$ rpki-client -vvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: 4RanF4BLqL4WspS1T0rsO4opKcIKukPMUZtifTkR1rQ= Subject key identifier: 47:51:58:82:B9:32:3A:0B:C9:79:6A:44:9B:3A:5D:A0:20:41:45:AE Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 18EDABE51874566797748BBC4A6C627558E24DFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:24:37 +0000 Manifest this update: Fri 24 Jul 2026 00:19:37 +0000 Manifest next update: Sat 25 Jul 2026 01:25:37 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) 2: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: paE6qZX4PmetXamO8Sak8czLAUJSiFGacCshkIouPkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ed:ab:e5:18:74:56:67:97:74:8b:bc:4a:6c:62:75:58:e2:4d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Jul 24 00:19:37 2026 GMT Not After : Jul 25 01:25:37 2026 GMT Subject: CN=47515882B9323A0BC9796A449B3A5DA0204145AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:54:d4:21:62:da:fa:26:0d:09:be:17:7b: 1c:55:ce:19:1d:85:81:2e:2b:d9:74:da:1c:b6:52: ba:2a:f1:8c:d4:c1:35:79:90:05:9e:b9:b9:d2:e0: 80:5a:37:0b:81:b4:7a:c8:fd:7e:bb:e4:3b:71:7e: ba:5d:8e:71:6e:cb:db:7b:38:77:45:bc:ba:61:95: 4f:67:47:5f:2e:ed:2e:5b:a5:87:96:2a:99:d2:8c: 8e:a9:f7:30:d8:b9:2d:8e:6c:4d:79:6f:f4:c1:8b: 2c:74:7d:07:3b:2e:43:bc:5d:44:11:c3:5d:83:46: ec:55:7d:25:7f:0f:a5:83:e2:27:a4:1e:d3:10:a7: d5:76:fe:39:08:62:ff:cf:b3:d9:18:1b:5f:49:a1: 70:4d:4c:2e:5a:49:d0:d7:f7:85:61:70:44:b9:c8: 57:aa:12:36:41:6e:cd:4c:2e:d7:25:ff:c9:8a:3c: 6e:37:21:89:01:81:7e:a2:28:36:fb:22:2f:f4:01: b2:8d:5c:fc:7f:c4:6c:53:da:02:b3:d6:f6:87:ec: de:70:c0:d3:36:8e:79:e4:81:22:51:db:56:bd:f9: 9c:18:e6:3a:32:bb:31:f0:9b:c2:a9:1c:7e:aa:ec: 7d:54:5f:99:c8:5a:0b:b1:8c:79:e0:e0:1f:5a:43: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:51:58:82:B9:32:3A:0B:C9:79:6A:44:9B:3A:5D:A0:20:41:45:AE X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bf:2d:b5:52:48:f2:2d:6b:04:9d:71:0c:ff:b8:df:97:86: ee:4f:ff:8e:37:07:e6:fb:6d:21:a8:d6:d4:cb:b3:42:01:d2: 91:cb:6a:8a:d3:ed:06:a8:89:8b:41:05:08:3a:76:ad:e5:ae: 62:e2:d3:3b:26:16:db:a6:08:3b:2e:52:ef:e6:93:c1:55:cf: f0:3f:ed:51:7c:c3:7c:86:27:50:4f:8b:85:2a:94:fc:7e:c1: 3d:6e:34:91:72:9b:a9:80:f7:06:7e:a4:e2:7d:85:be:ac:78: de:d0:9b:53:7f:22:ae:58:0f:c0:64:cb:2b:f2:83:76:94:46: ed:a1:ce:81:ce:34:22:b6:56:8e:4d:09:47:5b:58:83:0c:87: 8f:fa:79:12:d9:6c:5c:31:94:d3:58:15:3b:e4:3f:e1:61:6c: 08:b7:c4:84:1e:c5:9d:94:80:43:77:53:7a:11:7b:ab:07:39: 23:0e:ee:2a:9c:50:a6:ab:65:ad:a4:41:60:f7:f8:c6:9b:96: ff:e4:34:3e:4b:25:99:5c:3b:b8:7e:9b:b4:f0:b5:bc:20:8c: 91:09:b6:38:de:98:89:94:15:27:d2:a6:2e:08:af:6d:e1:83: 1d:f1:d6:a3:b5:b6:06:1f:da:40:a4:2a:f2:c7:b7:e3:e1:54: f1:63:9d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGO2r5Rh0VmeXdIu8SmxidVjiTfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjA3MjQwMDE5MzdaFw0yNjA3MjUwMTI1MzdaMDMxMTAvBgNV BAMTKDQ3NTE1ODgyQjkzMjNBMEJDOTc5NkE0NDlCM0E1REEwMjA0MTQ1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwIFTUIWLa+iYNCb4XexxVzhkd hYEuK9l02hy2Uroq8YzUwTV5kAWeubnS4IBaNwuBtHrI/X675DtxfrpdjnFuy9t7 OHdFvLphlU9nR18u7S5bpYeWKpnSjI6p9zDYuS2ObE15b/TBiyx0fQc7LkO8XUQR w12DRuxVfSV/D6WD4iekHtMQp9V2/jkIYv/Ps9kYG19JoXBNTC5aSdDX94VhcES5 yFeqEjZBbs1MLtcl/8mKPG43IYkBgX6iKDb7Ii/0AbKNXPx/xGxT2gKz1vaH7N5w wNM2jnnkgSJR21a9+ZwY5joyuzHwm8KpHH6q7H1UX5nIWguxjHng4B9aQ9a1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1FYgrkyOgvJeWpEmzpdoCBBRa4wHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO/LbVSSPItawSdcQz/uN+Xhu5P/443B+b7 bSGo1tTLs0IB0pHLaorT7QaoiYtBBQg6dq3lrmLi0zsmFtumCDsuUu/mk8FVz/A/ 7VF8w3yGJ1BPi4UqlPx+wT1uNJFym6mA9wZ+pOJ9hb6seN7Qm1N/Iq5YD8Bkyyvy g3aURu2hzoHONCK2Vo5NCUdbWIMMh4/6eRLZbFwxlNNYFTvkP+FhbAi3xIQexZ2U gEN3U3oRe6sHOSMO7iqcUKarZa2kQWD3+Mablv/kND5LJZlcO7h+m7TwtbwgjJEJ tjjemImUFSfSpi4Ir23hgx3x1qO1tgYf2kCkKvLHt+PhVPFjncw= -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:52 2026 by rpki-client