$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft File: AAB4671D9735066964F008C9DDFC52C3A710E040.mft (raw, json) Hash identifier: IGgIxC//v0toz2TZQ7SM4uDhT+5KXL70F05Xxm4SVEA= Subject key identifier: F2:B2:70:00:DB:40:E2:C7:F3:E6:71:42:A0:9B:59:6D:72:D3:20:37 Authority key identifier: AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 Certificate issuer: /CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Certificate serial: 364442D19CE00EB5020D462C08C0478217CE9148 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 14:48:12 +0000 Manifest this update: Sat 26 Sep 2026 14:43:12 +0000 Manifest next update: Sun 27 Sep 2026 18:29:12 +0000 Files and hashes: 1: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: WYe5M8+W5wSg2Rfo76ZEu34y6MT+kHyqh2vkljV+QtU=) 2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: unzh605AgxMrS8kL6fN+yePqm6X/AD3ox4pCc7I8/VY=) 3: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: aJngYofxYM8aRo7ASuGSX++bpTmrKYXt3y7dtT5WC2Y=) 4: AAB4671D9735066964F008C9DDFC52C3A710E040.crl (hash: ErsjXjiqD4km+qC37XXxeaMDkRZugR0Jq7IX6bpZzv8=) 5: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: B0g8+pDAE4Q/0GBSFMta6Y5XLkcrXAH8CA4qOj5PkCE=) 6: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: NXMKeEFbtGD5jl2gs5Op2j9jmwYVlgv0YYaBKtfr4gA=) 7: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 42yHJRCL2UkIYvPUKITyhrxYXg51+0nJdl91wdx0sEk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:44:42:d1:9c:e0:0e:b5:02:0d:46:2c:08:c0:47:82:17:ce:91:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAB4671D9735066964F008C9DDFC52C3A710E040 Validity Not Before: Sep 26 14:43:12 2026 GMT Not After : Sep 27 18:29:12 2026 GMT Subject: CN=F2B27000DB40E2C7F3E67142A09B596D72D32037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:19:c9:90:75:83:77:44:76:b6:77:4d:f3:92: 36:67:23:11:d4:0d:39:23:1f:36:ad:8e:c7:41:04: 24:8d:a5:b7:f0:01:b0:09:92:9b:4b:ea:22:84:a0: 7f:e7:50:1b:3b:34:e4:55:03:70:8e:d2:91:fb:21: 8a:2d:2a:13:28:4f:8f:4d:69:db:f7:7e:b0:b3:e5: ca:9b:85:3e:cf:0e:0c:73:e3:ec:eb:a2:b9:9e:84: 66:52:f1:cb:10:3a:ec:0d:10:0b:da:79:69:b0:21: a4:04:db:6e:d5:18:72:b4:b5:b4:ff:a2:1f:c2:ff: 7b:9f:b9:80:00:89:5b:87:1f:0e:b4:f3:39:de:8a: ef:6b:29:b5:81:e1:e6:2c:8f:e2:e2:b6:2a:d6:bc: b9:95:90:76:7e:eb:69:44:a5:65:71:79:fc:8c:67: e3:ca:d8:ab:ac:9b:58:1d:86:2c:46:d1:31:25:08: 7e:f1:08:0e:6f:46:c5:39:eb:25:c5:32:07:db:16: 5b:16:72:84:3d:55:d6:21:38:9a:cd:f3:02:9b:c4: 42:f9:77:8b:a4:6a:b9:47:e5:59:ce:87:28:67:a2: 35:65:a7:19:04:db:31:09:68:86:1e:cb:94:cb:3d: 39:b9:47:ac:72:d6:64:53:6a:52:a8:2e:51:b7:be: cf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:70:00:DB:40:E2:C7:F3:E6:71:42:A0:9B:59:6D:72:D3:20:37 X509v3 Authority Key Identifier: keyid:AA:B4:67:1D:97:35:06:69:64:F0:08:C9:DD:FC:52:C3:A7:10:E0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAB4671D9735066964F008C9DDFC52C3A710E040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/AAB4671D9735066964F008C9DDFC52C3A710E040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3d:44:e7:5a:b5:6c:f5:4b:63:cd:20:5d:a1:c8:49:d9:04: 79:6b:a6:b9:a0:b0:3d:04:b5:89:cf:07:dd:d6:e0:6c:27:94: 73:bb:e0:54:ef:31:28:1b:61:bb:f5:a4:98:19:82:f0:7a:4b: 2e:04:a0:1f:b8:c4:75:17:7b:75:ee:eb:14:bd:ce:65:f7:db: ab:4d:6d:63:da:71:db:ae:b9:a2:82:5c:69:d3:ae:4c:b2:99: f2:31:4f:59:4c:10:e8:18:f6:be:07:4e:c8:46:18:99:83:d0: 7b:4d:9a:c1:f7:ff:02:ca:45:a2:10:12:d8:c2:b7:4a:07:56: d9:f7:18:ae:e5:c5:14:87:a1:a1:bb:c5:f0:97:61:6c:c3:c0: bc:d5:98:8d:58:5f:af:9b:a0:ee:b7:a7:f7:3e:ac:7f:cc:f3: 30:ee:d3:48:7e:6c:12:97:c7:cc:1a:e9:8d:ce:12:3a:79:b5: 48:2c:00:b2:83:cf:42:93:19:e2:8a:81:20:a4:3e:05:ad:e2: 0b:b8:38:08:81:12:dd:6f:06:17:c9:11:7b:b8:de:53:95:e5: 5c:3a:ad:ff:25:69:79:bf:f5:b6:73:1d:0c:1b:ac:9e:c6:56: 34:f8:6e:cb:5d:83:51:ef:7e:0b:0a:f6:10:3e:f4:42:0b:c9: af:30:2e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkRC0ZzgDrUCDUYsCMBHghfOkUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNB NzEwRTA0MDAeFw0yNjA5MjYxNDQzMTJaFw0yNjA5MjcxODI5MTJaMDMxMTAvBgNV BAMTKEYyQjI3MDAwREI0MEUyQzdGM0U2NzE0MkEwOUI1OTZENzJEMzIwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLGcmQdYN3RHa2d03zkjZnIxHU DTkjHzatjsdBBCSNpbfwAbAJkptL6iKEoH/nUBs7NORVA3CO0pH7IYotKhMoT49N adv3frCz5cqbhT7PDgxz4+zrormehGZS8csQOuwNEAvaeWmwIaQE227VGHK0tbT/ oh/C/3ufuYAAiVuHHw608zneiu9rKbWB4eYsj+LitirWvLmVkHZ+62lEpWVxefyM Z+PK2Kusm1gdhixG0TElCH7xCA5vRsU56yXFMgfbFlsWcoQ9VdYhOJrN8wKbxEL5 d4ukarlH5VnOhyhnojVlpxkE2zEJaIYey5TLPTm5R6xy1mRTalKoLlG3vs9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rJwANtA4sfz5nFCoJtZbXLTIDcwHwYDVR0j BBgwFoAUqrRnHZc1Bmlk8AjJ3fxSw6cQ4EAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU0NmEzMDUtZGY3Ny00NTg3LTg3MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5 NzM1MDY2OTY0RjAwOEM5RERGQzUyQzNBNzEwRTA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUI0NjcxRDk3MzUwNjY5NjRGMDA4QzlEREZDNTJDM0E3MTBF MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvQUFCNDY3MUQ5NzM1MDY2OTY0RjAwOEM5RERGQzUy QzNBNzEwRTA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk9ROdatWz1S2PNIF2hyEnZBHlrprmgsD0E tYnPB93W4GwnlHO74FTvMSgbYbv1pJgZgvB6Sy4EoB+4xHUXe3Xu6xS9zmX326tN bWPacduuuaKCXGnTrkyymfIxT1lMEOgY9r4HTshGGJmD0HtNmsH3/wLKRaIQEtjC t0oHVtn3GK7lxRSHoaG7xfCXYWzDwLzVmI1YX6+boO63p/c+rH/M8zDu00h+bBKX x8wa6Y3OEjp5tUgsALKDz0KTGeKKgSCkPgWt4gu4OAiBEt1vBhfJEXu43lOV5Vw6 rf8laXm/9bZzHQwbrJ7GVjT4bstdg1HvfgsK9hA+9EILya8wLpA= -----END CERTIFICATE-----Generated at Sat Sep 26 21:35:49 2026 by rpki-client