$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: 6Rvfh2yaiVE9BwtCw80S7CbJkaW6C1Yc2bXMd61k5To= Subject key identifier: 02:F1:45:60:11:C6:48:79:19:D7:C4:3A:41:6B:AB:FC:69:10:6D:B6 Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 46CA4DD8303BC85EED62D4ACDBFD28F1C8869723 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: E3 Signing time: Mon 19 Oct 2026 08:25:02 +0000 Manifest this update: Mon 19 Oct 2026 08:20:02 +0000 Manifest next update: Tue 20 Oct 2026 11:47:02 +0000 Files and hashes: 1: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: lT5d+3lCAvQqCrcE41fE/CKeJinxHc1vRi3xzlFwe7U=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 11:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ca:4d:d8:30:3b:c8:5e:ed:62:d4:ac:db:fd:28:f1:c8:86:97:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Oct 19 08:20:02 2026 GMT Not After : Oct 20 11:47:02 2026 GMT Subject: CN=02F1456011C6487919D7C43A416BABFC69106DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:ad:d9:f7:53:8b:2d:53:cf:2e:39:88:e7: 81:4f:18:81:68:13:cb:98:ef:45:5b:53:e1:04:ca: 23:a0:a3:9d:5c:ae:2e:72:8e:46:c8:dc:67:c8:60: 9e:e1:41:da:3a:f2:03:c6:05:c8:58:b8:1e:8d:58: 86:2f:07:e5:18:65:16:f0:36:07:42:a9:78:8e:de: 23:6e:16:66:37:da:16:16:c7:95:4e:89:39:64:11: ec:79:e6:8a:98:dd:a3:f3:f9:77:d3:db:83:6f:d3: eb:23:7b:3e:b1:a1:e7:77:ad:e6:39:35:15:6e:fa: 32:41:61:7a:f7:47:74:98:be:7f:4c:b9:c0:dc:60: 6d:b4:f0:b5:c1:fc:24:97:8b:09:97:37:77:d6:44: 90:cf:4f:04:6a:0c:5a:2f:23:e1:73:e9:f4:04:0d: 17:38:35:09:04:a4:d6:3c:24:ed:24:89:0f:b1:84: 69:27:72:87:c1:c3:6b:87:15:8e:7a:a1:3f:c0:b0: cd:07:91:1d:3e:7b:eb:6a:98:11:b7:3f:05:dc:93: fc:0f:da:7e:96:7e:f6:41:82:c4:f5:48:93:fc:a5: 5f:e1:50:16:45:75:7f:44:a2:ad:ad:01:28:a3:31: f2:53:3e:1c:66:35:ec:83:3d:a2:88:4e:01:26:f4: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F1:45:60:11:C6:48:79:19:D7:C4:3A:41:6B:AB:FC:69:10:6D:B6 X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:37:56:84:e1:ae:a2:ab:82:b9:88:fb:53:06:03:96:8e:a7: 5c:52:45:4f:69:99:af:5e:58:f1:86:25:14:2d:1f:16:fa:e0: d0:4c:60:af:f9:54:fa:24:d3:95:f5:38:ff:35:af:1b:9b:80: ee:a9:bd:59:ed:aa:46:27:4a:1f:13:c3:1b:3e:ce:df:5f:35: 32:fa:0a:78:8f:6e:b3:3e:4f:f5:c8:19:cd:3f:dc:d8:f2:63: aa:73:96:2a:bb:dc:fb:f8:fb:e6:80:8c:26:21:db:95:fc:11: 19:6d:82:c8:ab:86:05:d2:ef:1c:90:07:7b:29:7a:b3:98:f3: 1b:79:56:5b:fb:61:6c:4f:b7:c2:79:7e:7b:53:d1:b7:74:7b: 93:5d:ac:a4:7c:71:8f:35:54:ef:05:1d:ce:0a:ba:d0:6a:2a: a2:37:f9:96:96:7e:cb:8e:47:71:21:88:2b:65:c3:66:95:ed: 4b:2d:03:6d:05:03:eb:a4:bd:01:55:d2:86:a1:1f:b3:1b:f4: 2a:2c:91:97:96:f4:3a:5e:f9:7b:63:68:08:da:56:a2:d3:ef: bc:42:23:53:19:42:ad:af:4e:9b:78:a5:f1:d7:23:0a:d3:b4: f4:56:9d:66:06:de:4c:7e:d9:ca:db:93:3e:72:ad:20:27:f4: 5e:01:7f:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURspN2DA7yF7tYtSs2/0o8ciGlyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjEwMTkwODIwMDJaFw0yNjEwMjAxMTQ3MDJaMDMxMTAvBgNV BAMTKDAyRjE0NTYwMTFDNjQ4NzkxOUQ3QzQzQTQxNkJBQkZDNjkxMDZEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmr63Z91OLLVPPLjmI54FPGIFo E8uY70VbU+EEyiOgo51cri5yjkbI3GfIYJ7hQdo68gPGBchYuB6NWIYvB+UYZRbw NgdCqXiO3iNuFmY32hYWx5VOiTlkEex55oqY3aPz+XfT24Nv0+sjez6xoed3reY5 NRVu+jJBYXr3R3SYvn9MucDcYG208LXB/CSXiwmXN3fWRJDPTwRqDFovI+Fz6fQE DRc4NQkEpNY8JO0kiQ+xhGkncofBw2uHFY56oT/AsM0HkR0+e+tqmBG3PwXck/wP 2n6WfvZBgsT1SJP8pV/hUBZFdX9Eoq2tASijMfJTPhxmNeyDPaKITgEm9J8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAvFFYBHGSHkZ18Q6QWur/GkQbbYwHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA3VoThrqKrgrmI+1MGA5aOp1xSRU9pma9e WPGGJRQtHxb64NBMYK/5VPok05X1OP81rxubgO6pvVntqkYnSh8Twxs+zt9fNTL6 CniPbrM+T/XIGc0/3NjyY6pzliq73Pv4++aAjCYh25X8ERltgsirhgXS7xyQB3sp erOY8xt5Vlv7YWxPt8J5fntT0bd0e5NdrKR8cY81VO8FHc4KutBqKqI3+ZaWfsuO R3EhiCtlw2aV7UstA20FA+ukvQFV0oahH7Mb9CoskZeW9Dpe+XtjaAjaVqLT77xC I1MZQq2vTpt4pfHXIwrTtPRWnWYG3kx+2crbkz5yrSAn9F4Bf7s= -----END CERTIFICATE-----Generated at Tue Oct 20 04:29:36 2026 by rpki-client