$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft File: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft (raw, json) Hash identifier: mll67W7W43P7okV1va+KGHZPt2cWDhi27E6FLLN43IY= Subject key identifier: A2:40:4C:EE:B1:B5:46:EE:D4:EC:F2:99:55:28:02:8D:13:B3:B8:CF Authority key identifier: AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F Certificate issuer: /CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Certificate serial: 1D733A451CB3EC77FD9160CC3986BAA29BB6ADCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 13:10:30 +0000 Manifest this update: Sun 15 Nov 2026 13:05:30 +0000 Manifest next update: Mon 16 Nov 2026 14:42:30 +0000 Files and hashes: 1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: CU3XMv/aCTAU0lNSmPec78wDsAVLMqlo9Sb+WUKv5ZY=) 2: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl (hash: 9GcKsjOsbeFjVfBDsK7PiHTHfK86MKnOsPD+k0+49F4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:73:3a:45:1c:b3:ec:77:fd:91:60:cc:39:86:ba:a2:9b:b6:ad:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Validity Not Before: Nov 15 13:05:30 2026 GMT Not After : Nov 16 14:42:30 2026 GMT Subject: CN=A2404CEEB1B546EED4ECF2995528028D13B3B8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:90:34:9a:d9:a8:38:32:ea:22:5c:b1:42: 21:02:0e:a3:08:7c:34:59:82:49:19:82:c7:8d:40: b2:2c:25:ae:2d:08:c8:60:c8:c0:5e:41:ae:54:7d: a9:0e:f1:fc:77:fc:54:ce:61:37:b8:55:38:75:93: 2f:93:ca:b3:6d:2d:1b:46:4a:d5:39:cb:62:76:f3: 38:53:c7:ac:81:5f:87:a3:4d:eb:29:fb:32:29:8b: f2:d8:93:7c:a9:ae:8f:cf:4b:0f:23:3f:3b:41:58: 7f:e6:11:fc:7f:b4:03:bd:51:6b:fe:5c:e2:f4:b8: 41:c0:d7:a1:58:99:ef:04:00:1f:37:53:31:20:9c: 6d:71:27:b9:24:f4:5b:72:33:bd:81:ba:90:56:b3: bf:b9:b9:fe:be:30:80:5f:85:55:e5:f7:c9:4d:e8: 48:ce:e1:16:b0:1d:c7:60:02:85:63:d5:9d:fb:43: 69:51:38:00:0c:60:8c:36:d2:67:d5:e7:6b:37:4c: 5f:f8:a5:a5:75:fd:e8:af:ee:29:65:73:d2:63:4d: c3:5b:86:a3:04:f6:e5:8f:d1:aa:c9:93:30:fe:4e: 70:98:d8:e4:78:9a:3f:d9:20:28:22:2e:80:a6:07: cc:b2:15:d0:bf:99:af:44:03:64:8b:86:56:aa:96: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:40:4C:EE:B1:B5:46:EE:D4:EC:F2:99:55:28:02:8D:13:B3:B8:CF X509v3 Authority Key Identifier: keyid:AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:08:c6:20:21:af:ea:5e:9e:a6:3d:25:fb:e1:20:a8:0a:95: 1c:7a:d0:33:03:cb:e4:37:e1:db:7a:b0:f4:1d:9f:96:55:e4: db:5f:3d:2d:bc:43:1f:0e:f3:5a:51:c1:1f:9e:7d:f0:3f:00: 6c:01:85:6d:c2:86:d8:96:e2:07:d9:9b:e9:a1:13:c1:ae:7a: c9:3d:a6:d1:ed:44:f8:73:55:79:fd:29:b3:aa:fa:2c:ce:fa: be:da:7d:0b:92:f1:0c:a3:69:97:21:6f:32:fe:7a:2c:d0:e4: 46:22:2f:1f:94:af:04:a4:2a:97:de:3b:12:cc:96:8c:f4:1f: 19:74:13:77:c3:88:60:2f:50:f4:36:8e:e1:64:10:ec:bb:24: b0:dc:cf:7c:0f:2e:83:b8:c8:e2:b8:09:6c:ca:cf:a2:55:73: 0b:2e:13:39:29:91:b4:a7:c3:c1:40:f1:e9:1d:3b:3e:2f:bf: aa:e8:33:ac:e2:62:ad:70:1d:69:2f:06:0d:b9:b9:e9:5b:ff: 8c:99:35:1a:b8:85:58:8f:fe:2a:61:e0:b8:8f:11:81:54:09: b7:86:80:60:00:4a:e9:e0:b3:86:65:fe:be:13:f8:01:a6:96: 14:29:72:6c:b4:cc:67:f4:98:c8:5b:d0:a0:39:f8:a0:f5:b0: c7:4c:9f:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXM6RRyz7Hf9kWDMOYa6opu2rc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0 NkNBNjgxRjAeFw0yNjExMTUxMzA1MzBaFw0yNjExMTYxNDQyMzBaMDMxMTAvBgNV BAMTKEEyNDA0Q0VFQjFCNTQ2RUVENEVDRjI5OTU1MjgwMjhEMTNCM0I4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QZA0mtmoODLqIlyxQiECDqMI fDRZgkkZgseNQLIsJa4tCMhgyMBeQa5UfakO8fx3/FTOYTe4VTh1ky+TyrNtLRtG StU5y2J28zhTx6yBX4ejTesp+zIpi/LYk3ypro/PSw8jPztBWH/mEfx/tAO9UWv+ XOL0uEHA16FYme8EAB83UzEgnG1xJ7kk9FtyM72BupBWs7+5uf6+MIBfhVXl98lN 6EjO4RawHcdgAoVj1Z37Q2lROAAMYIw20mfV52s3TF/4paV1/eiv7illc9JjTcNb hqME9uWP0arJkzD+TnCY2OR4mj/ZICgiLoCmB8yyFdC/ma9EA2SLhlaqlpLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokBM7rG1Ru7U7PKZVSgCjROzuM8wHwYDVR0j BBgwFoAUqsk2NqavLKsCHVJjotNomkbKaB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjYxNGNlZTAtNWRmNi00YjJiLWJiM2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZB NkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0NkNBNjgxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUM5MzYzNkE2QUYyQ0FCMDIxRDUyNjNBMkQzNjg5QTQ2Q0E2 ODFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4 OUE0NkNBNjgxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwIxiAhr+penqY9JfvhIKgKlRx60DMDy+Q3 4dt6sPQdn5ZV5NtfPS28Qx8O81pRwR+effA/AGwBhW3ChtiW4gfZm+mhE8Guesk9 ptHtRPhzVXn9KbOq+izO+r7afQuS8QyjaZchbzL+eizQ5EYiLx+UrwSkKpfeOxLM loz0Hxl0E3fDiGAvUPQ2juFkEOy7JLDcz3wPLoO4yOK4CWzKz6JVcwsuEzkpkbSn w8FA8ekdOz4vv6roM6ziYq1wHWkvBg25uelb/4yZNRq4hViP/iph4LiPEYFUCbeG gGAASungs4Zl/r4T+AGmlhQpcmy0zGf0mMhb0KA5+KD1sMdMn0A= -----END CERTIFICATE-----Generated at Sun Nov 15 15:20:31 2026 by rpki-client