$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft File: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft (raw, json) Hash identifier: pZ7CAUrB+J5dw0mvaujI/k21cQIwPI+oM0L8Yzf9RS8= Subject key identifier: A8:4F:4C:03:41:C0:AB:87:EA:1F:BF:71:BE:D8:3F:AF:09:F3:87:98 Authority key identifier: AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 Certificate issuer: /CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Certificate serial: 6C541EF410AE6762E0F243E0849760E70EDE8962 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:25:31 +0000 Manifest this update: Wed 16 Sep 2026 21:20:31 +0000 Manifest next update: Fri 18 Sep 2026 00:09:31 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: AWpHjSJZSEnTAxNcOTOICGiGCdtga3pPphgmCcn8xjE=) 2: AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl (hash: WGt5gmNXKeHibl6gCxNlWFFgf9R6e97OKIxCnOJbK8c=) 3: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: tj5GNswRthGD9Jerv3aI7edNXY0M4+btYrK4Cyrd4Ts=) 4: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: j3CCIkkkxHu9Jvfxg5BBPTNs9de+9hMDr2iWt/LPgIg=) 5: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: fSBmaNekEw3OBHkti8Tium+Nxe4NKA+v+f93I6eiImM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:54:1e:f4:10:ae:67:62:e0:f2:43:e0:84:97:60:e7:0e:de:89:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3 Validity Not Before: Sep 16 21:20:31 2026 GMT Not After : Sep 18 00:09:31 2026 GMT Subject: CN=A84F4C0341C0AB87EA1FBF71BED83FAF09F38798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:81:14:8c:34:a9:20:86:22:6a:a4:f5:5c: a9:9c:5f:e9:fe:7a:8a:55:59:da:7c:44:e2:bc:ed: 60:39:b8:25:06:70:9c:a3:e3:9d:95:3e:80:06:1a: 07:5a:21:b0:af:57:00:02:b8:9a:ee:d0:d5:93:59: 7f:a4:5a:0c:1e:4a:be:1f:f8:c2:d3:3f:c5:96:24: f6:a4:9a:47:6d:af:ca:74:10:5e:e1:37:e4:0a:4e: 4b:1d:b2:59:e8:ea:ba:aa:06:48:08:d5:15:9d:28: 9c:6e:e1:f2:3a:3a:33:e5:47:6b:b8:39:24:b1:0a: 75:a9:bc:a8:96:8d:11:04:48:46:78:69:28:1a:b1: 93:6c:8f:0a:63:b4:24:fb:6d:65:2f:23:e0:ec:91: a4:64:75:7e:f0:68:83:2f:5e:a3:49:d6:13:de:4e: f6:54:49:92:65:91:15:d1:42:9a:69:3e:dd:c0:ea: 9b:18:19:38:3e:8d:bc:0e:9a:79:00:7e:4b:1b:03: 64:0d:e6:73:4d:01:9b:3e:ee:44:ba:82:aa:6d:3a: 44:e6:38:f0:8a:36:fe:0a:32:49:57:80:57:78:83: 96:61:21:95:6d:53:91:91:9c:05:11:89:d0:a4:ae: 72:59:4f:00:00:db:b0:f7:42:bd:b6:25:cb:52:75: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4F:4C:03:41:C0:AB:87:EA:1F:BF:71:BE:D8:3F:AF:09:F3:87:98 X509v3 Authority Key Identifier: keyid:AE:DD:C1:D3:A0:B2:36:A4:22:8B:8D:DF:48:0D:7D:B6:06:16:06:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/AEDDC1D3A0B236A4228B8DDF480D7DB6061606D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:18:a7:ac:a3:c6:30:f1:78:55:d4:0f:77:5b:59:f7:37:f7: 85:be:7f:53:a4:12:61:5a:67:eb:f4:b9:55:6d:3a:d7:05:da: c6:f0:17:4d:9c:13:c0:ae:d3:29:7d:02:ae:6b:b6:5e:df:2f: bf:23:db:1c:8c:fe:85:1c:11:40:bd:04:43:3b:84:27:31:e6: 09:48:4f:94:0d:a9:f4:96:e1:2a:ae:b6:df:6b:dd:f3:15:1f: 5a:24:ac:d7:e0:2c:a4:cb:71:83:91:12:34:bd:6d:e4:36:1f: f5:ed:94:9d:23:b9:e4:8b:24:67:1f:0b:6e:f0:ac:19:6c:ae: 29:d6:0e:cf:b0:48:06:a6:72:bb:92:c1:6d:2f:c4:90:ad:09: d8:19:b4:9b:e5:b7:c7:51:af:6d:29:a3:35:01:41:2e:17:ba: 21:ec:f3:cd:9c:93:9b:32:98:78:79:b8:36:84:76:11:0b:92: 62:0e:46:98:68:44:74:a7:e5:cb:91:7b:c7:9c:bc:ca:e1:35: 36:61:10:b6:b5:18:b8:f8:1e:6f:73:6d:d6:31:5a:82:61:a3: 89:84:32:c4:37:5d:59:18:05:c0:35:2b:7f:29:5a:53:32:c3: 68:b3:f8:eb:fd:2e:3b:71:1a:d8:03:f3:b1:b0:b2:07:de:08: ac:5b:39:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFQe9BCuZ2Lg8kPghJdg5w7eiWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdEQjYw NjE2MDZEMzAeFw0yNjA5MTYyMTIwMzFaFw0yNjA5MTgwMDA5MzFaMDMxMTAvBgNV BAMTKEE4NEY0QzAzNDFDMEFCODdFQTFGQkY3MUJFRDgzRkFGMDlGMzg3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRoEUjDSpIIYiaqT1XKmcX+n+ eopVWdp8ROK87WA5uCUGcJyj452VPoAGGgdaIbCvVwACuJru0NWTWX+kWgweSr4f +MLTP8WWJPakmkdtr8p0EF7hN+QKTksdslno6rqqBkgI1RWdKJxu4fI6OjPlR2u4 OSSxCnWpvKiWjREESEZ4aSgasZNsjwpjtCT7bWUvI+DskaRkdX7waIMvXqNJ1hPe TvZUSZJlkRXRQpppPt3A6psYGTg+jbwOmnkAfksbA2QN5nNNAZs+7kS6gqptOkTm OPCKNv4KMklXgFd4g5ZhIZVtU5GRnAURidCkrnJZTwAA27D3Qr22JctSddozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqE9MA0HAq4fqH79xvtg/rwnzh5gwHwYDVR0j BBgwFoAUrt3B06CyNqQii43fSA19tgYWBtMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDBkMzRlNzctNmNmNi00MTg3LTkwODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNB MEIyMzZBNDIyOEI4RERGNDgwRDdEQjYwNjE2MDZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRUREQzFEM0EwQjIzNkE0MjI4QjhEREY0ODBEN0RCNjA2MTYw NkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQUVEREMxRDNBMEIyMzZBNDIyOEI4RERGNDgwRDdE QjYwNjE2MDZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkYp6yjxjDxeFXUD3dbWfc394W+f1OkEmFa Z+v0uVVtOtcF2sbwF02cE8Cu0yl9Aq5rtl7fL78j2xyM/oUcEUC9BEM7hCcx5glI T5QNqfSW4Squtt9r3fMVH1okrNfgLKTLcYOREjS9beQ2H/XtlJ0jueSLJGcfC27w rBlsrinWDs+wSAamcruSwW0vxJCtCdgZtJvlt8dRr20pozUBQS4XuiHs882ck5sy mHh5uDaEdhELkmIORphoRHSn5cuRe8ecvMrhNTZhELa1GLj4Hm9zbdYxWoJho4mE MsQ3XVkYBcA1K38pWlMyw2iz+Ov9LjtxGtgD87GwsgfeCKxbOYA= -----END CERTIFICATE-----Generated at Thu Sep 17 11:03:28 2026 by rpki-client