$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft File: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft (raw, json) Hash identifier: ceOdQKKE81RG/D6a09i0jy80qrz9k13IhN8jISMseBM= Subject key identifier: 93:7B:7A:7B:F7:0C:1B:2C:39:D3:5C:D3:7C:2B:3C:76:30:E8:52:E2 Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 46ED1E773C8EB10E0202C03C03293F6CF3B3151B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 16:40:17 +0000 Manifest this update: Mon 31 Aug 2026 16:35:17 +0000 Manifest next update: Tue 01 Sep 2026 19:56:17 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds=) 2: AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl (hash: uOWCDc+f+Aj403MK2tQ4tc7BvXedQlIJzMhX8XGUlJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 19:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ed:1e:77:3c:8e:b1:0e:02:02:c0:3c:03:29:3f:6c:f3:b3:15:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: Aug 31 16:35:17 2026 GMT Not After : Sep 1 19:56:17 2026 GMT Subject: CN=937B7A7BF70C1B2C39D35CD37C2B3C7630E852E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:ab:64:2f:b7:a0:16:8f:22:ee:54:4f:ce: 10:14:fa:9d:3a:4b:32:7d:83:e5:31:55:a4:c4:eb: 82:ee:51:84:9d:b8:04:d8:af:27:d5:6a:fd:c6:f6: 06:f9:4c:5b:2e:30:df:06:8d:15:7e:2d:16:31:07: 47:d5:1a:be:e4:86:80:c4:23:8f:ab:bd:38:64:16: 3c:69:0b:30:21:f5:6b:12:4d:52:c4:fc:c6:9f:c4: 6b:dd:c1:e6:08:58:6d:03:cf:08:29:b1:9c:a9:c1: fa:d1:54:a9:32:56:48:5c:b1:06:28:8e:4e:cc:7e: 01:2c:56:7b:92:00:b5:ff:ef:10:25:be:f2:f3:d1: 4e:e5:80:e9:b8:10:72:90:ec:be:a4:02:75:9a:1e: c6:50:c1:b9:93:d5:d2:02:3b:00:98:c8:64:38:bc: 17:49:5d:bb:83:5a:c1:21:ad:6a:a9:14:4d:20:b0: aa:3c:63:ae:70:31:d8:16:85:7a:d7:b4:ab:84:81: b5:0b:95:d4:e8:d8:1a:18:3d:81:76:14:a2:4f:ff: 6c:58:fc:b0:69:1e:19:80:4e:e8:62:5d:9b:70:f0: b4:ad:f7:79:27:9f:4c:36:96:3f:4d:28:4b:37:bf: 61:81:c1:ba:47:eb:17:6d:80:96:a8:57:a0:ee:c8: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7B:7A:7B:F7:0C:1B:2C:39:D3:5C:D3:7C:2B:3C:76:30:E8:52:E2 X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b8:8f:0d:f5:56:e2:ce:f4:16:9c:7a:4e:90:a9:86:1b:0a: 07:81:9c:e6:53:e6:c7:f3:a8:fb:08:59:28:72:8e:45:2d:8e: 20:c9:f5:0b:ae:cc:69:a0:22:0f:7c:16:8f:2b:37:48:61:fe: 1f:81:ff:21:97:7d:fe:6b:8a:59:7d:f3:7b:39:20:41:9d:cd: 1a:fd:0a:ba:55:4c:fb:0d:f7:4e:18:ae:53:1b:09:ca:81:54: fd:cd:2d:c2:30:8d:73:67:3f:5f:01:6e:d7:f5:3e:a7:88:37: 37:4d:a8:33:bf:4e:9e:6f:32:80:6c:6b:34:79:b5:6b:f1:aa: 4b:a9:75:5f:da:94:a8:0d:61:52:f7:79:e4:06:f7:62:94:6c: 8d:79:33:91:87:07:e9:e8:5b:54:29:f4:e4:73:61:48:4e:6f: d6:8e:12:00:b7:e8:b3:6c:dc:e0:f9:3a:56:6a:6c:7d:f8:92: 9c:37:5c:62:f2:92:78:19:04:2d:5d:f8:42:be:e5:12:b5:31: 58:94:37:99:9c:0d:63:1c:62:5e:81:45:d9:a8:49:e4:cc:08: 2d:b7:4e:62:b5:32:53:2e:87:27:ae:9e:4c:56:8c:67:2e:2d: 08:42:13:2c:58:e8:30:e3:ae:f1:a7:e6:b8:f1:4a:9e:dd:03: 49:df:fd:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURu0edzyOsQ4CAsA8Ayk/bPOzFRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjA4MzExNjM1MTdaFw0yNjA5MDExOTU2MTdaMDMxMTAvBgNV BAMTKDkzN0I3QTdCRjcwQzFCMkMzOUQzNUNEMzdDMkIzQzc2MzBFODUyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRu6tkL7egFo8i7lRPzhAU+p06 SzJ9g+UxVaTE64LuUYSduATYryfVav3G9gb5TFsuMN8GjRV+LRYxB0fVGr7khoDE I4+rvThkFjxpCzAh9WsSTVLE/MafxGvdweYIWG0DzwgpsZypwfrRVKkyVkhcsQYo jk7MfgEsVnuSALX/7xAlvvLz0U7lgOm4EHKQ7L6kAnWaHsZQwbmT1dICOwCYyGQ4 vBdJXbuDWsEhrWqpFE0gsKo8Y65wMdgWhXrXtKuEgbULldTo2BoYPYF2FKJP/2xY /LBpHhmATuhiXZtw8LSt93knn0w2lj9NKEs3v2GBwbpH6xdtgJaoV6DuyHVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk3t6e/cMGyw501zTfCs8djDoUuIwHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMz NjE1MUZBNENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW4jw31VuLO9Bacek6QqYYbCgeBnOZT5sfz qPsIWShyjkUtjiDJ9QuuzGmgIg98Fo8rN0hh/h+B/yGXff5rill983s5IEGdzRr9 CrpVTPsN904YrlMbCcqBVP3NLcIwjXNnP18Bbtf1PqeINzdNqDO/Tp5vMoBsazR5 tWvxqkupdV/alKgNYVL3eeQG92KUbI15M5GHB+noW1Qp9ORzYUhOb9aOEgC36LNs 3OD5OlZqbH34kpw3XGLykngZBC1d+EK+5RK1MViUN5mcDWMcYl6BRdmoSeTMCC23 TmK1MlMuhyeunkxWjGcuLQhCEyxY6DDjrvGn5rjxSp7dA0nf/Ys= -----END CERTIFICATE-----Generated at Tue Sep 1 04:07:20 2026 by rpki-client