$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft File: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft (raw, json) Hash identifier: kYj900gHOEmV9sFjTkizynYqqTrNnZJXoNdTuEY05jw= Subject key identifier: ED:80:73:22:6C:CE:B9:AE:0B:4A:38:16:CF:8C:CE:06:A1:D6:D0:82 Authority key identifier: 2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE Certificate issuer: /CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Certificate serial: 78D3294F03765C8CD60D06D0323B05E6C20861D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 08:34:42 +0000 Manifest this update: Sat 24 Oct 2026 08:29:42 +0000 Manifest next update: Sun 25 Oct 2026 09:57:42 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: dZhfKdQv3o4ubnF31yoaIvJtkGW4D/+D/cLAtWAUEM0=) 2: 2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl (hash: wk7p0wNBQmKjPWUO7GTB/5GnBPkBAKiNEICcfbEeGwU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d3:29:4f:03:76:5c:8c:d6:0d:06:d0:32:3b:05:e6:c2:08:61:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE Validity Not Before: Oct 24 08:29:42 2026 GMT Not After : Oct 25 09:57:42 2026 GMT Subject: CN=ED8073226CCEB9AE0B4A3816CF8CCE06A1D6D082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bb:84:a2:fc:ec:bf:4d:16:b7:02:b0:a7:60: d8:b9:52:6d:d8:98:96:18:16:00:e2:5b:01:ab:cf: 25:67:9a:6e:d7:44:11:af:53:47:2a:cf:65:e9:aa: 73:9a:fd:fa:fa:0d:c0:e0:db:76:dd:ab:53:ab:40: b3:13:89:e8:0c:e5:d2:0a:90:ef:2a:03:7a:90:2a: 2f:33:fa:6a:0c:51:12:ee:36:64:97:f5:93:a1:20: 28:7e:80:f3:53:05:98:04:e6:85:52:11:94:bd:20: 39:04:9e:74:5d:de:49:5b:fa:79:83:88:57:2b:dc: d2:0f:b0:55:8e:46:e1:16:90:b6:ea:60:2d:a1:47: 3c:8d:33:10:05:40:7f:0d:85:cd:9c:a7:4b:90:35: df:ee:df:62:de:5e:d8:88:d7:25:6b:78:78:da:a6: 8f:bf:55:1c:bb:f9:97:c7:98:40:fc:cc:b7:98:9a: 7b:b8:82:fb:37:d1:17:cd:e9:23:c5:09:58:c9:04: 14:ab:d8:1b:37:c7:f4:a9:63:84:6a:e6:20:ba:ee: 70:e3:16:e2:cc:fe:ae:a6:ea:20:01:c0:5b:dc:ff: 6e:59:96:88:04:02:aa:8a:e3:74:e0:07:e9:fe:69: 81:7e:44:ae:36:fe:d1:81:20:cf:a8:f9:dc:7f:d1: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:80:73:22:6C:CE:B9:AE:0B:4A:38:16:CF:8C:CE:06:A1:D6:D0:82 X509v3 Authority Key Identifier: keyid:2A:A2:C2:03:9F:F7:2E:89:6E:CE:6F:0E:3E:AD:38:A0:28:1A:75:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/2AA2C2039FF72E896ECE6F0E3EAD38A0281A75AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4d:bb:03:39:7b:ac:11:3c:dd:7c:b4:6a:c5:c6:a6:c1:a6: b9:67:13:d0:de:a5:87:6c:95:29:1f:ed:51:68:d9:d7:85:9a: 26:35:c0:32:eb:0e:bb:d5:fb:a2:12:9f:6b:9e:9d:2e:cf:14: 7d:06:e3:b3:5c:a9:06:2c:a0:2e:11:6e:eb:85:92:82:79:01: d9:63:d4:a0:0c:a1:48:73:bf:ff:11:97:86:58:9a:f9:d9:44: 21:96:ce:e9:69:9c:52:90:59:cc:28:98:f0:76:16:f4:c5:fc: 8f:97:07:64:20:cf:7a:e3:ff:29:93:44:6e:16:e4:43:12:31: 03:6d:20:bd:60:ae:10:5d:7c:ef:d2:aa:f8:91:74:6b:3e:6a: 8d:87:3e:4c:9a:3d:15:1b:8e:20:e9:5a:8d:f5:d8:40:4e:48: 29:f4:62:18:27:bb:1d:64:3c:c9:b9:ff:e3:bf:ca:bf:dc:3b: 4c:8b:49:72:5f:72:b3:47:fe:66:4d:f4:f4:fb:81:c8:67:ec: d2:f3:2b:d8:34:73:85:69:eb:29:c5:b6:69:f9:26:2a:04:12: 05:f6:29:ca:1b:27:36:e3:56:ec:e9:ab:eb:91:66:d4:8e:2f: c7:56:ae:c5:49:08:44:68:aa:b2:02:35:e6:57:3a:03:dd:f2: ab:6c:8d:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNMpTwN2XIzWDQbQMjsF5sIIYdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAy ODFBNzVBRTAeFw0yNjEwMjQwODI5NDJaFw0yNjEwMjUwOTU3NDJaMDMxMTAvBgNV BAMTKEVEODA3MzIyNkNDRUI5QUUwQjRBMzgxNkNGOENDRTA2QTFENkQwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqu4Si/Oy/TRa3ArCnYNi5Um3Y mJYYFgDiWwGrzyVnmm7XRBGvU0cqz2XpqnOa/fr6DcDg23bdq1OrQLMTiegM5dIK kO8qA3qQKi8z+moMURLuNmSX9ZOhICh+gPNTBZgE5oVSEZS9IDkEnnRd3klb+nmD iFcr3NIPsFWORuEWkLbqYC2hRzyNMxAFQH8Nhc2cp0uQNd/u32LeXtiI1yVreHja po+/VRy7+ZfHmED8zLeYmnu4gvs30RfN6SPFCVjJBBSr2Bs3x/SpY4Rq5iC67nDj FuLM/q6m6iABwFvc/25ZlogEAqqK43TgB+n+aYF+RK42/tGBIM+o+dx/0Y2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YBzImzOua4LSjgWz4zOBqHW0IIwHwYDVR0j BBgwFoAUKqLCA5/3Loluzm8OPq04oCgada4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNlMjdkYTktZTZlNi00NGE1LTk4ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5 RkY3MkU4OTZFQ0U2RjBFM0VBRDM4QTAyODFBNzVBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQUEyQzIwMzlGRjcyRTg5NkVDRTZGMEUzRUFEMzhBMDI4MUE3 NUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvMkFBMkMyMDM5RkY3MkU4OTZFQ0U2RjBFM0VBRDM4 QTAyODFBNzVBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVNuwM5e6wRPN18tGrFxqbBprlnE9DepYds lSkf7VFo2deFmiY1wDLrDrvV+6ISn2uenS7PFH0G47NcqQYsoC4RbuuFkoJ5Adlj 1KAMoUhzv/8Rl4ZYmvnZRCGWzulpnFKQWcwomPB2FvTF/I+XB2Qgz3rj/ymTRG4W 5EMSMQNtIL1grhBdfO/SqviRdGs+ao2HPkyaPRUbjiDpWo312EBOSCn0Yhgnux1k PMm5/+O/yr/cO0yLSXJfcrNH/mZN9PT7gchn7NLzK9g0c4Vp6ynFtmn5JioEEgX2 KcobJzbjVuzpq+uRZtSOL8dWrsVJCERoqrICNeZXOgPd8qtsjZU= -----END CERTIFICATE-----Generated at Sun Oct 25 02:24:58 2026 by rpki-client