$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: H/nKrd8T3hbVExGRKprYp2VJyD4qt3uJAGBMZgqhLX4= Subject key identifier: F7:CC:73:31:DB:3F:B9:3D:D6:30:93:F9:00:39:C6:C9:AE:24:49:4D Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 0D91B3C73E0E9E33A07F36570BACC19AC25F7370 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 16:56:13 +0000 Manifest this update: Fri 19 Jun 2026 16:51:13 +0000 Manifest next update: Sat 20 Jun 2026 17:02:13 +0000 Files and hashes: 1: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: cy9HkkOKe6vbckpYOOHvcsw0FQtWirJ7QpN5phZWr0k=) 2: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) 3: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) 4: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 5: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) 6: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:91:b3:c7:3e:0e:9e:33:a0:7f:36:57:0b:ac:c1:9a:c2:5f:73:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: Jun 19 16:51:13 2026 GMT Not After : Jun 20 17:02:13 2026 GMT Subject: CN=F7CC7331DB3FB93DD63093F90039C6C9AE24494D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:1e:04:ae:1d:88:40:60:6a:46:14:62:c1: 00:10:6b:74:dc:0f:5a:a0:10:97:60:45:b8:2a:35: fd:65:30:8e:14:03:29:55:fb:b7:d9:0c:0c:36:11: f3:a8:49:0d:bb:59:5a:af:23:3a:1a:18:24:eb:8b: 1f:b4:d5:7b:5d:8f:1c:10:a4:ea:a9:81:8e:b7:d4: 52:e7:40:03:3b:01:d7:4b:75:35:1c:70:92:b0:5f: df:c1:b2:b4:69:80:3c:33:41:93:ea:68:2d:30:05: 44:d3:3e:a1:a0:1b:a8:78:9e:67:3b:2b:46:60:71: cc:2d:0c:33:bd:f7:c9:b1:62:fb:e8:99:a8:bc:f7: 57:43:53:54:6d:f1:71:81:c9:dc:ac:fc:33:56:bb: cb:09:e7:2e:05:85:8c:04:63:ee:e8:d1:53:42:98: c4:2c:65:26:8a:11:db:fd:0f:4b:3a:4b:14:3c:74: b0:a4:bc:6f:4e:cc:58:cd:71:6d:cd:b2:ee:4e:a0: ed:33:7d:ab:62:57:25:7b:01:ff:85:28:cb:66:59: bd:b7:2d:bb:0b:9c:4b:46:0c:fa:e1:39:5f:40:16: 92:87:6a:8e:b5:d9:18:92:9c:83:55:cf:fd:9c:13: 1c:87:b5:dc:20:e8:fd:8b:b6:f2:a5:3e:64:b4:01: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:73:31:DB:3F:B9:3D:D6:30:93:F9:00:39:C6:C9:AE:24:49:4D X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8c:97:73:81:13:c8:be:f3:4c:29:61:6d:67:b5:cf:1d:64: c2:e9:31:2d:6d:c6:60:5f:b5:57:60:12:8b:d5:8e:79:ac:b6: 3e:09:c4:a8:c2:87:88:b5:f2:c7:53:93:77:bb:6f:f8:81:21: 17:41:c2:a9:31:de:d2:e9:ce:49:23:c9:c0:43:ea:48:62:a7: 5e:bd:74:03:ed:01:0b:9f:c1:5f:e5:f5:a7:a1:96:5b:32:dd: 79:2f:e2:ec:9d:fe:bb:f4:92:b0:2c:e6:1b:3e:24:f0:a8:96: 34:af:ce:fb:30:5e:37:b9:cf:98:76:02:13:d3:05:86:9c:19: b3:12:20:d1:4a:22:98:f3:1a:6c:3c:18:b4:a0:b1:6d:e6:ee: f7:c8:65:cf:d9:42:0c:36:72:b7:06:f5:a2:83:8e:92:57:2e: 6b:7b:78:48:1b:5a:83:3e:7c:bf:d1:a7:10:50:e4:af:3e:43: a0:ad:43:4c:14:2a:f6:97:56:97:d2:ab:36:ca:8a:d0:3b:55: 76:4f:c2:f0:c7:8d:3d:5e:c0:07:54:cc:35:25:0b:9d:5a:69: b0:6b:50:cb:10:27:a8:fa:67:c0:3b:86:1e:c0:8f:0f:e3:42: 66:f5:13:7a:02:98:a6:47:37:8d:40:82:b0:5e:ce:14:23:d7: 57:8b:73:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZGzxz4OnjOgfzZXC6zBmsJfc3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjA2MTkxNjUxMTNaFw0yNjA2MjAxNzAyMTNaMDMxMTAvBgNV BAMTKEY3Q0M3MzMxREIzRkI5M0RENjMwOTNGOTAwMzlDNkM5QUUyNDQ5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEvB4Erh2IQGBqRhRiwQAQa3Tc D1qgEJdgRbgqNf1lMI4UAylV+7fZDAw2EfOoSQ27WVqvIzoaGCTrix+01XtdjxwQ pOqpgY631FLnQAM7AddLdTUccJKwX9/BsrRpgDwzQZPqaC0wBUTTPqGgG6h4nmc7 K0ZgccwtDDO998mxYvvomai891dDU1Rt8XGBydys/DNWu8sJ5y4FhYwEY+7o0VNC mMQsZSaKEdv9D0s6SxQ8dLCkvG9OzFjNcW3Nsu5OoO0zfatiVyV7Af+FKMtmWb23 LbsLnEtGDPrhOV9AFpKHao612RiSnINVz/2cExyHtdwg6P2LtvKlPmS0AYNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU98xzMds/uT3WMJP5ADnGya4kSU0wHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGMl3OBE8i+80wpYW1ntc8dZMLpMS1txmBf tVdgEovVjnmstj4JxKjCh4i18sdTk3e7b/iBIRdBwqkx3tLpzkkjycBD6khip169 dAPtAQufwV/l9aehllsy3Xkv4uyd/rv0krAs5hs+JPColjSvzvswXje5z5h2AhPT BYacGbMSINFKIpjzGmw8GLSgsW3m7vfIZc/ZQgw2crcG9aKDjpJXLmt7eEgbWoM+ fL/RpxBQ5K8+Q6CtQ0wUKvaXVpfSqzbKitA7VXZPwvDHjT1ewAdUzDUlC51aabBr UMsQJ6j6Z8A7hh7Ajw/jQmb1E3oCmKZHN41AgrBezhQj11eLc7M= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:56 2026 by rpki-client