$ rpki-client -vvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft File: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft (raw, json) Hash identifier: IBQq2pPIYp20YefyqqHZxlEMfg3VY6q7orRPjMNp5yk= Subject key identifier: 35:4F:39:DC:FD:DE:F1:AA:AB:36:5C:F9:7B:D7:32:67:D0:FD:72:F4 Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Certificate serial: 77C3D15FF84176DFB1B9B14CBAF6EA43B62DECD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:48:47 +0000 Manifest this update: Tue 12 May 2026 13:43:47 +0000 Manifest next update: Wed 13 May 2026 16:00:47 +0000 Files and hashes: 1: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl (hash: VuRVpvzbJ9Z0mRynvRBaUzEgilav1jW0SAzGjv39KUo=) 2: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: vehsLc9IdsSn7EUUdSdrNurNOdDJw1QIcbLPuX3RJb4=) 3: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: RQ6zv/OcNcVun/cTLFBfmSLzfQJzMXKgcoU2+4K4YAw=) 4: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: wM3JMaIp+zvVQetOr/lRp0Azv2B1AVIYfVuKB1kJoRo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c3:d1:5f:f8:41:76:df:b1:b9:b1:4c:ba:f6:ea:43:b6:2d:ec:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Validity Not Before: May 12 13:43:47 2026 GMT Not After : May 13 16:00:47 2026 GMT Subject: CN=354F39DCFDDEF1AAAB365CF97BD73267D0FD72F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:29:95:35:33:24:d5:4d:82:97:5d:69:3c: d8:ec:5b:18:30:aa:c9:b0:c7:94:bc:55:0b:52:fd: e5:cc:78:f1:d3:c6:4c:96:21:fc:78:aa:11:b5:30: 30:9c:98:4f:dc:de:fb:8b:dd:e5:71:ee:f1:99:23: ff:a0:d5:cb:03:d5:1b:72:10:91:4a:c6:4e:e6:0c: cf:4e:f0:bb:69:70:6e:39:7a:3c:e5:c6:83:61:2b: 6b:3a:21:b3:01:a1:9d:37:90:4c:10:23:f2:19:97: b4:99:7e:9a:08:6b:c9:57:c2:a3:7f:d9:0e:42:63: 11:6a:50:ee:c4:32:ed:17:84:1b:ae:8f:a3:34:1c: 08:1e:68:64:16:3c:06:28:ba:12:8f:d0:c6:f8:dd: 32:97:54:8c:04:fd:20:ac:12:88:9e:74:55:e9:1d: e0:11:52:0f:a1:f6:9d:f0:6b:61:b5:ac:eb:6e:3e: db:55:6d:dc:f2:2d:8c:e2:bb:2e:63:bc:d4:e7:ce: 51:d0:a0:52:27:85:d0:03:d0:26:8f:77:c9:4d:f8: bd:c1:17:da:a5:8d:2f:10:48:84:0f:bc:c0:26:bf: 76:bb:69:9f:9b:c4:53:24:88:dd:64:eb:9f:e7:10: cc:2a:30:3c:8a:d4:ad:83:13:c8:93:a5:a5:12:6e: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4F:39:DC:FD:DE:F1:AA:AB:36:5C:F9:7B:D7:32:67:D0:FD:72:F4 X509v3 Authority Key Identifier: keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:41:eb:6e:57:21:2d:ee:26:94:8c:41:6a:31:9e:98:e2:b7: 1d:8b:89:be:dc:16:33:b2:18:6b:55:ab:c6:ba:96:d3:81:77: 78:26:9b:2c:07:2d:25:19:94:d7:ac:71:fd:e2:c7:74:e7:0a: 0a:a3:a7:ca:fa:49:0d:3b:1d:57:7f:a0:dd:6f:e2:af:94:e8: 79:50:26:ac:31:97:fe:ea:df:d5:f8:b4:c5:b5:42:f3:cd:49: e0:bb:a2:0b:07:9f:60:c7:38:e4:28:03:a3:2f:22:64:cf:b7: 72:5b:17:39:3b:a9:98:d5:7f:13:42:49:9e:5e:76:8b:70:3a: 88:7d:0f:9d:8a:75:c0:51:58:59:b7:72:47:4a:c0:46:da:f0: 53:83:02:19:a2:ba:c4:8c:52:59:4b:12:c1:cc:4b:3f:5e:b1: 7d:89:0e:f1:2b:d7:89:5a:ca:95:e5:ef:cb:b9:3f:04:c9:6f: 09:b4:12:60:07:85:42:53:39:55:2a:1d:49:d7:18:1c:02:87: fc:f6:cf:64:ba:b8:0c:db:f4:b1:12:fe:32:c1:04:0f:3f:38: ba:09:23:60:0b:2a:0c:ae:bd:c7:38:2d:68:13:8e:69:5a:4a: 85:ee:c4:52:5f:41:1f:84:6b:64:7a:02:a4:4a:5d:45:ce:d3: a6:79:f5:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8PRX/hBdt+xubFMuvbqQ7Yt7NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQx M0Y2RjNCNjAeFw0yNjA1MTIxMzQzNDdaFw0yNjA1MTMxNjAwNDdaMDMxMTAvBgNV BAMTKDM1NEYzOURDRkRERUYxQUFBQjM2NUNGOTdCRDczMjY3RDBGRDcyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxCmVNTMk1U2Cl11pPNjsWxgw qsmwx5S8VQtS/eXMePHTxkyWIfx4qhG1MDCcmE/c3vuL3eVx7vGZI/+g1csD1Rty EJFKxk7mDM9O8LtpcG45ejzlxoNhK2s6IbMBoZ03kEwQI/IZl7SZfpoIa8lXwqN/ 2Q5CYxFqUO7EMu0XhBuuj6M0HAgeaGQWPAYouhKP0Mb43TKXVIwE/SCsEoiedFXp HeARUg+h9p3wa2G1rOtuPttVbdzyLYziuy5jvNTnzlHQoFInhdAD0CaPd8lN+L3B F9qljS8QSIQPvMAmv3a7aZ+bxFMkiN1k65/nEMwqMDyK1K2DE8iTpaUSbkwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNU853P3e8aqrNlz5e9cyZ9D9cvQwHwYDVR0j BBgwFoAUqiOmhcZyYia2McffbIm7RBP287YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2M2FlN2MtYTZmZi00ZmQ4LTk2ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVD NjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQxM0Y2RjNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTIzQTY4NUM2NzI2MjI2QjYzMUM3REY2Qzg5QkI0NDEzRjZG M0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJC NDQxM0Y2RjNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9B625XIS3uJpSMQWoxnpjitx2Lib7cFjOy GGtVq8a6ltOBd3gmmywHLSUZlNescf3ix3TnCgqjp8r6SQ07HVd/oN1v4q+U6HlQ Jqwxl/7q39X4tMW1QvPNSeC7ogsHn2DHOOQoA6MvImTPt3JbFzk7qZjVfxNCSZ5e dotwOoh9D52KdcBRWFm3ckdKwEba8FODAhmiusSMUllLEsHMSz9esX2JDvEr14la ypXl78u5PwTJbwm0EmAHhUJTOVUqHUnXGBwCh/z2z2S6uAzb9LES/jLBBA8/OLoJ I2ALKgyuvcc4LWgTjmlaSoXuxFJfQR+Ea2R6AqRKXUXO06Z59So= -----END CERTIFICATE-----Generated at Wed May 13 02:58:52 2026 by rpki-client