$ rpki-client -vvf rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft File: AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft (raw, json) Hash identifier: JMziRdLPWoTrGGxr/lCrfD5cRz3FC+Vv7Ek9GuL7kWU= Subject key identifier: 0E:51:FC:02:F0:54:19:F9:E4:30:06:70:F7:0E:4E:A9:31:96:69:77 Authority key identifier: AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F Certificate issuer: /CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Certificate serial: 52D76B5F26AC5165FBCEC70ED0D45F740459183E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:47:16 +0000 Manifest this update: Mon 20 Jul 2026 16:42:16 +0000 Manifest next update: Tue 21 Jul 2026 19:31:16 +0000 Files and hashes: 1: AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl (hash: BSZZ/1QFnlRXBv2VPUXRt3e9JNk2rrDr7EoL5U4h77U=) 2: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: ewfsYYBTx06fI9ZJBdkWQ9OcyfPFI+ANp/78GnZ38BE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:6b:5f:26:ac:51:65:fb:ce:c7:0e:d0:d4:5f:74:04:59:18:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Validity Not Before: Jul 20 16:42:16 2026 GMT Not After : Jul 21 19:31:16 2026 GMT Subject: CN=0E51FC02F05419F9E4300670F70E4EA931966977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:64:5b:21:cf:85:99:06:35:09:33:c7:7b: 6c:ce:af:67:ad:ae:0c:b1:ea:15:5b:3a:b8:21:0a: 51:65:43:a8:fe:f3:30:0d:bf:75:e1:ae:3d:9f:ec: 4b:71:c9:92:5c:85:4a:10:48:30:30:54:6b:5e:0b: 24:b3:90:10:cc:7f:26:a7:a4:4e:18:12:ab:a9:fc: e9:c1:9c:af:6c:6e:b8:18:ae:ab:52:0c:43:0d:cd: 60:da:aa:77:8c:5e:7d:7a:71:c6:00:c3:bd:e7:a9: 89:cf:a1:14:e9:6c:0e:fc:17:a2:63:03:ef:82:7c: 25:92:15:8b:86:79:0f:d1:2f:ee:e7:65:8a:93:5a: ea:c3:22:09:3a:11:08:61:a5:1e:ad:71:d9:c5:ad: 48:7f:33:e3:cc:8d:63:b6:79:7e:66:c9:83:18:cc: 57:93:f8:18:1e:11:6d:b5:30:b2:aa:3f:15:bc:73: aa:c6:9d:07:62:5b:7b:00:9e:fb:37:c1:eb:4b:ce: 62:06:7d:fc:ed:12:bc:39:50:1a:0f:fe:ba:07:fb: 2e:39:25:0e:eb:53:a0:db:47:2b:0a:12:5a:31:28: eb:97:c2:f8:cd:97:6b:5b:7d:3a:d8:c0:67:20:9d: cc:02:2d:96:b2:fb:d1:25:fa:07:e9:5c:46:ba:68: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:51:FC:02:F0:54:19:F9:E4:30:06:70:F7:0E:4E:A9:31:96:69:77 X509v3 Authority Key Identifier: keyid:AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:16:5d:71:5d:bb:9d:ce:f8:a8:ec:51:67:c1:67:4f:a1:f6: a7:da:bf:eb:53:8b:da:68:14:d6:ba:ea:cf:e4:0e:97:98:62: 33:94:96:89:6c:c7:74:48:f7:d1:e1:c8:d1:3b:24:51:4e:11: 5a:9d:7b:cb:a8:59:02:b3:59:c5:45:41:16:91:cb:80:f4:b2: cd:2b:e4:3a:44:5a:b5:83:b0:43:9c:a6:20:35:7f:af:a1:c6: 0f:42:bb:82:53:77:a4:40:e1:e7:cd:65:c5:c3:9b:17:e5:87: b0:f7:2a:f8:ce:b2:9e:aa:05:f4:4e:3d:52:09:ff:55:81:06: 12:95:30:aa:c3:56:aa:5e:6e:cf:29:ea:a4:86:91:e2:5a:11: 8b:51:ff:25:32:5d:99:2d:33:6a:a8:ae:73:7b:97:e2:9c:c4: 4a:97:5e:e6:90:33:a1:aa:43:3d:48:59:e9:7b:fe:63:e0:f1: 3b:96:58:53:ac:1f:b7:be:a7:3b:01:39:bf:d0:09:aa:23:34: 24:ab:ad:10:b0:24:19:59:0b:ed:4e:09:3a:c0:84:05:1b:28: 87:5d:35:99:d0:b4:37:27:06:25:59:58:56:11:10:02:f4:a5: 88:b6:9a:2f:fe:18:2f:1a:92:99:62:63:fe:e2:24:59:a0:41: 54:be:c8:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtdrXyasUWX7zscO0NRfdARZGD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRG QTNFRTgzRjAeFw0yNjA3MjAxNjQyMTZaFw0yNjA3MjExOTMxMTZaMDMxMTAvBgNV BAMTKDBFNTFGQzAyRjA1NDE5RjlFNDMwMDY3MEY3MEU0RUE5MzE5NjY5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbmRbIc+FmQY1CTPHe2zOr2et rgyx6hVbOrghClFlQ6j+8zANv3Xhrj2f7EtxyZJchUoQSDAwVGteCySzkBDMfyan pE4YEqup/OnBnK9sbrgYrqtSDEMNzWDaqneMXn16ccYAw73nqYnPoRTpbA78F6Jj A++CfCWSFYuGeQ/RL+7nZYqTWurDIgk6EQhhpR6tcdnFrUh/M+PMjWO2eX5myYMY zFeT+BgeEW21MLKqPxW8c6rGnQdiW3sAnvs3wetLzmIGffztErw5UBoP/roH+y45 JQ7rU6DbRysKEloxKOuXwvjNl2tbfTrYwGcgncwCLZay+9El+gfpXEa6aGDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDlH8AvBUGfnkMAZw9w5OqTGWaXcwHwYDVR0j BBgwFoAUqo1mQ3pA1MtwN9BZ/mkhRPo+6D8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI3YjExYzItYWI5MC00MjBmLWI0OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3 QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRGQTNFRTgzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQThENjY0MzdBNDBENENCNzAzN0QwNTlGRTY5MjE0NEZBM0VF ODNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIx NDRGQTNFRTgzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMWXXFdu53O+KjsUWfBZ0+h9qfav+tTi9po FNa66s/kDpeYYjOUlolsx3RI99HhyNE7JFFOEVqde8uoWQKzWcVFQRaRy4D0ss0r 5DpEWrWDsEOcpiA1f6+hxg9Cu4JTd6RA4efNZcXDmxflh7D3KvjOsp6qBfROPVIJ /1WBBhKVMKrDVqpebs8p6qSGkeJaEYtR/yUyXZktM2qornN7l+KcxEqXXuaQM6Gq Qz1IWel7/mPg8TuWWFOsH7e+pzsBOb/QCaojNCSrrRCwJBlZC+1OCTrAhAUbKIdd NZnQtDcnBiVZWFYREAL0pYi2mi/+GC8akpliY/7iJFmgQVS+yI0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:03 2026 by rpki-client