$ rpki-client -vvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft File: AE03A0FB122D3B828822172D20A923BA84A5CB76.mft (raw, json) Hash identifier: 8IkKjwceOh+RcltLL97+0u0LL3t/EfnASb4TsqTvkN8= Subject key identifier: CE:EF:14:C5:AB:5B:3A:18:26:36:39:28:D4:73:F7:95:FD:14:F0:20 Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 Certificate issuer: /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Certificate serial: 27A0F75D65BFD7715231C02209F0899476AB1154 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:24:47 +0000 Manifest this update: Tue 02 Jun 2026 16:19:47 +0000 Manifest next update: Wed 03 Jun 2026 16:35:47 +0000 Files and hashes: 1: AE03A0FB122D3B828822172D20A923BA84A5CB76.crl (hash: T7QMImWAdU1LlIMorqHnz0ENsNi2mMnP7lldeqdtDjo=) 2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: sM8kT9+lnDp66j8gZ6lQEt5JkL6qeZtqa7PnwIaHyfU=) 3: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a0:f7:5d:65:bf:d7:71:52:31:c0:22:09:f0:89:94:76:ab:11:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76 Validity Not Before: Jun 2 16:19:47 2026 GMT Not After : Jun 3 16:35:47 2026 GMT Subject: CN=CEEF14C5AB5B3A1826363928D473F795FD14F020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:7b:25:a7:0a:37:29:35:fd:51:76:cf:83: c4:2c:4f:c3:db:5e:55:a4:dc:44:56:19:a8:f3:93: 69:9c:ca:17:d8:d1:5d:37:71:5e:50:a0:94:3a:c1: 81:2b:33:e7:bb:93:47:d1:1b:fe:5e:75:10:89:68: 01:e4:c2:d8:5d:23:d0:da:30:ee:25:88:95:03:e0: ab:b4:16:49:45:09:f1:05:bc:61:d1:3a:4a:49:e4: 43:eb:aa:b8:4b:cf:7e:7f:1c:d8:d2:4d:c8:81:1c: 4c:a8:58:fa:82:22:81:4f:48:39:e5:e5:28:76:01: 28:34:cb:c3:bc:d2:bf:fe:37:6d:28:1d:d1:b7:04: bf:8f:19:d5:32:c5:26:12:03:e5:2f:11:d9:b5:37: 7a:2c:8c:cc:9e:7a:b6:98:72:48:2c:c6:f7:e9:43: 56:43:55:ae:10:9b:f1:0a:e5:1f:ff:f1:d1:68:41: 73:ca:cf:fc:82:a0:85:7b:0e:e3:db:fa:e9:89:e3: fa:57:e0:9f:f1:f7:5e:0c:df:67:55:a4:74:fa:79: 8a:8e:cc:10:4a:b7:95:75:7e:dc:64:50:94:08:9a: c2:31:65:7c:5b:43:cd:db:a6:d1:a6:69:97:aa:cf: 09:70:a6:2a:87:3a:d1:9b:83:ed:ae:12:55:66:fe: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:14:C5:AB:5B:3A:18:26:36:39:28:D4:73:F7:95:FD:14:F0:20 X509v3 Authority Key Identifier: keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:55:a2:67:18:5e:8f:77:f4:25:32:bc:20:5d:76:f6:70:e2: 28:6d:69:e4:4d:40:29:68:71:51:cd:a9:31:75:2a:9b:4c:a0: 31:a8:1c:13:75:8b:c2:fb:85:cc:2a:f0:02:ee:87:85:d7:67: b8:60:aa:9c:73:fe:52:4e:8f:43:34:71:3b:03:49:0b:3e:14: 6c:09:79:d2:56:4b:78:c9:38:9a:1f:be:34:e5:a0:a6:98:a3: 88:ce:1f:60:fa:ef:e7:75:e5:13:9e:f3:99:44:f8:b3:4a:7c: bb:6e:48:9f:63:39:fa:71:bb:68:a4:3c:3e:39:37:f8:1a:90: 38:7f:83:e9:94:06:9e:79:c2:e1:5d:ae:84:94:b3:0a:b0:8f: d7:30:3a:cd:c5:1d:19:94:45:c1:5e:0a:e9:49:12:72:5d:6e: a7:ac:eb:7e:50:f0:9a:d0:a4:47:ed:94:20:f3:ad:f8:80:0c: f0:e7:91:05:c5:19:ef:24:ea:1e:d7:65:76:a5:48:99:08:f6: 16:2e:ca:52:d2:7b:3e:c9:5b:17:ab:48:53:62:60:5a:c9:f2: e9:a7:53:84:ed:f9:5a:c2:42:67:62:7b:74:38:71:2d:30:9c: ac:ae:46:74:83:f5:50:f6:3b:93:27:41:70:22:7f:b5:e7:8e: d9:f4:6a:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6D3XWW/13FSMcAiCfCJlHarEVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4 NEE1Q0I3NjAeFw0yNjA2MDIxNjE5NDdaFw0yNjA2MDMxNjM1NDdaMDMxMTAvBgNV BAMTKENFRUYxNEM1QUI1QjNBMTgyNjM2MzkyOEQ0NzNGNzk1RkQxNEYwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZ3slpwo3KTX9UXbPg8QsT8Pb XlWk3ERWGajzk2mcyhfY0V03cV5QoJQ6wYErM+e7k0fRG/5edRCJaAHkwthdI9Da MO4liJUD4Ku0FklFCfEFvGHROkpJ5EPrqrhLz35/HNjSTciBHEyoWPqCIoFPSDnl 5Sh2ASg0y8O80r/+N20oHdG3BL+PGdUyxSYSA+UvEdm1N3osjMyeeraYckgsxvfp Q1ZDVa4Qm/EK5R//8dFoQXPKz/yCoIV7DuPb+umJ4/pX4J/x914M32dVpHT6eYqO zBBKt5V1ftxkUJQImsIxZXxbQ83bptGmaZeqzwlwpiqHOtGbg+2uElVm/qBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzu8UxatbOhgmNjko1HP3lf0U8CAwHwYDVR0j BBgwFoAUrgOg+xItO4KIIhctIKkjuoSly3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYxZTlkZTItYTRlYy00N2EyLTliYjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIx MjJEM0I4Mjg4MjIxNzJEMjBBOTIzQkE4NEE1Q0I3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAzQTBGQjEyMkQzQjgyODgyMjE3MkQyMEE5MjNCQTg0QTVD Qjc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvQUUwM0EwRkIxMjJEM0I4Mjg4MjIxNzJEMjBBOTIz QkE4NEE1Q0I3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpVomcYXo939CUyvCBddvZw4ihtaeRNQClo cVHNqTF1KptMoDGoHBN1i8L7hcwq8ALuh4XXZ7hgqpxz/lJOj0M0cTsDSQs+FGwJ edJWS3jJOJofvjTloKaYo4jOH2D67+d15ROe85lE+LNKfLtuSJ9jOfpxu2ikPD45 N/gakDh/g+mUBp55wuFdroSUswqwj9cwOs3FHRmURcFeCulJEnJdbqes635Q8JrQ pEftlCDzrfiADPDnkQXFGe8k6h7XZXalSJkI9hYuylLSez7JWxerSFNiYFrJ8umn U4Tt+VrCQmdie3Q4cS0wnKyuRnSD9VD2O5MnQXAif7Xnjtn0auY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:31 2026 by rpki-client