$ rpki-client -vvf rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft File: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft (raw, json) Hash identifier: 9ZrNs8JkhBAK9Hm5mX1s/SVO1NF5oS09BcPeesbMdrM= Subject key identifier: 52:8B:24:2D:F1:3E:BB:D2:42:6E:51:A1:0F:6A:D1:52:F1:54:25:E3 Authority key identifier: AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F Certificate issuer: /CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Certificate serial: 16D10EF251EF69D38C3DEBFB63DED17CBBB9F8B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:18:40 +0000 Manifest this update: Thu 23 Jul 2026 15:13:40 +0000 Manifest next update: Fri 24 Jul 2026 16:49:40 +0000 Files and hashes: 1: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl (hash: /zuj4Cu9vT3ZGiFuFWMAGoS+4kHhDNQduOhWZmwGeNU=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: CU3XMv/aCTAU0lNSmPec78wDsAVLMqlo9Sb+WUKv5ZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d1:0e:f2:51:ef:69:d3:8c:3d:eb:fb:63:de:d1:7c:bb:b9:f8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Validity Not Before: Jul 23 15:13:40 2026 GMT Not After : Jul 24 16:49:40 2026 GMT Subject: CN=528B242DF13EBBD2426E51A10F6AD152F15425E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:4b:fa:6f:f8:81:71:a3:f3:e0:aa:98:1b: f2:ab:98:8f:2d:e6:03:66:b5:39:62:46:3f:27:54: ae:13:37:28:fb:35:19:df:b7:0e:44:51:dd:69:6e: da:19:d7:58:f5:d2:fd:eb:f3:46:61:7d:05:28:46: 85:8d:84:40:7d:09:07:38:e1:50:8c:b0:15:cb:10: c2:44:85:4d:05:d7:ea:c0:39:66:58:ac:d2:99:16: 6a:4a:c8:a1:b6:79:d9:90:13:fc:8c:2c:2c:bf:4f: 06:ac:e4:00:27:dc:71:80:e7:3c:f8:ed:c6:a8:05: c6:0d:8c:a6:a3:77:9b:2e:1f:d1:4e:60:72:f5:6e: 46:c0:38:0c:87:37:7b:69:1c:cb:48:eb:ab:d5:66: 15:64:bb:47:4f:45:37:f9:ab:03:27:06:3a:02:84: 0d:a0:77:69:16:62:00:e5:1e:ba:f9:d8:ab:df:8c: b0:2e:0d:21:41:16:aa:62:58:af:67:43:a3:32:60: 29:66:70:4e:fd:15:c7:84:3b:47:93:83:03:e5:a8: f0:96:20:57:da:28:cb:5f:b7:a4:a4:f6:b8:54:ff: 10:91:e9:1c:81:fe:02:d1:0f:ee:b2:f9:1f:9f:83: a0:2b:40:c8:10:56:9b:31:b0:38:8f:51:86:45:61: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:24:2D:F1:3E:BB:D2:42:6E:51:A1:0F:6A:D1:52:F1:54:25:E3 X509v3 Authority Key Identifier: keyid:AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:09:4a:10:e4:6d:a8:88:0a:63:e8:ef:c7:06:cf:89:e9:df: 5c:fb:ee:67:3f:4d:53:f6:e1:10:dc:24:b9:ba:fa:6a:2e:5e: 85:07:4a:5b:29:56:d2:80:3d:c7:a5:8b:e9:22:58:d6:84:01: d7:60:bd:b7:2d:5e:57:c7:31:0c:26:30:28:53:dc:77:83:bf: 82:55:38:77:24:16:31:1e:67:39:91:19:18:ee:36:0f:2f:a4: 16:a9:77:24:cf:4d:72:01:b9:ee:25:0b:e4:a9:65:6b:71:48: 66:f3:6c:fc:8e:fb:84:a7:15:77:5e:ac:d7:e0:41:0d:8e:d3: 44:db:e7:1e:ea:d9:5a:b6:8b:c0:2d:76:04:b3:55:fc:38:e0: b9:ee:ba:04:2f:f3:1b:6e:21:d7:5d:1e:d1:54:11:c3:1d:17: 96:01:a4:7c:4c:c7:52:44:a4:44:9b:6c:1a:70:94:78:c7:b2: 2a:3c:cc:10:81:4b:11:23:46:68:26:0c:11:22:17:79:83:c8: c6:53:62:2e:04:2b:d9:10:43:13:ac:5c:db:c7:ee:b5:a7:de: cb:50:44:cc:9f:55:6a:80:73:35:ae:9e:82:2d:8a:43:8d:d3: e2:ba:87:da:c6:4a:0b:20:b0:dc:5f:4a:6b:3e:2a:9d:c5:b1: 10:a8:ed:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtEO8lHvadOMPev7Y97RfLu5+LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0 NkNBNjgxRjAeFw0yNjA3MjMxNTEzNDBaFw0yNjA3MjQxNjQ5NDBaMDMxMTAvBgNV BAMTKDUyOEIyNDJERjEzRUJCRDI0MjZFNTFBMTBGNkFEMTUyRjE1NDI1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5x0v6b/iBcaPz4KqYG/KrmI8t 5gNmtTliRj8nVK4TNyj7NRnftw5EUd1pbtoZ11j10v3r80ZhfQUoRoWNhEB9CQc4 4VCMsBXLEMJEhU0F1+rAOWZYrNKZFmpKyKG2edmQE/yMLCy/Twas5AAn3HGA5zz4 7caoBcYNjKajd5suH9FOYHL1bkbAOAyHN3tpHMtI66vVZhVku0dPRTf5qwMnBjoC hA2gd2kWYgDlHrr52KvfjLAuDSFBFqpiWK9nQ6MyYClmcE79FceEO0eTgwPlqPCW IFfaKMtft6Sk9rhU/xCR6RyB/gLRD+6y+R+fg6ArQMgQVpsxsDiPUYZFYXYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUoskLfE+u9JCblGhD2rRUvFUJeMwHwYDVR0j BBgwFoAUqsk2NqavLKsCHVJjotNomkbKaB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjYxNGNlZTAtNWRmNi00YjJiLWJiM2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZB NkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0NkNBNjgxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUM5MzYzNkE2QUYyQ0FCMDIxRDUyNjNBMkQzNjg5QTQ2Q0E2 ODFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4 OUE0NkNBNjgxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAJShDkbaiICmPo78cGz4np31z77mc/TVP2 4RDcJLm6+mouXoUHSlspVtKAPceli+kiWNaEAddgvbctXlfHMQwmMChT3HeDv4JV OHckFjEeZzmRGRjuNg8vpBapdyTPTXIBue4lC+SpZWtxSGbzbPyO+4SnFXderNfg QQ2O00Tb5x7q2Vq2i8AtdgSzVfw44LnuugQv8xtuIdddHtFUEcMdF5YBpHxMx1JE pESbbBpwlHjHsio8zBCBSxEjRmgmDBEiF3mDyMZTYi4EK9kQQxOsXNvH7rWn3stQ RMyfVWqAczWunoItikON0+K6h9rGSgsgsNxfSms+Kp3FsRCo7ZE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:40:02 2026 by rpki-client