$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft File: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft (raw, json) Hash identifier: St/rVyjeYI9IhzYzRvBXu4FtZuzBK05Jy1qsR575SN4= Subject key identifier: FF:24:D6:20:AF:75:52:A5:4F:D5:96:90:65:A4:4F:14:B8:1E:B9:81 Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Certificate serial: B3F59590D320BC1437DD2167A7995442AA46E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 06:45:58 +0000 Manifest this update: Mon 02 Nov 2026 06:40:58 +0000 Manifest next update: Tue 03 Nov 2026 10:27:58 +0000 Files and hashes: 1: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: vehsLc9IdsSn7EUUdSdrNurNOdDJw1QIcbLPuX3RJb4=) 2: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl (hash: fub948slEFsmFyvsg4ybr8C9oh+1xY4ANz2qua6btoI=) 3: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: wM3JMaIp+zvVQetOr/lRp0Azv2B1AVIYfVuKB1kJoRo=) 4: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: RQ6zv/OcNcVun/cTLFBfmSLzfQJzMXKgcoU2+4K4YAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b3:f5:95:90:d3:20:bc:14:37:dd:21:67:a7:99:54:42:aa:46:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Validity Not Before: Nov 2 06:40:58 2026 GMT Not After : Nov 3 10:27:58 2026 GMT Subject: CN=FF24D620AF7552A54FD5969065A44F14B81EB981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:14:97:e4:47:40:4e:e8:42:f4:27:8f:05: b3:86:b6:ef:01:52:37:35:50:0c:62:4c:bb:58:b7: 40:fe:7e:25:ce:6c:08:d6:ea:01:87:cc:a8:c3:40: 48:e5:f5:bb:ee:5f:98:98:d8:ee:17:cf:2d:f6:78: 83:ff:ff:c9:2a:07:d7:9b:19:a1:57:71:3f:e3:82: 17:93:b8:a8:3a:0c:11:bd:b0:4b:42:6f:6a:fa:54: bb:96:b3:d5:0d:e7:17:17:3b:9b:be:f6:1f:3a:9f: 2a:5a:3d:48:f1:2b:99:19:8b:8b:1d:f5:b1:79:d5: 0f:37:05:9c:14:e5:91:87:a8:6e:10:65:df:37:a6: 51:3b:49:b2:d9:ce:bc:cd:27:ff:74:54:f0:69:c5: 1b:a5:35:ac:93:da:c4:30:40:6c:53:bb:5a:47:fd: b9:0d:b4:bf:39:46:31:fd:4a:80:bb:12:14:de:49: 63:74:54:15:4e:63:3b:56:f0:fd:35:c0:b6:f5:6b: 69:c9:61:e4:8c:76:e5:dc:fe:4a:5c:82:10:f2:8b: bf:ec:a3:a8:3e:50:2d:ea:b2:34:75:e1:94:4f:2c: 11:40:f3:69:b2:3a:9a:69:77:3d:b1:b4:93:2c:3d: ce:bc:08:06:ef:b0:bb:38:c6:cb:67:1b:a7:15:bd: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:24:D6:20:AF:75:52:A5:4F:D5:96:90:65:A4:4F:14:B8:1E:B9:81 X509v3 Authority Key Identifier: keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:13:dc:3a:96:8c:67:d2:7b:4c:4b:80:eb:71:dd:ef:7f:8d: 3a:45:a4:d9:f8:28:60:4f:a3:64:0e:cb:4b:d9:c8:14:4b:2f: 94:29:2f:11:2e:e8:f9:de:98:d1:33:16:7c:00:23:4d:cd:86: f9:3a:4b:34:fe:d9:f9:8a:cf:0d:92:58:72:8c:9e:b1:91:59: 0a:9c:ef:60:ae:fb:b6:02:73:1c:57:ed:5e:c1:ba:24:43:54: f6:5e:7a:63:2d:bc:ff:8e:3a:56:f1:31:8d:fe:b7:1e:37:e3: dd:69:83:41:42:01:2e:b0:02:4b:c1:c0:2b:9b:96:9f:d2:66: ff:c0:ec:5b:f3:c5:1a:cd:08:12:d3:aa:a3:b5:d4:ed:b2:f8: 24:50:f9:0f:3f:e5:3d:80:bb:9d:54:de:e4:95:91:cd:10:6b: 98:e9:80:ed:0a:f1:98:46:33:62:78:f7:93:a3:36:d2:f5:21: 9a:d7:b4:e2:bf:1c:4f:18:41:60:66:73:5e:87:1f:01:8c:a1: c9:66:38:75:83:fb:2a:c7:0f:f2:8a:06:b1:16:56:80:7e:36: 5b:a5:38:b8:fd:46:8d:23:58:05:d0:d6:06:b8:4b:d0:b3:b4: c2:71:70:3f:1b:a4:12:df:56:c5:91:70:43:f0:68:8e:d5:14: 3f:11:29:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALP1lZDTILwUN90hZ6eZVEKqRuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQx M0Y2RjNCNjAeFw0yNjExMDIwNjQwNThaFw0yNjExMDMxMDI3NThaMDMxMTAvBgNV BAMTKEZGMjRENjIwQUY3NTUyQTU0RkQ1OTY5MDY1QTQ0RjE0QjgxRUI5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxRSX5EdATuhC9CePBbOGtu8B Ujc1UAxiTLtYt0D+fiXObAjW6gGHzKjDQEjl9bvuX5iY2O4Xzy32eIP//8kqB9eb GaFXcT/jgheTuKg6DBG9sEtCb2r6VLuWs9UN5xcXO5u+9h86nypaPUjxK5kZi4sd 9bF51Q83BZwU5ZGHqG4QZd83plE7SbLZzrzNJ/90VPBpxRulNayT2sQwQGxTu1pH /bkNtL85RjH9SoC7EhTeSWN0VBVOYztW8P01wLb1a2nJYeSMduXc/kpcghDyi7/s o6g+UC3qsjR14ZRPLBFA82myOpppdz2xtJMsPc68CAbvsLs4xstnG6cVvUlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/yTWIK91UqVP1ZaQZaRPFLgeuYEwHwYDVR0j BBgwFoAUqiOmhcZyYia2McffbIm7RBP287YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2M2FlN2MtYTZmZi00ZmQ4LTk2ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVD NjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQxM0Y2RjNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTIzQTY4NUM2NzI2MjI2QjYzMUM3REY2Qzg5QkI0NDEzRjZG M0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJC NDQxM0Y2RjNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUT3DqWjGfSe0xLgOtx3e9/jTpFpNn4KGBP o2QOy0vZyBRLL5QpLxEu6PnemNEzFnwAI03Nhvk6SzT+2fmKzw2SWHKMnrGRWQqc 72Cu+7YCcxxX7V7BuiRDVPZeemMtvP+OOlbxMY3+tx43491pg0FCAS6wAkvBwCub lp/SZv/A7FvzxRrNCBLTqqO11O2y+CRQ+Q8/5T2Au51U3uSVkc0Qa5jpgO0K8ZhG M2J495OjNtL1IZrXtOK/HE8YQWBmc16HHwGMoclmOHWD+yrHD/KKBrEWVoB+Nlul OLj9Ro0jWAXQ1ga4S9CztMJxcD8bpBLfVsWRcEPwaI7VFD8RKWE= -----END CERTIFICATE-----Generated at Mon Nov 2 11:36:15 2026 by rpki-client