$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft File: AE003B21AF12D58F10BE6F5545672EC8E6787080.mft (raw, json) Hash identifier: RietJ+0vmA4/gb/tzjPJAZSA+2ysRqCLVybuaMJVETY= Subject key identifier: CA:F1:CA:16:2D:AA:23:A6:C0:96:5D:12:84:8C:96:00:B1:E9:42:E8 Authority key identifier: AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 Certificate issuer: /CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Certificate serial: 0EDDD14BAD1136C4BCF3E8F442F84BB9BFF94B5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft Manifest number: ED Signing time: Sun 25 Oct 2026 17:33:38 +0000 Manifest this update: Sun 25 Oct 2026 17:28:38 +0000 Manifest next update: Mon 26 Oct 2026 21:29:38 +0000 Files and hashes: 1: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: +x8QwHcKAz5TqcTBc9O+X0JgIiURlcSnmizcSMrXdTg=) 2: AE003B21AF12D58F10BE6F5545672EC8E6787080.crl (hash: yfwz0hBvJp0Zj0zhgSAPoziH4LFygeiXuXBdAeRpmiI=) 3: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: OU61hsQm7THl5FxVFWjY1+WDAX/SnAXM5H/7moze5/s=) 4: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: E7IAKB6a6rTg4NTZiJDgOunJYvwyhjz5dVHJcY29CuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:dd:d1:4b:ad:11:36:c4:bc:f3:e8:f4:42:f8:4b:b9:bf:f9:4b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE003B21AF12D58F10BE6F5545672EC8E6787080 Validity Not Before: Oct 25 17:28:38 2026 GMT Not After : Oct 26 21:29:38 2026 GMT Subject: CN=CAF1CA162DAA23A6C0965D12848C9600B1E942E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:bd:08:66:eb:88:8a:e3:82:23:2d:23:57: 39:83:83:dc:be:98:81:0d:47:37:89:40:24:c1:fb: 9b:62:0b:fe:41:32:90:c0:7c:f9:45:a4:3a:a8:59: 3a:92:55:86:25:45:38:dd:c8:51:ed:4d:71:ec:4a: 65:66:72:d1:4a:48:2e:2b:f9:4d:fa:85:8c:10:49: 00:38:fc:a7:4f:d0:62:72:6c:ed:9e:f9:1c:6d:e0: 3f:99:da:0a:7d:1b:71:90:34:ab:a1:60:bb:36:4c: 57:eb:7a:a7:fd:16:23:a9:9f:f9:a5:d8:10:e2:ea: e5:5e:0b:71:ec:a7:77:be:6d:89:84:af:3c:3f:60: 01:1a:9b:6e:0f:52:d6:93:84:58:c4:e4:e5:bb:ac: 17:9a:79:f5:a4:f0:32:b8:ee:fc:b9:84:15:64:4f: c3:0f:11:c6:ed:bb:12:0f:87:8e:05:98:00:df:50: 04:91:c8:5d:d1:cf:b2:ab:6b:dd:f2:39:19:b3:ec: 28:09:80:e6:8f:d4:7d:f4:aa:31:61:05:78:51:7b: 67:1d:18:3e:2f:31:08:ad:de:55:e3:aa:35:43:a2: bb:0d:4b:98:ee:ee:4a:27:77:60:56:37:03:47:a4: 13:38:c6:61:bd:85:ff:8e:01:91:80:52:85:fb:07: 13:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F1:CA:16:2D:AA:23:A6:C0:96:5D:12:84:8C:96:00:B1:E9:42:E8 X509v3 Authority Key Identifier: keyid:AE:00:3B:21:AF:12:D5:8F:10:BE:6F:55:45:67:2E:C8:E6:78:70:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE003B21AF12D58F10BE6F5545672EC8E6787080.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/AE003B21AF12D58F10BE6F5545672EC8E6787080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8d:0e:55:f7:4c:23:d0:b8:ef:05:d4:29:f9:7d:7a:07:14: b6:af:cc:47:71:e1:b0:bf:f0:ac:92:5d:2e:0b:a8:cc:be:56: c2:c6:d1:8c:86:a3:3f:01:f3:9d:f2:6f:73:a8:ab:59:e2:4f: 78:7a:7a:ba:d6:51:36:ed:72:71:e1:7a:86:13:79:b0:c9:e0: fa:90:89:cc:2f:17:92:28:1a:c3:99:a8:40:85:01:c3:d3:e5: c9:5b:8d:d6:07:2f:ce:26:85:b1:d7:a9:59:7f:8a:ed:a8:10: ac:a6:4c:2b:ba:8c:38:c3:cd:eb:89:5a:53:45:47:65:30:82: c1:ee:f0:1a:2d:ee:34:7d:c5:b1:b9:56:7b:3b:91:b8:0e:96: 34:d6:b2:46:1c:f0:ff:a6:00:61:6a:c1:8d:06:47:c0:27:f8: c9:8d:7d:27:5f:f3:53:0a:92:30:4c:b2:2e:e0:77:4c:94:c0: 03:eb:21:b0:e4:b6:66:bb:03:25:4a:89:f9:cc:5c:bd:d8:f1: 7b:d4:95:91:59:ea:c5:01:7b:c8:11:5f:30:70:92:40:5f:7d: cb:43:a4:84:3c:4f:8f:19:b0:3b:d9:00:33:a7:b0:3a:ac:bc: 87:b9:2f:3e:03:c1:59:40:f5:bb:54:ba:89:ce:23:70:c3:78: bb:2f:07:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDt3RS60RNsS88+j0QvhLub/5S1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhF Njc4NzA4MDAeFw0yNjEwMjUxNzI4MzhaFw0yNjEwMjYyMTI5MzhaMDMxMTAvBgNV BAMTKENBRjFDQTE2MkRBQTIzQTZDMDk2NUQxMjg0OEM5NjAwQjFFOTQyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm170IZuuIiuOCIy0jVzmDg9y+ mIENRzeJQCTB+5tiC/5BMpDAfPlFpDqoWTqSVYYlRTjdyFHtTXHsSmVmctFKSC4r +U36hYwQSQA4/KdP0GJybO2e+Rxt4D+Z2gp9G3GQNKuhYLs2TFfreqf9FiOpn/ml 2BDi6uVeC3Hsp3e+bYmErzw/YAEam24PUtaThFjE5OW7rBeaefWk8DK47vy5hBVk T8MPEcbtuxIPh44FmADfUASRyF3Rz7Kra93yORmz7CgJgOaP1H30qjFhBXhRe2cd GD4vMQit3lXjqjVDorsNS5ju7kond2BWNwNHpBM4xmG9hf+OAZGAUoX7BxPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyvHKFi2qI6bAll0ShIyWALHpQugwHwYDVR0j BBgwFoAUrgA7Ia8S1Y8Qvm9VRWcuyOZ4cIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFB RjEyRDU4RjEwQkU2RjU1NDU2NzJFQzhFNjc4NzA4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTAwM0IyMUFGMTJENThGMTBCRTZGNTU0NTY3MkVDOEU2Nzg3 MDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvQUUwMDNCMjFBRjEyRDU4RjEwQkU2RjU1NDU2NzJF QzhFNjc4NzA4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABONDlX3TCPQuO8F1Cn5fXoHFLavzEdx4bC/ 8KySXS4LqMy+VsLG0YyGoz8B853yb3Ooq1niT3h6errWUTbtcnHheoYTebDJ4PqQ icwvF5IoGsOZqECFAcPT5clbjdYHL84mhbHXqVl/iu2oEKymTCu6jDjDzeuJWlNF R2UwgsHu8Bot7jR9xbG5Vns7kbgOljTWskYc8P+mAGFqwY0GR8An+MmNfSdf81MK kjBMsi7gd0yUwAPrIbDktma7AyVKifnMXL3Y8XvUlZFZ6sUBe8gRXzBwkkBffctD pIQ8T48ZsDvZADOnsDqsvIe5Lz4DwVlA9btUuonOI3DDeLsvB7U= -----END CERTIFICATE-----Generated at Sun Oct 25 21:56:37 2026 by rpki-client