$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft File: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft (raw, json) Hash identifier: /kjZ830/YSZBIAA2NXmWzijv/eCFnksfWB1If6xN+1M= Subject key identifier: 66:52:44:85:D8:FE:29:C0:20:9A:99:CD:FA:E5:1F:57:2A:E8:FE:07 Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB Certificate issuer: /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Certificate serial: 3A238A9D9C629FBAA967B7ED2B4BE76188D4CD33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:51:59 +0000 Manifest this update: Sat 20 Jun 2026 01:46:59 +0000 Manifest next update: Sun 21 Jun 2026 02:28:59 +0000 Files and hashes: 1: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: l6rGkO8MgVJkambdkAclMvjE+aQSvltuGia3hhd605M=) 2: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl (hash: V6ipDqnnzWk3IaHB0LfD0yIDhLSARLAjvbA8UVS3udY=) 3: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: yyYOlJ0fwzxGoTlSm81JuoIInjVRI/GeCaxTrgVohIA=) 4: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: od92otk1ZBfK/DphT8D9p9Tw3yqgeInTJA8T3zh0m9Y=) 5: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: S3aT7VcLJ0ssRGTP1ygDwW7+AIQVYKqNTkFjIYTg3fg=) 6: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: 7CW/WrucWkwMy6n5L6l1Fl9wsuT6MqzAnA/bZ5ATe84=) 7: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: Ee7WWGSltwyaFMHxIIgEvgkLf4dnjnHrFVC5UDqWks8=) 8: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: dHemt/X+4p/vn34sn9wPgB+Rsu5EmHnVv8RmTO5DvKE=) 9: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: q33gUCSA+x8ZeBcPhedwaAdIwEj0Ce99+sYJUQuSC9s=) 10: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: fZTmTy6g2R28mCtJrpoBFkv/RRFL2DWAt0Cexpbh3bM=) 11: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: aXgaQBkXNr3WgkNnT1bbV4Z/rSlPnLbxkffq9PBogAU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:23:8a:9d:9c:62:9f:ba:a9:67:b7:ed:2b:4b:e7:61:88:d4:cd:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Validity Not Before: Jun 20 01:46:59 2026 GMT Not After : Jun 21 02:28:59 2026 GMT Subject: CN=66524485D8FE29C0209A99CDFAE51F572AE8FE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:c8:82:50:27:73:b4:31:a9:03:ac:c1:2a: c7:67:e4:b2:ad:6f:43:67:4d:32:94:5e:54:ff:9d: be:db:8e:db:99:a0:19:92:59:9b:37:ac:28:44:6d: 95:bc:fa:44:e2:81:f5:65:81:a9:83:d2:0d:1b:6a: 32:37:0c:f7:de:f8:4b:b1:a5:6d:58:d3:e4:a6:f8: 13:dd:4c:0d:eb:82:f6:8b:d0:f2:df:9b:a0:2c:7a: 5a:3e:4d:8e:ac:75:5e:ac:18:5c:43:74:96:cb:11: 96:74:03:e2:38:09:ed:a7:31:f6:78:9f:0b:4e:71: 4a:17:7d:fe:fd:e5:a3:53:93:df:f3:b4:6e:e9:a0: be:e1:76:02:c3:8e:da:8b:b4:62:b9:0e:14:3a:8c: d5:30:85:2f:c3:2b:5d:93:34:c6:3e:51:d0:d4:b4: 95:7e:a2:da:26:f2:a9:a9:3a:87:42:51:b1:9b:ba: 35:58:a8:8e:8f:ef:7f:d9:3b:65:9a:0b:c6:d0:f6: 7f:76:1a:bb:44:fd:5c:e2:3a:0a:2e:92:b1:f9:19: b4:6d:68:3d:a6:82:86:e1:f3:7e:ce:5d:71:96:62: 96:db:93:e8:31:79:2a:c3:85:d8:42:0d:92:31:c0: 73:ee:da:04:f5:28:d7:05:9e:96:c5:ec:a6:23:d3: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:52:44:85:D8:FE:29:C0:20:9A:99:CD:FA:E5:1F:57:2A:E8:FE:07 X509v3 Authority Key Identifier: keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f6:c6:95:ea:11:58:b0:fd:1b:b6:86:59:c5:82:8e:ef:6c: 53:11:27:da:2d:64:27:0e:0e:60:c8:e0:24:f6:b9:fc:1a:3a: a8:8e:be:79:ee:a7:86:05:03:10:8b:3d:e0:bf:ec:1e:7b:cf: b5:70:22:58:af:5d:03:df:8e:3d:95:79:42:97:7d:9a:f2:64: f4:cd:46:15:75:56:d0:3e:44:f0:99:eb:a2:dc:fc:3e:ee:18: e4:dd:ad:cf:ae:16:31:18:27:d9:44:29:be:09:c0:73:64:e3: 61:f1:8e:29:f1:d2:fa:c0:3b:6a:7b:e2:8a:fc:bc:1f:d4:61: e9:6c:8f:d0:85:78:0e:22:2e:28:1f:c3:9d:fb:e5:54:ff:dd: fc:4d:fd:f5:94:44:6b:4a:e2:4d:f4:93:7d:b9:88:83:da:fe: 24:f2:5e:67:2d:3d:7e:88:e0:25:5e:87:41:34:17:6f:96:39: 51:9a:15:05:56:86:57:01:0b:6b:eb:1d:84:83:fe:aa:0b:9f: e6:05:91:37:ef:e2:4c:6a:21:e1:cc:1f:fe:92:25:ba:b9:fd: b0:6c:38:72:27:ae:15:c7:30:d5:b4:cc:98:d8:32:2d:08:5e: 98:b7:2b:27:f3:aa:d5:d1:03:64:ad:e2:5c:98:2c:18:03:fe: e2:8c:cd:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiOKnZxin7qpZ7ftK0vnYYjUzTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3RDkyN0Y0NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFC Q0Y0QzRCQjAeFw0yNjA2MjAwMTQ2NTlaFw0yNjA2MjEwMjI4NTlaMDMxMTAvBgNV BAMTKDY2NTI0NDg1RDhGRTI5QzAyMDlBOTlDREZBRTUxRjU3MkFFOEZFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5siCUCdztDGpA6zBKsdn5LKt b0NnTTKUXlT/nb7bjtuZoBmSWZs3rChEbZW8+kTigfVlgamD0g0bajI3DPfe+Eux pW1Y0+Sm+BPdTA3rgvaL0PLfm6Aselo+TY6sdV6sGFxDdJbLEZZ0A+I4Ce2nMfZ4 nwtOcUoXff795aNTk9/ztG7poL7hdgLDjtqLtGK5DhQ6jNUwhS/DK12TNMY+UdDU tJV+otom8qmpOodCUbGbujVYqI6P73/ZO2WaC8bQ9n92GrtE/VziOgoukrH5GbRt aD2mgobh837OXXGWYpbbk+gxeSrDhdhCDZIxwHPu2gT1KNcFnpbF7KYj0wNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZlJEhdj+KcAgmpnN+uUfVyro/gcwHwYDVR0j BBgwFoAUrn2Sf0d8PSzme7ClJEA42rz0xLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjlkNmFjYzYtMGFmMy00Yjk3LTk5YTQtMGY0NWU4ZWNmNTc2LzAvQUU3RDkyN0Y0 NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4REFCQ0Y0QzRCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRTdEOTI3RjQ3N0MzRDJDRTY3QkIwQTUyNDQwMzhEQUJDRjRD NEJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvQUU3RDkyN0Y0NzdDM0QyQ0U2N0JCMEE1MjQ0MDM4 REFCQ0Y0QzRCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADj2xpXqEViw/Ru2hlnFgo7vbFMRJ9otZCcO DmDI4CT2ufwaOqiOvnnup4YFAxCLPeC/7B57z7VwIlivXQPfjj2VeUKXfZryZPTN RhV1VtA+RPCZ66Lc/D7uGOTdrc+uFjEYJ9lEKb4JwHNk42Hxjinx0vrAO2p74or8 vB/UYelsj9CFeA4iLigfw5375VT/3fxN/fWURGtK4k30k325iIPa/iTyXmctPX6I 4CVeh0E0F2+WOVGaFQVWhlcBC2vrHYSD/qoLn+YFkTfv4kxqIeHMH/6SJbq5/bBs OHInrhXHMNW0zJjYMi0IXpi3KyfzqtXRA2St4lyYLBgD/uKMzWs= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:24 2026 by rpki-client