$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft File: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft (raw, json) Hash identifier: NGBiASZez6QvCke3vWr/8ZAVSICPBj2nxbH/IsOEst8= Subject key identifier: 95:2F:82:8C:FE:A4:31:67:3F:23:E8:3A:74:E8:59:81:62:79:04:9A Authority key identifier: 2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE Certificate issuer: /CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Certificate serial: 69CCB06A3A911BE02C3D1DA398514CA66AF96317 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:19:47 +0000 Manifest this update: Thu 24 Sep 2026 03:14:47 +0000 Manifest next update: Fri 25 Sep 2026 03:48:47 +0000 Files and hashes: 1: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl (hash: nAIab+L4+zoUNHS5Q/Uhl+8hlZUG8EZQa5wLeAFiRyg=) 2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: dZhfKdQv3o4ubnF31yoaIvJtkGW4D/+D/cLAtWAUEM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cc:b0:6a:3a:91:1b:e0:2c:3d:1d:a3:98:51:4c:a6:6a:f9:63:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Validity Not Before: Sep 24 03:14:47 2026 GMT Not After : Sep 25 03:48:47 2026 GMT Subject: CN=952F828CFEA431673F23E83A74E859816279049A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:a6:d6:81:23:e1:61:a7:8e:b6:97:2f:af: 10:8e:c2:78:7c:d6:a6:ea:b4:a0:8f:2b:bd:57:95: 4e:68:64:b1:66:27:ba:5f:e5:82:be:a6:32:ee:ad: 79:63:6f:65:09:60:cd:19:7f:b4:bc:cc:dc:7d:91: 23:60:77:13:ef:b3:ef:8f:6a:6d:f8:e7:f1:9d:af: 1f:f6:0d:7f:bc:26:26:cb:1c:90:bf:86:af:67:07: ea:5c:bb:59:d4:3a:f8:af:b0:f4:7a:c5:5e:21:3f: f9:22:db:9c:79:e7:99:6d:3b:db:b2:37:98:1b:9a: 29:1d:8a:20:f8:eb:35:17:35:eb:7b:83:a3:7e:51: 55:1b:1f:02:25:6e:9e:1f:e6:b9:8e:f6:ce:83:6d: e7:73:95:07:58:96:fc:29:95:42:a1:cc:16:39:fa: fe:27:a4:87:2b:88:54:e5:5f:df:e9:a2:01:10:e2: a4:59:da:24:79:b9:33:f8:41:70:12:bf:f4:c3:40: 92:3b:a3:f4:17:50:f3:04:c8:e2:29:80:2f:23:44: 86:b4:8c:c2:ca:be:70:2f:10:a9:e9:8a:d1:82:46: 39:58:5f:85:86:8d:60:a2:84:54:a5:11:ce:45:af: 07:09:3c:7a:8c:04:40:37:36:54:db:c0:87:cb:53: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2F:82:8C:FE:A4:31:67:3F:23:E8:3A:74:E8:59:81:62:79:04:9A X509v3 Authority Key Identifier: keyid:2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fa:91:eb:db:69:36:c5:67:ac:89:46:35:6d:6e:c9:47:03: f2:41:e0:6c:09:29:50:be:f8:fc:f9:ef:ea:8a:18:a4:0c:04: 03:7f:ff:b1:b4:bd:f3:7e:81:4f:be:93:2c:89:87:53:11:bf: 00:cc:fb:56:ba:dd:9b:d8:d5:76:97:42:b4:fb:9d:e4:88:c0: 4b:4d:b1:c6:32:79:2a:1a:04:ae:b4:b6:cc:35:49:81:50:fd: 96:66:62:a6:c3:e3:ef:fe:56:bb:f0:59:8a:7d:2a:73:7c:b4: 24:7a:56:dd:7e:da:3c:ba:53:07:59:0a:f6:41:5e:be:34:48: 44:16:fb:86:85:3b:5e:6f:99:e8:ad:17:e0:16:cb:2f:1b:fa: dd:30:4f:0e:6d:c1:62:62:bd:9c:f7:ba:dc:51:d8:f0:d2:40: e1:3d:73:54:d7:bf:5b:c3:cd:81:62:8f:d8:aa:a5:df:e1:92: b0:c6:e4:16:6a:07:e2:b8:40:73:b3:86:d2:71:a4:0d:8c:d6: 4b:16:6d:fd:2a:93:da:f7:f0:ee:d5:68:93:5a:c8:60:f2:08: 05:40:32:d1:85:25:2c:63:30:aa:b9:dc:62:9a:ca:04:a7:53: 82:68:ad:3d:14:a7:83:96:04:5f:47:a6:ac:7b:c4:72:c0:15: 38:fa:b9:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacywajqRG+AsPR2jmFFMpmr5YxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAy ODFBNzVBRTAeFw0yNjA5MjQwMzE0NDdaFw0yNjA5MjUwMzQ4NDdaMDMxMTAvBgNV BAMTKDk1MkY4MjhDRkVBNDMxNjczRjIzRTgzQTc0RTg1OTgxNjI3OTA0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3abWgSPhYaeOtpcvrxCOwnh8 1qbqtKCPK71XlU5oZLFmJ7pf5YK+pjLurXljb2UJYM0Zf7S8zNx9kSNgdxPvs++P am345/Gdrx/2DX+8JibLHJC/hq9nB+pcu1nUOvivsPR6xV4hP/ki25x555ltO9uy N5gbmikdiiD46zUXNet7g6N+UVUbHwIlbp4f5rmO9s6DbedzlQdYlvwplUKhzBY5 +v4npIcriFTlX9/pogEQ4qRZ2iR5uTP4QXASv/TDQJI7o/QXUPMEyOIpgC8jRIa0 jMLKvnAvEKnpitGCRjlYX4WGjWCihFSlEc5FrwcJPHqMBEA3NlTbwIfLU5vPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlS+CjP6kMWc/I+g6dOhZgWJ5BJowHwYDVR0j BBgwFoAUKqLCA5/3Loluzm8OPq04oCgada4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlMjdkYTktZTZlNi00NGE1LTk4ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5 RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAyODFBNzVBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUEyQzIwMzlGRjcyRTg5NkVDRTZGMEUzRUFEMzhBMDI4MUE3 NUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4 QTAyODFBNzVBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr6kevbaTbFZ6yJRjVtbslHA/JB4GwJKVC+ +Pz57+qKGKQMBAN//7G0vfN+gU++kyyJh1MRvwDM+1a63ZvY1XaXQrT7neSIwEtN scYyeSoaBK60tsw1SYFQ/ZZmYqbD4+/+VrvwWYp9KnN8tCR6Vt1+2jy6UwdZCvZB Xr40SEQW+4aFO15vmeitF+AWyy8b+t0wTw5twWJivZz3utxR2PDSQOE9c1TXv1vD zYFij9iqpd/hkrDG5BZqB+K4QHOzhtJxpA2M1ksWbf0qk9r38O7VaJNayGDyCAVA MtGFJSxjMKq53GKaygSnU4JorT0Up4OWBF9Hpqx7xHLAFTj6uTA= -----END CERTIFICATE-----Generated at Thu Sep 24 18:50:55 2026 by rpki-client