$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft File: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft (raw, json) Hash identifier: SAKa1Gwxb+BK1YQt2Z2SzXsU2xe3wnac+YVKuT8wKjY= Subject key identifier: 0C:1D:0F:08:A5:01:1F:A6:52:39:4A:91:92:04:C9:30:25:0B:FA:83 Authority key identifier: 2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE Certificate issuer: /CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Certificate serial: 1935FB099D4E5164DEA0857F757348FDDFAA8886 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:50:01 +0000 Manifest this update: Mon 21 Sep 2026 02:45:01 +0000 Manifest next update: Tue 22 Sep 2026 06:05:01 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: dZhfKdQv3o4ubnF31yoaIvJtkGW4D/+D/cLAtWAUEM0=) 2: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl (hash: JxJA9lvhaCsandyAFBi2HjsG6pEhDt9IQ/Py9/QpiKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:35:fb:09:9d:4e:51:64:de:a0:85:7f:75:73:48:fd:df:aa:88:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Validity Not Before: Sep 21 02:45:01 2026 GMT Not After : Sep 22 06:05:01 2026 GMT Subject: CN=0C1D0F08A5011FA652394A919204C930250BFA83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:7f:15:57:1d:37:51:64:bc:f7:80:e3:7c: 2e:20:68:db:9c:30:6e:4b:fd:1d:b5:4f:d1:11:19: 85:a3:55:ff:9e:12:77:56:d8:5a:32:4f:9f:32:c9: d0:4e:ed:ea:f9:8b:45:f5:1f:fe:4e:ba:05:3b:0e: 19:7f:d1:1f:da:e6:12:29:a2:31:8a:56:08:47:89: 5e:d8:84:b7:62:c2:a2:a5:26:b6:cc:33:1b:c1:f5: 87:ea:cd:aa:70:9c:48:1a:6e:c8:89:93:6f:59:8e: a7:05:cd:95:9d:12:79:e2:dd:6d:a5:4f:15:d0:62: 13:7f:84:e3:50:a5:d9:4a:c8:1f:34:ca:07:a9:d2: b6:79:a6:b3:7c:20:01:fd:74:7a:68:5d:70:e5:ef: 49:c3:a7:0c:e6:54:8d:9e:28:ec:df:4d:40:41:96: 64:c5:4b:e3:98:f7:bc:e2:a7:78:5b:45:a0:3e:fd: 17:86:49:ec:c2:ae:53:0e:63:aa:8d:5c:dc:b5:de: 1d:f1:77:c2:bf:18:79:46:e5:11:f0:6b:fa:8b:ff: c9:75:2b:38:e3:7b:fc:80:ac:39:4e:cf:12:00:fa: 17:ec:0a:e5:7c:73:ae:93:1a:08:b2:4b:85:0c:c7: 0c:3d:d3:1e:ff:de:16:7c:80:21:4d:88:99:40:c9: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1D:0F:08:A5:01:1F:A6:52:39:4A:91:92:04:C9:30:25:0B:FA:83 X509v3 Authority Key Identifier: keyid:2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2b:16:a0:e7:27:c9:c1:43:28:b9:f6:98:5d:3c:3d:ef:4b: 4e:81:3e:fb:83:7f:6a:87:68:ca:f4:ea:05:2d:16:72:a5:84: 80:59:7a:79:9e:28:ad:86:fc:ee:78:55:ef:b7:4e:e0:02:55: 8a:bd:96:d5:7d:52:28:c4:f7:d7:99:ae:79:69:c0:f1:91:c4: 2a:4d:da:6e:c8:b6:5c:9e:cd:87:f6:cd:b1:6c:ac:48:1f:ed: ad:97:7a:1b:a7:84:6b:88:2e:30:67:63:ff:13:18:41:2d:83: 1d:c3:98:89:89:8c:dc:b6:8b:38:a1:e7:b8:cf:c7:db:ca:34: 41:01:35:74:5c:5c:42:5a:47:db:6a:f7:d5:48:b8:a8:86:ca: 06:09:1f:3d:8d:73:3f:e5:72:08:38:56:1e:96:33:4c:9a:67: 76:90:11:14:54:a3:47:70:ab:c0:2e:c8:aa:2b:f4:29:02:f8: 43:fb:ac:30:45:1c:55:8e:66:c1:67:a7:7d:ee:d1:60:0d:0f: 3d:cb:b5:58:d6:30:d2:9a:1e:35:d6:13:03:b9:0d:ab:a8:8e: bb:85:89:c6:a5:fe:14:60:69:1c:59:55:e3:9e:0c:65:c4:71: 41:b5:a1:27:a5:e4:16:51:4e:dd:aa:6a:9e:35:f3:2b:fe:80: 77:53:45:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTX7CZ1OUWTeoIV/dXNI/d+qiIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAy ODFBNzVBRTAeFw0yNjA5MjEwMjQ1MDFaFw0yNjA5MjIwNjA1MDFaMDMxMTAvBgNV BAMTKDBDMUQwRjA4QTUwMTFGQTY1MjM5NEE5MTkyMDRDOTMwMjUwQkZBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMH8VVx03UWS894DjfC4gaNuc MG5L/R21T9ERGYWjVf+eEndW2FoyT58yydBO7er5i0X1H/5OugU7Dhl/0R/a5hIp ojGKVghHiV7YhLdiwqKlJrbMMxvB9YfqzapwnEgabsiJk29ZjqcFzZWdEnni3W2l TxXQYhN/hONQpdlKyB80ygep0rZ5prN8IAH9dHpoXXDl70nDpwzmVI2eKOzfTUBB lmTFS+OY97zip3hbRaA+/ReGSezCrlMOY6qNXNy13h3xd8K/GHlG5RHwa/qL/8l1 Kzjje/yArDlOzxIA+hfsCuV8c66TGgiyS4UMxww90x7/3hZ8gCFNiJlAyQKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDB0PCKUBH6ZSOUqRkgTJMCUL+oMwHwYDVR0j BBgwFoAUKqLCA5/3Loluzm8OPq04oCgada4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlMjdkYTktZTZlNi00NGE1LTk4ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5 RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAyODFBNzVBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUEyQzIwMzlGRjcyRTg5NkVDRTZGMEUzRUFEMzhBMDI4MUE3 NUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4 QTAyODFBNzVBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4rFqDnJ8nBQyi59phdPD3vS06BPvuDf2qH aMr06gUtFnKlhIBZenmeKK2G/O54Ve+3TuACVYq9ltV9UijE99eZrnlpwPGRxCpN 2m7ItlyezYf2zbFsrEgf7a2XehunhGuILjBnY/8TGEEtgx3DmImJjNy2izih57jP x9vKNEEBNXRcXEJaR9tq99VIuKiGygYJHz2Ncz/lcgg4Vh6WM0yaZ3aQERRUo0dw q8AuyKor9CkC+EP7rDBFHFWOZsFnp33u0WANDz3LtVjWMNKaHjXWEwO5DauojruF ical/hRgaRxZVeOeDGXEcUG1oSel5BZRTt2qap418yv+gHdTRbs= -----END CERTIFICATE-----Generated at Mon Sep 21 17:35:31 2026 by rpki-client