$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft File: AEBADFA06D76BE480430EDC8D27F4BE636880149.mft (raw, json) Hash identifier: O4Bdwxhpav+mIThKhj7uXQwMjtO3kjG7bTvAfEPfaHw= Subject key identifier: 75:00:0F:3C:4D:1C:FB:B3:6D:8F:56:F7:6C:38:EE:96:CD:EA:2B:98 Authority key identifier: AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49 Certificate issuer: /CN=AEBADFA06D76BE480430EDC8D27F4BE636880149 Certificate serial: 5B1B1F5E06E44E819B10CF46A03A9475873ABC87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:43:25 +0000 Manifest this update: Mon 20 Jul 2026 17:38:25 +0000 Manifest next update: Tue 21 Jul 2026 20:40:25 +0000 Files and hashes: 1: AEBADFA06D76BE480430EDC8D27F4BE636880149.crl (hash: Bo5B3Sau8+QfvWkE/bTx3ja2++bepugWAIU/1G3A8X0=) 2: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: aC5Jcybn/WcmcwFTZT+cimtZCI1Cj8w+b53oH5W6Fw4=) 3: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: nG5fCmE925uHgYNeygfmhhegb7zX/kDvlyw/SCpRN+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1b:1f:5e:06:e4:4e:81:9b:10:cf:46:a0:3a:94:75:87:3a:bc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEBADFA06D76BE480430EDC8D27F4BE636880149 Validity Not Before: Jul 20 17:38:25 2026 GMT Not After : Jul 21 20:40:25 2026 GMT Subject: CN=75000F3C4D1CFBB36D8F56F76C38EE96CDEA2B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c0:4e:e6:d0:88:6a:de:be:75:6e:a7:93:2c: d5:4f:e1:b3:86:11:b6:e3:ba:bc:2c:76:aa:95:7f: f0:2b:8f:ef:f2:e1:f7:83:27:b7:c3:dd:02:ca:24: b6:76:73:8f:69:fe:3e:2d:99:39:e0:fe:b9:76:c4: a5:5e:5d:d3:0c:d8:cd:3f:18:0a:e2:32:d4:24:ac: 67:63:1d:eb:16:5a:1a:38:81:5d:58:0d:ba:bf:25: cb:46:54:dd:d5:02:9a:27:ae:5f:25:b1:74:3a:a1: 3a:19:30:b7:24:39:2d:67:10:55:39:31:f6:7f:94: 0e:06:06:e6:e3:25:e8:fb:46:2a:22:bf:ff:8d:f2: 7f:81:dd:d3:ef:d3:6d:5c:75:0b:f0:25:e0:06:55: a8:06:ee:c5:0b:a0:d5:a0:0a:cc:58:f8:cb:b0:5e: 43:f7:83:71:63:39:32:4b:ae:b0:22:39:29:f7:f0: d1:97:3d:58:f5:19:af:f0:78:b8:57:a5:9f:1b:b4: 1c:79:fa:f5:d7:ad:73:7c:fe:55:a5:97:0d:bd:9f: 10:77:e1:90:98:fe:31:aa:28:c1:4c:61:fd:34:63: 78:f7:ff:82:fa:10:c2:f8:c1:d2:00:bc:d3:f1:5c: 09:13:4c:53:78:73:f1:60:ee:02:f0:64:4b:8c:1b: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:00:0F:3C:4D:1C:FB:B3:6D:8F:56:F7:6C:38:EE:96:CD:EA:2B:98 X509v3 Authority Key Identifier: keyid:AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:73:3d:d8:32:c2:a4:2e:38:2d:85:50:52:c8:bb:5e:3f:87: 92:8b:d7:ec:88:8e:61:bd:67:1f:73:0c:e1:51:6a:60:b7:c3: 5c:57:25:02:b1:6a:8c:9a:86:e3:99:c4:1f:90:ab:cb:19:87: 3b:6e:0d:63:2e:6d:d8:46:d8:33:39:c9:59:51:90:88:a7:7f: 02:89:95:ce:24:85:e6:fe:5b:7b:4c:6a:77:2f:71:01:d2:6e: 90:43:5e:5b:6b:cb:ce:5c:d1:d4:39:2f:9a:39:b4:16:4c:41: 66:32:ba:a1:c0:09:b9:e5:98:fc:de:58:62:d4:5c:aa:1f:76: ab:58:1a:db:15:7a:de:4a:1a:fc:59:00:77:ce:14:b1:be:d4: d5:74:d4:8a:99:71:93:9a:02:5e:db:52:71:bf:92:2c:29:96: 7a:bc:13:9c:e9:6a:87:6d:49:fb:b3:31:77:03:c2:1c:23:e4: d2:a1:45:b5:63:36:9a:f5:f0:62:e0:97:64:ff:b3:ac:fe:67: e2:65:eb:9f:57:19:85:21:92:b5:ae:5a:4d:35:0e:3f:29:08: 59:08:ef:52:1d:f0:e3:0b:4c:4d:ac:fa:24:c7:6f:3e:8e:d3: 6f:2a:b2:40:43:44:9d:a1:ac:a0:a0:ec:f2:50:f7:29:0b:b9: 6e:67:f1:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxsfXgbkToGbEM9GoDqUdYc6vIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCQURGQTA2RDc2QkU0ODA0MzBFREM4RDI3RjRCRTYz Njg4MDE0OTAeFw0yNjA3MjAxNzM4MjVaFw0yNjA3MjEyMDQwMjVaMDMxMTAvBgNV BAMTKDc1MDAwRjNDNEQxQ0ZCQjM2RDhGNTZGNzZDMzhFRTk2Q0RFQTJCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDswE7m0Ihq3r51bqeTLNVP4bOG EbbjurwsdqqVf/Arj+/y4feDJ7fD3QLKJLZ2c49p/j4tmTng/rl2xKVeXdMM2M0/ GAriMtQkrGdjHesWWho4gV1YDbq/JctGVN3VAponrl8lsXQ6oToZMLckOS1nEFU5 MfZ/lA4GBubjJej7Rioiv/+N8n+B3dPv021cdQvwJeAGVagG7sULoNWgCsxY+Muw XkP3g3FjOTJLrrAiOSn38NGXPVj1Ga/weLhXpZ8btBx5+vXXrXN8/lWllw29nxB3 4ZCY/jGqKMFMYf00Y3j3/4L6EML4wdIAvNPxXAkTTFN4c/Fg7gLwZEuMG3tFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdQAPPE0c+7Ntj1b3bDjuls3qK5gwHwYDVR0j BBgwFoAUrrrfoG12vkgEMO3I0n9L5jaIAUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTViOGU3NzQtMTY4My00NTZkLWJiYzAtMzQzMjI1ZjE3ZjRjLzAvQUVCQURGQTA2 RDc2QkU0ODA0MzBFREM4RDI3RjRCRTYzNjg4MDE0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUJBREZBMDZENzZCRTQ4MDQzMEVEQzhEMjdGNEJFNjM2ODgw MTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvQUVCQURGQTA2RDc2QkU0ODA0MzBFREM4RDI3RjRC RTYzNjg4MDE0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFzPdgywqQuOC2FUFLIu14/h5KL1+yIjmG9 Zx9zDOFRamC3w1xXJQKxaoyahuOZxB+Qq8sZhztuDWMubdhG2DM5yVlRkIinfwKJ lc4kheb+W3tMancvcQHSbpBDXltry85c0dQ5L5o5tBZMQWYyuqHACbnlmPzeWGLU XKofdqtYGtsVet5KGvxZAHfOFLG+1NV01IqZcZOaAl7bUnG/kiwplnq8E5zpaodt SfuzMXcDwhwj5NKhRbVjNpr18GLgl2T/s6z+Z+Jl659XGYUhkrWuWk01Dj8pCFkI 71Id8OMLTE2s+iTHbz6O028qskBDRJ2hrKCg7PJQ9ykLuW5n8fc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:43:35 2026 by rpki-client