$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft File: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json) Hash identifier: LfzFTEMYWoTYHBVemYte2LUKzlnFekLuXBlRkBW5Qv8= Subject key identifier: AE:34:C5:86:24:19:2F:47:74:32:63:9B:87:62:C8:E3:9C:D8:86:2E Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Certificate serial: 3B27D5A40B9ECE8BAF06A6701278835C5336927B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:55:35 +0000 Manifest this update: Wed 23 Sep 2026 23:50:35 +0000 Manifest next update: Thu 24 Sep 2026 23:55:35 +0000 Files and hashes: 1: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=) 2: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=) 3: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=) 4: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=) 5: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=) 6: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: qp8drhm88vpO4ThP0RQaFvb4ehUcpOwzz9jY8scW5PU=) 7: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=) 8: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=) 9: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=) 10: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=) 11: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=) 12: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=) 13: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:27:d5:a4:0b:9e:ce:8b:af:06:a6:70:12:78:83:5c:53:36:92:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Validity Not Before: Sep 23 23:50:35 2026 GMT Not After : Sep 24 23:55:35 2026 GMT Subject: CN=AE34C58624192F477432639B8762C8E39CD8862E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:a8:72:0f:8c:73:10:0b:01:a3:df:7f:ee: f0:e4:15:09:32:f0:3a:ae:f4:8f:05:3a:62:9d:13: 9a:45:d9:b1:bb:cf:76:38:1b:bc:b6:14:70:22:4d: 28:2d:0e:b2:da:fb:37:80:f0:de:9b:f2:8b:73:e3: 53:43:a9:6b:3b:a3:dc:b4:97:f9:77:71:7b:82:5c: c9:8a:79:2d:ee:54:73:6e:ac:77:6a:c1:5b:d3:63: c2:92:c3:47:f4:39:54:9d:6f:e3:eb:5d:37:ff:db: d3:29:d8:fb:6b:f6:d7:ae:eb:73:0a:04:12:05:51: 3b:21:d6:4a:47:79:9b:c6:c9:65:84:a0:00:e8:2e: 94:6d:64:2c:43:76:90:50:00:bf:16:7e:41:da:0a: 37:c7:3d:49:42:c6:e5:b8:4c:c0:f1:51:c4:95:81: 03:c0:8d:5c:56:e9:79:f5:4a:36:77:70:72:8a:2c: f5:7b:ff:fe:30:7d:13:e5:22:5f:65:25:a5:c4:c0: 0d:fc:11:c2:03:d6:12:94:73:1e:75:3b:aa:32:a9: dd:3b:ab:d6:42:01:18:4c:d5:04:e1:c7:c3:e1:24: 4b:f9:97:d5:cf:90:f4:5b:df:76:bd:44:cc:b4:28: ba:b6:fe:2b:7a:2b:2f:7a:6e:18:f4:1b:1f:7e:e7: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:34:C5:86:24:19:2F:47:74:32:63:9B:87:62:C8:E3:9C:D8:86:2E X509v3 Authority Key Identifier: keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:89:74:5b:2b:34:22:68:6b:9d:28:3e:4c:3b:1f:25:0a:46: 86:10:bc:df:80:28:1a:8e:a6:a9:fa:47:6b:11:7a:3e:84:61: 17:67:5d:60:d7:fb:20:82:2e:39:e3:fe:1d:ea:15:cc:35:f0: 9b:38:fa:2d:56:41:f6:90:ad:54:a6:90:13:6d:d5:0a:32:1a: be:2a:18:d3:e4:43:1d:e0:a5:d3:d1:c3:2b:08:1c:3b:0f:e3: 98:bd:f9:0d:7d:f4:1d:1f:91:39:bc:cb:ff:aa:5a:f8:d0:1d: e1:a1:7b:62:6a:be:91:08:f8:ef:3c:4c:b0:c9:91:ec:5e:82: 9c:52:79:8e:24:cc:92:e6:9a:2d:a1:31:68:de:f3:fc:87:a9: 51:a6:bf:83:11:6c:72:61:73:34:92:76:75:28:59:a9:89:a9: 50:68:f3:e4:ba:d3:43:fd:85:3c:6d:6c:b0:cc:f0:c4:79:38: 21:6a:e0:8d:6b:e0:04:e7:78:cb:17:4c:d2:81:20:5e:61:51: 9b:5f:8a:26:c3:34:9e:df:db:6b:39:4f:6a:eb:06:38:94:e1: 10:b2:76:ba:e5:73:aa:d3:12:97:a5:1b:53:59:c8:76:99:5c: 57:5c:00:b5:4f:16:14:5c:bd:9a:7f:67:bf:90:12:8e:32:89: b9:fc:ce:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyfVpAuezouvBqZwEniDXFM2knswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZG NkJDOTU4QTAeFw0yNjA5MjMyMzUwMzVaFw0yNjA5MjQyMzU1MzVaMDMxMTAvBgNV BAMTKEFFMzRDNTg2MjQxOTJGNDc3NDMyNjM5Qjg3NjJDOEUzOUNEODg2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDqhyD4xzEAsBo99/7vDkFQky 8Dqu9I8FOmKdE5pF2bG7z3Y4G7y2FHAiTSgtDrLa+zeA8N6b8otz41NDqWs7o9y0 l/l3cXuCXMmKeS3uVHNurHdqwVvTY8KSw0f0OVSdb+PrXTf/29Mp2Ptr9teu63MK BBIFUTsh1kpHeZvGyWWEoADoLpRtZCxDdpBQAL8WfkHaCjfHPUlCxuW4TMDxUcSV gQPAjVxW6Xn1SjZ3cHKKLPV7//4wfRPlIl9lJaXEwA38EcID1hKUcx51O6oyqd07 q9ZCARhM1QThx8PhJEv5l9XPkPRb33a9RMy0KLq2/it6Ky96bhj0Gx9+5x7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrjTFhiQZL0d0MmObh2LI45zYhi4wHwYDVR0j BBgwFoAUqn6D3nQ1q3it5hN7Hqz9xva8lYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MTlhZWItNWM1Ni00Y2IzLTk0YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3 NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZGNkJDOTU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTdFODNERTc0MzVBQjc4QURFNjEzN0IxRUFDRkRDNkY2QkM5 NThBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZE QzZGNkJDOTU4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOJdFsrNCJoa50oPkw7HyUKRoYQvN+AKBqO pqn6R2sRej6EYRdnXWDX+yCCLjnj/h3qFcw18Js4+i1WQfaQrVSmkBNt1QoyGr4q GNPkQx3gpdPRwysIHDsP45i9+Q199B0fkTm8y/+qWvjQHeGhe2JqvpEI+O88TLDJ kexegpxSeY4kzJLmmi2hMWje8/yHqVGmv4MRbHJhczSSdnUoWamJqVBo8+S600P9 hTxtbLDM8MR5OCFq4I1r4ATneMsXTNKBIF5hUZtfiibDNJ7f22s5T2rrBjiU4RCy drrlc6rTEpelG1NZyHaZXFdcALVPFhRcvZp/Z7+QEo4yibn8zp0= -----END CERTIFICATE-----Generated at Thu Sep 24 12:17:59 2026 by rpki-client