$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft File: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft (raw, json) Hash identifier: p9pYihz4gsHd8r7MRzr56AbUDwPRU4hyBKmz6dJYD/w= Subject key identifier: 9F:A3:0E:39:D5:9F:45:EA:44:CA:E6:74:A2:2F:92:17:8A:56:5D:FD Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Certificate serial: 28E224988F20DFCE90FF50642C7E7B40F05F2CB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 06:57:05 +0000 Manifest this update: Thu 17 Sep 2026 06:52:05 +0000 Manifest next update: Fri 18 Sep 2026 09:29:05 +0000 Files and hashes: 1: AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl (hash: g2hooy6w/A6/uKKxezUnmMKS6ODaLtsvrF30FUAdiQs=) 2: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: wM3JMaIp+zvVQetOr/lRp0Azv2B1AVIYfVuKB1kJoRo=) 3: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: vehsLc9IdsSn7EUUdSdrNurNOdDJw1QIcbLPuX3RJb4=) 4: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: RQ6zv/OcNcVun/cTLFBfmSLzfQJzMXKgcoU2+4K4YAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e2:24:98:8f:20:df:ce:90:ff:50:64:2c:7e:7b:40:f0:5f:2c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6 Validity Not Before: Sep 17 06:52:05 2026 GMT Not After : Sep 18 09:29:05 2026 GMT Subject: CN=9FA30E39D59F45EA44CAE674A22F92178A565DFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:f8:d9:4f:f3:42:0f:84:13:ff:0d:36:e4: 56:98:86:58:8f:e6:db:74:33:8f:60:bc:9c:c5:93: 32:e9:d0:dc:90:8e:5e:c0:f7:79:d6:8e:21:37:be: e0:6a:17:62:be:29:0e:aa:d3:41:64:bb:0f:5a:80: a5:54:a6:cc:c2:00:0b:8c:03:12:ff:53:44:9c:76: 3d:04:65:ac:6a:ec:fb:aa:fe:5c:ab:6a:44:c3:3b: 81:d1:8c:65:08:15:7c:eb:ff:95:f9:07:52:0c:8b: f8:ea:af:33:73:c3:e5:03:eb:98:0e:1b:27:26:0a: 1c:e2:d1:e5:2b:49:23:28:cb:21:af:df:4d:a8:0e: 69:e2:96:b1:db:9d:3e:9b:b0:62:86:be:0d:b5:1b: 8b:e8:22:33:5e:8a:84:a0:2a:20:9e:e6:2f:2e:12: e4:eb:54:dc:70:1f:ed:27:17:ee:8a:88:c5:04:8b: 0c:a4:8c:2f:63:ed:5e:05:83:46:b3:6a:e8:e9:ac: e1:51:56:7b:ee:f3:ca:3c:5f:aa:39:4a:59:25:99: 3c:0c:62:a2:20:7d:12:a4:27:47:ad:de:30:c0:70: 61:ed:63:1d:61:ea:47:88:49:7d:0c:f4:d5:ee:a3: c4:fb:49:95:7e:d0:4c:72:5e:f9:14:1a:91:8e:a4: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A3:0E:39:D5:9F:45:EA:44:CA:E6:74:A2:2F:92:17:8A:56:5D:FD X509v3 Authority Key Identifier: keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:4b:01:70:d4:15:a0:fe:ee:71:1e:9a:e5:23:fa:6e:a5:96: d7:49:e6:ae:ea:5c:6e:34:e6:96:66:dd:bd:9e:43:d8:cf:fc: 6c:d8:27:44:41:aa:ef:85:86:ee:18:e5:d5:23:a9:2c:43:8b: 42:97:35:9a:a3:7e:89:3e:cf:c7:dd:00:52:51:81:0e:43:ec: 21:d3:10:a0:84:4f:9d:5d:d2:d6:9b:da:91:bf:d9:38:3b:ce: 1f:96:79:c0:cc:2e:e4:ad:c0:15:10:34:f8:3a:0d:d1:96:c0: 75:24:6e:fa:de:61:57:4f:ab:8d:6f:9c:d9:03:10:9a:75:7a: 46:c5:fe:e3:be:e1:82:f8:7b:79:ba:b6:50:45:6c:d7:fb:20: fc:4d:a8:61:16:89:ee:e8:91:d5:9d:87:90:6f:9c:ba:03:3b: 90:bd:4d:c7:df:ea:82:a2:02:2f:84:7a:77:fd:0e:61:6e:83: d0:82:95:c1:20:15:b4:19:89:d9:dc:63:8f:46:94:12:f4:fe: 5d:a3:1c:4b:e1:04:d0:94:94:21:e6:3f:5a:a4:b6:7a:ad:23: ad:2b:bf:46:56:c4:ac:a9:89:17:07:48:88:d3:27:35:d5:77: a3:c8:3f:9e:e0:d8:ff:5d:49:0e:aa:73:af:c8:9a:db:47:e4: 45:d6:0b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOIkmI8g386Q/1BkLH57QPBfLLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQx M0Y2RjNCNjAeFw0yNjA5MTcwNjUyMDVaFw0yNjA5MTgwOTI5MDVaMDMxMTAvBgNV BAMTKDlGQTMwRTM5RDU5RjQ1RUE0NENBRTY3NEEyMkY5MjE3OEE1NjVERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vPjZT/NCD4QT/w025FaYhliP 5tt0M49gvJzFkzLp0NyQjl7A93nWjiE3vuBqF2K+KQ6q00Fkuw9agKVUpszCAAuM AxL/U0Scdj0EZaxq7Puq/lyrakTDO4HRjGUIFXzr/5X5B1IMi/jqrzNzw+UD65gO GycmChzi0eUrSSMoyyGv302oDmnilrHbnT6bsGKGvg21G4voIjNeioSgKiCe5i8u EuTrVNxwH+0nF+6KiMUEiwykjC9j7V4Fg0azaujprOFRVnvu88o8X6o5SlklmTwM YqIgfRKkJ0et3jDAcGHtYx1h6keISX0M9NXuo8T7SZV+0ExyXvkUGpGOpI0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn6MOOdWfRepEyuZ0oi+SF4pWXf0wHwYDVR0j BBgwFoAUqiOmhcZyYia2McffbIm7RBP287YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2M2FlN2MtYTZmZi00ZmQ4LTk2ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVD NjcyNjIyNkI2MzFDN0RGNkM4OUJCNDQxM0Y2RjNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTIzQTY4NUM2NzI2MjI2QjYzMUM3REY2Qzg5QkI0NDEzRjZG M0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQUEyM0E2ODVDNjcyNjIyNkI2MzFDN0RGNkM4OUJC NDQxM0Y2RjNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdLAXDUFaD+7nEemuUj+m6lltdJ5q7qXG40 5pZm3b2eQ9jP/GzYJ0RBqu+Fhu4Y5dUjqSxDi0KXNZqjfok+z8fdAFJRgQ5D7CHT EKCET51d0tab2pG/2Tg7zh+WecDMLuStwBUQNPg6DdGWwHUkbvreYVdPq41vnNkD EJp1ekbF/uO+4YL4e3m6tlBFbNf7IPxNqGEWie7okdWdh5BvnLoDO5C9Tcff6oKi Ai+Eenf9DmFug9CClcEgFbQZidncY49GlBL0/l2jHEvhBNCUlCHmP1qktnqtI60r v0ZWxKypiRcHSIjTJzXVd6PIP57g2P9dSQ6qc6/ImttH5EXWC8A= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:16 2026 by rpki-client