$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft File: AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft (raw, json) Hash identifier: HQvnIOz3Ktw8JCfaOr9gIC/XaCWIjPuDuSxQHu8NzaQ= Subject key identifier: 87:2F:6D:58:5B:25:CC:8D:9F:B5:54:6B:36:74:40:16:42:1D:99:35 Authority key identifier: AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F Certificate issuer: /CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Certificate serial: 5AA9AE7B64B1A5E3BD718D7B22F6E9230E1F90DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:53:15 +0000 Manifest this update: Thu 17 Sep 2026 07:48:15 +0000 Manifest next update: Fri 18 Sep 2026 09:14:15 +0000 Files and hashes: 1: AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl (hash: 7xspsybLJhC3ZBIfwhpZHVRW2qHJ7tyGD3YQus7xXVM=) 2: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: ewfsYYBTx06fI9ZJBdkWQ9OcyfPFI+ANp/78GnZ38BE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a9:ae:7b:64:b1:a5:e3:bd:71:8d:7b:22:f6:e9:23:0e:1f:90:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F Validity Not Before: Sep 17 07:48:15 2026 GMT Not After : Sep 18 09:14:15 2026 GMT Subject: CN=872F6D585B25CC8D9FB5546B36744016421D9935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:f4:98:26:58:e3:1f:88:ba:0c:93:2d:2e: 3f:1a:71:9e:9f:4b:45:e3:38:96:4a:15:f0:bb:de: 1d:2b:e5:4d:4c:8b:1a:9a:a2:32:f5:b0:f5:4d:70: b3:6a:4f:c0:31:98:a1:a6:a5:26:b7:52:36:df:3e: df:18:c4:a6:7e:2d:1e:3c:2b:b3:b8:81:65:5a:29: 7c:ef:fa:41:56:f3:35:c8:58:c7:f6:de:6f:27:a9: d7:7d:6d:15:ad:3d:da:04:1b:6b:5b:e3:e6:72:ad: bb:c8:55:18:4a:2c:87:d3:c4:d6:e4:24:c5:4b:16: 9d:61:3a:80:ba:a7:f6:58:c4:fe:68:f2:1e:ef:4f: 64:dc:5f:cb:5d:cd:92:b6:ce:3c:cd:87:a7:86:f0: 93:07:60:59:79:31:20:0a:c7:5f:bf:0f:49:ba:f8: 61:e0:00:61:db:04:4a:19:55:84:36:0d:33:c2:3a: c1:7c:e8:a6:1e:ad:5f:cc:28:4f:38:38:80:a1:2e: 45:36:66:6c:2d:3d:76:39:9e:ce:86:fc:3e:2c:6c: be:3b:8e:2c:6f:7a:ee:2e:65:19:f2:c5:15:39:11: c6:41:ec:bc:a4:5e:16:80:10:37:5d:6a:8f:d7:7f: a7:8c:a7:a4:51:89:e8:c4:c9:4f:26:e1:34:dd:e4: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2F:6D:58:5B:25:CC:8D:9F:B5:54:6B:36:74:40:16:42:1D:99:35 X509v3 Authority Key Identifier: keyid:AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:63:be:1e:3e:04:60:9f:d0:fc:c5:98:85:6a:c0:cd:df:c0: d6:fc:66:6a:e9:41:95:38:d0:fa:8c:25:b3:a1:81:a8:aa:05: ca:2b:2a:64:9e:86:7c:33:4a:0b:14:3e:76:11:a7:1a:27:6c: 31:5a:b8:05:2d:2f:d4:03:84:0c:10:96:ff:24:d3:05:fd:c6: 0a:3e:30:db:97:05:10:eb:40:e5:f9:ba:72:e2:01:43:d3:4d: 9a:5c:9f:6c:2a:47:58:ca:53:c7:d4:c3:d6:e7:4d:31:8a:bb: 7a:03:a0:56:1d:f1:de:c7:6b:30:fd:a5:e6:9f:42:94:71:b1: 79:9b:87:04:a0:f9:8c:50:69:ad:26:05:ea:32:24:7e:3a:8c: 1e:fb:d7:6f:8e:15:11:c3:bc:c2:2e:5f:94:41:18:00:c5:48: fd:aa:82:54:35:fc:65:bb:ac:77:d3:22:b1:61:c6:d1:80:ed: 3c:80:03:f6:8a:ee:1b:3f:f1:7f:92:4e:bc:12:d0:13:2d:c5: 70:b0:03:27:64:24:37:4e:e5:8f:83:10:38:7b:e3:ff:c6:40: 05:3c:04:77:dc:04:71:c3:a8:ea:63:69:41:69:05:b6:0a:67: d0:bc:87:ce:6f:f0:52:2d:4e:85:db:9e:2b:96:60:d0:54:46: 2c:43:19:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqmue2SxpeO9cY17IvbpIw4fkNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRG QTNFRTgzRjAeFw0yNjA5MTcwNzQ4MTVaFw0yNjA5MTgwOTE0MTVaMDMxMTAvBgNV BAMTKDg3MkY2RDU4NUIyNUNDOEQ5RkI1NTQ2QjM2NzQ0MDE2NDIxRDk5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfu/SYJljjH4i6DJMtLj8acZ6f S0XjOJZKFfC73h0r5U1MixqaojL1sPVNcLNqT8AxmKGmpSa3UjbfPt8YxKZ+LR48 K7O4gWVaKXzv+kFW8zXIWMf23m8nqdd9bRWtPdoEG2tb4+ZyrbvIVRhKLIfTxNbk JMVLFp1hOoC6p/ZYxP5o8h7vT2TcX8tdzZK2zjzNh6eG8JMHYFl5MSAKx1+/D0m6 +GHgAGHbBEoZVYQ2DTPCOsF86KYerV/MKE84OIChLkU2ZmwtPXY5ns6G/D4sbL47 jixveu4uZRnyxRU5EcZB7LykXhaAEDddao/Xf6eMp6RRiejEyU8m4TTd5Hu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhy9tWFslzI2ftVRrNnRAFkIdmTUwHwYDVR0j BBgwFoAUqo1mQ3pA1MtwN9BZ/mkhRPo+6D8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI3YjExYzItYWI5MC00MjBmLWI0OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3 QTQwRDRDQjcwMzdEMDU5RkU2OTIxNDRGQTNFRTgzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQThENjY0MzdBNDBENENCNzAzN0QwNTlGRTY5MjE0NEZBM0VF ODNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvQUE4RDY2NDM3QTQwRDRDQjcwMzdEMDU5RkU2OTIx NDRGQTNFRTgzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpjvh4+BGCf0PzFmIVqwM3fwNb8ZmrpQZU4 0PqMJbOhgaiqBcorKmSehnwzSgsUPnYRpxonbDFauAUtL9QDhAwQlv8k0wX9xgo+ MNuXBRDrQOX5unLiAUPTTZpcn2wqR1jKU8fUw9bnTTGKu3oDoFYd8d7HazD9peaf QpRxsXmbhwSg+YxQaa0mBeoyJH46jB7712+OFRHDvMIuX5RBGADFSP2qglQ1/GW7 rHfTIrFhxtGA7TyAA/aK7hs/8X+STrwS0BMtxXCwAydkJDdO5Y+DEDh74//GQAU8 BHfcBHHDqOpjaUFpBbYKZ9C8h85v8FItToXbniuWYNBURixDGfc= -----END CERTIFICATE-----Generated at Thu Sep 17 16:26:45 2026 by rpki-client