$ rpki-client -vvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft File: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft (raw, json) Hash identifier: NKNYbA/aI1CzhOEx4SZKnsH65+KfLiWJR8u6nXbg4Qg= Subject key identifier: 60:F6:C8:D9:89:A5:9E:BD:E8:A9:6C:4D:6D:5A:9E:C2:37:8B:19:DD Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Certificate serial: 7700A9B304F8BC37B3BB4BF31A0060F003CBDB74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:02:10 +0000 Manifest this update: Thu 23 Jul 2026 13:57:10 +0000 Manifest next update: Fri 24 Jul 2026 17:12:10 +0000 Files and hashes: 1: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl (hash: AOfcTU3nzAryix173Ba/WiQWgeQl0nbIVPN/bV/VPgo=) 2: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: RQ6zv/OcNcVun/cTLFBfmSLzfQJzMXKgcoU2+4K4YAw=) 3: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: vehsLc9IdsSn7EUUdSdrNurNOdDJw1QIcbLPuX3RJb4=) 4: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: wM3JMaIp+zvVQetOr/lRp0Azv2B1AVIYfVuKB1kJoRo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:00:a9:b3:04:f8:bc:37:b3:bb:4b:f3:1a:00:60:f0:03:cb:db:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Validity Not Before: Jul 23 13:57:10 2026 GMT Not After : Jul 24 17:12:10 2026 GMT Subject: CN=60F6C8D989A59EBDE8A96C4D6D5A9EC2378B19DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:57:8e:76:f4:d2:4d:45:dc:c7:b0:33:44:3e: 73:5c:f4:61:48:f5:f1:1a:b4:c1:a4:96:0e:1c:a4: 5b:04:c7:b1:1a:75:eb:b5:a7:c9:f5:ec:5a:03:91: f3:27:ee:f5:5b:17:f7:7b:0c:ee:48:c2:68:76:c4: 74:18:de:9d:bd:55:46:aa:12:e1:c3:df:c3:1b:b4: b9:b7:10:85:1f:82:7b:16:06:8f:f6:a5:9d:ca:ec: dc:ff:e5:f0:36:e7:dd:ad:a1:11:b6:c5:a7:83:b8: 74:01:38:7c:2b:16:3a:9b:33:ee:97:6c:a6:46:8d: a0:82:98:29:25:ad:70:d9:f7:24:fa:3c:c5:10:03: e3:e1:ab:a0:95:f6:5b:a1:1f:2c:3f:62:de:60:95: dc:8e:72:de:13:7f:e4:3e:10:6c:63:f7:25:76:ad: f4:16:d4:d0:2c:68:d0:1a:79:30:24:5a:91:99:e3: 40:d0:71:d9:fc:54:91:c5:64:e7:55:76:88:53:19: 8e:f2:9c:97:4f:2b:41:f2:d8:48:2e:73:56:61:cc: 94:70:fc:9c:37:e5:ac:79:a0:82:fb:b8:fd:06:86: 59:b4:d6:27:45:82:cc:2e:6b:da:eb:6a:2e:9e:70: a5:fd:16:5f:98:13:2b:0b:4f:67:b1:90:d5:be:42: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F6:C8:D9:89:A5:9E:BD:E8:A9:6C:4D:6D:5A:9E:C2:37:8B:19:DD X509v3 Authority Key Identifier: keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:83:cf:8c:ca:54:d1:cd:17:16:80:09:d1:53:42:31:2b:03: 01:fb:06:9a:a2:96:02:85:55:50:bb:88:77:1f:ff:77:f7:be: f8:11:c9:2e:81:c7:27:21:e4:15:7d:88:02:5d:a2:a7:7b:bc: 3e:70:57:e8:dc:a4:7d:78:ba:27:ea:47:60:73:b7:db:e6:48: b1:fe:6c:27:fa:83:3e:4e:b8:ea:34:d2:94:b7:30:37:df:1f: 9c:d0:34:73:c0:f7:3e:e6:59:e3:26:71:8f:f9:60:9a:9d:30: 05:d5:c1:27:c5:00:cf:00:16:0d:55:d8:ac:da:1c:63:23:3b: e0:82:c1:bd:1a:69:22:6b:19:0c:22:99:de:21:9d:63:a3:bf: f9:63:68:ea:78:bb:c2:8c:87:c6:50:e1:f4:eb:32:66:0f:0a: 80:df:b1:f3:89:71:90:3e:f8:41:50:46:21:e4:81:1b:69:8a: 31:d3:09:e6:7f:72:01:3c:d2:11:81:a2:ea:73:ee:b7:eb:2e: bf:e2:6b:63:7a:4d:58:49:f6:90:93:18:bc:d6:e3:c4:75:3b: d1:5f:61:1e:b9:3c:92:5e:54:18:3d:04:57:ef:a8:c6:e8:7d: 6a:40:a0:51:e4:6c:33:52:c8:73:9f:13:c2:db:90:66:bc:df: 68:0f:a8:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwCpswT4vDezu0vzGgBg8APL23QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQx M0Y2RjNCNjAeFw0yNjA3MjMxMzU3MTBaFw0yNjA3MjQxNzEyMTBaMDMxMTAvBgNV BAMTKDYwRjZDOEQ5ODlBNTlFQkRFOEE5NkM0RDZENUE5RUMyMzc4QjE5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYV4529NJNRdzHsDNEPnNc9GFI 9fEatMGklg4cpFsEx7Eadeu1p8n17FoDkfMn7vVbF/d7DO5Iwmh2xHQY3p29VUaq EuHD38MbtLm3EIUfgnsWBo/2pZ3K7Nz/5fA2592toRG2xaeDuHQBOHwrFjqbM+6X bKZGjaCCmCklrXDZ9yT6PMUQA+Phq6CV9luhHyw/Yt5gldyOct4Tf+Q+EGxj9yV2 rfQW1NAsaNAaeTAkWpGZ40DQcdn8VJHFZOdVdohTGY7ynJdPK0Hy2Eguc1ZhzJRw /Jw35ax5oIL7uP0Ghlm01idFgswua9rrai6ecKX9Fl+YEysLT2exkNW+QgwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPbI2Ymlnr3oqWxNbVqewjeLGd0wHwYDVR0j BBgwFoAUqiOmhcZyYia2McffbIm7RBP287YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2M2FlN2MtYTZmZi00ZmQ4LTk2ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVD NjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQxM0Y2RjNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTIzQTY4NUM2NzI2MjI2QjYzMUM3REY2Qzg5QkI0NDEzRjZG M0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJC NDQxM0Y2RjNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWDz4zKVNHNFxaACdFTQjErAwH7BpqilgKF VVC7iHcf/3f3vvgRyS6Bxych5BV9iAJdoqd7vD5wV+jcpH14uifqR2Bzt9vmSLH+ bCf6gz5OuOo00pS3MDffH5zQNHPA9z7mWeMmcY/5YJqdMAXVwSfFAM8AFg1V2Kza HGMjO+CCwb0aaSJrGQwimd4hnWOjv/ljaOp4u8KMh8ZQ4fTrMmYPCoDfsfOJcZA+ +EFQRiHkgRtpijHTCeZ/cgE80hGBoupz7rfrLr/ia2N6TVhJ9pCTGLzW48R1O9Ff YR65PJJeVBg9BFfvqMbofWpAoFHkbDNSyHOfE8LbkGa832gPqBw= -----END CERTIFICATE-----Generated at Fri Jul 24 03:08:11 2026 by rpki-client