$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft File: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft (raw, json) Hash identifier: BgeEJEiPFY9ZtcOsyfrLwE2mfnWI8VRNXjG9H62cTOc= Subject key identifier: 9D:45:7B:42:DE:67:2D:BC:7A:98:82:6F:06:13:4F:BC:20:FD:FB:A7 Authority key identifier: 2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE Certificate issuer: /CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Certificate serial: 0F9E16CD81B5113B6DCCEE83DF6D7F8D94A0A21D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 18:32:44 +0000 Manifest this update: Thu 23 Jul 2026 18:27:44 +0000 Manifest next update: Fri 24 Jul 2026 21:00:44 +0000 Files and hashes: 1: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl (hash: XA34dfAFBk4+lbGe+r2vdQ9Bz6geQh9Kus87CD+U+eM=) 2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: dZhfKdQv3o4ubnF31yoaIvJtkGW4D/+D/cLAtWAUEM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9e:16:cd:81:b5:11:3b:6d:cc:ee:83:df:6d:7f:8d:94:a0:a2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Validity Not Before: Jul 23 18:27:44 2026 GMT Not After : Jul 24 21:00:44 2026 GMT Subject: CN=9D457B42DE672DBC7A98826F06134FBC20FDFBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:a0:d8:4a:af:73:84:8e:e4:55:5a:1c:0b: 34:33:b5:28:53:b7:1c:c9:af:c0:a6:e1:8f:9e:52: 9a:04:12:40:22:c8:7b:62:b3:2e:82:a3:3a:95:42: b8:42:ac:d4:2e:4f:88:67:b4:ec:82:f1:ca:1c:86: ac:81:a5:ea:7e:35:a4:d5:b6:d8:39:44:af:0b:d1: b1:ba:a5:81:12:09:c0:e1:5b:02:3a:3c:32:7d:f9: 44:7a:4d:92:48:b5:c9:ac:b2:6d:41:6b:55:7f:21: 68:94:0d:53:19:f4:39:98:55:b5:34:f1:4e:2f:c8: c0:c4:e5:a5:6f:05:b4:c8:a1:5c:6f:39:47:73:a6: 5d:83:9b:ef:97:80:ad:1e:0d:8f:14:4c:e9:02:7e: df:ec:53:a7:4e:c2:2e:5c:19:ed:17:c2:e6:f4:b2: 2d:af:81:58:37:19:6e:7e:fa:7d:05:87:70:4b:c7: 5a:50:bd:bd:bc:80:f7:5b:32:5d:d3:58:53:4b:c2: 40:9c:4a:15:32:23:5b:f0:19:14:86:c9:a5:d0:66: be:e5:8e:61:25:d8:9e:9d:c7:98:fd:8d:2d:c3:24: d0:85:5b:d1:d9:1b:7e:77:fc:2c:58:82:a9:92:37: 2a:ed:c1:75:da:8f:a4:52:50:c9:bc:b3:01:04:20: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:7B:42:DE:67:2D:BC:7A:98:82:6F:06:13:4F:BC:20:FD:FB:A7 X509v3 Authority Key Identifier: keyid:2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:71:df:55:02:c2:14:ff:18:59:53:71:66:38:fe:fd:0c:31: 5c:91:d5:46:db:25:2f:32:54:df:76:76:df:85:e4:e5:02:ff: 90:1a:7a:8d:26:17:2e:ca:bb:7f:6e:14:13:72:f1:f2:7e:5a: 0d:58:d9:79:53:b7:61:f4:46:6e:0b:fc:cc:02:f0:04:8e:2d: de:01:15:61:b0:2c:aa:bb:2f:ec:71:1e:ba:a4:37:36:71:da: ed:bb:66:c7:4c:02:c0:7e:a4:24:78:ca:04:23:65:91:d0:63: fa:fb:81:b4:a6:a0:77:f1:04:5e:55:81:61:da:89:91:07:55: 03:9f:3d:cd:d1:57:ab:51:58:b4:da:5a:08:06:7e:65:3d:9d: 77:ad:51:13:ee:46:f5:74:ba:94:77:dd:37:49:27:25:3e:8f: 49:c3:9a:5c:d5:68:2b:49:26:bf:14:18:68:4b:46:ee:b3:38: 97:21:9e:c1:c7:b0:58:fd:88:5f:5b:dc:49:a4:38:ed:7a:3d: 07:54:a0:56:b6:59:4f:49:82:9c:50:9e:95:05:3d:7d:a2:80: fc:57:35:78:a7:b4:ff:c9:7e:f5:b6:8f:32:a3:04:af:df:09: 17:0a:91:35:7e:47:d4:65:c0:91:4d:cc:53:1c:5e:f7:1c:03: a0:59:4b:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD54WzYG1ETttzO6D321/jZSgoh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAy ODFBNzVBRTAeFw0yNjA3MjMxODI3NDRaFw0yNjA3MjQyMTAwNDRaMDMxMTAvBgNV BAMTKDlENDU3QjQyREU2NzJEQkM3QTk4ODI2RjA2MTM0RkJDMjBGREZCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWhaDYSq9zhI7kVVocCzQztShT txzJr8Cm4Y+eUpoEEkAiyHtisy6CozqVQrhCrNQuT4hntOyC8cochqyBpep+NaTV ttg5RK8L0bG6pYESCcDhWwI6PDJ9+UR6TZJItcmssm1Ba1V/IWiUDVMZ9DmYVbU0 8U4vyMDE5aVvBbTIoVxvOUdzpl2Dm++XgK0eDY8UTOkCft/sU6dOwi5cGe0Xwub0 si2vgVg3GW5++n0Fh3BLx1pQvb28gPdbMl3TWFNLwkCcShUyI1vwGRSGyaXQZr7l jmEl2J6dx5j9jS3DJNCFW9HZG353/CxYgqmSNyrtwXXaj6RSUMm8swEEIELHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnUV7Qt5nLbx6mIJvBhNPvCD9+6cwHwYDVR0j BBgwFoAUKqLCA5/3Loluzm8OPq04oCgada4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlMjdkYTktZTZlNi00NGE1LTk4ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5 RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAyODFBNzVBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUEyQzIwMzlGRjcyRTg5NkVDRTZGMEUzRUFEMzhBMDI4MUE3 NUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4 QTAyODFBNzVBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxx31UCwhT/GFlTcWY4/v0MMVyR1UbbJS8y VN92dt+F5OUC/5Aaeo0mFy7Ku39uFBNy8fJ+Wg1Y2XlTt2H0Rm4L/MwC8ASOLd4B FWGwLKq7L+xxHrqkNzZx2u27ZsdMAsB+pCR4ygQjZZHQY/r7gbSmoHfxBF5VgWHa iZEHVQOfPc3RV6tRWLTaWggGfmU9nXetURPuRvV0upR33TdJJyU+j0nDmlzVaCtJ Jr8UGGhLRu6zOJchnsHHsFj9iF9b3EmkOO16PQdUoFa2WU9JgpxQnpUFPX2igPxX NXintP/JfvW2jzKjBK/fCRcKkTV+R9RlwJFNzFMcXvccA6BZS5E= -----END CERTIFICATE-----Generated at Fri Jul 24 04:30:35 2026 by rpki-client