$ rpki-client -vvf rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft File: AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft (raw, json) Hash identifier: Da4V0h2Ik4y2p2yqvffzpeHkNxNg0WDR5LtLEXbzkY4= Subject key identifier: AE:45:15:18:6F:4E:F2:BC:BD:08:91:95:10:3B:03:8B:03:3A:22:3F Authority key identifier: AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F Certificate issuer: /CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Certificate serial: 15D2743218A5E4A0C71ED117AB6C16D5FD2A97F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:00:45 +0000 Manifest this update: Thu 23 Jul 2026 16:55:45 +0000 Manifest next update: Fri 24 Jul 2026 19:31:45 +0000 Files and hashes: 1: AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl (hash: D8tUw3kJMjCvjQ2MZ9Jg/vNb6cat2XZ8KBdqiMZnDiA=) 2: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: ewfsYYBTx06fI9ZJBdkWQ9OcyfPFI+ANp/78GnZ38BE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d2:74:32:18:a5:e4:a0:c7:1e:d1:17:ab:6c:16:d5:fd:2a:97:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Validity Not Before: Jul 23 16:55:45 2026 GMT Not After : Jul 24 19:31:45 2026 GMT Subject: CN=AE4515186F4EF2BCBD089195103B038B033A223F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:a5:f8:25:c8:e3:82:41:04:d9:2f:15:9e: 94:be:f7:a3:c0:b3:6d:5d:99:47:16:9c:2f:66:9b: 4b:73:95:60:e2:45:21:61:83:6a:b9:da:14:f9:bb: c9:10:14:ee:74:d0:60:2b:bd:ab:c2:6d:65:0d:73: e9:45:8f:34:a3:42:59:6b:ba:12:ea:c5:31:24:3e: af:99:b8:ee:86:87:8f:87:e1:83:dc:4f:bf:32:06: d4:4d:50:c3:40:1b:f7:ed:88:f4:da:62:75:4b:ed: 27:8c:13:44:f2:e4:70:d2:93:c5:fd:49:ef:02:65: e0:f6:b5:31:61:d6:f7:2c:d8:f5:54:bb:a6:68:c0: bb:78:84:aa:40:9c:31:e4:fd:82:fe:50:d3:f5:45: 41:f4:85:87:7f:dc:76:19:df:46:d2:c3:ea:1d:dc: ab:c9:a6:bf:e9:bb:86:91:25:ae:bc:79:25:50:cd: fa:c6:78:0f:78:31:a0:94:6c:ef:00:9c:79:15:8c: 91:f7:1d:1e:bb:df:14:22:ee:12:89:c4:cd:a9:e5: 2e:59:55:8b:11:6b:17:9d:82:90:c6:55:92:f0:f5: 9e:14:74:e9:64:be:cd:e1:67:67:c0:0d:e7:0f:ac: 5d:5a:2f:dc:6d:39:17:77:93:e9:3a:67:a8:a3:d5: 60:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:15:18:6F:4E:F2:BC:BD:08:91:95:10:3B:03:8B:03:3A:22:3F X509v3 Authority Key Identifier: keyid:AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:41:c8:79:7c:cd:2f:d8:da:fe:36:3b:94:0d:18:7f:af:8f: d0:3b:c7:af:ad:f1:d8:bb:c0:81:ad:e0:2d:ed:ac:72:2f:c9: ab:a7:e2:59:37:71:2d:ee:06:02:02:88:ea:56:4b:31:40:ab: 9b:c1:3c:8c:c9:85:a7:d2:60:c7:55:f8:6a:ba:c4:80:13:3f: bd:41:c2:3b:18:7e:1b:ed:03:c2:be:f1:b4:d8:a4:e0:fd:c0: 45:e6:7c:75:6e:b7:ca:dd:f2:be:7b:4a:d2:d9:4f:1b:0b:c7: ba:f6:d1:a9:9a:bd:ba:6e:bc:c1:de:88:10:28:89:04:6c:7c: 57:0a:5e:30:3b:f5:4f:fa:70:da:30:25:2d:77:f8:f2:2e:39: ca:06:37:5f:f4:83:51:71:68:7f:79:62:8a:45:85:be:66:48: 9e:a0:2b:f5:0e:c9:f0:40:d7:dd:5c:29:fa:f3:fc:d7:66:bf: ab:be:b2:52:53:6e:1e:b7:70:27:a3:85:4c:9a:d6:53:2e:2d: 2b:30:9c:a5:ee:c8:16:a7:5d:c0:b1:05:06:12:4d:48:83:2e: d7:cc:5d:9a:6a:d3:0b:39:95:96:35:49:28:27:a2:be:de:21: 06:c6:10:db:b1:2e:b5:48:22:1d:b3:26:a4:9c:5c:3f:c8:7b: 65:09:d2:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdJ0Mhil5KDHHtEXq2wW1f0ql/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRG QTNFRTgzRjAeFw0yNjA3MjMxNjU1NDVaFw0yNjA3MjQxOTMxNDVaMDMxMTAvBgNV BAMTKEFFNDUxNTE4NkY0RUYyQkNCRDA4OTE5NTEwM0IwMzhCMDMzQTIyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoqX4JcjjgkEE2S8VnpS+96PA s21dmUcWnC9mm0tzlWDiRSFhg2q52hT5u8kQFO500GArvavCbWUNc+lFjzSjQllr uhLqxTEkPq+ZuO6Gh4+H4YPcT78yBtRNUMNAG/ftiPTaYnVL7SeME0Ty5HDSk8X9 Se8CZeD2tTFh1vcs2PVUu6ZowLt4hKpAnDHk/YL+UNP1RUH0hYd/3HYZ30bSw+od 3KvJpr/pu4aRJa68eSVQzfrGeA94MaCUbO8AnHkVjJH3HR673xQi7hKJxM2p5S5Z VYsRaxedgpDGVZLw9Z4UdOlkvs3hZ2fADecPrF1aL9xtORd3k+k6Z6ij1WBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrkUVGG9O8ry9CJGVEDsDiwM6Ij8wHwYDVR0j BBgwFoAUqo1mQ3pA1MtwN9BZ/mkhRPo+6D8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI3YjExYzItYWI5MC00MjBmLWI0OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3 QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRGQTNFRTgzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQThENjY0MzdBNDBENENCNzAzN0QwNTlGRTY5MjE0NEZBM0VF ODNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIx NDRGQTNFRTgzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtByHl8zS/Y2v42O5QNGH+vj9A7x6+t8di7 wIGt4C3trHIvyaun4lk3cS3uBgICiOpWSzFAq5vBPIzJhafSYMdV+Gq6xIATP71B wjsYfhvtA8K+8bTYpOD9wEXmfHVut8rd8r57StLZTxsLx7r20amavbpuvMHeiBAo iQRsfFcKXjA79U/6cNowJS13+PIuOcoGN1/0g1FxaH95YopFhb5mSJ6gK/UOyfBA 191cKfrz/Ndmv6u+slJTbh63cCejhUya1lMuLSswnKXuyBanXcCxBQYSTUiDLtfM XZpq0ws5lZY1SSgnor7eIQbGENuxLrVIIh2zJqScXD/Ie2UJ0mA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:40 2026 by rpki-client