$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft File: AE003B21AF12D58F10BE6F5545672EC8E6787080.mft (raw, json) Hash identifier: zHxLRL1qsiVzzBt5yjMmREx4AzrRHBIi4dn6CDqaRec= Subject key identifier: EA:B8:82:A2:E3:98:74:67:55:F4:5E:3F:5D:5D:1C:1F:1F:18:CB:E5 Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 Certificate issuer: /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Certificate serial: 0944E0D747878FB41111D93DFF417D2FA1F3581A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 20:33:04 +0000 Manifest this update: Wed 02 Sep 2026 20:28:04 +0000 Manifest next update: Fri 04 Sep 2026 00:14:04 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: OU61hsQm7THl5FxVFWjY1+WDAX/SnAXM5H/7moze5/s=) 2: AE003B21AF12D58F10BE6F5545672EC8E6787080.crl (hash: v4Tpql9Dtc34iiK594h0B8SjZMlG2NKlX6p4oDB/NME=) 3: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=) 4: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:44:e0:d7:47:87:8f:b4:11:11:d9:3d:ff:41:7d:2f:a1:f3:58:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Validity Not Before: Sep 2 20:28:04 2026 GMT Not After : Sep 4 00:14:04 2026 GMT Subject: CN=EAB882A2E398746755F45E3F5D5D1C1F1F18CBE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:0f:c8:38:0e:1b:0a:8d:f4:19:55:2a:76: 1a:f5:a6:a1:f8:ee:a8:02:4f:41:38:82:1b:40:14: 82:65:10:f3:49:38:26:60:40:17:a1:35:23:52:34: 02:2f:de:6e:b5:10:8b:64:1b:46:a5:24:55:36:53: 46:57:0d:87:23:81:5c:76:22:31:82:1d:59:fd:f7: b0:33:16:5a:3e:f5:5c:c1:66:93:e7:6e:c3:d5:53: a8:d6:0f:dc:f8:9a:13:11:4d:04:88:17:ff:35:8d: 76:a5:c2:7b:ca:2f:75:6c:97:82:e9:26:6e:7b:e5: ba:88:60:33:65:cf:35:e9:0c:38:3b:a6:72:bb:5f: 7a:93:a7:a3:74:16:8c:fe:42:37:5c:4b:21:37:87: 3f:c5:45:05:24:04:2c:85:25:51:bd:e5:33:49:d3: ad:57:d5:b4:ec:28:cf:0c:ef:b1:1e:85:88:1a:1d: 64:2d:98:f8:58:c6:5b:a3:30:e7:57:63:06:21:8a: 24:5a:fb:26:27:e1:85:ae:6f:0e:05:ce:61:12:f7: be:20:85:d5:37:67:bd:7a:90:88:ba:17:a6:da:e7: 00:a9:bd:e6:82:67:6b:b3:03:ca:49:6c:7f:dc:c1: 7f:e3:e1:3c:57:d6:62:e8:ce:6f:2f:aa:ee:3e:47: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B8:82:A2:E3:98:74:67:55:F4:5E:3F:5D:5D:1C:1F:1F:18:CB:E5 X509v3 Authority Key Identifier: keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8c:e9:bc:c0:8f:5e:ca:bd:f8:8a:56:57:93:b5:17:15:68: 42:f3:85:79:1f:ae:2f:2b:bc:8e:6a:bf:91:aa:3c:36:ca:cc: d1:ae:08:d8:56:aa:09:9d:f1:bf:02:10:ca:d2:09:bb:fa:37: 25:eb:69:cd:58:4e:31:c4:dd:6b:23:19:cf:c3:18:c9:e2:94: a4:92:c7:4f:e7:58:d1:4b:2a:97:df:ce:de:f0:cc:bc:74:ef: a7:2f:86:5d:31:7a:a0:e0:cf:05:49:ce:e5:5f:a2:ad:65:6e: 09:fb:83:2d:32:ae:24:5d:42:5b:c2:81:44:a4:fa:39:58:41: 76:79:85:21:aa:50:f9:41:ad:4e:23:4d:79:48:75:9d:6e:ee: 95:98:bb:76:1e:4a:cd:83:2c:0d:02:bd:21:63:7a:49:34:47: ea:0b:99:1d:3a:f8:b9:73:87:7b:6d:c2:4a:77:fe:6c:05:d6: 80:74:0c:83:35:aa:31:cd:dc:54:28:5d:f5:9e:fb:3b:29:ad: ec:e0:bf:5f:d4:56:af:66:4d:15:3d:ef:db:fd:a3:fd:c3:1e: 20:0a:3b:67:44:60:fb:15:17:0a:2d:ea:05:c1:f2:2f:dc:76: f2:e5:c1:26:f7:1c:12:59:9d:47:f1:fd:4a:eb:65:62:7b:ba: de:15:c3:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUTg10eHj7QREdk9/0F9L6HzWBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhF Njc4NzA4MDAeFw0yNjA5MDIyMDI4MDRaFw0yNjA5MDQwMDE0MDRaMDMxMTAvBgNV BAMTKEVBQjg4MkEyRTM5ODc0Njc1NUY0NUUzRjVENUQxQzFGMUYxOENCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWgA/IOA4bCo30GVUqdhr1pqH4 7qgCT0E4ghtAFIJlEPNJOCZgQBehNSNSNAIv3m61EItkG0alJFU2U0ZXDYcjgVx2 IjGCHVn997AzFlo+9VzBZpPnbsPVU6jWD9z4mhMRTQSIF/81jXalwnvKL3Vsl4Lp Jm575bqIYDNlzzXpDDg7pnK7X3qTp6N0Foz+QjdcSyE3hz/FRQUkBCyFJVG95TNJ 061X1bTsKM8M77EehYgaHWQtmPhYxlujMOdXYwYhiiRa+yYn4YWubw4FzmES974g hdU3Z716kIi6F6ba5wCpveaCZ2uzA8pJbH/cwX/j4TxX1mLozm8vqu4+Rzz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6riCouOYdGdV9F4/XV0cHx8Yy+UwHwYDVR0j BBgwFoAUrgA7Ia8S1Y8Qvm9VRWcuyOZ4cIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFB RjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhFNjc4NzA4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAwM0IyMUFGMTJENThGMTBCRTZGNTU0NTY3MkVDOEU2Nzg3 MDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJF QzhFNjc4NzA4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWM6bzAj17KvfiKVleTtRcVaELzhXkfri8r vI5qv5GqPDbKzNGuCNhWqgmd8b8CEMrSCbv6NyXrac1YTjHE3WsjGc/DGMnilKSS x0/nWNFLKpffzt7wzLx076cvhl0xeqDgzwVJzuVfoq1lbgn7gy0yriRdQlvCgUSk +jlYQXZ5hSGqUPlBrU4jTXlIdZ1u7pWYu3YeSs2DLA0CvSFjekk0R+oLmR06+Llz h3ttwkp3/mwF1oB0DIM1qjHN3FQoXfWe+zsprezgv1/UVq9mTRU979v9o/3DHiAK O2dEYPsVFwot6gXB8i/cdvLlwSb3HBJZnUfx/UrrZWJ7ut4Vw5E= -----END CERTIFICATE-----Generated at Thu Sep 3 09:46:36 2026 by rpki-client