$ rpki-client -vvvf rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft File: 02AAB50744B5B2355B015A3152AD1101FDD80A06.mft (raw, json) Hash identifier: it8M9e1DtBSYvnSlvYukIY1p4dSv9Efv15yIKRA0vFw= Subject key identifier: 65:36:18:D2:96:77:3B:A2:80:D1:0A:44:FE:85:00:E2:B3:E7:18:0E Authority key identifier: 02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06 Certificate issuer: /CN=02AAB50744B5B2355B015A3152AD1101FDD80A06 Certificate serial: 6F32ACFBD13B73340B577EA284A4BF518FDA42BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:39:40 +0000 Manifest this update: Mon 21 Sep 2026 22:34:40 +0000 Manifest next update: Wed 23 Sep 2026 00:15:40 +0000 Files and hashes: 1: 02AAB50744B5B2355B015A3152AD1101FDD80A06.crl (hash: g4or4ZBSLRCABcib2sEOQlBDReTCUdaPvrRRZl3uZXs=) 2: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: I/xRHiSouk0qQoSEfFFc5Esrv4Bnl21g3IwAa+RLLcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:32:ac:fb:d1:3b:73:34:0b:57:7e:a2:84:a4:bf:51:8f:da:42:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AAB50744B5B2355B015A3152AD1101FDD80A06 Validity Not Before: Sep 21 22:34:40 2026 GMT Not After : Sep 23 00:15:40 2026 GMT Subject: CN=653618D296773BA280D10A44FE8500E2B3E7180E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:d0:69:c0:8c:a1:80:14:7f:12:34:18:b8: 43:db:ad:dd:38:17:96:86:f8:50:9d:95:e2:7e:2d: bf:33:4d:c3:39:b8:ce:d8:3c:49:77:45:52:ff:bb: d9:be:41:18:3f:7e:ab:34:81:ac:73:26:50:30:9a: 85:5a:0a:b9:f4:9c:e7:aa:13:30:ff:d1:34:0d:a5: b4:35:f6:89:6d:90:71:f5:07:6b:da:1e:90:fe:38: 8a:1f:7b:c2:f4:c4:43:c0:bf:2a:00:12:2f:2f:dd: dd:47:7b:f4:4c:f1:6f:3f:d7:64:50:2f:74:7c:ad: f0:a4:81:3a:41:64:4e:d1:1c:a7:25:33:9d:84:ac: b6:9e:39:8a:63:5f:b7:ba:12:f1:d9:e4:34:71:70: b3:db:bf:fb:11:5e:2b:82:b6:3b:47:99:8d:f5:64: 7c:7b:dd:d5:bd:2e:d6:ec:e8:fc:2d:48:66:69:49: a1:65:24:27:6f:32:80:45:e1:de:cb:9c:b6:9b:b9: 57:81:1e:50:1e:07:81:c7:7b:f5:cb:0d:f2:fb:ed: b4:c4:83:88:eb:8b:b8:cb:51:cd:52:a4:ad:3d:e9: 93:cf:ab:e9:35:9a:11:b4:16:63:b6:5f:fa:5d:c2: d0:65:b2:27:90:bd:b5:e7:28:d5:00:bd:51:ff:7a: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:36:18:D2:96:77:3B:A2:80:D1:0A:44:FE:85:00:E2:B3:E7:18:0E X509v3 Authority Key Identifier: keyid:02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cf:94:48:4d:e7:e0:fe:f2:8a:0c:20:70:24:01:0b:68:9f: 54:3a:4b:a0:3d:d0:6d:bb:e1:52:e2:bf:00:0d:51:85:27:2b: 66:2d:93:39:22:c8:3a:f9:b1:83:25:0f:ac:28:0b:61:b0:52: a0:e0:6d:6f:dd:63:68:ed:e9:00:58:da:02:a7:a2:08:e3:cb: 92:5b:88:27:5e:a9:2d:3e:d9:84:19:de:4b:25:a1:f7:80:77: 75:1c:da:a5:e9:3b:b1:db:8c:19:27:2d:2a:fc:d7:c2:f6:fb: e0:dc:75:b5:8d:6f:59:2a:cb:f9:2a:95:bc:6e:96:08:d8:8a: 8c:a6:01:3e:6c:ee:f9:c5:9d:d7:cf:88:d2:5d:e5:3f:bb:44: f5:18:03:82:2a:30:54:70:24:3f:ca:c7:01:c7:9f:c5:20:89: 10:32:3e:d1:84:ee:8a:83:52:58:d6:09:69:de:ef:ea:4e:2e: 8f:30:a6:b4:76:d0:c0:90:03:4c:59:bd:9c:2e:a8:f8:36:e9: 75:92:c5:f4:bb:ca:ac:65:e2:8a:7c:3b:c7:72:cf:cd:cf:97: 74:21:0d:e7:fc:ac:00:90:28:64:c5:be:ea:6a:c1:fb:10:6f: 19:08:26:c4:18:7a:65:1f:8d:51:cb:61:3a:11:d1:85:89:f7: 04:4a:a7:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzKs+9E7czQLV36ihKS/UY/aQr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQUI1MDc0NEI1QjIzNTVCMDE1QTMxNTJBRDExMDFG REQ4MEEwNjAeFw0yNjA5MjEyMjM0NDBaFw0yNjA5MjMwMDE1NDBaMDMxMTAvBgNV BAMTKDY1MzYxOEQyOTY3NzNCQTI4MEQxMEE0NEZFODUwMEUyQjNFNzE4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0tBpwIyhgBR/EjQYuEPbrd04 F5aG+FCdleJ+Lb8zTcM5uM7YPEl3RVL/u9m+QRg/fqs0gaxzJlAwmoVaCrn0nOeq EzD/0TQNpbQ19oltkHH1B2vaHpD+OIofe8L0xEPAvyoAEi8v3d1He/RM8W8/12RQ L3R8rfCkgTpBZE7RHKclM52ErLaeOYpjX7e6EvHZ5DRxcLPbv/sRXiuCtjtHmY31 ZHx73dW9Ltbs6PwtSGZpSaFlJCdvMoBF4d7LnLabuVeBHlAeB4HHe/XLDfL77bTE g4jri7jLUc1SpK096ZPPq+k1mhG0FmO2X/pdwtBlsieQvbXnKNUAvVH/ekYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZTYY0pZ3O6KA0QpE/oUA4rPnGA4wHwYDVR0j BBgwFoAUAqq1B0S1sjVbAVoxUq0RAf3YCgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5YzdjOTYtN2FiYi00NWFjLWEwY2ItZDdmZmQwOWMxODc2LzAvMDJBQUI1MDc0 NEI1QjIzNTVCMDE1QTMxNTJBRDExMDFGREQ4MEEwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkFBQjUwNzQ0QjVCMjM1NUIwMTVBMzE1MkFEMTEwMUZERDgw QTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5YzdjOTYtN2FiYi00NWFjLWEw Y2ItZDdmZmQwOWMxODc2LzAvMDJBQUI1MDc0NEI1QjIzNTVCMDE1QTMxNTJBRDEx MDFGREQ4MEEwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXPlEhN5+D+8ooMIHAkAQton1Q6S6A90G27 4VLivwANUYUnK2YtkzkiyDr5sYMlD6woC2GwUqDgbW/dY2jt6QBY2gKnogjjy5Jb iCdeqS0+2YQZ3kslofeAd3Uc2qXpO7HbjBknLSr818L2++DcdbWNb1kqy/kqlbxu lgjYioymAT5s7vnFndfPiNJd5T+7RPUYA4IqMFRwJD/KxwHHn8UgiRAyPtGE7oqD UljWCWne7+pOLo8wprR20MCQA0xZvZwuqPg26XWSxfS7yqxl4op8O8dyz83Pl3Qh Def8rACQKGTFvupqwfsQbxkIJsQYemUfjVHLYToR0YWJ9wRKp5Y= -----END CERTIFICATE-----Generated at Tue Sep 22 06:01:22 2026 by rpki-client