$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft File: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft (raw, json) Hash identifier: M+Lekci1xVhJwJvc5IKdqJ3r6KeecNc0mtn4jEd9sFA= Subject key identifier: A9:24:C4:84:51:11:24:A3:7C:60:2E:2E:61:98:57:5E:6E:36:BC:43 Authority key identifier: 2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE Certificate issuer: /CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Certificate serial: 10FAD62BD567B9B4A2212C398BBFFA46322FA5AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:37:54 +0000 Manifest this update: Tue 12 May 2026 12:32:54 +0000 Manifest next update: Wed 13 May 2026 13:29:54 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: dZhfKdQv3o4ubnF31yoaIvJtkGW4D/+D/cLAtWAUEM0=) 2: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl (hash: iLX7aR/l+Db81EoyOxp2CNuWbgtEebnf07EuhgSzw4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fa:d6:2b:d5:67:b9:b4:a2:21:2c:39:8b:bf:fa:46:32:2f:a5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Validity Not Before: May 12 12:32:54 2026 GMT Not After : May 13 13:29:54 2026 GMT Subject: CN=A924C484511124A37C602E2E6198575E6E36BC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:db:6a:e8:bb:2a:fb:1e:b5:d5:62:8c:29: 92:79:91:ef:18:ee:d4:50:c4:cc:7b:15:aa:ea:64: d4:4d:34:ac:7b:14:52:1f:da:0d:51:d5:5d:1e:1c: 44:85:5a:9f:c5:55:3e:f8:4d:25:d0:22:3e:b4:d6: f1:e8:39:a4:ab:11:2a:30:f4:6e:3c:9a:20:65:f0: dc:16:a7:bd:71:e2:cf:f4:9e:78:d1:5a:1f:99:b2: 83:91:5d:c9:3a:3e:08:4b:c8:f9:0d:31:7b:04:be: 66:a6:a1:b1:56:f9:8e:dd:f6:f1:4e:ee:da:7f:e4: ab:f5:69:15:ce:9b:2e:53:12:54:b3:65:fa:dc:b1: af:8f:10:44:84:53:72:b2:8c:a5:73:c0:c2:b8:10: ee:b1:9b:d4:76:c7:7d:be:67:b0:be:52:a6:e6:67: 85:42:fc:b0:a5:62:b8:04:60:4b:3e:b9:03:c3:4b: a9:9d:74:00:07:8a:03:31:f3:c4:fd:79:31:33:79: 4b:b2:66:a2:0e:b7:f2:5b:a3:0c:d7:68:a2:33:d3: 68:ce:4d:fa:b1:81:7a:af:31:65:85:ad:4c:1d:9e: bd:61:6f:0a:f3:de:b8:74:3e:39:11:89:f7:0c:a9: a0:73:d7:22:fe:6e:ca:c4:54:80:82:bd:3c:d0:d0: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:24:C4:84:51:11:24:A3:7C:60:2E:2E:61:98:57:5E:6E:36:BC:43 X509v3 Authority Key Identifier: keyid:2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:1c:76:a6:df:3c:95:10:0f:ed:2b:ed:54:39:5f:3f:1b:4c: f5:2f:14:1e:85:4b:e6:36:22:fd:8f:dc:71:6f:5f:c3:4f:00: 91:14:ad:99:74:ae:69:96:05:26:6c:4b:d0:a6:ab:33:02:12: 29:ab:05:05:0b:41:88:c5:a8:42:6d:16:5f:33:04:48:23:73: 26:fd:dd:f9:29:87:f9:37:91:6f:77:57:fc:b1:90:a5:81:46: 08:91:3e:13:2c:82:85:c6:43:f5:69:6a:9b:d9:19:0c:ea:2c: 9e:72:be:d9:6f:60:5c:6f:80:b9:f7:bf:b9:08:25:a6:ba:54: 04:d9:8a:c1:ba:55:98:09:96:f0:57:cd:56:10:ee:14:c2:07: 1d:9b:63:ff:97:af:d7:91:06:e4:c5:8a:62:4f:7c:b2:eb:f5: d3:a0:d4:03:da:08:be:1b:18:96:cc:44:45:3e:54:b8:e3:8c: e3:2e:71:b6:03:67:6f:a6:8d:f1:1c:38:0e:0a:cc:62:23:36: 13:c8:bd:d6:0e:a8:63:13:4a:24:95:4a:a4:70:b5:b7:3a:78: d5:72:15:3d:d5:c2:5c:5e:b1:22:4c:b8:91:77:ed:ab:ad:8a: f4:45:4b:94:90:a7:65:39:80:a0:47:87:2d:c8:5b:4e:4e:91: 15:74:54:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPrWK9VnubSiISw5i7/6RjIvpaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAy ODFBNzVBRTAeFw0yNjA1MTIxMjMyNTRaFw0yNjA1MTMxMzI5NTRaMDMxMTAvBgNV BAMTKEE5MjRDNDg0NTExMTI0QTM3QzYwMkUyRTYxOTg1NzVFNkUzNkJDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppttq6Lsq+x611WKMKZJ5ke8Y 7tRQxMx7FarqZNRNNKx7FFIf2g1R1V0eHESFWp/FVT74TSXQIj601vHoOaSrESow 9G48miBl8NwWp71x4s/0nnjRWh+ZsoORXck6PghLyPkNMXsEvmamobFW+Y7d9vFO 7tp/5Kv1aRXOmy5TElSzZfrcsa+PEESEU3KyjKVzwMK4EO6xm9R2x32+Z7C+Uqbm Z4VC/LClYrgEYEs+uQPDS6mddAAHigMx88T9eTEzeUuyZqIOt/JbowzXaKIz02jO TfqxgXqvMWWFrUwdnr1hbwrz3rh0PjkRifcMqaBz1yL+bsrEVICCvTzQ0JqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqSTEhFERJKN8YC4uYZhXXm42vEMwHwYDVR0j BBgwFoAUKqLCA5/3Loluzm8OPq04oCgada4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlMjdkYTktZTZlNi00NGE1LTk4ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5 RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAyODFBNzVBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUEyQzIwMzlGRjcyRTg5NkVDRTZGMEUzRUFEMzhBMDI4MUE3 NUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4 QTAyODFBNzVBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkcdqbfPJUQD+0r7VQ5Xz8bTPUvFB6FS+Y2 Iv2P3HFvX8NPAJEUrZl0rmmWBSZsS9CmqzMCEimrBQULQYjFqEJtFl8zBEgjcyb9 3fkph/k3kW93V/yxkKWBRgiRPhMsgoXGQ/VpapvZGQzqLJ5yvtlvYFxvgLn3v7kI Jaa6VATZisG6VZgJlvBXzVYQ7hTCBx2bY/+Xr9eRBuTFimJPfLLr9dOg1APaCL4b GJbMREU+VLjjjOMucbYDZ2+mjfEcOA4KzGIjNhPIvdYOqGMTSiSVSqRwtbc6eNVy FT3VwlxesSJMuJF37autivRFS5SQp2U5gKBHhy3IW05OkRV0VOI= -----END CERTIFICATE-----Generated at Wed May 13 01:37:55 2026 by rpki-client