$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: cgX/2qRjysmHmt5UrCHZHYpW53q4iaW3/B3E1WtisPk= Subject key identifier: 33:F8:D0:E0:C0:AB:91:B6:81:F4:85:C9:3F:B6:59:A6:7E:AF:41:3E Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 583021E529D63432F838BFE5EC0CC414EF2AA7E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:39:00 +0000 Manifest this update: Wed 23 Sep 2026 22:34:00 +0000 Manifest next update: Thu 24 Sep 2026 22:41:00 +0000 Files and hashes: 1: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: s/WsUYY82GFjiDuFMs8JdDzKNGZ+HvIV5AJBNQBOxaI=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:30:21:e5:29:d6:34:32:f8:38:bf:e5:ec:0c:c4:14:ef:2a:a7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Sep 23 22:34:00 2026 GMT Not After : Sep 24 22:41:00 2026 GMT Subject: CN=33F8D0E0C0AB91B681F485C93FB659A67EAF413E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:19:91:76:75:28:2f:e1:28:2d:a0:d9:ff: d5:33:f9:84:90:a1:d7:7f:9f:48:a0:ca:88:3c:38: 4c:eb:bb:25:2b:66:56:87:7f:13:24:64:79:5f:55: 57:9f:d6:05:27:0a:d6:10:ee:38:7d:07:af:54:0f: d8:82:89:e6:a9:1a:3a:15:e5:f0:ad:77:e3:23:61: 03:75:21:17:31:dc:65:d7:0e:f4:fc:5b:4f:11:cf: d9:c8:95:fb:b5:d8:47:c3:4f:ff:d8:a3:f2:d0:39: b7:0b:42:11:7e:c7:10:6f:b0:75:5f:cb:3b:f2:5a: 1f:7f:69:cc:52:2f:1f:b5:3f:11:82:85:73:b1:1d: f0:02:21:7a:3f:22:d4:6e:e8:14:71:69:ef:61:a2: 60:97:50:b6:2b:0a:f1:8b:4b:3c:5d:6f:9b:41:02: c7:7b:fc:0e:57:42:b1:fe:43:50:38:4f:6c:b4:6b: 4e:0c:60:e2:bc:a4:42:7b:d5:9e:d7:91:33:a9:a4: 41:fc:73:e7:b6:f4:96:9b:9f:fa:9b:e1:3b:09:36: 6b:a2:c4:9e:41:b4:9e:84:43:a8:7b:af:74:21:21: cd:b7:92:21:b8:64:02:95:95:67:81:85:67:0e:87: f0:96:14:66:63:aa:c4:2d:86:80:db:80:a6:49:20: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F8:D0:E0:C0:AB:91:B6:81:F4:85:C9:3F:B6:59:A6:7E:AF:41:3E X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:88:63:3d:4d:de:dc:75:15:4f:53:7b:f1:24:66:fd:b4:fa: 8a:63:f3:c6:c9:92:73:b1:8b:08:56:3e:0a:df:0c:d2:0c:98: 5c:5b:fc:3a:7a:18:51:18:00:7b:5a:d5:fc:db:ba:3e:33:69: 0d:22:cc:30:ac:47:e8:eb:b5:05:22:09:0f:c1:47:1c:c3:b8: a9:0d:96:02:22:ff:91:71:61:47:b8:ae:57:18:b5:22:b7:0d: 44:55:b4:bd:e8:c1:e3:0b:6c:da:2b:fa:9e:8a:bc:a8:fb:37: cf:37:c6:e0:4e:64:86:e6:52:03:f8:78:33:6c:32:62:c4:61: 31:74:4b:82:87:41:2c:68:69:d4:97:60:f0:f5:ce:2a:d1:17: dc:a8:83:48:68:7d:da:e3:9f:95:f8:a6:e2:41:54:8f:c5:33: 6f:88:3d:b4:81:67:07:7e:f3:98:4b:f0:2e:ad:67:79:7e:04: 5e:db:72:19:11:c5:6b:67:73:2e:d6:d7:8e:74:d7:61:d6:82: 1c:58:42:17:00:4e:f3:55:d0:96:a5:9d:29:82:7d:c8:ba:3b: 1a:42:5b:14:62:42:73:e6:00:98:2e:ec:a4:18:04:70:c3:30: f5:35:76:f9:66:41:4a:3f:b9:dd:6e:dd:88:5b:76:af:a5:43: fd:42:3d:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDAh5SnWNDL4OL/l7AzEFO8qp+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjA5MjMyMjM0MDBaFw0yNjA5MjQyMjQxMDBaMDMxMTAvBgNV BAMTKDMzRjhEMEUwQzBBQjkxQjY4MUY0ODVDOTNGQjY1OUE2N0VBRjQxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6RmRdnUoL+EoLaDZ/9Uz+YSQ odd/n0igyog8OEzruyUrZlaHfxMkZHlfVVef1gUnCtYQ7jh9B69UD9iCieapGjoV 5fCtd+MjYQN1IRcx3GXXDvT8W08Rz9nIlfu12EfDT//Yo/LQObcLQhF+xxBvsHVf yzvyWh9/acxSLx+1PxGChXOxHfACIXo/ItRu6BRxae9homCXULYrCvGLSzxdb5tB Asd7/A5XQrH+Q1A4T2y0a04MYOK8pEJ71Z7XkTOppEH8c+e29Jabn/qb4TsJNmui xJ5BtJ6EQ6h7r3QhIc23kiG4ZAKVlWeBhWcOh/CWFGZjqsQthoDbgKZJIEY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/jQ4MCrkbaB9IXJP7ZZpn6vQT4wHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyIYz1N3tx1FU9Te/EkZv20+opj88bJknOx iwhWPgrfDNIMmFxb/Dp6GFEYAHta1fzbuj4zaQ0izDCsR+jrtQUiCQ/BRxzDuKkN lgIi/5FxYUe4rlcYtSK3DURVtL3oweMLbNor+p6KvKj7N883xuBOZIbmUgP4eDNs MmLEYTF0S4KHQSxoadSXYPD1zirRF9yog0hofdrjn5X4puJBVI/FM2+IPbSBZwd+ 85hL8C6tZ3l+BF7bchkRxWtncy7W145012HWghxYQhcATvNV0JalnSmCfci6OxpC WxRiQnPmAJgu7KQYBHDDMPU1dvlmQUo/ud1u3Yhbdq+lQ/1CPc8= -----END CERTIFICATE-----Generated at Thu Sep 24 17:05:52 2026 by rpki-client