$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft File: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json) Hash identifier: bPRNO4043DmJOBwNcHZLQWKgAMpSardNAb4z7w3L7Do= Subject key identifier: 91:D5:C7:1C:72:41:FE:A4:21:CF:6A:BF:9B:6F:01:81:68:F5:8F:2D Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Certificate serial: 3E6E8E71F484810125D4651DF1EC4EFEC7698EFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:52:36 +0000 Manifest this update: Mon 21 Sep 2026 00:47:36 +0000 Manifest next update: Tue 22 Sep 2026 01:14:36 +0000 Files and hashes: 1: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=) 2: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: icasXpiFS9QVCdUZtebYhLqtXAtIe4E5RV0KWybJpZ4=) 3: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=) 4: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=) 5: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=) 6: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=) 7: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=) 8: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=) 9: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=) 10: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=) 11: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=) 12: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=) 13: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6e:8e:71:f4:84:81:01:25:d4:65:1d:f1:ec:4e:fe:c7:69:8e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A Validity Not Before: Sep 21 00:47:36 2026 GMT Not After : Sep 22 01:14:36 2026 GMT Subject: CN=91D5C71C7241FEA421CF6ABF9B6F018168F58F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:88:6e:a7:05:61:e0:10:f6:49:57:0a:81: df:10:bf:d6:03:2b:c2:5f:5e:a2:c6:0d:0d:74:b1: 90:e7:75:ba:55:e1:85:01:71:24:3f:7b:86:d1:71: f5:0a:b3:01:25:f3:6e:14:29:3c:89:08:91:31:54: 4d:ca:06:40:47:06:51:58:3e:d5:a9:45:05:41:22: 3f:0a:b1:aa:f5:1b:ea:a7:63:2a:30:2c:ca:bf:8e: e8:94:04:66:f8:18:58:bd:ee:48:fb:84:1e:85:fe: 38:d3:d4:57:91:56:7d:03:05:c9:a6:a9:08:f8:10: e7:32:01:71:b3:67:b6:28:05:cc:8b:38:94:d0:ee: 6f:d8:0c:fb:0b:b7:54:41:eb:50:a1:31:4c:95:ac: 7d:73:f6:cd:7e:06:d6:27:85:28:1b:7c:57:24:3c: 52:ca:20:45:03:f9:0e:da:45:3c:8b:6a:6f:7a:d8: 1c:21:4d:24:3e:d9:55:76:50:74:52:c9:f5:a5:a3: 9e:39:45:68:21:30:b3:2d:6d:fb:66:df:8c:9d:74: 11:e8:c6:99:b1:5f:2f:ea:6d:72:93:9b:37:09:cd: 82:e2:6c:1a:8e:5c:f5:a7:c6:30:71:44:5d:c8:5d: 41:ec:e9:71:e5:30:a6:14:46:33:d4:d6:5a:bf:68: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D5:C7:1C:72:41:FE:A4:21:CF:6A:BF:9B:6F:01:81:68:F5:8F:2D X509v3 Authority Key Identifier: keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b0:21:98:78:ce:d2:46:41:2d:66:97:de:c6:98:44:96:9b: ce:58:66:ee:d8:11:87:ed:fd:07:cf:ab:43:b2:35:23:a1:55: 10:b3:6d:a5:63:42:7a:3e:21:f2:ab:fb:13:80:60:65:c3:47: ea:31:f7:57:4a:67:83:34:b1:4a:91:9c:cc:8e:ab:b9:7f:86: a2:96:4f:b9:82:1e:94:6c:6b:62:3d:9a:d9:4b:c6:81:cf:8e: 3e:ac:30:e0:a1:70:c3:1b:3b:37:d2:c3:82:7b:75:9a:ef:4d: 3a:42:a8:35:7d:63:ef:0a:58:e3:e6:db:a9:a6:45:fc:47:13: 0a:69:b3:d9:9f:d8:6a:a8:a8:81:4a:75:d5:a5:b1:fd:8f:0b: 3a:eb:57:b7:23:10:c9:ef:64:81:91:dc:4b:df:e5:ec:3a:43: ee:cb:5b:19:c8:a2:6b:60:11:59:bc:79:23:2a:ab:db:28:21: ae:2f:83:2f:e1:bc:fa:e1:26:ad:1e:e4:34:83:16:96:65:ba: 7c:4e:b8:36:25:19:b9:da:7c:68:3b:d2:bd:c0:d6:41:75:a6: 66:1d:0b:19:cb:c0:4e:48:d4:c7:39:e9:eb:e1:b9:89:da:1f: 19:b9:9f:ea:f9:42:da:64:77:76:27:e2:1c:cf:9f:fe:3d:6d: 9a:9a:0a:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPm6OcfSEgQEl1GUd8exO/sdpjv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZG NkJDOTU4QTAeFw0yNjA5MjEwMDQ3MzZaFw0yNjA5MjIwMTE0MzZaMDMxMTAvBgNV BAMTKDkxRDVDNzFDNzI0MUZFQTQyMUNGNkFCRjlCNkYwMTgxNjhGNThGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvYhupwVh4BD2SVcKgd8Qv9YD K8JfXqLGDQ10sZDndbpV4YUBcSQ/e4bRcfUKswEl824UKTyJCJExVE3KBkBHBlFY PtWpRQVBIj8Ksar1G+qnYyowLMq/juiUBGb4GFi97kj7hB6F/jjT1FeRVn0DBcmm qQj4EOcyAXGzZ7YoBcyLOJTQ7m/YDPsLt1RB61ChMUyVrH1z9s1+BtYnhSgbfFck PFLKIEUD+Q7aRTyLam962BwhTSQ+2VV2UHRSyfWlo545RWghMLMtbftm34yddBHo xpmxXy/qbXKTmzcJzYLibBqOXPWnxjBxRF3IXUHs6XHlMKYURjPU1lq/aKtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdXHHHJB/qQhz2q/m28BgWj1jy0wHwYDVR0j BBgwFoAUqn6D3nQ1q3it5hN7Hqz9xva8lYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MTlhZWItNWM1Ni00Y2IzLTk0YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3 NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZGNkJDOTU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTdFODNERTc0MzVBQjc4QURFNjEzN0IxRUFDRkRDNkY2QkM5 NThBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZE QzZGNkJDOTU4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKwIZh4ztJGQS1ml97GmESWm85YZu7YEYft /QfPq0OyNSOhVRCzbaVjQno+IfKr+xOAYGXDR+ox91dKZ4M0sUqRnMyOq7l/hqKW T7mCHpRsa2I9mtlLxoHPjj6sMOChcMMbOzfSw4J7dZrvTTpCqDV9Y+8KWOPm26mm RfxHEwpps9mf2GqoqIFKddWlsf2PCzrrV7cjEMnvZIGR3Evf5ew6Q+7LWxnIomtg EVm8eSMqq9soIa4vgy/hvPrhJq0e5DSDFpZlunxOuDYlGbnafGg70r3A1kF1pmYd CxnLwE5I1Mc56evhuYnaHxm5n+r5Qtpkd3Yn4hzPn/49bZqaCk8= -----END CERTIFICATE-----Generated at Mon Sep 21 14:28:02 2026 by rpki-client