$ rpki-client -vvf rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft File: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft (raw, json) Hash identifier: EA/F4aHEr8ng8dgosgRkEW/XMqZmjMSsPhO69p3T9OI= Subject key identifier: 99:C0:42:67:E2:F9:79:6E:52:20:17:34:2C:18:ED:09:78:BB:02:3C Authority key identifier: AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F Certificate issuer: /CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Certificate serial: 3B265E5404F54683F9758175B0522E1ACB9A370A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft Manifest number: 73 Signing time: Mon 27 Jul 2026 12:23:16 +0000 Manifest this update: Mon 27 Jul 2026 12:18:16 +0000 Manifest next update: Tue 28 Jul 2026 16:11:16 +0000 Files and hashes: 1: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl (hash: mPkdIh+Jl5+YblG6zXjsW3UT+vWieW5D1226micyP/k=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: CU3XMv/aCTAU0lNSmPec78wDsAVLMqlo9Sb+WUKv5ZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:26:5e:54:04:f5:46:83:f9:75:81:75:b0:52:2e:1a:cb:9a:37:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Validity Not Before: Jul 27 12:18:16 2026 GMT Not After : Jul 28 16:11:16 2026 GMT Subject: CN=99C04267E2F9796E522017342C18ED0978BB023C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:11:65:71:e0:2a:2d:cf:e9:ae:19:7a:f1: 8a:38:d5:31:1e:a8:8a:fb:93:ab:fa:b4:39:34:82: 76:cd:d4:b8:c8:87:b0:a3:53:20:fa:41:de:f5:20: 72:b7:f4:61:0c:d0:66:89:ad:07:55:56:cb:88:32: d4:b6:5c:e4:6b:f6:7f:af:20:1b:4e:8f:1e:1f:05: ae:4e:e1:ed:6e:8a:85:5e:dd:09:ef:92:3d:c2:a4: 2f:81:67:f9:e9:60:97:13:2d:7a:20:95:50:5a:ad: 45:55:fc:df:24:92:5e:1b:f3:f4:25:28:dc:f3:fc: 93:7e:3d:d3:09:b6:f9:46:5f:ee:00:85:f2:1c:ba: a0:b3:6e:15:6e:f1:bd:17:2b:87:ed:81:d7:73:83: cf:ae:27:a7:07:83:59:72:d7:eb:cf:b0:c1:28:a1: 8d:c0:0c:e1:86:0b:91:59:e0:88:d2:a8:0f:b2:08: 02:c7:fd:ad:a1:8c:7f:0d:59:79:ab:d0:2b:12:dc: 17:4c:d5:e2:f4:88:65:3a:32:b7:c3:dc:25:d5:77: 66:1b:34:dc:70:99:27:25:82:82:df:27:f6:45:8a: 2d:d0:51:3a:c9:9e:2a:72:6b:50:ed:5c:d1:91:87: f5:d0:8b:c8:77:00:b2:80:79:73:37:f0:25:08:4d: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C0:42:67:E2:F9:79:6E:52:20:17:34:2C:18:ED:09:78:BB:02:3C X509v3 Authority Key Identifier: keyid:AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:66:17:b5:34:e0:54:22:4a:bd:17:55:29:89:f3:bf:52:b9: cb:76:72:b7:e0:45:6e:9d:cb:ea:d3:1f:58:24:c5:fc:1e:fe: f5:eb:c6:74:96:e8:26:97:ab:65:2d:e3:ae:d8:dd:cc:44:57: 69:fc:71:a0:59:1b:3d:60:84:88:79:f6:cb:04:b3:f1:33:3c: b7:eb:68:b3:79:5b:c8:10:74:16:01:9c:a5:82:b3:15:b4:e1: e5:64:bd:2a:62:4f:f1:d1:46:bc:c9:aa:87:03:94:d7:12:5b: d4:8c:64:39:48:fb:9c:97:93:7d:07:e9:3d:24:9f:cc:05:e3: 67:5d:45:8a:10:1b:20:19:d2:f3:a4:ee:af:1b:24:22:ff:b0: a8:21:de:46:ae:6d:35:4c:f4:50:10:be:75:47:45:3b:ff:7f: e2:b1:ed:80:0c:db:71:39:d3:e4:3d:6f:23:c4:02:8b:25:bf: 29:a0:ef:e9:ff:8f:86:aa:36:c0:87:eb:fa:78:30:38:10:ec: 76:75:d3:12:df:a9:00:b9:de:f3:8d:f6:d4:7f:c7:f1:1a:5f: 9e:6e:99:ec:79:98:d9:24:68:88:f3:d1:cf:01:9d:3f:16:fb: fa:1d:a3:91:19:21:82:a9:ab:f5:92:29:fc:f4:ee:b9:1c:e1: 68:f4:d3:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyZeVAT1RoP5dYF1sFIuGsuaNwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0 NkNBNjgxRjAeFw0yNjA3MjcxMjE4MTZaFw0yNjA3MjgxNjExMTZaMDMxMTAvBgNV BAMTKDk5QzA0MjY3RTJGOTc5NkU1MjIwMTczNDJDMThFRDA5NzhCQjAyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tRFlceAqLc/prhl68Yo41TEe qIr7k6v6tDk0gnbN1LjIh7CjUyD6Qd71IHK39GEM0GaJrQdVVsuIMtS2XORr9n+v IBtOjx4fBa5O4e1uioVe3Qnvkj3CpC+BZ/npYJcTLXoglVBarUVV/N8kkl4b8/Ql KNzz/JN+PdMJtvlGX+4AhfIcuqCzbhVu8b0XK4ftgddzg8+uJ6cHg1ly1+vPsMEo oY3ADOGGC5FZ4IjSqA+yCALH/a2hjH8NWXmr0CsS3BdM1eL0iGU6MrfD3CXVd2Yb NNxwmSclgoLfJ/ZFii3QUTrJnipya1DtXNGRh/XQi8h3ALKAeXM38CUITWtXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmcBCZ+L5eW5SIBc0LBjtCXi7AjwwHwYDVR0j BBgwFoAUqsk2NqavLKsCHVJjotNomkbKaB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjYxNGNlZTAtNWRmNi00YjJiLWJiM2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZB NkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0NkNBNjgxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUM5MzYzNkE2QUYyQ0FCMDIxRDUyNjNBMkQzNjg5QTQ2Q0E2 ODFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4 OUE0NkNBNjgxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5mF7U04FQiSr0XVSmJ879Suct2crfgRW6d y+rTH1gkxfwe/vXrxnSW6CaXq2Ut467Y3cxEV2n8caBZGz1ghIh59ssEs/EzPLfr aLN5W8gQdBYBnKWCsxW04eVkvSpiT/HRRrzJqocDlNcSW9SMZDlI+5yXk30H6T0k n8wF42ddRYoQGyAZ0vOk7q8bJCL/sKgh3kaubTVM9FAQvnVHRTv/f+Kx7YAM23E5 0+Q9byPEAoslvymg7+n/j4aqNsCH6/p4MDgQ7HZ10xLfqQC53vON9tR/x/EaX55u mex5mNkkaIjz0c8BnT8W+/odo5EZIYKpq/WSKfz07rkc4Wj00wk= -----END CERTIFICATE-----Generated at Mon Jul 27 14:30:56 2026 by rpki-client