$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft File: AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft (raw, json) Hash identifier: EGeks7HKoEwBo5yM8OKDO2BZNpFgxKB990ZU2kQLBkk= Subject key identifier: 52:E2:D1:FF:01:D9:72:B4:FE:66:A7:50:1A:83:CD:D4:26:4E:9D:BE Authority key identifier: AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F Certificate issuer: /CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Certificate serial: 691511D9B0153050BD6930ABF5E081C4E4B9077A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft Manifest number: BC Signing time: Sun 20 Sep 2026 06:30:08 +0000 Manifest this update: Sun 20 Sep 2026 06:25:08 +0000 Manifest next update: Mon 21 Sep 2026 09:21:08 +0000 Files and hashes: 1: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: ewfsYYBTx06fI9ZJBdkWQ9OcyfPFI+ANp/78GnZ38BE=) 2: AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl (hash: 6C5D9u1ACIpLjGLJ4LzX5b1mYHbSRDGCvhyn63B/Epg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:15:11:d9:b0:15:30:50:bd:69:30:ab:f5:e0:81:c4:e4:b9:07:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Validity Not Before: Sep 20 06:25:08 2026 GMT Not After : Sep 21 09:21:08 2026 GMT Subject: CN=52E2D1FF01D972B4FE66A7501A83CDD4264E9DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:fe:93:90:19:72:f8:a2:3c:e7:49:8d:69: 90:c0:ed:7f:27:62:01:f1:c2:38:92:5b:8f:78:f7: 53:79:0d:b5:d4:c9:47:ec:21:ba:3f:d5:31:e3:9d: 60:64:82:c8:a2:5f:cb:40:a0:1b:07:c6:80:43:56: c5:4d:06:7f:cf:92:e0:d3:e7:16:0e:e7:fe:52:75: 1d:c1:34:cb:a1:3d:61:b7:26:26:a8:d2:ca:12:22: 3d:ef:bc:2e:88:d7:1c:0c:87:06:1c:3e:1e:4e:6d: 0f:9b:33:17:fd:e9:a4:2c:41:fc:f0:4f:64:14:85: e7:ae:ba:98:05:97:b3:8d:04:74:6e:5b:3e:ff:e4: 5e:ec:3d:46:12:89:51:8e:6e:2f:44:20:7f:8f:14: 93:e9:5a:f9:d8:b7:a9:5a:ae:f8:b5:70:c4:9d:77: 9c:c3:c5:5b:de:e9:7c:d2:28:5f:2b:76:5a:cf:90: d3:a5:13:67:e3:0f:04:31:83:50:6d:b4:14:2b:59: 39:ed:87:1b:0a:a6:bf:05:1c:d2:43:a8:15:9f:da: b2:73:2e:92:60:ea:d3:53:6b:88:ac:17:27:94:6e: 67:e0:67:a6:0f:41:da:db:2e:73:8b:be:f9:32:cc: ca:f7:bf:ed:19:55:ef:1e:7a:7b:7d:e3:4c:c0:c4: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E2:D1:FF:01:D9:72:B4:FE:66:A7:50:1A:83:CD:D4:26:4E:9D:BE X509v3 Authority Key Identifier: keyid:AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:df:6b:fa:e5:d1:12:1b:68:b3:40:6c:4f:74:10:5a:1a:4a: 9f:93:3a:ab:21:55:9c:4e:8f:db:2d:c7:b2:f8:b0:e0:7b:c7: 7f:22:60:90:e1:82:2a:0a:ec:51:a2:3f:0d:67:45:80:37:ef: 28:03:ed:8e:df:35:fb:54:18:e1:20:6f:bf:23:d5:67:82:77: d3:95:ca:a4:be:d4:db:28:a5:d2:88:ff:0f:b4:67:ab:e0:53: 5c:f0:6c:70:e6:01:29:15:17:c6:39:f8:60:b8:e2:0e:49:6d: 1d:c6:ea:9e:d5:5a:ca:e9:81:9e:02:96:c8:ed:04:97:c4:41: b4:54:89:1a:39:5d:df:39:16:7b:78:16:73:66:c6:5a:11:48: ac:4b:86:4b:93:80:9b:6a:43:dc:6e:63:f3:4a:f5:57:49:9a: 88:b2:cb:c4:a7:34:da:36:e8:ff:61:71:64:07:02:c9:63:1a: d9:44:e1:3e:72:bc:58:d6:34:6b:67:59:71:ad:c2:37:c0:a9: 6c:54:4d:01:ff:3f:f1:cb:31:e1:88:dd:ae:05:d3:66:da:c9: 0b:08:98:03:e0:2a:07:6a:a5:2b:eb:78:4c:be:fe:6a:3e:f1: 7e:60:9b:40:bf:4c:d7:e7:80:c4:35:d5:04:38:54:22:b6:57: 40:51:29:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaRUR2bAVMFC9aTCr9eCBxOS5B3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRG QTNFRTgzRjAeFw0yNjA5MjAwNjI1MDhaFw0yNjA5MjEwOTIxMDhaMDMxMTAvBgNV BAMTKDUyRTJEMUZGMDFEOTcyQjRGRTY2QTc1MDFBODNDREQ0MjY0RTlEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ9f6TkBly+KI850mNaZDA7X8n YgHxwjiSW49491N5DbXUyUfsIbo/1THjnWBkgsiiX8tAoBsHxoBDVsVNBn/PkuDT 5xYO5/5SdR3BNMuhPWG3Jiao0soSIj3vvC6I1xwMhwYcPh5ObQ+bMxf96aQsQfzw T2QUheeuupgFl7ONBHRuWz7/5F7sPUYSiVGObi9EIH+PFJPpWvnYt6larvi1cMSd d5zDxVve6XzSKF8rdlrPkNOlE2fjDwQxg1BttBQrWTnthxsKpr8FHNJDqBWf2rJz LpJg6tNTa4isFyeUbmfgZ6YPQdrbLnOLvvkyzMr3v+0ZVe8eent940zAxMsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuLR/wHZcrT+ZqdQGoPN1CZOnb4wHwYDVR0j BBgwFoAUqo1mQ3pA1MtwN9BZ/mkhRPo+6D8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI3YjExYzItYWI5MC00MjBmLWI0OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3 QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRGQTNFRTgzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQThENjY0MzdBNDBENENCNzAzN0QwNTlGRTY5MjE0NEZBM0VF ODNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIx NDRGQTNFRTgzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/fa/rl0RIbaLNAbE90EFoaSp+TOqshVZxO j9stx7L4sOB7x38iYJDhgioK7FGiPw1nRYA37ygD7Y7fNftUGOEgb78j1WeCd9OV yqS+1NsopdKI/w+0Z6vgU1zwbHDmASkVF8Y5+GC44g5JbR3G6p7VWsrpgZ4Clsjt BJfEQbRUiRo5Xd85Fnt4FnNmxloRSKxLhkuTgJtqQ9xuY/NK9VdJmoiyy8SnNNo2 6P9hcWQHAsljGtlE4T5yvFjWNGtnWXGtwjfAqWxUTQH/P/HLMeGI3a4F02bayQsI mAPgKgdqpSvreEy+/mo+8X5gm0C/TNfngMQ11QQ4VCK2V0BRKQg= -----END CERTIFICATE-----Generated at Mon Sep 21 03:36:41 2026 by rpki-client