$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft File: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft (raw, json) Hash identifier: 5XXimF/hI1NN7+6lW9/2IYUMA6rHi3YrHJAeFv1ZBLo= Subject key identifier: 3B:0B:69:5A:DF:EE:AE:FA:27:9B:58:4D:51:BD:7B:EC:D1:81:95:65 Authority key identifier: 2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE Certificate issuer: /CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Certificate serial: 0AB50FEE5D52A85EFBF9468469173B603164DF17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft Manifest number: FF Signing time: Tue 10 Nov 2026 04:36:46 +0000 Manifest this update: Tue 10 Nov 2026 04:31:46 +0000 Manifest next update: Wed 11 Nov 2026 06:34:46 +0000 Files and hashes: 1: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl (hash: qOuQuBndGSelgbbzsyPX/Zcu8U+UP89219shzjFUXn8=) 2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: dZhfKdQv3o4ubnF31yoaIvJtkGW4D/+D/cLAtWAUEM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 06:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b5:0f:ee:5d:52:a8:5e:fb:f9:46:84:69:17:3b:60:31:64:df:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Validity Not Before: Nov 10 04:31:46 2026 GMT Not After : Nov 11 06:34:46 2026 GMT Subject: CN=3B0B695ADFEEAEFA279B584D51BD7BECD1819565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:28:4f:95:91:fe:b0:35:fb:eb:9f:02:d6: 95:de:64:cf:38:fc:90:bc:90:64:16:cb:9d:86:b0: 4b:0e:2b:e1:9b:aa:66:6e:cd:81:15:25:32:4f:d1: 1c:4b:da:85:d5:99:30:5b:0e:b0:d6:1f:fa:bf:3f: 3f:ec:53:d6:40:23:88:a2:d8:ca:e3:d8:a0:0a:20: 92:0c:d5:6e:3e:48:5c:df:f3:d1:d0:aa:27:03:01: a2:aa:f7:4e:76:70:1e:b9:72:c3:0e:e1:08:34:dd: 37:be:c4:a1:1e:86:9d:eb:6c:25:f8:52:95:84:f0: 00:59:4a:ea:ee:c0:2c:98:81:3e:9c:72:12:90:be: 16:cd:79:c0:6e:7a:d2:89:90:8f:d0:fc:1a:64:c4: c9:19:5a:7f:46:b4:a9:99:30:55:ee:b3:00:97:65: c6:ad:8f:27:72:a1:29:dc:c6:15:68:4d:1c:52:58: dd:6e:14:98:1a:57:a6:fe:04:90:49:fc:36:4f:47: 12:fa:d7:0d:b8:99:d6:ed:f9:e8:03:7e:8d:d6:6d: 11:1a:7c:82:57:fc:1a:08:94:72:82:69:7a:b8:65: 0b:53:11:53:3b:5c:a8:4d:41:d0:0a:8e:a3:f3:d6: 90:84:be:9d:5a:fd:12:1b:b3:ee:ea:0d:42:41:f6: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0B:69:5A:DF:EE:AE:FA:27:9B:58:4D:51:BD:7B:EC:D1:81:95:65 X509v3 Authority Key Identifier: keyid:2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:86:ec:b4:6c:75:27:15:5e:6f:46:d0:1e:2d:eb:4f:bc:94: 44:4a:77:94:58:06:67:59:8c:58:4f:ca:6c:52:c7:4b:25:14: ab:a3:d4:a7:59:61:9c:4c:82:df:08:5b:a3:c4:dd:a9:db:91: 36:09:5f:0a:bc:b1:87:93:bb:51:13:74:9b:c1:cd:35:c7:25: be:d6:5e:af:34:8d:25:e4:d0:bf:3a:94:1e:fb:ff:eb:14:6d: 8c:eb:9f:59:3d:64:29:a5:2b:55:49:49:6c:ce:5f:64:fd:ed: 31:15:3a:64:f5:20:fc:80:c4:1b:a6:49:37:4a:36:4d:d9:ae: 63:e7:c2:66:84:de:cf:3c:dd:be:9c:8f:88:c8:7f:7a:b4:31: de:85:da:34:09:41:ea:b1:33:e8:a1:4c:bf:ce:28:f4:06:a2: 80:dc:8e:2e:80:76:8d:a1:21:bc:68:59:95:67:18:f6:e6:b3: ae:70:11:aa:d3:c3:b0:b6:dc:ec:70:75:f8:f0:e5:a1:8f:e9: 97:9b:c8:4c:00:85:5e:5e:13:ed:a3:12:df:59:dc:27:b2:18: 27:a9:8e:2f:f8:93:7e:f6:69:74:33:29:36:de:10:9e:b7:be: 93:10:1c:66:e6:fc:7c:ef:17:22:d3:c2:7d:c2:82:ff:d3:fc: c0:64:23:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrUP7l1SqF77+UaEaRc7YDFk3xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAy ODFBNzVBRTAeFw0yNjExMTAwNDMxNDZaFw0yNjExMTEwNjM0NDZaMDMxMTAvBgNV BAMTKDNCMEI2OTVBREZFRUFFRkEyNzlCNTg0RDUxQkQ3QkVDRDE4MTk1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYihPlZH+sDX7658C1pXeZM84 /JC8kGQWy52GsEsOK+GbqmZuzYEVJTJP0RxL2oXVmTBbDrDWH/q/Pz/sU9ZAI4ii 2Mrj2KAKIJIM1W4+SFzf89HQqicDAaKq9052cB65csMO4Qg03Te+xKEehp3rbCX4 UpWE8ABZSuruwCyYgT6cchKQvhbNecBuetKJkI/Q/BpkxMkZWn9GtKmZMFXuswCX ZcatjydyoSncxhVoTRxSWN1uFJgaV6b+BJBJ/DZPRxL61w24mdbt+egDfo3WbREa fIJX/BoIlHKCaXq4ZQtTEVM7XKhNQdAKjqPz1pCEvp1a/RIbs+7qDUJB9ruRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwtpWt/urvonm1hNUb177NGBlWUwHwYDVR0j BBgwFoAUKqLCA5/3Loluzm8OPq04oCgada4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlMjdkYTktZTZlNi00NGE1LTk4ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5 RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAyODFBNzVBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUEyQzIwMzlGRjcyRTg5NkVDRTZGMEUzRUFEMzhBMDI4MUE3 NUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4 QTAyODFBNzVBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWG7LRsdScVXm9G0B4t60+8lERKd5RYBmdZ jFhPymxSx0slFKuj1KdZYZxMgt8IW6PE3anbkTYJXwq8sYeTu1ETdJvBzTXHJb7W Xq80jSXk0L86lB77/+sUbYzrn1k9ZCmlK1VJSWzOX2T97TEVOmT1IPyAxBumSTdK Nk3ZrmPnwmaE3s883b6cj4jIf3q0Md6F2jQJQeqxM+ihTL/OKPQGooDcji6Ado2h IbxoWZVnGPbms65wEarTw7C23Oxwdfjw5aGP6ZebyEwAhV5eE+2jEt9Z3CeyGCep ji/4k372aXQzKTbeEJ63vpMQHGbm/HzvFyLTwn3Cgv/T/MBkI6w= -----END CERTIFICATE-----Generated at Tue Nov 10 20:41:04 2026 by rpki-client