$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft File: AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft (raw, json) Hash identifier: zbbpxTuFtHuxUxONZlGRvXdBhy55lX7DWQHAHX4EXDQ= Subject key identifier: 26:34:A0:EC:9D:23:F1:3C:17:EA:B0:6E:4F:C6:AE:92:B4:BE:2C:2A Authority key identifier: AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F Certificate issuer: /CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Certificate serial: 75DB40857A1533228DB9C2CD3003AA35D660DB66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:24:50 +0000 Manifest this update: Thu 24 Sep 2026 15:19:50 +0000 Manifest next update: Fri 25 Sep 2026 17:02:50 +0000 Files and hashes: 1: AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl (hash: ES2f1BA5s9RzU4RnlIHio6Gm7eBHI5D+uFxTELeS+v8=) 2: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: ewfsYYBTx06fI9ZJBdkWQ9OcyfPFI+ANp/78GnZ38BE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:db:40:85:7a:15:33:22:8d:b9:c2:cd:30:03:aa:35:d6:60:db:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Validity Not Before: Sep 24 15:19:50 2026 GMT Not After : Sep 25 17:02:50 2026 GMT Subject: CN=2634A0EC9D23F13C17EAB06E4FC6AE92B4BE2C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:60:ff:54:61:ab:c0:09:76:58:bd:a9:6f: 72:cc:08:1e:cb:61:5b:a7:6a:1d:74:46:d7:45:ba: 5c:e2:1e:21:0a:c6:a0:b0:36:22:13:96:9e:2e:48: ef:a6:8e:b7:d7:ad:8a:80:7a:a0:ad:96:b1:e1:82: 74:f1:7e:ea:8c:b3:e1:c3:19:2a:fb:b2:d8:54:03: d6:12:a2:4a:e5:15:0b:8f:44:63:fd:b5:21:65:ee: 90:03:26:da:1f:64:3b:3d:c9:73:f2:c1:52:51:c3: 1f:aa:68:56:04:af:6c:ed:a9:63:99:ce:d3:b9:1c: a3:cf:74:12:ab:4c:1e:4f:97:21:7f:a6:ba:ed:41: 6c:12:71:41:19:2d:12:8f:68:d6:64:14:df:39:d0: 13:73:cc:f5:8e:4a:c4:f7:b1:1e:7f:65:61:4a:23: 1a:e1:c5:d0:94:92:e1:87:8e:8e:94:3c:c8:9b:70: 8d:3f:e0:63:9a:f5:ab:e4:a1:8a:9a:9d:23:b7:62: 7f:a3:25:e7:a0:96:2b:2c:39:d7:0b:90:de:7f:ec: ed:04:99:8d:2e:c9:ec:c9:5f:de:35:f6:a2:3a:c9: c3:0c:f3:a4:5e:7a:6e:d1:2b:8a:bf:b0:9d:8e:da: 1b:5f:7c:cd:ae:d7:93:6b:64:5e:0d:a1:d0:05:e8: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:34:A0:EC:9D:23:F1:3C:17:EA:B0:6E:4F:C6:AE:92:B4:BE:2C:2A X509v3 Authority Key Identifier: keyid:AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c0:d8:f2:32:f2:07:17:07:5e:95:6b:23:38:4a:32:76:72: c1:6a:39:79:c9:60:b4:dd:a9:f0:e4:83:39:f2:af:46:67:a3: 40:b6:c3:8f:21:19:14:49:ae:07:43:79:52:b3:f9:ee:ca:da: 5c:82:9d:b2:70:dd:a0:bc:a9:cf:71:b2:99:c5:c9:e9:ad:a1: 23:de:2b:9c:70:13:5c:f5:9b:13:c1:64:a6:02:5e:63:c2:9d: b4:58:3a:18:f4:3b:4f:5e:3c:8d:d2:57:c2:62:e3:e0:7d:53: 65:67:63:19:64:5c:8e:35:b7:bc:d7:f1:6c:7b:19:c3:f5:2f: 73:5c:17:83:43:8b:83:50:e4:e7:eb:05:df:eb:ed:89:1c:17: 29:b0:9b:84:5b:f2:14:52:a1:49:f2:32:b5:8b:4e:2c:4f:fc: 50:00:49:2e:1c:1b:b2:ad:88:2a:dd:ef:6e:4a:af:dc:dd:01: ec:5f:64:e5:de:75:db:3b:be:a3:78:3f:87:a2:e1:d5:84:45: 53:c8:17:53:24:9e:73:74:6c:86:ae:f3:fb:d2:8b:ca:e2:63: 60:e7:9b:22:0a:e9:e0:fd:e3:5f:b2:3f:bc:2d:b9:bc:48:3b: 68:06:45:0f:38:22:70:15:0c:61:7d:1e:90:63:f1:a9:21:b2: ce:08:31:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddtAhXoVMyKNucLNMAOqNdZg22YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRG QTNFRTgzRjAeFw0yNjA5MjQxNTE5NTBaFw0yNjA5MjUxNzAyNTBaMDMxMTAvBgNV BAMTKDI2MzRBMEVDOUQyM0YxM0MxN0VBQjA2RTRGQzZBRTkyQjRCRTJDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJWD/VGGrwAl2WL2pb3LMCB7L YVunah10RtdFulziHiEKxqCwNiITlp4uSO+mjrfXrYqAeqCtlrHhgnTxfuqMs+HD GSr7sthUA9YSokrlFQuPRGP9tSFl7pADJtofZDs9yXPywVJRwx+qaFYEr2ztqWOZ ztO5HKPPdBKrTB5PlyF/prrtQWwScUEZLRKPaNZkFN850BNzzPWOSsT3sR5/ZWFK IxrhxdCUkuGHjo6UPMibcI0/4GOa9avkoYqanSO3Yn+jJeeglissOdcLkN5/7O0E mY0uyezJX9419qI6ycMM86Reem7RK4q/sJ2O2htffM2u15NrZF4NodAF6LcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJjSg7J0j8TwX6rBuT8aukrS+LCowHwYDVR0j BBgwFoAUqo1mQ3pA1MtwN9BZ/mkhRPo+6D8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI3YjExYzItYWI5MC00MjBmLWI0OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3 QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRGQTNFRTgzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQThENjY0MzdBNDBENENCNzAzN0QwNTlGRTY5MjE0NEZBM0VF ODNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIx NDRGQTNFRTgzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjA2PIy8gcXB16VayM4SjJ2csFqOXnJYLTd qfDkgznyr0Zno0C2w48hGRRJrgdDeVKz+e7K2lyCnbJw3aC8qc9xspnFyemtoSPe K5xwE1z1mxPBZKYCXmPCnbRYOhj0O09ePI3SV8Ji4+B9U2VnYxlkXI41t7zX8Wx7 GcP1L3NcF4NDi4NQ5OfrBd/r7YkcFymwm4Rb8hRSoUnyMrWLTixP/FAASS4cG7Kt iCrd725Kr9zdAexfZOXedds7vqN4P4ei4dWERVPIF1MknnN0bIau8/vSi8riY2Dn myIK6eD941+yP7wtubxIO2gGRQ84InAVDGF9HpBj8akhss4IMXc= -----END CERTIFICATE-----Generated at Thu Sep 24 23:34:07 2026 by rpki-client