$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft File: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft (raw, json) Hash identifier: gUUG+6Q3l7zj0Z9I/lNp+/dcJ4yc5PRnwKQcSd87Xfw= Subject key identifier: 20:25:4E:E7:B4:E6:F2:F4:0E:E1:46:CF:0C:B7:E1:E9:E3:A4:70:42 Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Certificate serial: 3C0A911FFD552B1EE1F28157A90E910331293FDD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:46:59 +0000 Manifest this update: Wed 23 Sep 2026 12:41:59 +0000 Manifest next update: Thu 24 Sep 2026 16:17:59 +0000 Files and hashes: 1: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: wM3JMaIp+zvVQetOr/lRp0Azv2B1AVIYfVuKB1kJoRo=) 2: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl (hash: 1QL7tOoYmjdEEa8chDlUodWVStaYsMyoBx93/JJmBKI=) 3: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: RQ6zv/OcNcVun/cTLFBfmSLzfQJzMXKgcoU2+4K4YAw=) 4: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: vehsLc9IdsSn7EUUdSdrNurNOdDJw1QIcbLPuX3RJb4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0a:91:1f:fd:55:2b:1e:e1:f2:81:57:a9:0e:91:03:31:29:3f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Validity Not Before: Sep 23 12:41:59 2026 GMT Not After : Sep 24 16:17:59 2026 GMT Subject: CN=20254EE7B4E6F2F40EE146CF0CB7E1E9E3A47042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:6f:55:a7:d0:a6:07:4d:40:ee:ce:f2:67: bb:e1:68:01:a7:db:6f:fe:4c:84:62:44:8f:ce:52: 6e:1b:be:37:10:35:28:1e:43:5f:71:de:82:61:4f: 95:c0:71:b7:d5:87:05:be:38:bc:00:70:7b:e5:12: 44:13:d1:f3:96:dc:79:de:55:8b:41:68:be:06:54: e5:db:02:83:f5:ce:ea:39:d3:fb:bd:f7:ab:dc:a3: 21:92:52:79:29:f8:bd:d3:40:4c:a3:1c:0b:d1:8d: 60:7e:55:6b:ae:7c:1a:2f:ff:38:17:55:1b:de:f1: 0c:82:5a:50:fd:03:64:82:b5:83:18:81:3f:4a:b6: d7:73:89:c9:dc:e7:59:87:9b:c2:18:75:78:14:16: dd:ae:21:3f:92:41:ff:6c:02:bb:b0:26:ef:0a:5c: 97:d8:59:ea:53:c9:03:1a:5e:b5:01:ff:9a:88:69: 4f:c9:18:fc:47:a2:65:e0:db:27:14:29:25:e9:4c: de:d6:f4:c7:cd:85:56:c3:97:41:bb:20:c8:a4:a3: 62:b4:cf:7a:64:07:c4:cb:7d:e5:ac:4f:6c:bf:fd: 9e:b3:e5:c8:ac:6b:db:96:38:29:71:0b:d7:45:a6: 1c:48:db:5c:d0:c9:e9:b8:d2:d1:da:ff:a9:23:d7: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:25:4E:E7:B4:E6:F2:F4:0E:E1:46:CF:0C:B7:E1:E9:E3:A4:70:42 X509v3 Authority Key Identifier: keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5a:06:2f:55:e5:f8:9d:77:e7:74:21:df:eb:4b:7c:38:69: bf:48:9d:f5:ce:9e:e3:8d:45:24:ec:9e:a0:99:7c:4f:40:08: 3a:34:bd:e0:b4:3b:69:12:1f:ad:c4:e9:09:2c:ed:12:b9:a8: b3:a6:77:a5:1c:85:8d:f5:5f:54:44:0b:c9:fa:7c:25:f2:1b: 5e:ce:e3:a1:85:b1:c4:b8:14:76:50:a3:d6:e3:43:49:c4:3d: 4e:b8:cb:c3:4b:b9:a7:83:ad:2e:2f:f6:95:bf:96:9f:79:c8: b1:6e:e7:1d:5e:07:61:a7:1f:0a:e8:40:47:59:05:bc:c3:e7: 54:80:58:fb:41:aa:07:50:86:41:50:5e:dc:62:71:1a:fb:4e: 4d:8a:18:ad:34:90:a9:98:8a:f7:40:a7:38:9d:9a:7a:fb:9d: 7b:58:6b:21:fc:1d:73:c6:7d:7e:42:1f:39:e8:e2:97:57:97: 9f:38:b8:5b:94:82:96:ed:1d:61:95:86:fd:b8:35:34:85:67: b4:4e:a5:5c:07:3f:fd:59:8d:6a:a4:93:9d:92:b1:60:39:b1: 2f:d6:95:e0:22:75:07:39:91:c0:7c:b2:fa:08:9f:0b:16:82: 92:17:5c:d2:d1:4d:e8:bf:4d:62:b1:d4:e8:dd:6b:45:e7:ee: 98:29:0a:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAqRH/1VKx7h8oFXqQ6RAzEpP90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQx M0Y2RjNCNjAeFw0yNjA5MjMxMjQxNTlaFw0yNjA5MjQxNjE3NTlaMDMxMTAvBgNV BAMTKDIwMjU0RUU3QjRFNkYyRjQwRUUxNDZDRjBDQjdFMUU5RTNBNDcwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Pm9Vp9CmB01A7s7yZ7vhaAGn 22/+TIRiRI/OUm4bvjcQNSgeQ19x3oJhT5XAcbfVhwW+OLwAcHvlEkQT0fOW3Hne VYtBaL4GVOXbAoP1zuo50/u996vcoyGSUnkp+L3TQEyjHAvRjWB+VWuufBov/zgX VRve8QyCWlD9A2SCtYMYgT9Kttdzicnc51mHm8IYdXgUFt2uIT+SQf9sAruwJu8K XJfYWepTyQMaXrUB/5qIaU/JGPxHomXg2ycUKSXpTN7W9MfNhVbDl0G7IMiko2K0 z3pkB8TLfeWsT2y//Z6z5cisa9uWOClxC9dFphxI21zQyem40tHa/6kj15NXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUICVO57Tm8vQO4UbPDLfh6eOkcEIwHwYDVR0j BBgwFoAUqiOmhcZyYia2McffbIm7RBP287YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2M2FlN2MtYTZmZi00ZmQ4LTk2ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVD NjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQxM0Y2RjNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTIzQTY4NUM2NzI2MjI2QjYzMUM3REY2Qzg5QkI0NDEzRjZG M0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJC NDQxM0Y2RjNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9aBi9V5fidd+d0Id/rS3w4ab9InfXOnuON RSTsnqCZfE9ACDo0veC0O2kSH63E6Qks7RK5qLOmd6UchY31X1REC8n6fCXyG17O 46GFscS4FHZQo9bjQ0nEPU64y8NLuaeDrS4v9pW/lp95yLFu5x1eB2GnHwroQEdZ BbzD51SAWPtBqgdQhkFQXtxicRr7Tk2KGK00kKmYivdApzidmnr7nXtYayH8HXPG fX5CHzno4pdXl584uFuUgpbtHWGVhv24NTSFZ7ROpVwHP/1ZjWqkk52SsWA5sS/W leAidQc5kcB8svoInwsWgpIXXNLRTei/TWKx1Ojda0Xn7pgpCjY= -----END CERTIFICATE-----Generated at Thu Sep 24 08:02:40 2026 by rpki-client