$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft File: AE70603036AD2614B0A87825C6E2788B1AD6F663.mft (raw, json) Hash identifier: TI8XX4hqiJrU+IpwM0TGOv2KGXl35BNhJ78z6Rg9QMg= Subject key identifier: 08:0B:9F:4B:8E:F6:24:9E:ED:3E:D3:3C:6A:51:74:43:E0:88:90:A8 Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Certificate serial: 74D3FEE0A4EAF0D424F03DF12D67CC1BFB875D3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 06:16:43 +0000 Manifest this update: Sat 24 Oct 2026 06:11:43 +0000 Manifest next update: Sun 25 Oct 2026 07:49:43 +0000 Files and hashes: 1: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: p4nTPqj0iQT1kwBNTdJGEXDFCbx7m3wfK6KgdIOzhjU=) 2: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: OIonx4PAzk7Dy9a/7NaLZFZxiwqMh13QBPm2JkuGHNM=) 3: AE70603036AD2614B0A87825C6E2788B1AD6F663.crl (hash: 9rR5sdmWCHpMQp5ol01248KPjzshTpLcM/ZnCVaFvQg=) 4: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: c4sjeVejdh3WZkykF/+O5liyD5qtdH+BYN3agtX+7UA=) 5: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: JW7IEWkOPNdgKaYLCXHUM+vHpx6tYM1AUk5vvxwywUg=) 6: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 07:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d3:fe:e0:a4:ea:f0:d4:24:f0:3d:f1:2d:67:cc:1b:fb:87:5d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663 Validity Not Before: Oct 24 06:11:43 2026 GMT Not After : Oct 25 07:49:43 2026 GMT Subject: CN=080B9F4B8EF6249EED3ED33C6A517443E08890A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:50:a9:de:c2:28:a3:2b:49:18:ed:85:d3: 82:e3:8d:3f:71:73:cd:03:6c:75:ba:67:f0:44:74: 2c:ff:15:79:5e:4a:0a:b1:09:fe:68:32:56:d5:94: 5c:c4:99:13:e0:d6:c6:dc:cd:59:db:25:44:16:7d: 73:2e:e6:3a:fe:d3:13:e0:9f:58:b0:75:d9:59:7c: b9:88:24:12:36:e2:3e:4d:7e:b0:ca:a6:fc:7b:82: 28:78:4d:52:b3:5d:64:89:ce:df:44:87:79:bf:60: 30:56:30:6b:39:50:64:75:d9:98:46:17:50:d9:65: c0:f6:ec:f9:96:a0:54:1d:16:bc:5a:f3:c5:22:5c: 9e:99:a2:41:b0:f7:43:35:bf:21:99:d4:a9:78:e3: 08:be:31:49:59:ab:f6:6c:fb:99:6e:b7:1b:6c:27: 63:cb:97:b5:42:bc:2f:e3:41:47:ae:e4:72:e8:87: 2e:49:5c:51:d9:2e:89:59:be:79:d7:1b:07:b9:cf: 23:bf:5f:60:3c:6e:9e:1c:36:50:bd:94:f1:23:2d: a4:5a:07:2f:de:84:a9:c5:0c:54:77:28:62:31:03: f7:ae:a5:ed:25:a4:da:92:68:e2:16:54:0a:f3:3a: 3d:98:ac:9d:f9:f7:52:c4:69:1c:2a:6b:e5:f7:26: d2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0B:9F:4B:8E:F6:24:9E:ED:3E:D3:3C:6A:51:74:43:E0:88:90:A8 X509v3 Authority Key Identifier: keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ba:1d:5b:3b:2d:32:ac:3e:7b:da:01:48:be:43:8e:83:52: f5:12:52:e8:b1:52:3b:17:6b:a7:86:c5:23:28:ca:de:24:43: 75:a4:df:20:49:e5:7b:0e:62:f9:22:e0:ae:46:37:92:10:1a: a4:7a:fa:c0:7b:49:8a:b2:e9:72:df:85:1d:0e:d5:59:f8:e8: 2e:70:b6:2b:9f:9b:31:0c:f9:82:da:34:5f:6b:6e:1b:fb:e8: 44:12:03:18:64:77:d1:b2:e7:b8:02:f1:71:fc:f5:86:0e:28: 9a:36:0e:2a:bd:70:21:e2:c6:15:c3:68:39:bb:77:3d:f2:8b: f1:2e:8d:f1:e4:99:62:37:09:e3:9e:07:21:68:9c:3f:ee:9a: d4:1d:44:e7:ef:b9:3a:83:6b:bb:ec:30:63:73:3e:22:b5:f7: b5:7b:ce:0f:b8:d9:b4:1d:f8:ca:32:f1:60:11:49:ee:1b:2b: be:af:d1:d4:c4:9a:e7:33:67:5d:a2:ea:54:2c:d0:60:9b:1f: 08:a7:d5:1e:dd:80:22:9c:39:e1:fa:07:9a:1f:bd:4c:d6:0d: e5:44:e2:fc:9d:70:18:88:44:bf:9d:7c:25:fa:67:f5:cc:1e: 40:17:75:1c:7d:f7:2a:cd:07:2c:71:14:6b:09:1f:56:a8:0f: 23:93:d3:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNP+4KTq8NQk8D3xLWfMG/uHXT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIx QUQ2RjY2MzAeFw0yNjEwMjQwNjExNDNaFw0yNjEwMjUwNzQ5NDNaMDMxMTAvBgNV BAMTKDA4MEI5RjRCOEVGNjI0OUVFRDNFRDMzQzZBNTE3NDQzRTA4ODkwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhVCp3sIooytJGO2F04LjjT9x c80DbHW6Z/BEdCz/FXleSgqxCf5oMlbVlFzEmRPg1sbczVnbJUQWfXMu5jr+0xPg n1iwddlZfLmIJBI24j5NfrDKpvx7gih4TVKzXWSJzt9Eh3m/YDBWMGs5UGR12ZhG F1DZZcD27PmWoFQdFrxa88UiXJ6ZokGw90M1vyGZ1Kl44wi+MUlZq/Zs+5lutxts J2PLl7VCvC/jQUeu5HLohy5JXFHZLolZvnnXGwe5zyO/X2A8bp4cNlC9lPEjLaRa By/ehKnFDFR3KGIxA/eupe0lpNqSaOIWVArzOj2YrJ3591LEaRwqa+X3JtJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCAufS472JJ7tPtM8alF0Q+CIkKgwHwYDVR0j BBgwFoAUrnBgMDatJhSwqHglxuJ4ixrW9mMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUwZTVhYzItYjZiYi00YmVjLTlkYzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAz NkFEMjYxNEIwQTg3ODI1QzZFMjc4OEIxQUQ2RjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTcwNjAzMDM2QUQyNjE0QjBBODc4MjVDNkUyNzg4QjFBRDZG NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvQUU3MDYwMzAzNkFEMjYxNEIwQTg3ODI1QzZFMjc4 OEIxQUQ2RjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADq6HVs7LTKsPnvaAUi+Q46DUvUSUuixUjsX a6eGxSMoyt4kQ3Wk3yBJ5XsOYvki4K5GN5IQGqR6+sB7SYqy6XLfhR0O1Vn46C5w tiufmzEM+YLaNF9rbhv76EQSAxhkd9Gy57gC8XH89YYOKJo2Diq9cCHixhXDaDm7 dz3yi/EujfHkmWI3CeOeByFonD/umtQdROfvuTqDa7vsMGNzPiK197V7zg+42bQd +Moy8WARSe4bK76v0dTEmuczZ12i6lQs0GCbHwin1R7dgCKcOeH6B5ofvUzWDeVE 4vydcBiIRL+dfCX6Z/XMHkAXdRx99yrNByxxFGsJH1aoDyOT0/0= -----END CERTIFICATE-----Generated at Sun Oct 25 01:28:36 2026 by rpki-client