$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: oIXe9E0pXkNcyaqoqurLZ7OaaC5q1PYWtB9QYPlVsvc= Subject key identifier: 68:AE:00:6B:0E:B5:21:CF:6F:F7:21:93:91:5D:55:DD:92:57:FA:00 Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 3A91918C7FCCBB4C814A015EFA8B89B48EC7DFA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 08:19:43 +0000 Manifest this update: Sat 14 Nov 2026 08:14:43 +0000 Manifest next update: Sun 15 Nov 2026 10:49:43 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) 2: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: XpziBLnLScQGXy1o2MyA9h6bi37GZw3HyHJHpcXjwx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:91:91:8c:7f:cc:bb:4c:81:4a:01:5e:fa:8b:89:b4:8e:c7:df:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Nov 14 08:14:43 2026 GMT Not After : Nov 15 10:49:43 2026 GMT Subject: CN=68AE006B0EB521CF6FF72193915D55DD9257FA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:88:54:c4:93:eb:3e:36:10:6b:b4:1c:62: 6e:07:dc:34:f3:dd:e6:65:06:91:6f:e2:bb:14:29: f2:ea:53:fc:a5:ca:32:fd:af:48:20:61:a8:fe:77: 38:b1:42:07:dc:e0:d5:4a:f1:22:c1:44:9d:9e:07: 23:0f:97:ff:07:15:37:dd:f4:25:8a:06:da:7b:f9: 53:6e:7f:8c:37:e3:08:9f:cb:81:85:9c:dc:58:e2: 9c:53:de:38:c3:ac:e0:bb:88:ba:6c:3d:65:9a:ac: fe:c2:7d:49:e2:02:68:de:11:21:55:1f:53:f0:cf: 92:4f:ad:6e:34:f7:fe:e6:ca:d3:6a:ce:03:fc:4e: 70:46:4b:65:0a:be:c0:c1:e9:f2:5e:f1:7d:96:ce: d5:44:90:21:96:61:3d:59:cb:1f:ae:84:18:c1:16: ab:29:fd:7d:eb:cf:9a:24:21:55:d6:5f:38:d5:54: 8b:d6:0f:f3:14:95:bd:3b:de:ae:bf:87:0b:c6:7d: 0e:a1:10:89:96:ec:04:65:50:80:99:ff:9f:51:aa: f1:b5:5f:92:2a:2b:bf:81:8f:a4:8f:0b:ac:1f:57: a2:32:4d:4c:30:d1:f4:e0:7b:6f:5f:12:b0:ca:87: 9d:f4:61:12:d7:42:c0:06:1f:f0:80:fd:8f:b6:24: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AE:00:6B:0E:B5:21:CF:6F:F7:21:93:91:5D:55:DD:92:57:FA:00 X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8c:c2:ce:3e:33:43:78:f9:2f:64:5e:92:7c:f1:6d:19:e4: 48:65:c2:c9:51:c2:0a:e6:5b:32:9d:25:d5:25:9e:e2:57:cc: 50:00:42:d0:4a:be:f8:63:0f:01:80:f1:21:35:c3:00:9f:39: ae:a2:2d:d0:c4:7a:f3:55:8b:45:7f:00:2b:24:a6:33:59:ea: f8:7f:cd:ea:a0:22:ff:f3:36:34:83:1f:92:74:4c:65:26:62: 3c:37:0d:76:a5:df:55:16:72:50:64:2d:bf:2c:69:15:dd:06: 15:40:3c:d2:56:42:e3:2c:4c:b1:50:47:78:22:82:ea:b6:a6: ae:c2:97:69:96:56:41:9d:64:7f:2a:32:d9:79:18:98:5d:15: 25:e0:77:48:45:74:ca:59:90:a8:ed:e9:6a:47:11:a7:44:e2: bc:45:22:ec:0b:c8:2c:9f:34:0d:82:1c:f2:62:c7:60:b9:61: cd:e8:2e:3c:fa:a2:49:78:35:b9:19:c6:f0:da:53:d5:05:16: ba:1c:83:a6:49:5b:45:3f:63:19:fb:a5:72:5a:c7:69:0c:8f: 2a:a5:bd:89:16:ef:f1:c6:68:c9:74:c2:40:c6:96:b6:14:3d: 97:f1:55:b7:14:86:f3:61:19:1f:d2:9f:a7:40:cb:ce:21:6b: dc:e3:bb:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpGRjH/Mu0yBSgFe+ouJtI7H36kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjExMTQwODE0NDNaFw0yNjExMTUxMDQ5NDNaMDMxMTAvBgNV BAMTKDY4QUUwMDZCMEVCNTIxQ0Y2RkY3MjE5MzkxNUQ1NUREOTI1N0ZBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8IhUxJPrPjYQa7QcYm4H3DTz 3eZlBpFv4rsUKfLqU/ylyjL9r0ggYaj+dzixQgfc4NVK8SLBRJ2eByMPl/8HFTfd 9CWKBtp7+VNuf4w34wify4GFnNxY4pxT3jjDrOC7iLpsPWWarP7CfUniAmjeESFV H1Pwz5JPrW409/7mytNqzgP8TnBGS2UKvsDB6fJe8X2WztVEkCGWYT1Zyx+uhBjB Fqsp/X3rz5okIVXWXzjVVIvWD/MUlb073q6/hwvGfQ6hEImW7ARlUICZ/59RqvG1 X5IqK7+Bj6SPC6wfV6IyTUww0fTge29fErDKh530YRLXQsAGH/CA/Y+2JDt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaK4Aaw61Ic9v9yGTkV1V3ZJX+gAwHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyMws4+M0N4+S9kXpJ88W0Z5EhlwslRwgrm WzKdJdUlnuJXzFAAQtBKvvhjDwGA8SE1wwCfOa6iLdDEevNVi0V/ACskpjNZ6vh/ zeqgIv/zNjSDH5J0TGUmYjw3DXal31UWclBkLb8saRXdBhVAPNJWQuMsTLFQR3gi guq2pq7Cl2mWVkGdZH8qMtl5GJhdFSXgd0hFdMpZkKjt6WpHEadE4rxFIuwLyCyf NA2CHPJix2C5Yc3oLjz6okl4NbkZxvDaU9UFFrocg6ZJW0U/Yxn7pXJax2kMjyql vYkW7/HGaMl0wkDGlrYUPZfxVbcUhvNhGR/Sn6dAy84ha9zjuxE= -----END CERTIFICATE-----Generated at Sun Nov 15 00:55:10 2026 by rpki-client