$ rpki-client -vvf rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft File: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft (raw, json) Hash identifier: HLijxgF14/PH5E9GvHmf4mZEkv2uN68qop+asHYnG4g= Subject key identifier: E9:03:AF:10:DD:58:6E:90:62:89:FC:51:DA:2D:67:BF:F1:C7:23:2F Authority key identifier: AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F Certificate issuer: /CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Certificate serial: 45F26F7D9050CE4F7119075E91AC68BB264C6C38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 03:48:42 +0000 Manifest this update: Sat 13 Jun 2026 03:43:42 +0000 Manifest next update: Sun 14 Jun 2026 04:05:42 +0000 Files and hashes: 1: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl (hash: /AVZH71cH/Rg3ugTNIIbcWghx1wWMqkxxUk02xrRXKM=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: CU3XMv/aCTAU0lNSmPec78wDsAVLMqlo9Sb+WUKv5ZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 04:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f2:6f:7d:90:50:ce:4f:71:19:07:5e:91:ac:68:bb:26:4c:6c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Validity Not Before: Jun 13 03:43:42 2026 GMT Not After : Jun 14 04:05:42 2026 GMT Subject: CN=E903AF10DD586E906289FC51DA2D67BFF1C7232F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:5f:6c:c7:c0:70:ca:4f:c2:7e:ec:9a:d3: d4:0c:10:4e:a6:cf:42:84:1f:8b:02:38:47:b9:9c: 75:d6:bb:20:89:47:e5:a0:f5:75:fe:6f:14:fa:87: 37:c7:19:59:ba:39:5a:35:e3:39:07:57:7f:98:43: 40:41:99:4b:42:be:d7:91:5f:cd:d9:55:fb:c9:96: 25:81:fd:77:f7:f1:2a:a3:dc:dd:1d:8e:38:53:b0: 98:05:24:b6:bf:39:1b:45:a7:a6:1e:e4:05:ba:73: e7:24:08:7d:8d:44:90:5a:8c:a9:cb:bf:39:0d:a0: 21:e9:de:12:6d:9f:6b:8d:10:0c:d6:fd:74:44:f6: f3:ac:10:78:e5:10:0b:d4:ae:1d:92:df:44:86:9b: b1:fb:9a:94:d0:f3:72:df:d7:62:be:35:ea:27:f4: 8e:ae:6d:97:7a:e9:55:99:07:fe:fd:19:7c:bd:4c: 34:71:6e:da:b3:eb:1f:17:c2:c2:0a:58:7c:4e:37: 1c:7e:fc:fa:bd:f5:92:ac:37:9a:72:5d:a0:cc:5f: 53:31:40:98:ef:91:55:d1:f7:38:0e:33:5c:6e:50: 8f:5a:38:6a:ff:1e:49:3d:2f:79:f3:e2:d1:8f:2c: 00:d2:d1:6d:f9:e2:34:e2:86:d3:c4:08:3c:09:ee: 50:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:03:AF:10:DD:58:6E:90:62:89:FC:51:DA:2D:67:BF:F1:C7:23:2F X509v3 Authority Key Identifier: keyid:AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1d:17:41:4e:c1:af:a5:63:42:b6:38:e8:d6:4f:b5:d6:c5: a2:df:9c:71:32:84:b5:13:e3:fa:32:2d:ce:6b:9b:de:5a:11: db:09:8b:58:37:c5:23:2f:5c:41:33:77:a6:e3:29:41:7c:d4: 62:85:ea:ad:ea:46:7b:44:8d:f4:45:97:8c:ef:8b:3a:81:98: 8d:9b:64:89:d7:b1:fa:2f:e5:50:e1:1d:31:e3:be:a2:dd:d4: df:77:3a:63:59:d2:cd:ed:63:88:81:51:8d:68:2f:92:2a:57: 9f:36:f8:c5:c8:bf:c1:66:6d:44:ff:d8:1c:3b:4c:f1:f2:d4: b3:d1:82:7e:73:53:ae:42:bd:f5:f5:9a:ec:d0:89:c3:9d:4b: 17:66:98:4a:2f:33:70:a2:28:17:2d:30:fa:ba:4c:36:b3:f3: f2:d4:9a:0f:3b:f3:32:52:22:36:60:dd:cd:8c:4a:0c:36:d7: 0c:ec:39:d7:b7:88:da:44:8a:4e:d3:e1:93:29:f5:1d:86:a2: 66:1c:e4:89:c9:24:79:88:40:63:d2:06:29:8d:c1:60:4e:1d: ba:6a:9a:1b:89:df:5d:b6:17:40:59:dc:e9:c7:28:8e:7f:5b: b7:55:c6:e6:1f:28:c3:69:60:1a:6e:09:5b:cc:c7:e0:d8:1c: d6:c2:fe:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfJvfZBQzk9xGQdekaxouyZMbDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0 NkNBNjgxRjAeFw0yNjA2MTMwMzQzNDJaFw0yNjA2MTQwNDA1NDJaMDMxMTAvBgNV BAMTKEU5MDNBRjEwREQ1ODZFOTA2Mjg5RkM1MURBMkQ2N0JGRjFDNzIzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2F9sx8Bwyk/Cfuya09QMEE6m z0KEH4sCOEe5nHXWuyCJR+Wg9XX+bxT6hzfHGVm6OVo14zkHV3+YQ0BBmUtCvteR X83ZVfvJliWB/Xf38Sqj3N0djjhTsJgFJLa/ORtFp6Ye5AW6c+ckCH2NRJBajKnL vzkNoCHp3hJtn2uNEAzW/XRE9vOsEHjlEAvUrh2S30SGm7H7mpTQ83Lf12K+Neon 9I6ubZd66VWZB/79GXy9TDRxbtqz6x8XwsIKWHxONxx+/Pq99ZKsN5pyXaDMX1Mx QJjvkVXR9zgOM1xuUI9aOGr/Hkk9L3nz4tGPLADS0W354jTihtPECDwJ7lD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6QOvEN1YbpBiifxR2i1nv/HHIy8wHwYDVR0j BBgwFoAUqsk2NqavLKsCHVJjotNomkbKaB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjYxNGNlZTAtNWRmNi00YjJiLWJiM2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZB NkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0NkNBNjgxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUM5MzYzNkE2QUYyQ0FCMDIxRDUyNjNBMkQzNjg5QTQ2Q0E2 ODFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4 OUE0NkNBNjgxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIdF0FOwa+lY0K2OOjWT7XWxaLfnHEyhLUT 4/oyLc5rm95aEdsJi1g3xSMvXEEzd6bjKUF81GKF6q3qRntEjfRFl4zvizqBmI2b ZInXsfov5VDhHTHjvqLd1N93OmNZ0s3tY4iBUY1oL5IqV582+MXIv8FmbUT/2Bw7 TPHy1LPRgn5zU65CvfX1muzQicOdSxdmmEovM3CiKBctMPq6TDaz8/LUmg878zJS IjZg3c2MSgw21wzsOde3iNpEik7T4ZMp9R2GomYc5InJJHmIQGPSBimNwWBOHbpq mhuJ3122F0BZ3OnHKI5/W7dVxuYfKMNpYBpuCVvMx+DYHNbC/jQ= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:54 2026 by rpki-client