$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: Zzj6V4nh8zOfMT6u28iruXqKGIyEmdcYnm9j0PWwwJ4= Subject key identifier: 58:48:CF:CD:67:0E:38:9E:CC:10:C5:F0:D6:C6:92:F8:2F:81:40:85 Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 6835694BCCF948FECED72561A4DBC2141ED2790C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: BE Signing time: Mon 21 Sep 2026 19:51:00 +0000 Manifest this update: Mon 21 Sep 2026 19:46:00 +0000 Manifest next update: Tue 22 Sep 2026 20:21:00 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) 2: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: GAu0ITwk1sopwB8Xe1LDkm9TrOtnRnsRqD64hSyebsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:35:69:4b:cc:f9:48:fe:ce:d7:25:61:a4:db:c2:14:1e:d2:79:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Sep 21 19:46:00 2026 GMT Not After : Sep 22 20:21:00 2026 GMT Subject: CN=5848CFCD670E389ECC10C5F0D6C692F82F814085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:68:b0:bf:30:a6:fa:2e:38:30:9a:d1:74: 94:92:69:71:c2:7d:03:41:16:0d:8d:f8:17:57:aa: bc:f7:bb:e2:29:e8:b5:18:e8:ec:a6:05:cb:01:f5: dc:48:7b:32:33:70:82:99:63:e0:05:52:6f:24:84: a6:cd:38:16:47:44:84:85:60:1a:a6:f3:ea:57:4a: cc:51:d0:a7:95:b3:14:47:0b:c5:c3:b7:90:56:e9: 15:da:b7:bf:09:5a:92:93:a1:71:28:ac:e9:ea:b9: 6a:68:28:a1:0b:56:1e:b8:ea:01:59:c8:94:8e:bd: 30:a8:cb:dd:1c:5c:52:f7:10:45:ab:8f:98:db:0c: b8:8d:cd:51:d2:37:2d:a9:d4:f1:d2:fe:0c:78:48: cd:fc:98:dd:98:b1:3a:cd:b7:a2:2a:19:21:cf:00: 01:b0:3b:0b:92:f2:94:1e:a9:91:f4:0a:d1:67:ea: a9:4f:19:f0:43:0b:b9:21:f5:21:f1:6e:86:70:be: 12:c4:cd:45:0f:e3:0e:8f:5f:c7:0c:fd:04:8d:db: c4:a5:b1:61:cc:e3:f9:17:e6:d0:e4:39:99:da:10: 6d:80:76:35:00:a9:48:5e:47:fa:27:11:af:54:72: e9:3a:35:65:f1:0d:40:3e:90:b6:7c:cd:74:c1:ec: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:48:CF:CD:67:0E:38:9E:CC:10:C5:F0:D6:C6:92:F8:2F:81:40:85 X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:db:61:d1:2e:04:d0:43:c5:63:7b:74:61:34:01:39:ec:c6: 5b:74:31:c4:98:d6:a8:ed:28:aa:30:e1:06:d7:af:1d:f9:90: 19:f2:d3:85:35:59:64:8f:3d:ca:b4:51:2c:41:29:41:5b:74: 7c:87:d8:74:4a:e5:93:15:54:06:9d:c4:fa:b8:95:f5:69:4f: c7:97:12:52:fc:cb:a5:58:ee:63:f5:04:0e:07:2a:b1:b8:7c: 92:55:1b:1e:b8:f5:9d:1f:03:af:f2:9f:62:8d:b5:f8:25:d8: 84:f3:e1:23:3e:f2:94:d5:b6:7b:58:a5:17:e3:7c:7e:bc:63: 8b:37:fd:57:09:8c:25:5e:06:76:10:a4:06:63:b6:d8:e6:e2: c5:e3:47:9b:66:b1:4a:b6:42:10:ef:9b:32:6e:16:b3:f5:c6: 5d:2a:84:07:77:3f:05:a2:85:2a:7d:bc:79:6d:73:f9:6b:ca: f5:c7:ae:84:73:05:ec:42:c7:64:00:49:f4:65:25:db:71:ca: 4c:27:82:51:c5:f4:05:8f:94:d2:ad:20:6b:13:e8:42:54:6c: fc:53:86:94:5c:f2:f7:9b:f1:a5:70:01:d1:99:ab:ea:fc:37: 24:59:5f:af:99:91:13:02:77:95:f8:ee:6b:46:b6:01:61:bc: 69:b2:5e:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDVpS8z5SP7O1yVhpNvCFB7SeQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjA5MjExOTQ2MDBaFw0yNjA5MjIyMDIxMDBaMDMxMTAvBgNV BAMTKDU4NDhDRkNENjcwRTM4OUVDQzEwQzVGMEQ2QzY5MkY4MkY4MTQwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KWiwvzCm+i44MJrRdJSSaXHC fQNBFg2N+BdXqrz3u+Ip6LUY6OymBcsB9dxIezIzcIKZY+AFUm8khKbNOBZHRISF YBqm8+pXSsxR0KeVsxRHC8XDt5BW6RXat78JWpKToXEorOnquWpoKKELVh646gFZ yJSOvTCoy90cXFL3EEWrj5jbDLiNzVHSNy2p1PHS/gx4SM38mN2YsTrNt6IqGSHP AAGwOwuS8pQeqZH0CtFn6qlPGfBDC7kh9SHxboZwvhLEzUUP4w6PX8cM/QSN28Sl sWHM4/kX5tDkOZnaEG2AdjUAqUheR/onEa9Ucuk6NWXxDUA+kLZ8zXTB7FVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWEjPzWcOOJ7MEMXw1saS+C+BQIUwHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/bYdEuBNBDxWN7dGE0ATnsxlt0McSY1qjt KKow4QbXrx35kBny04U1WWSPPcq0USxBKUFbdHyH2HRK5ZMVVAadxPq4lfVpT8eX ElL8y6VY7mP1BA4HKrG4fJJVGx649Z0fA6/yn2KNtfgl2ITz4SM+8pTVtntYpRfj fH68Y4s3/VcJjCVeBnYQpAZjttjm4sXjR5tmsUq2QhDvmzJuFrP1xl0qhAd3PwWi hSp9vHltc/lryvXHroRzBexCx2QASfRlJdtxykwnglHF9AWPlNKtIGsT6EJUbPxT hpRc8veb8aVwAdGZq+r8NyRZX6+ZkRMCd5X47mtGtgFhvGmyXv8= -----END CERTIFICATE-----Generated at Tue Sep 22 05:49:26 2026 by rpki-client