$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: XOTjAqYggUI93iJ6SBsm3oGbxSE2OT9E7eEzS7WH7NE= Subject key identifier: C1:AF:70:05:A8:24:4F:2C:2F:2D:AA:CD:40:58:4D:0B:55:45:B4:A0 Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 4A83B2B015BA23E4EC3A4ACEDE27C7E5E861A4B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 16:32:28 +0000 Manifest this update: Thu 03 Sep 2026 16:27:28 +0000 Manifest next update: Fri 04 Sep 2026 18:41:28 +0000 Files and hashes: 1: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 2: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) 3: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: U3jwOzt5wrHP2xMP3k09B5jTrbYfnngFBqSxWms3VzY=) 4: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) 5: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) 6: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:83:b2:b0:15:ba:23:e4:ec:3a:4a:ce:de:27:c7:e5:e8:61:a4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: Sep 3 16:27:28 2026 GMT Not After : Sep 4 18:41:28 2026 GMT Subject: CN=C1AF7005A8244F2C2F2DAACD40584D0B5545B4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:3e:84:49:88:7c:36:13:65:4b:29:e2:43: 91:1d:2b:38:43:f7:26:36:a2:c1:8f:90:09:54:a9: 91:58:e5:1b:a5:95:c0:94:6b:93:65:49:f5:c6:34: 0b:29:f3:bf:6b:ac:b2:f3:64:75:c9:68:77:d4:d4: 14:82:d1:e8:4e:f0:38:e8:6f:e8:32:86:e0:a1:fe: f9:35:c5:fc:ad:64:63:c9:a5:69:f5:57:e9:0d:34: d0:f2:9c:b8:5c:ca:f4:28:fa:b0:b7:42:03:23:c8: e1:de:f8:e0:6a:9e:a8:7a:1f:e0:e5:d2:82:56:b9: 7a:ec:25:45:e9:64:c2:99:af:a7:6c:e2:79:fd:e0: fc:ea:a4:26:bc:f0:4e:fd:f9:78:2a:db:dc:25:c8: bb:aa:bc:56:13:c5:30:09:83:c3:d6:31:e6:5a:9f: 02:0f:d9:66:8c:d1:71:67:fd:4e:85:2f:96:13:8d: c1:be:47:1e:52:2e:b4:16:9d:2e:5a:3d:18:63:98: 81:12:5a:eb:d3:e9:52:d8:60:00:78:6d:40:9c:b8: 56:0f:00:c6:7a:6e:29:e6:40:46:9e:39:8d:98:57: 5c:69:6a:25:a5:92:2d:68:15:a4:34:57:2b:32:65: e4:6b:1d:81:51:5e:27:3d:88:50:69:6b:cb:a7:1f: f3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AF:70:05:A8:24:4F:2C:2F:2D:AA:CD:40:58:4D:0B:55:45:B4:A0 X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d6:09:2d:53:22:e2:46:31:53:37:0e:20:f0:2b:73:1c:1f: bf:ca:85:43:c3:09:e0:37:43:8e:f6:03:d8:5c:77:d6:91:2e: 6d:97:3b:6e:9b:65:ee:d2:be:f1:1a:1f:10:96:87:99:e6:c4: cd:ef:2d:0a:79:f0:df:f7:6d:2a:76:43:9d:5c:a8:cd:61:31: 85:af:fa:77:62:52:47:b8:da:82:3e:cb:70:7b:f1:41:a6:b0: ec:d0:5e:86:41:a8:0e:d0:82:6c:9b:62:7b:dd:c8:2c:f1:fe: e7:6a:61:fb:49:b0:a6:3c:62:0b:e0:69:09:7c:54:c1:a2:de: d6:35:78:3b:68:ac:c0:d2:29:18:d7:fd:06:fc:1c:6f:6d:95: d1:9e:a5:d0:ae:ba:f2:e3:7b:b7:7b:72:2c:50:38:6e:1a:3e: 45:be:31:71:0d:d6:cb:ce:84:9d:7f:7e:d5:23:cc:10:91:7d: 91:47:9d:db:1c:b8:bb:87:18:fd:f3:0f:fc:7c:03:11:56:f0: ad:54:82:e9:88:3f:e3:fa:7d:94:5d:a2:03:28:c3:3d:52:73: 6b:5d:43:41:24:84:60:f5:e4:a5:10:49:64:27:e8:f8:c1:21: 4c:35:d5:54:01:1f:73:50:b8:04:36:e0:73:5d:9c:8d:23:ea: 22:20:87:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoOysBW6I+TsOkrO3ifH5ehhpLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjA5MDMxNjI3MjhaFw0yNjA5MDQxODQxMjhaMDMxMTAvBgNV BAMTKEMxQUY3MDA1QTgyNDRGMkMyRjJEQUFDRDQwNTg0RDBCNTU0NUI0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDz6ESYh8NhNlSyniQ5EdKzhD 9yY2osGPkAlUqZFY5RullcCUa5NlSfXGNAsp879rrLLzZHXJaHfU1BSC0ehO8Djo b+gyhuCh/vk1xfytZGPJpWn1V+kNNNDynLhcyvQo+rC3QgMjyOHe+OBqnqh6H+Dl 0oJWuXrsJUXpZMKZr6ds4nn94PzqpCa88E79+Xgq29wlyLuqvFYTxTAJg8PWMeZa nwIP2WaM0XFn/U6FL5YTjcG+Rx5SLrQWnS5aPRhjmIESWuvT6VLYYAB4bUCcuFYP AMZ6binmQEaeOY2YV1xpaiWlki1oFaQ0VysyZeRrHYFRXic9iFBpa8unH/PrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwa9wBagkTywvLarNQFhNC1VFtKAwHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrWCS1TIuJGMVM3DiDwK3McH7/KhUPDCeA3 Q472A9hcd9aRLm2XO26bZe7SvvEaHxCWh5nmxM3vLQp58N/3bSp2Q51cqM1hMYWv +ndiUke42oI+y3B78UGmsOzQXoZBqA7QgmybYnvdyCzx/udqYftJsKY8YgvgaQl8 VMGi3tY1eDtorMDSKRjX/Qb8HG9tldGepdCuuvLje7d7cixQOG4aPkW+MXEN1svO hJ1/ftUjzBCRfZFHndscuLuHGP3zD/x8AxFW8K1UgumIP+P6fZRdogMowz1Sc2td Q0EkhGD15KUQSWQn6PjBIUw11VQBH3NQuAQ24HNdnI0j6iIghyk= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:14 2026 by rpki-client