$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: /QipNPeO2WOrC9PKH8kTfLaZLaRtV2bqJvwG6SFm+us= Subject key identifier: 7B:87:54:AC:75:58:1F:42:54:79:23:E3:D2:66:CA:E8:17:DA:61:2D Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 66E468DEF6B2C9475E8DE86CE37EAE314C22B83F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: EB Signing time: Sun 25 Oct 2026 11:40:59 +0000 Manifest this update: Sun 25 Oct 2026 11:35:59 +0000 Manifest next update: Mon 26 Oct 2026 15:15:59 +0000 Files and hashes: 1: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: khVeN0cdc874vmvViLyKxViTilbWzwSlqf2oT4Bl2TQ=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 14:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e4:68:de:f6:b2:c9:47:5e:8d:e8:6c:e3:7e:ae:31:4c:22:b8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Oct 25 11:35:59 2026 GMT Not After : Oct 26 15:15:59 2026 GMT Subject: CN=7B8754AC75581F42547923E3D266CAE817DA612D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:fb:c7:fc:1f:fc:41:f8:30:d6:61:cd:96: a0:3e:b8:17:65:fa:33:1d:e9:a4:eb:53:47:9d:99: d9:63:ff:e0:6f:55:02:de:bc:6f:95:d9:45:90:2b: 83:f6:41:b3:93:21:4b:8a:4e:bf:2b:79:da:a7:3c: 9e:c6:d4:5f:c2:4a:38:f1:7f:23:cd:8d:89:ef:ac: 29:42:08:b4:88:4f:b3:92:5d:6d:db:55:5e:c4:fc: db:6b:6c:f5:2b:43:cb:5a:de:eb:17:e1:13:dd:ae: 78:50:18:fb:27:d1:44:a9:44:36:47:58:84:c8:82: 09:64:5b:0b:5b:5c:67:7d:fc:7a:bc:a5:f8:1a:95: 32:17:fd:8b:62:a2:ff:77:af:64:7d:c0:5e:5a:7d: 8c:b3:55:ac:a7:e3:b4:2c:f5:71:7f:4c:38:ee:0d: e1:f9:ee:d6:4c:17:a9:68:e7:ea:83:ed:e1:3c:ac: 80:08:af:06:55:3a:a9:4a:2b:0d:a1:0e:a8:10:9e: 30:80:d9:87:8b:f5:c5:80:0b:97:fa:94:aa:d2:b4: 4b:c9:de:04:b8:63:f6:a9:66:d2:20:26:97:d1:55: d2:1b:f8:76:11:66:75:a6:81:c1:ec:d3:18:3a:23: a2:3d:9a:80:8c:c7:65:58:b1:b3:68:dd:a3:c8:81: 20:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:87:54:AC:75:58:1F:42:54:79:23:E3:D2:66:CA:E8:17:DA:61:2D X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:71:7a:af:4e:83:2b:de:02:19:9c:52:dc:eb:d9:a0:87:01: 71:09:bb:40:4e:78:95:3a:15:47:1e:ca:07:ff:f1:d8:ce:6d: 76:1d:1c:c2:75:05:e3:e0:a4:82:13:16:4e:a3:79:3b:5f:dc: 35:b6:72:95:da:b7:42:da:17:af:c3:9e:4d:32:cb:38:be:d7: 9f:73:5b:f1:f4:92:17:cb:d8:42:a5:85:b5:46:51:1b:90:8b: a0:2b:7c:6c:c9:7c:0d:df:e1:0e:9d:65:5c:96:b6:20:3b:4f: 2a:b3:b5:e9:83:70:d4:42:eb:e4:d5:fd:af:95:82:1e:40:4e: 86:59:48:ea:9e:80:09:fb:59:cd:57:0c:58:72:e8:00:a6:c0: b7:b7:7a:b4:e8:fb:0b:8b:e0:21:20:9a:0a:5c:31:48:c1:be: ee:bb:82:09:2a:b2:6f:c9:a1:ba:6c:20:b5:13:8a:66:ab:00: 03:6c:26:19:61:a6:27:1b:04:de:ea:b4:5e:94:84:a3:59:b1: 7b:ef:82:c1:87:0c:fb:d6:93:c9:b6:ef:1b:b0:49:ab:05:5a: e8:fc:70:09:cf:6f:6f:44:5f:66:df:6f:14:b6:6b:1d:0e:ae: a8:7f:d3:29:f5:5b:b2:23:5d:de:7c:80:e8:9d:e7:d1:1c:8e: a3:a9:68:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuRo3vayyUdejehs436uMUwiuD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjEwMjUxMTM1NTlaFw0yNjEwMjYxNTE1NTlaMDMxMTAvBgNV BAMTKDdCODc1NEFDNzU1ODFGNDI1NDc5MjNFM0QyNjZDQUU4MTdEQTYxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmfvH/B/8Qfgw1mHNlqA+uBdl +jMd6aTrU0edmdlj/+BvVQLevG+V2UWQK4P2QbOTIUuKTr8redqnPJ7G1F/CSjjx fyPNjYnvrClCCLSIT7OSXW3bVV7E/NtrbPUrQ8ta3usX4RPdrnhQGPsn0USpRDZH WITIgglkWwtbXGd9/Hq8pfgalTIX/Ytiov93r2R9wF5afYyzVayn47Qs9XF/TDju DeH57tZMF6lo5+qD7eE8rIAIrwZVOqlKKw2hDqgQnjCA2YeL9cWAC5f6lKrStEvJ 3gS4Y/apZtIgJpfRVdIb+HYRZnWmgcHs0xg6I6I9moCMx2VYsbNo3aPIgSADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe4dUrHVYH0JUeSPj0mbK6BfaYS0wHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABxeq9OgyveAhmcUtzr2aCHAXEJu0BOeJU6 FUceygf/8djObXYdHMJ1BePgpIITFk6jeTtf3DW2cpXat0LaF6/Dnk0yyzi+159z W/H0khfL2EKlhbVGURuQi6ArfGzJfA3f4Q6dZVyWtiA7TyqztemDcNRC6+TV/a+V gh5AToZZSOqegAn7Wc1XDFhy6ACmwLe3erTo+wuL4CEgmgpcMUjBvu67ggkqsm/J obpsILUTimarAANsJhlhpicbBN7qtF6UhKNZsXvvgsGHDPvWk8m27xuwSasFWuj8 cAnPb29EX2bfbxS2ax0Orqh/0yn1W7IjXd58gOid59EcjqOpaOw= -----END CERTIFICATE-----Generated at Mon Oct 26 08:40:51 2026 by rpki-client