$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft File: AE003B21AF12D58F10BE6F5545672EC8E6787080.mft (raw, json) Hash identifier: KhEGNgJxC4IfPvMnb5onXRBSIksTgaJFt9jPq9xPjxc= Subject key identifier: B1:F3:67:77:38:74:71:2E:53:76:7D:A5:91:A9:47:E4:F3:C1:80:53 Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 Certificate issuer: /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Certificate serial: 16F7519A79DBD6621C28E6AD260CD2525D30BBAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 17:57:32 +0000 Manifest this update: Fri 19 Jun 2026 17:52:32 +0000 Manifest next update: Sat 20 Jun 2026 19:07:32 +0000 Files and hashes: 1: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=) 2: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: OU61hsQm7THl5FxVFWjY1+WDAX/SnAXM5H/7moze5/s=) 3: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=) 4: AE003B21AF12D58F10BE6F5545672EC8E6787080.crl (hash: lg6p3+sbv1TJQamdZYL67UeBYfrvSyRo5l+AfsWup9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f7:51:9a:79:db:d6:62:1c:28:e6:ad:26:0c:d2:52:5d:30:bb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Validity Not Before: Jun 19 17:52:32 2026 GMT Not After : Jun 20 19:07:32 2026 GMT Subject: CN=B1F367773874712E53767DA591A947E4F3C18053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:75:0b:c8:32:56:2d:02:f6:23:1f:ac:34: d3:3b:6b:1f:6f:64:53:20:f2:cd:40:ec:1e:f3:fd: fd:50:4d:c1:7c:80:58:e3:42:7e:57:5e:4e:ba:94: 04:2f:bb:b0:ab:01:83:ae:22:cd:a8:17:ab:7d:a1: 69:48:b5:86:60:b4:d6:17:93:09:a3:dd:79:7c:35: 20:a3:63:c2:36:f4:b9:bb:41:c8:01:c1:4e:db:85: bf:0f:ec:d7:64:2b:ef:30:5f:98:9c:eb:dd:3e:70: c1:ab:3f:e9:58:7a:28:5f:ae:bf:57:23:c6:02:14: 27:7d:48:af:ae:99:48:27:cc:de:8b:60:eb:a9:b2: 14:29:30:42:d3:f0:dc:01:49:b1:ea:15:c5:31:c2: ab:5c:2d:14:c9:25:a4:80:4f:21:0d:41:22:72:5b: dd:de:28:be:ca:64:15:48:0a:08:70:92:5c:eb:0e: 38:70:ed:f0:e2:77:61:e0:d6:b0:85:9c:70:5d:08: b7:17:64:2c:ee:a3:2c:61:a1:a7:cb:12:b7:19:c3: ac:75:b6:b7:d2:dd:23:86:bd:32:92:2d:33:75:c7: ba:21:db:54:00:a4:2c:6a:7c:4d:b3:98:77:16:fe: 9e:dc:ad:d4:99:16:e1:e6:62:f4:4e:9d:3e:6f:d1: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F3:67:77:38:74:71:2E:53:76:7D:A5:91:A9:47:E4:F3:C1:80:53 X509v3 Authority Key Identifier: keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e4:2a:c8:67:77:59:24:ea:24:0d:f2:e7:1e:fb:53:f8:fd: 5c:01:d6:ff:3d:2c:40:5b:30:b9:15:20:39:ce:a5:be:e7:4f: a1:8b:d7:69:06:26:89:35:c3:c3:c6:b1:e8:28:e2:4a:f2:5e: 73:77:43:3f:26:d3:8a:56:af:66:71:a0:13:aa:17:db:7e:a3: 11:40:f3:6b:44:4d:c7:55:83:9a:ce:78:8c:fa:cd:eb:80:db: e5:ec:77:fc:fe:58:5f:cc:8c:36:6f:8f:71:5e:3a:ac:a4:4b: 71:5b:06:a2:9b:55:bd:a5:5d:27:b1:e6:3c:58:db:ea:ef:48: 12:a9:ea:8c:c5:16:61:74:e3:c4:32:e3:16:3b:25:be:90:53: ce:6e:69:85:52:36:f8:8e:44:ae:73:55:cd:60:92:72:1e:cc: 9c:ab:1e:e1:e6:ff:8a:42:e4:77:99:98:3d:60:86:ed:6b:f8: dc:13:bf:d1:c2:4a:e2:7b:12:95:8e:df:ca:95:ea:46:c9:76: d5:67:60:a0:4f:bf:58:31:06:25:9e:11:c8:21:80:4d:22:16: 1e:3c:d3:08:07:6c:65:b0:d6:29:20:82:7f:12:c6:9b:68:79: 81:02:1c:ba:d4:71:46:f0:2c:e3:90:8c:38:8a:f2:6d:c1:a0: 8d:27:b1:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvdRmnnb1mIcKOatJgzSUl0wu64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhF Njc4NzA4MDAeFw0yNjA2MTkxNzUyMzJaFw0yNjA2MjAxOTA3MzJaMDMxMTAvBgNV BAMTKEIxRjM2Nzc3Mzg3NDcxMkU1Mzc2N0RBNTkxQTk0N0U0RjNDMTgwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MXULyDJWLQL2Ix+sNNM7ax9v ZFMg8s1A7B7z/f1QTcF8gFjjQn5XXk66lAQvu7CrAYOuIs2oF6t9oWlItYZgtNYX kwmj3Xl8NSCjY8I29Lm7QcgBwU7bhb8P7NdkK+8wX5ic690+cMGrP+lYeihfrr9X I8YCFCd9SK+umUgnzN6LYOupshQpMELT8NwBSbHqFcUxwqtcLRTJJaSATyENQSJy W93eKL7KZBVICghwklzrDjhw7fDid2Hg1rCFnHBdCLcXZCzuoyxhoafLErcZw6x1 trfS3SOGvTKSLTN1x7oh21QApCxqfE2zmHcW/p7crdSZFuHmYvROnT5v0WELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfNndzh0cS5Tdn2lkalH5PPBgFMwHwYDVR0j BBgwFoAUrgA7Ia8S1Y8Qvm9VRWcuyOZ4cIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFB RjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhFNjc4NzA4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAwM0IyMUFGMTJENThGMTBCRTZGNTU0NTY3MkVDOEU2Nzg3 MDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJF QzhFNjc4NzA4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbkKshnd1kk6iQN8uce+1P4/VwB1v89LEBb MLkVIDnOpb7nT6GL12kGJok1w8PGsego4kryXnN3Qz8m04pWr2ZxoBOqF9t+oxFA 82tETcdVg5rOeIz6zeuA2+Xsd/z+WF/MjDZvj3FeOqykS3FbBqKbVb2lXSex5jxY 2+rvSBKp6ozFFmF048Qy4xY7Jb6QU85uaYVSNviORK5zVc1gknIezJyrHuHm/4pC 5HeZmD1ghu1r+NwTv9HCSuJ7EpWO38qV6kbJdtVnYKBPv1gxBiWeEcghgE0iFh48 0wgHbGWw1ikggn8SxptoeYECHLrUcUbwLOOQjDiK8m3BoI0nseY= -----END CERTIFICATE-----Generated at Sat Jun 20 08:49:30 2026 by rpki-client