$ rpki-client -vvf rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft File: AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft (raw, json) Hash identifier: CfZwgJRg1ivqZbDGWdtJ7MuU8d7ZLt83D2SMkOFa4iw= Subject key identifier: 97:62:84:BB:24:31:AD:39:87:09:F4:BB:09:56:06:CF:F1:DA:0A:2A Authority key identifier: AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F Certificate issuer: /CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Certificate serial: 01EB1E4BF39AD1A75A4D0B64C264E459BE0DB555 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:12:37 +0000 Manifest this update: Tue 16 Jun 2026 15:07:37 +0000 Manifest next update: Wed 17 Jun 2026 17:35:37 +0000 Files and hashes: 1: AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl (hash: x2JgGCKFZ0qZI2Z+LMYeEI2nXX03ecGQ2Vr2WrSbbQE=) 2: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: ewfsYYBTx06fI9ZJBdkWQ9OcyfPFI+ANp/78GnZ38BE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:eb:1e:4b:f3:9a:d1:a7:5a:4d:0b:64:c2:64:e4:59:be:0d:b5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Validity Not Before: Jun 16 15:07:37 2026 GMT Not After : Jun 17 17:35:37 2026 GMT Subject: CN=976284BB2431AD398709F4BB095606CFF1DA0A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:2a:e8:f6:60:99:ca:d1:02:15:ca:25:02: a2:83:0d:f9:8b:ea:ad:d3:08:97:40:f2:cf:a1:58: cd:01:cb:a8:84:78:33:3d:8c:2a:d5:6d:65:ba:35: 47:45:f8:1d:77:ac:1a:00:10:95:e6:27:73:df:dc: 1b:92:0e:6a:e9:a1:cf:d4:90:7b:a1:0c:b7:9d:5e: 14:f4:0b:ac:85:11:45:91:b3:67:18:d7:e0:7d:68: 37:fd:0e:a8:3f:fe:97:e6:18:55:ce:ba:35:e9:15: a2:47:0f:76:bf:31:8a:b5:06:c8:5b:56:48:c5:4b: ad:a5:ce:7c:39:15:cb:8c:13:d7:d8:9e:44:3a:e3: ed:26:39:54:2d:67:0c:3e:65:1a:14:05:ab:0d:a5: 77:21:86:53:f0:c9:10:60:d1:3d:f4:0c:40:e6:d5: 2d:a2:ec:aa:da:94:aa:99:48:96:47:7a:05:e2:8d: bb:f3:fa:90:b4:85:e6:17:1a:62:97:0b:a6:c1:51: b6:f6:3a:7a:9f:0b:1c:e6:66:b9:81:9f:53:34:d7: c5:12:60:62:68:cc:ce:18:06:3c:41:2c:7e:04:a5: fa:94:c3:97:3b:c2:54:43:b2:aa:a0:93:68:0b:10: 4b:61:16:49:9c:ce:f2:55:cd:af:91:f2:8f:b1:d1: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:84:BB:24:31:AD:39:87:09:F4:BB:09:56:06:CF:F1:DA:0A:2A X509v3 Authority Key Identifier: keyid:AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:11:70:bb:4a:72:79:8b:42:cf:9e:00:af:c0:83:ef:54:9f: de:82:f2:b5:72:f6:8e:90:b4:35:f1:0c:81:41:b8:7c:ac:36: 1d:10:25:13:61:c0:f6:ce:2f:fd:97:7c:62:5b:8e:91:53:84: 85:41:37:b9:67:d2:f3:52:5d:f7:68:d2:3b:83:93:66:ba:c4: b0:91:11:ad:c5:21:20:48:5a:b2:3f:4e:53:08:8b:1b:2b:01: b9:b3:f2:d6:b2:62:e0:23:f0:b9:13:5a:b7:94:91:ac:c1:a6: 18:c8:6f:9a:60:a9:bc:5b:8b:b8:c9:72:01:1d:4d:f4:c5:60: 4d:ab:b7:f7:1f:80:3c:a2:8c:e7:14:21:11:f5:e8:61:71:b0: f3:97:6c:24:d0:0a:5d:f3:2f:c9:cd:e8:32:c3:70:8d:2f:83: 7a:44:0e:ec:3b:b0:70:3f:ad:e1:f7:c4:9f:8b:66:ab:df:f2: b1:0a:26:1e:f1:9d:03:69:75:ff:e5:46:07:97:a5:c8:33:f7: bc:e1:43:0b:94:31:89:d6:7b:9a:91:fa:31:ad:cd:bc:4e:d3: 82:93:13:cf:b4:8e:b3:8d:19:f4:d4:3b:ec:52:0a:10:90:a7: a9:85:d2:ca:16:8d:71:07:a5:64:68:7d:50:5d:43:bd:55:95: 9e:16:31:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAeseS/Oa0adaTQtkwmTkWb4NtVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRG QTNFRTgzRjAeFw0yNjA2MTYxNTA3MzdaFw0yNjA2MTcxNzM1MzdaMDMxMTAvBgNV BAMTKDk3NjI4NEJCMjQzMUFEMzk4NzA5RjRCQjA5NTYwNkNGRjFEQTBBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiyro9mCZytECFcolAqKDDfmL 6q3TCJdA8s+hWM0By6iEeDM9jCrVbWW6NUdF+B13rBoAEJXmJ3Pf3BuSDmrpoc/U kHuhDLedXhT0C6yFEUWRs2cY1+B9aDf9Dqg//pfmGFXOujXpFaJHD3a/MYq1Bshb VkjFS62lznw5FcuME9fYnkQ64+0mOVQtZww+ZRoUBasNpXchhlPwyRBg0T30DEDm 1S2i7KralKqZSJZHegXijbvz+pC0heYXGmKXC6bBUbb2OnqfCxzmZrmBn1M018US YGJozM4YBjxBLH4EpfqUw5c7wlRDsqqgk2gLEEthFkmczvJVza+R8o+x0dVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl2KEuyQxrTmHCfS7CVYGz/HaCiowHwYDVR0j BBgwFoAUqo1mQ3pA1MtwN9BZ/mkhRPo+6D8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI3YjExYzItYWI5MC00MjBmLWI0OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3 QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRGQTNFRTgzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQThENjY0MzdBNDBENENCNzAzN0QwNTlGRTY5MjE0NEZBM0VF ODNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIx NDRGQTNFRTgzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYRcLtKcnmLQs+eAK/Ag+9Un96C8rVy9o6Q tDXxDIFBuHysNh0QJRNhwPbOL/2XfGJbjpFThIVBN7ln0vNSXfdo0juDk2a6xLCR Ea3FISBIWrI/TlMIixsrAbmz8tayYuAj8LkTWreUkazBphjIb5pgqbxbi7jJcgEd TfTFYE2rt/cfgDyijOcUIRH16GFxsPOXbCTQCl3zL8nN6DLDcI0vg3pEDuw7sHA/ reH3xJ+LZqvf8rEKJh7xnQNpdf/lRgeXpcgz97zhQwuUMYnWe5qR+jGtzbxO04KT E8+0jrONGfTUO+xSChCQp6mF0soWjXEHpWRofVBdQ71VlZ4WMbM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:15 2026 by rpki-client