$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft File: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft (raw, json) Hash identifier: rQ9EoLJdCfCe/xq7hBtwUp+yW5csGmcn00f9c8K9Ukc= Subject key identifier: 79:4C:D8:34:DC:54:9B:D9:E8:3C:98:25:60:12:1A:89:B4:A2:4B:6B Authority key identifier: 2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE Certificate issuer: /CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Certificate serial: 2ED58C7787D473311EC69D0ADA876AEAA7F53E7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 21:19:03 +0000 Manifest this update: Wed 02 Sep 2026 21:14:02 +0000 Manifest next update: Fri 04 Sep 2026 00:58:02 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: dZhfKdQv3o4ubnF31yoaIvJtkGW4D/+D/cLAtWAUEM0=) 2: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl (hash: lQ+g2mQKT519rExGRA8XvJOWlkGzwM4R/LOHyJyQb6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d5:8c:77:87:d4:73:31:1e:c6:9d:0a:da:87:6a:ea:a7:f5:3e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Validity Not Before: Sep 2 21:14:02 2026 GMT Not After : Sep 4 00:58:02 2026 GMT Subject: CN=794CD834DC549BD9E83C982560121A89B4A24B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:7b:94:f6:ed:19:05:ff:c1:ed:1b:1e:a6: 6b:d8:90:79:9c:90:26:c3:a8:f1:93:b3:05:a7:3a: 53:3b:a4:22:ac:f9:0c:f2:40:68:31:bc:45:e8:9c: c2:8d:fa:55:e9:bd:aa:59:7b:76:ca:e9:cf:80:e7: ea:86:b8:d9:3c:0f:d9:d9:d4:0a:63:be:89:91:12: 09:9d:89:44:dc:ec:69:a2:2d:7d:c9:e9:73:72:fa: 91:30:ad:97:54:0c:88:0e:ac:b6:a7:49:20:0a:42: e2:6b:54:7b:04:80:13:84:75:1c:2f:ae:11:85:3e: 51:df:96:62:27:97:1a:cc:7a:de:2a:9f:b1:72:8e: 46:02:18:e4:2f:86:16:5d:c0:31:19:c0:2d:95:49: ab:32:b9:6c:d3:52:82:cd:82:96:d3:b6:c2:70:9c: 2e:08:1a:c4:2b:4a:d9:2a:d8:8b:37:dc:b4:61:7a: cd:08:b5:6b:d3:6f:e4:75:ca:56:ec:15:b1:6b:c4: a4:0f:69:35:8d:d4:ba:40:41:3e:c1:39:95:54:67: c2:cb:52:c5:12:f8:67:5b:c0:1b:4a:ca:55:c7:1f: a5:59:91:8a:e3:04:e6:b6:b1:93:46:61:31:a8:0c: fd:4a:1f:55:80:29:a9:ff:4f:a9:18:3b:3d:8d:94: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4C:D8:34:DC:54:9B:D9:E8:3C:98:25:60:12:1A:89:B4:A2:4B:6B X509v3 Authority Key Identifier: keyid:2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c5:b4:a1:55:9b:e3:aa:7d:f9:ca:34:d6:76:aa:d3:ac:29: 90:3c:99:1c:e9:43:bd:66:3c:f1:62:b8:ae:14:30:b5:9a:9f: 30:a5:96:8e:3c:41:22:8e:80:43:da:5d:62:aa:d6:f7:5e:93: 32:da:63:e4:2f:f5:96:45:7b:82:63:2b:0b:b6:9c:e8:16:40: 9d:04:2f:6b:c8:62:fa:73:e0:5f:4c:b7:f2:1e:c5:ef:ec:2c: 8c:b4:24:ec:80:24:7f:85:12:c8:c3:58:d7:1d:c4:6c:c0:1d: 27:d3:a1:f1:59:03:03:f3:3b:e2:73:55:7f:01:6a:11:8d:fa: 4f:48:35:b8:7d:86:1b:e1:d1:e8:b9:7c:36:20:f4:69:13:73: 7c:a1:6c:df:c1:ea:32:81:a0:7b:52:72:d8:b3:5b:32:98:e0: 3e:91:56:80:9a:ba:60:16:8b:40:b5:c0:66:d5:a5:67:2c:f8: b8:2e:ef:0c:49:85:7d:a8:2e:ff:d7:05:e8:71:50:3e:9f:6c: 54:98:91:bc:b3:48:12:36:df:7a:37:ea:93:23:cf:74:d1:4b: 21:a9:d9:e7:f2:7c:05:ae:ae:18:7e:7e:cd:ea:f5:b0:65:7e: e2:a5:45:38:ab:34:54:cd:a7:ec:88:62:73:da:c8:ee:01:ea: 1d:b6:c0:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtWMd4fUczEexp0K2odq6qf1PnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAy ODFBNzVBRTAeFw0yNjA5MDIyMTE0MDJaFw0yNjA5MDQwMDU4MDJaMDMxMTAvBgNV BAMTKDc5NENEODM0REM1NDlCRDlFODNDOTgyNTYwMTIxQTg5QjRBMjRCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtenuU9u0ZBf/B7RsepmvYkHmc kCbDqPGTswWnOlM7pCKs+QzyQGgxvEXonMKN+lXpvapZe3bK6c+A5+qGuNk8D9nZ 1ApjvomREgmdiUTc7GmiLX3J6XNy+pEwrZdUDIgOrLanSSAKQuJrVHsEgBOEdRwv rhGFPlHflmInlxrMet4qn7FyjkYCGOQvhhZdwDEZwC2VSasyuWzTUoLNgpbTtsJw nC4IGsQrStkq2Is33LRhes0ItWvTb+R1ylbsFbFrxKQPaTWN1LpAQT7BOZVUZ8LL UsUS+GdbwBtKylXHH6VZkYrjBOa2sZNGYTGoDP1KH1WAKan/T6kYOz2NlB+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUzYNNxUm9noPJglYBIaibSiS2swHwYDVR0j BBgwFoAUKqLCA5/3Loluzm8OPq04oCgada4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlMjdkYTktZTZlNi00NGE1LTk4ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5 RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAyODFBNzVBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUEyQzIwMzlGRjcyRTg5NkVDRTZGMEUzRUFEMzhBMDI4MUE3 NUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4 QTAyODFBNzVBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfFtKFVm+OqffnKNNZ2qtOsKZA8mRzpQ71m PPFiuK4UMLWanzCllo48QSKOgEPaXWKq1vdekzLaY+Qv9ZZFe4JjKwu2nOgWQJ0E L2vIYvpz4F9Mt/Iexe/sLIy0JOyAJH+FEsjDWNcdxGzAHSfTofFZAwPzO+JzVX8B ahGN+k9INbh9hhvh0ei5fDYg9GkTc3yhbN/B6jKBoHtSctizWzKY4D6RVoCaumAW i0C1wGbVpWcs+Lgu7wxJhX2oLv/XBehxUD6fbFSYkbyzSBI233o36pMjz3TRSyGp 2efyfAWurhh+fs3q9bBlfuKlRTirNFTNp+yIYnPayO4B6h22wME= -----END CERTIFICATE-----Generated at Thu Sep 3 12:35:58 2026 by rpki-client