$ rpki-client -vvvf rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft File: 02AAB50744B5B2355B015A3152AD1101FDD80A06.mft (raw, json) Hash identifier: GugK8+yX5FFLcQvEu51ZkdthsEiqRUeJqUAXasGKIGE= Subject key identifier: 66:0E:BD:AE:AF:08:D4:B2:E7:DC:17:9A:AF:74:7C:33:F7:6A:96:C8 Authority key identifier: 02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06 Certificate issuer: /CN=02AAB50744B5B2355B015A3152AD1101FDD80A06 Certificate serial: 79D36F364168922E9BF49045D81F4A04AFF8B9DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:30:24 +0000 Manifest this update: Thu 17 Sep 2026 09:25:24 +0000 Manifest next update: Fri 18 Sep 2026 11:33:24 +0000 Files and hashes: 1: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: I/xRHiSouk0qQoSEfFFc5Esrv4Bnl21g3IwAa+RLLcM=) 2: 02AAB50744B5B2355B015A3152AD1101FDD80A06.crl (hash: edGkVkHJB8WDh7OFMSrtnILiUDcZly6xaQB1fBwpfzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d3:6f:36:41:68:92:2e:9b:f4:90:45:d8:1f:4a:04:af:f8:b9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AAB50744B5B2355B015A3152AD1101FDD80A06 Validity Not Before: Sep 17 09:25:24 2026 GMT Not After : Sep 18 11:33:24 2026 GMT Subject: CN=660EBDAEAF08D4B2E7DC179AAF747C33F76A96C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:18:ce:91:b0:39:f4:db:b5:91:7e:be:25: aa:fe:aa:50:ff:8c:76:f8:6a:f3:9d:36:ae:60:f0: cf:fe:58:23:f8:53:42:59:9d:fd:f6:36:53:59:d1: 92:0e:4a:e9:b3:f6:f6:ac:84:ed:29:ba:90:e0:8c: fc:9b:6c:29:dc:cf:00:d2:44:cf:bf:8f:d8:33:a5: 6b:9d:c1:bb:3c:3e:b4:13:63:c0:c8:8d:e6:7f:de: b6:0b:7a:b3:7f:30:ba:6a:1b:97:cb:14:53:a3:43: cf:a9:4d:1f:83:40:f4:4e:8f:4f:9c:98:80:d9:e4: f9:7a:fb:6d:91:56:02:bb:b9:86:dd:e3:e1:7f:46: 79:e8:88:a1:92:14:45:4b:c3:ba:bb:f8:64:27:49: 9a:6c:f1:e7:61:d1:ff:e3:c0:aa:e5:6f:51:a6:ec: ea:32:b2:3d:96:ab:d3:da:4b:f2:ef:c1:27:38:7b: dd:74:29:c8:2a:b6:b3:4f:ef:5f:60:6a:3c:84:d7: fe:3d:1c:c0:a1:74:a6:df:a9:17:74:65:35:af:85: 05:61:a0:a7:11:c9:07:da:b0:6f:f9:33:98:04:df: 52:e7:7f:cb:f7:fb:cf:69:de:95:8e:a1:92:26:82: 52:78:cb:87:98:3d:87:74:26:72:c7:91:d0:f6:06: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0E:BD:AE:AF:08:D4:B2:E7:DC:17:9A:AF:74:7C:33:F7:6A:96:C8 X509v3 Authority Key Identifier: keyid:02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:21:39:e1:44:19:7e:61:f4:3b:11:f8:0a:cd:78:89:6d:b9: 9f:d3:66:8f:fb:c8:35:31:65:69:c2:95:6e:7c:3f:33:21:ca: ff:35:16:f6:18:33:04:97:9a:b5:ee:17:29:b6:fd:7c:b1:6e: 84:b5:6a:2f:fd:94:0d:ec:a8:0c:26:ad:7f:ad:bf:ac:b0:5b: c5:7e:93:51:20:2f:5f:c6:f0:6c:8d:1f:87:d7:cd:37:56:a3: c6:00:24:6b:3c:d9:13:a9:ff:f8:77:34:2c:ba:bc:ad:30:7b: f2:4b:6b:7f:da:f2:f4:2d:b9:a0:d4:f2:16:c0:db:79:5f:9d: 39:0c:88:aa:47:ae:1e:25:2f:9e:7a:f2:08:5b:c4:da:04:0e: d6:73:96:b4:60:68:11:ac:20:0f:0b:94:58:8f:5c:f9:4d:4d: d5:2d:65:61:fc:9d:6b:f3:1e:76:34:12:00:37:da:65:d4:7b: 45:c5:ef:df:57:10:77:a1:af:8a:5f:8d:7f:d8:76:a4:92:fd: b2:d2:e4:41:38:1c:88:84:27:e1:85:67:60:eb:12:a9:1c:aa: 3e:2c:f6:35:af:83:41:78:b7:2f:d8:67:a7:d6:98:d2:f7:48: 70:7f:3f:bd:c3:7e:01:c2:29:b8:1a:b8:f6:d8:86:8d:12:01: 0f:b0:9b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedNvNkFoki6b9JBF2B9KBK/4ud4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQUI1MDc0NEI1QjIzNTVCMDE1QTMxNTJBRDExMDFG REQ4MEEwNjAeFw0yNjA5MTcwOTI1MjRaFw0yNjA5MTgxMTMzMjRaMDMxMTAvBgNV BAMTKDY2MEVCREFFQUYwOEQ0QjJFN0RDMTc5QUFGNzQ3QzMzRjc2QTk2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwBjOkbA59Nu1kX6+Jar+qlD/ jHb4avOdNq5g8M/+WCP4U0JZnf32NlNZ0ZIOSumz9vashO0pupDgjPybbCnczwDS RM+/j9gzpWudwbs8PrQTY8DIjeZ/3rYLerN/MLpqG5fLFFOjQ8+pTR+DQPROj0+c mIDZ5Pl6+22RVgK7uYbd4+F/RnnoiKGSFEVLw7q7+GQnSZps8edh0f/jwKrlb1Gm 7Ooysj2Wq9PaS/LvwSc4e910KcgqtrNP719gajyE1/49HMChdKbfqRd0ZTWvhQVh oKcRyQfasG/5M5gE31Lnf8v3+89p3pWOoZImglJ4y4eYPYd0JnLHkdD2BvpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZg69rq8I1LLn3Bear3R8M/dqlsgwHwYDVR0j BBgwFoAUAqq1B0S1sjVbAVoxUq0RAf3YCgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5YzdjOTYtN2FiYi00NWFjLWEwY2ItZDdmZmQwOWMxODc2LzAvMDJBQUI1MDc0 NEI1QjIzNTVCMDE1QTMxNTJBRDExMDFGREQ4MEEwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkFBQjUwNzQ0QjVCMjM1NUIwMTVBMzE1MkFEMTEwMUZERDgw QTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5YzdjOTYtN2FiYi00NWFjLWEw Y2ItZDdmZmQwOWMxODc2LzAvMDJBQUI1MDc0NEI1QjIzNTVCMDE1QTMxNTJBRDEx MDFGREQ4MEEwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8hOeFEGX5h9DsR+ArNeIltuZ/TZo/7yDUx ZWnClW58PzMhyv81FvYYMwSXmrXuFym2/XyxboS1ai/9lA3sqAwmrX+tv6ywW8V+ k1EgL1/G8GyNH4fXzTdWo8YAJGs82ROp//h3NCy6vK0we/JLa3/a8vQtuaDU8hbA 23lfnTkMiKpHrh4lL5568ghbxNoEDtZzlrRgaBGsIA8LlFiPXPlNTdUtZWH8nWvz HnY0EgA32mXUe0XF799XEHehr4pfjX/YdqSS/bLS5EE4HIiEJ+GFZ2DrEqkcqj4s 9jWvg0F4ty/YZ6fWmNL3SHB/P73DfgHCKbgauPbYho0SAQ+wm+M= -----END CERTIFICATE-----Generated at Thu Sep 17 12:22:43 2026 by rpki-client