$ rpki-client -vvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: kSd3qerxLprTLaRNyfoQj7L0MbLe4jvBHdUu3PtztsA= Subject key identifier: 0D:6B:F0:64:8D:64:F3:63:26:7D:1C:1C:84:CA:C2:CD:54:31:BA:26 Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 10775ED2BD076230AB597CC0C743427EB5CA37B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 03:58:52 +0000 Manifest this update: Sat 13 Jun 2026 03:53:52 +0000 Manifest next update: Sun 14 Jun 2026 07:49:52 +0000 Files and hashes: 1: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: WHtND1fwbfDKkwFsazVC5P3ieQVTEiMpNvqP4iehUyc=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:77:5e:d2:bd:07:62:30:ab:59:7c:c0:c7:43:42:7e:b5:ca:37:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Jun 13 03:53:52 2026 GMT Not After : Jun 14 07:49:52 2026 GMT Subject: CN=0D6BF0648D64F363267D1C1C84CAC2CD5431BA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:d4:13:75:51:73:77:7e:0a:54:4f:da:c8: c6:f7:c8:52:d7:10:9f:32:02:7f:b7:c7:9f:92:e9: a1:48:11:66:ca:a4:91:a5:c5:79:b7:a6:d2:eb:04: 83:55:54:9f:50:8f:4a:e0:d9:7c:3d:05:a7:42:ca: c4:5d:18:fe:14:4f:95:0b:41:95:cb:f9:3c:9f:39: 3c:c4:6c:e0:d9:f2:fd:b6:64:99:6a:35:59:69:f9: dc:4d:54:6a:a0:d3:a9:b5:09:0c:2e:9b:9f:d3:da: a5:cc:1b:a2:09:48:14:0a:96:73:d2:9e:2a:b0:c3: 9b:f4:12:fd:66:9c:ab:03:b4:3a:fd:58:94:78:06: 89:65:28:aa:d6:2c:7d:b7:19:2c:52:06:ae:12:95: 42:f5:63:32:72:39:1a:23:11:7a:9e:c6:7f:63:52: 19:93:ae:11:ad:59:35:48:e5:de:de:a1:87:39:d4: 2c:f1:c7:26:7a:2a:7a:39:15:96:d8:d3:d2:20:1c: 1f:e1:0c:cb:64:4f:72:88:f1:0f:2a:7c:98:99:bf: 5f:98:fa:f3:8d:60:ee:f7:89:2c:c0:11:23:fa:85: 06:87:5e:94:27:47:51:e5:f4:a1:89:42:30:1b:f5: 11:f8:0e:ba:9d:70:72:20:19:fa:59:00:fd:e6:41: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6B:F0:64:8D:64:F3:63:26:7D:1C:1C:84:CA:C2:CD:54:31:BA:26 X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:8b:62:2f:2d:ea:f6:7b:60:13:ec:b7:79:86:92:a7:1c:1a: 96:79:ba:40:09:f7:91:f5:e0:d7:33:6a:34:bf:ac:2b:81:f5: d5:d0:b8:a7:9c:0e:76:65:46:47:ef:17:45:c2:6f:7e:f5:de: c3:f1:0f:fe:e2:0b:2b:4b:df:04:32:9c:50:10:e0:4f:5e:c2: 7a:4b:bf:32:f5:07:5a:17:68:9c:44:16:b8:4b:95:4a:75:95: ba:59:c6:97:e7:8c:e1:e6:3e:e3:ed:7d:6a:9a:e3:7e:bf:2e: 3c:b4:04:42:40:48:06:e9:83:32:13:15:30:a5:cd:fd:8a:ed: 38:a5:cf:1f:c1:ba:96:e5:1c:66:8b:c3:98:1a:6e:33:5e:ff: 57:c2:68:54:84:3d:c3:7c:9e:ea:9f:2b:c3:18:d8:af:2a:e2: 11:f6:67:17:65:64:df:a1:9d:16:f1:36:be:6c:c2:dc:7b:bd: 30:40:50:62:1c:2e:6a:18:fe:a9:59:8f:0e:45:30:93:8a:f9: 84:11:09:9f:4f:80:82:76:e9:c6:aa:a1:07:64:bb:92:5e:55: 72:90:1b:87:a3:4b:a7:fb:b1:dd:86:a2:13:81:2c:ab:c8:a3: 5c:1f:5c:e4:0a:4b:34:6b:d5:38:2a:c9:2d:36:88:94:57:4d: 5b:30:c2:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHde0r0HYjCrWXzAx0NCfrXKN7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjA2MTMwMzUzNTJaFw0yNjA2MTQwNzQ5NTJaMDMxMTAvBgNV BAMTKDBENkJGMDY0OEQ2NEYzNjMyNjdEMUMxQzg0Q0FDMkNENTQzMUJBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkq9QTdVFzd34KVE/ayMb3yFLX EJ8yAn+3x5+S6aFIEWbKpJGlxXm3ptLrBINVVJ9Qj0rg2Xw9BadCysRdGP4UT5UL QZXL+TyfOTzEbODZ8v22ZJlqNVlp+dxNVGqg06m1CQwum5/T2qXMG6IJSBQKlnPS niqww5v0Ev1mnKsDtDr9WJR4BollKKrWLH23GSxSBq4SlUL1YzJyORojEXqexn9j UhmTrhGtWTVI5d7eoYc51CzxxyZ6Kno5FZbY09IgHB/hDMtkT3KI8Q8qfJiZv1+Y +vONYO73iSzAESP6hQaHXpQnR1Hl9KGJQjAb9RH4DrqdcHIgGfpZAP3mQXAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWvwZI1k82MmfRwchMrCzVQxuiYwHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqLYi8t6vZ7YBPst3mGkqccGpZ5ukAJ95H1 4NczajS/rCuB9dXQuKecDnZlRkfvF0XCb3713sPxD/7iCytL3wQynFAQ4E9ewnpL vzL1B1oXaJxEFrhLlUp1lbpZxpfnjOHmPuPtfWqa436/Ljy0BEJASAbpgzITFTCl zf2K7Tilzx/BupblHGaLw5gabjNe/1fCaFSEPcN8nuqfK8MY2K8q4hH2ZxdlZN+h nRbxNr5swtx7vTBAUGIcLmoY/qlZjw5FMJOK+YQRCZ9PgIJ26caqoQdku5JeVXKQ G4ejS6f7sd2GohOBLKvIo1wfXOQKSzRr1TgqyS02iJRXTVswwss= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:31 2026 by rpki-client