bd:cf:90:1d:c8:e0:2c: 65:ca:72:54:df:0b:c6:eb:f2:5a:77:b2:22:16:1e: 3a:17:e1:cc:dc:d6:9f:1a:38:f9:a4:5f:c9:9d:12: b6:4b:03:1f:92:c7:f2:d4:0f:07:39:cd:2b:3e:94: 36:e7:bc:17:1e:53:cb:9a:30:8a:e7:38:a5:4e:70: 25:7c:ae:f9:45:3a:d1:b0:2b:d1:9a:0a:11:a5:d3: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C6:C4:2E:0E:91:CC:0C:6F:39:CA:71:FB:BD:5F:64:00:54:53:29 X509v3 Authority Key Identifier: keyid:AE:40:73:BC:83:4E:B2:C0:BF:92:A7:9C:5B:5E:D9:05:94:35:7E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/AE4073BC834EB2C0BF92A79C5B5ED90594357E5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:5e:6b:75:b1:ad:6f:94:c8:98:df:e1:90:00:a6:fb:ab:ac: 8b:c7:5a:52:2d:d6:c4:4e:60:97:fa:2d:aa:c7:5a:13:20:ae: f2:0e:47:50:7a:d4:8a:95:07:2a:08:a7:26:c1:e7:0c:5a:b0: 6e:2f:09:ca:11:f5:fe:e6:0d:b5:4f:18:83:03:11:06:7a:ab: 89:ad:8c:dc:be:e7:bb:30:55:4f:19:1f:64:63:49:62:9d:1b: 47:de:71:20:2f:cc:6b:be:6b:7b:38:c5:3f:6c:b2:ad:af:2b: 20:31:6a:b0:b6:27:0e:f5:ec:ac:17:d5:4b:a3:82:c7:f8:02: e4:00:c0:5c:4f:cd:b9:08:c6:a0:90:0f:5d:14:ad:b4:eb:03: 5f:3d:fb:a9:0a:2d:37:7d:76:3b:a2:f1:67:86:72:ff:f6:09: 7f:d2:84:d5:a3:4a:8e:2f:33:78:1d:e1:a7:37:2c:fb:3c:00: 57:e6:18:44:dc:e1:c7:4b:c2:ef:e7:a1:f0:1f:9c:80:b2:06: 24:c4:56:d3:06:17:db:c6:d2:20:35:7d:63:ec:4f:77:63:3b: 0f:1d:24:c0:e1:0d:b9:9d:1b:26:56:74:f7:10:62:c3:bb:0d: 4c:22:30:70:b9:97:bb:56:d4:1f:7b:82:2a:30:70:da:a8:a3: dd:c9:5d:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaM4HU/Kg1uC2s/u24Eq41TF1j70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5 NDM1N0U1QjAeFw0yNjA2MDIyMTEwNDdaFw0yNjA2MDMyMzA1NDdaMDMxMTAvBgNV BAMTKDREQzZDNDJFMEU5MUNDMEM2RjM5Q0E3MUZCQkQ1RjY0MDA1NDUzMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGhVuTXjOkDJYwrBKbsD58v9x ElVa+ZzVx8nYcLrJ2YuECSx4sHhnkVVHZCUW9okFYZkpjQdcA0PWQ5dehY2iX6+U mswIlOaxuSV8AgbnOCG4fLcWa3CCT+OpPkM2JkuNxQoVOIhruaZv/THq7WmRg00J cq45LJr5FYRsUt9uF8WeOWE7yeP8Jn/Csst8s24CkhPksh+bRcFCTWl4RgfBjFDk DM5GMPZ+LRMDvc+QHcjgLGXKclTfC8br8lp3siIWHjoX4czc1p8aOPmkX8mdErZL Ax+Sx/LUDwc5zSs+lDbnvBceU8uaMIrnOKVOcCV8rvlFOtGwK9GaChGl09yxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcbELg6RzAxvOcpx+71fZABUUykwHwYDVR0j BBgwFoAUrkBzvINOssC/kqecW17ZBZQ1flswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2UxZGViOTMtYzE5MC00NmVlLWJhODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4 MzRFQjJDMEJGOTJBNzlDNUI1RUQ5MDU5NDM1N0U1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTQwNzNCQzgzNEVCMkMwQkY5MkE3OUM1QjVFRDkwNTk0MzU3 RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvQUU0MDczQkM4MzRFQjJDMEJGOTJBNzlDNUI1RUQ5 MDU5NDM1N0U1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBea3WxrW+UyJjf4ZAApvurrIvHWlIt1sRO YJf6LarHWhMgrvIOR1B61IqVByoIpybB5wxasG4vCcoR9f7mDbVPGIMDEQZ6q4mt jNy+57swVU8ZH2RjSWKdG0fecSAvzGu+a3s4xT9ssq2vKyAxarC2Jw717KwX1Uuj gsf4AuQAwFxPzbkIxqCQD10UrbTrA189+6kKLTd9djui8WeGcv/2CX/ShNWjSo4v M3gd4ac3LPs8AFfmGETc4cdLwu/nofAfnICyBiTEVtMGF9vG0iA1fWPsT3djOw8d JMDhDbmdGyZWdPcQYsO7DUwiMHC5l7tW1B97giowcNqoo93JXUs= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:00 2026 by rpki-client