$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft File: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft (raw, json) Hash identifier: xlbQiHuPbIt0mhGHxgnH6XkLvQM5MS9P3c1tNssbpuc= Subject key identifier: 55:E8:C0:20:7F:3D:D7:DD:70:1B:DB:A3:7B:93:5E:47:26:73:18:F9 Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Certificate serial: 7493A9F1974FFCFA324410691B9446C743C667A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:35:56 +0000 Manifest this update: Mon 21 Sep 2026 03:30:56 +0000 Manifest next update: Tue 22 Sep 2026 06:05:56 +0000 Files and hashes: 1: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl (hash: NNpEKccNNKzUNzKgpqOCoIdpMeOI50HtlwPHJ9QWpRo=) 2: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: RQ6zv/OcNcVun/cTLFBfmSLzfQJzMXKgcoU2+4K4YAw=) 3: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: vehsLc9IdsSn7EUUdSdrNurNOdDJw1QIcbLPuX3RJb4=) 4: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: wM3JMaIp+zvVQetOr/lRp0Azv2B1AVIYfVuKB1kJoRo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:93:a9:f1:97:4f:fc:fa:32:44:10:69:1b:94:46:c7:43:c6:67:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Validity Not Before: Sep 21 03:30:56 2026 GMT Not After : Sep 22 06:05:56 2026 GMT Subject: CN=55E8C0207F3DD7DD701BDBA37B935E47267318F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:27:2d:b6:83:51:7c:45:08:3d:aa:60:bf: 31:0a:31:11:d9:49:15:30:73:01:d4:52:30:78:df: 32:74:df:07:06:13:92:53:88:3f:f6:d4:77:ab:72: ca:13:ec:2e:47:38:1f:a1:f0:9b:08:6e:d4:7f:8e: d3:fe:59:ee:53:4c:c1:39:9b:91:22:8e:1c:b4:f1: 47:6e:05:0b:ca:0d:e3:8b:77:65:38:7f:ff:f0:c7: 47:84:fe:b7:1c:f5:82:16:f5:88:98:1b:53:15:33: b9:ff:33:da:06:64:10:16:f4:6f:0f:28:84:67:50: 5c:88:6f:68:4b:47:77:79:e9:d8:be:27:6b:df:b3: 41:13:8c:86:1f:19:ff:dc:35:c6:d8:7d:40:a0:85: 55:c3:14:be:97:d3:79:36:7a:60:88:2a:9c:50:eb: 10:57:6b:75:73:a1:00:5a:81:75:9b:b2:f3:f3:9a: f6:50:20:bc:0b:f1:23:1a:00:d7:c7:4e:61:6c:1d: 84:d4:c8:4e:51:11:48:a8:a2:bb:98:a5:bf:0b:40: ca:0b:fe:0a:bc:e5:25:ad:66:6f:29:c8:b5:46:76: 08:a5:f4:bb:dd:77:26:82:83:b3:c1:9b:b2:82:0c: 0f:90:38:9d:be:92:a7:a9:d7:8c:56:59:39:2a:98: 71:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E8:C0:20:7F:3D:D7:DD:70:1B:DB:A3:7B:93:5E:47:26:73:18:F9 X509v3 Authority Key Identifier: keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:18:8d:6c:ea:07:79:32:e4:e2:79:5d:64:cb:8b:66:77:26: f3:7c:22:e6:02:54:8b:4b:21:86:7e:16:29:be:29:47:e4:a3: f5:88:2f:fc:55:59:10:c5:26:8d:e7:7e:3b:83:4a:0e:cb:2b: 02:51:32:d2:10:3c:b1:7d:87:e2:9a:18:fc:c9:f0:a6:5e:bf: cb:8d:46:df:6a:2a:1e:24:92:c5:b4:ec:b6:bb:8e:e8:9c:9a: f3:de:b9:8f:7b:73:85:f4:e5:e2:31:16:af:15:59:00:26:41: 83:bb:42:bb:b0:05:d7:ee:04:86:e7:19:62:6f:50:16:48:b4: 8c:f7:35:76:88:11:42:90:ec:2b:8e:cf:8e:d4:45:c9:23:88: 20:f0:62:b6:f5:aa:bf:33:b0:70:47:72:32:e6:70:5e:a4:c5: 39:46:aa:d7:55:41:26:1a:97:42:9a:2a:47:47:7c:ff:ad:15: 72:70:88:76:2e:63:d6:0f:23:d7:e8:5d:20:b4:22:8c:d5:d8: 67:fa:dd:6c:96:a3:44:48:bf:af:48:52:6a:cc:1d:cd:f1:9c: 66:68:3c:55:a6:21:42:24:dd:b7:87:0e:18:7d:97:f2:ef:23: 7b:da:db:4c:b1:5f:24:ce:93:09:ad:e6:58:f6:17:3f:0c:22: 69:cd:78:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJOp8ZdP/PoyRBBpG5RGx0PGZ6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQx M0Y2RjNCNjAeFw0yNjA5MjEwMzMwNTZaFw0yNjA5MjIwNjA1NTZaMDMxMTAvBgNV BAMTKDU1RThDMDIwN0YzREQ3REQ3MDFCREJBMzdCOTM1RTQ3MjY3MzE4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1ycttoNRfEUIPapgvzEKMRHZ SRUwcwHUUjB43zJ03wcGE5JTiD/21HercsoT7C5HOB+h8JsIbtR/jtP+We5TTME5 m5Eijhy08UduBQvKDeOLd2U4f//wx0eE/rcc9YIW9YiYG1MVM7n/M9oGZBAW9G8P KIRnUFyIb2hLR3d56di+J2vfs0ETjIYfGf/cNcbYfUCghVXDFL6X03k2emCIKpxQ 6xBXa3VzoQBagXWbsvPzmvZQILwL8SMaANfHTmFsHYTUyE5REUiooruYpb8LQMoL /gq85SWtZm8pyLVGdgil9LvddyaCg7PBm7KCDA+QOJ2+kqep14xWWTkqmHHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVejAIH89191wG9uje5NeRyZzGPkwHwYDVR0j BBgwFoAUqiOmhcZyYia2McffbIm7RBP287YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2M2FlN2MtYTZmZi00ZmQ4LTk2ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVD NjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQxM0Y2RjNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTIzQTY4NUM2NzI2MjI2QjYzMUM3REY2Qzg5QkI0NDEzRjZG M0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJC NDQxM0Y2RjNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgYjWzqB3ky5OJ5XWTLi2Z3JvN8IuYCVItL IYZ+Fim+KUfko/WIL/xVWRDFJo3nfjuDSg7LKwJRMtIQPLF9h+KaGPzJ8KZev8uN Rt9qKh4kksW07La7juicmvPeuY97c4X05eIxFq8VWQAmQYO7QruwBdfuBIbnGWJv UBZItIz3NXaIEUKQ7CuOz47URckjiCDwYrb1qr8zsHBHcjLmcF6kxTlGqtdVQSYa l0KaKkdHfP+tFXJwiHYuY9YPI9foXSC0IozV2Gf63WyWo0RIv69IUmrMHc3xnGZo PFWmIUIk3beHDhh9l/LvI3va20yxXyTOkwmt5lj2Fz8MImnNeI4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:03:36 2026 by rpki-client