$ rpki-client -vvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: jUpGwQq9vJhtEwAM4S68sGBMldtNRMTOY6J65qi3QZE= Subject key identifier: 45:BD:7D:BE:AC:0C:74:93:D3:67:16:64:34:C4:83:32:CD:8E:7C:FB Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 5982AEEB255E9E316D8149BE3AF00D1E404D6B06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 03:04:52 +0000 Manifest this update: Wed 29 Jul 2026 02:59:52 +0000 Manifest next update: Thu 30 Jul 2026 05:51:52 +0000 Files and hashes: 1: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: uP09mtpbye8FlNNolCZ9BkXOhegpknn7dChpRY1dMEE=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:82:ae:eb:25:5e:9e:31:6d:81:49:be:3a:f0:0d:1e:40:4d:6b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Jul 29 02:59:52 2026 GMT Not After : Jul 30 05:51:52 2026 GMT Subject: CN=45BD7DBEAC0C7493D367166434C48332CD8E7CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:9e:70:df:a8:74:83:7b:2a:4c:27:c1:7c: 2a:09:91:c9:93:b3:39:8a:fc:87:af:30:bc:cc:aa: 82:67:62:53:65:a3:bc:e0:e1:34:29:21:12:26:9a: ee:52:f4:b0:aa:01:3c:37:15:f6:d0:ce:9a:9b:34: 14:34:23:ee:f0:a6:cd:9e:25:02:b0:28:b8:f9:9a: 98:39:ab:60:54:8c:2a:82:10:c5:78:6b:0b:97:00: 8f:2e:da:35:94:68:4c:80:6b:7d:62:76:d4:78:0c: 40:77:24:00:36:db:23:b5:ea:25:0b:8f:81:a1:3e: 64:64:06:cb:e5:f2:a5:b8:9e:9a:ea:45:2f:12:62: 36:30:46:2d:6a:c8:11:33:e6:cf:0b:a3:4b:e8:32: b5:50:c1:c3:be:46:5c:7d:5c:5e:0a:93:25:96:3d: 40:b7:b5:d6:35:f7:7d:e6:47:91:f8:8d:22:8e:8c: 3e:c5:f9:28:06:f6:bf:99:37:54:e0:27:2b:3e:b9: 2f:fe:47:78:2b:b7:47:54:34:25:d1:d3:95:7c:f5: 72:5d:09:1f:df:16:83:29:d0:d9:79:e9:83:e8:4e: 2d:44:3d:3b:58:23:0d:31:a9:85:e5:ad:30:35:96: 9e:6c:f1:38:8e:26:93:e8:30:86:1c:8e:7e:e5:24: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BD:7D:BE:AC:0C:74:93:D3:67:16:64:34:C4:83:32:CD:8E:7C:FB X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:44:e5:82:c4:0d:95:26:97:24:21:89:a2:18:da:47:ab:ce: 33:46:0d:84:64:04:9e:d0:db:d3:38:c3:6c:97:78:e9:c4:ea: 0e:ab:55:98:92:2f:18:3a:61:d6:bb:2f:11:c7:23:4b:4e:93: c7:d6:67:14:2d:ae:c6:d2:a0:3c:e6:a6:36:fb:71:96:82:8e: 0f:c1:3d:43:1f:5e:f8:2b:2e:de:11:0e:1a:22:8e:61:f1:1c: f0:ae:af:a2:8a:e1:24:85:a3:3e:c5:a9:06:b5:06:ef:82:48: 5c:a8:bf:e6:fe:13:82:4b:a6:f8:c0:50:27:58:51:0b:bc:ca: 24:8c:fa:87:f1:8e:ba:ba:68:7d:70:cd:34:5b:6a:ff:a8:00: c9:39:95:56:ef:b0:d3:46:68:57:a8:7b:16:d1:c8:d0:c2:45: ef:91:cf:b8:10:d4:3b:95:b7:e8:aa:be:a4:6b:03:81:13:98: e2:d9:79:b1:9d:22:74:9f:1d:df:cf:cf:96:63:40:26:21:f3: cb:e2:d1:dc:c6:ce:5a:da:70:18:21:e4:2a:fa:1a:98:90:42: 25:82:70:68:ae:ed:6b:8a:6d:62:14:71:20:d1:6c:1a:02:c3: 7a:5c:bf:bf:c1:32:bd:91:2c:ed:d9:b7:db:ee:73:21:d1:25: ff:84:8b:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYKu6yVenjFtgUm+OvANHkBNawYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjA3MjkwMjU5NTJaFw0yNjA3MzAwNTUxNTJaMDMxMTAvBgNV BAMTKDQ1QkQ3REJFQUMwQzc0OTNEMzY3MTY2NDM0QzQ4MzMyQ0Q4RTdDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIZ5w36h0g3sqTCfBfCoJkcmT szmK/IevMLzMqoJnYlNlo7zg4TQpIRImmu5S9LCqATw3FfbQzpqbNBQ0I+7wps2e JQKwKLj5mpg5q2BUjCqCEMV4awuXAI8u2jWUaEyAa31idtR4DEB3JAA22yO16iUL j4GhPmRkBsvl8qW4nprqRS8SYjYwRi1qyBEz5s8Lo0voMrVQwcO+Rlx9XF4KkyWW PUC3tdY1933mR5H4jSKOjD7F+SgG9r+ZN1TgJys+uS/+R3grt0dUNCXR05V89XJd CR/fFoMp0Nl56YPoTi1EPTtYIw0xqYXlrTA1lp5s8TiOJpPoMIYcjn7lJAXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURb19vqwMdJPTZxZkNMSDMs2OfPswHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZE5YLEDZUmlyQhiaIY2kerzjNGDYRkBJ7Q 29M4w2yXeOnE6g6rVZiSLxg6Yda7LxHHI0tOk8fWZxQtrsbSoDzmpjb7cZaCjg/B PUMfXvgrLt4RDhoijmHxHPCur6KK4SSFoz7FqQa1Bu+CSFyov+b+E4JLpvjAUCdY UQu8yiSM+ofxjrq6aH1wzTRbav+oAMk5lVbvsNNGaFeoexbRyNDCRe+Rz7gQ1DuV t+iqvqRrA4ETmOLZebGdInSfHd/Pz5ZjQCYh88vi0dzGzlracBgh5Cr6GpiQQiWC cGiu7WuKbWIUcSDRbBoCw3pcv7/BMr2RLO3Zt9vucyHRJf+EizQ= -----END CERTIFICATE-----Generated at Wed Jul 29 13:10:18 2026 by rpki-client