$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft File: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft (raw, json) Hash identifier: +1twyX5tmuFyjzFlka1sy5/3q7F/ttzvHrZMLuQUrbM= Subject key identifier: E7:C8:68:63:AE:A5:53:F3:3E:8A:E2:16:E6:CF:E1:75:8B:E0:63:38 Authority key identifier: AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F Certificate issuer: /CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Certificate serial: 1990A49E72A28BAB471CF264BDDBE212DF54369C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft Manifest number: B0 Signing time: Thu 10 Sep 2026 23:45:45 +0000 Manifest this update: Thu 10 Sep 2026 23:40:45 +0000 Manifest next update: Sat 12 Sep 2026 02:28:45 +0000 Files and hashes: 1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: CU3XMv/aCTAU0lNSmPec78wDsAVLMqlo9Sb+WUKv5ZY=) 2: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl (hash: w0LAzq7qtX/m6J7uEHLqmSDFekwejYsuRKKPwyiErWk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:90:a4:9e:72:a2:8b:ab:47:1c:f2:64:bd:db:e2:12:df:54:36:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Validity Not Before: Sep 10 23:40:45 2026 GMT Not After : Sep 12 02:28:45 2026 GMT Subject: CN=E7C86863AEA553F33E8AE216E6CFE1758BE06338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:ed:ef:b4:f9:69:f0:93:73:66:15:7d:00: d6:13:7c:94:8e:47:8e:82:c4:20:14:6e:f5:d4:63: e4:ab:5a:cd:97:aa:e3:40:36:e3:a3:8b:0d:e4:f7: 7c:84:e9:7a:84:84:06:f0:74:d8:9a:8d:d7:4b:cb: df:69:c4:93:b1:a7:12:76:d4:bd:ee:2e:18:9d:af: d8:c4:d7:83:d0:b2:c0:09:6f:1d:a0:88:e3:49:12: 09:72:96:16:89:1e:4d:27:d0:00:2a:49:96:e9:40: 00:5f:4f:90:80:b7:11:ff:dd:dd:67:81:f8:88:36: f1:55:cc:54:3a:f1:34:59:64:bb:55:4b:d6:85:8d: 9f:58:6f:65:3c:82:4d:24:05:7c:69:df:a4:83:6b: 49:f4:06:34:de:4b:d8:c0:d6:b0:b9:98:50:6f:66: c1:7b:55:5c:7f:e9:61:7d:17:81:93:67:1e:b2:50: 83:0d:ef:70:25:36:1a:be:36:49:50:c1:88:62:e6: fe:3c:04:f9:78:e1:b5:0d:3d:53:08:5b:8a:5e:2c: 1e:15:7b:45:19:02:7e:1f:b3:6c:7b:6c:19:83:d9: f8:1b:76:65:88:2a:d9:44:09:8d:d3:04:01:21:40: a8:ce:56:c3:92:9b:95:ac:bf:2a:41:38:d7:ea:c5: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C8:68:63:AE:A5:53:F3:3E:8A:E2:16:E6:CF:E1:75:8B:E0:63:38 X509v3 Authority Key Identifier: keyid:AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d9:da:3e:1e:7a:7c:f1:f8:7c:81:8a:89:db:42:6a:59:d3: 7f:ea:90:7f:e5:30:ff:3e:9f:7c:86:c7:21:12:fe:ee:c0:d5: d4:49:19:f8:b9:09:e8:b0:ca:b5:b9:10:1c:a4:22:8b:b7:b2: 10:68:b1:cb:66:5d:09:1c:6c:30:ad:f5:31:14:90:6f:4a:be: 9c:91:c3:da:bc:3e:f3:cc:65:d6:7b:b7:3d:ae:78:f7:b5:3d: 09:67:09:45:17:ad:28:4d:3b:ab:a7:9f:fb:71:52:83:2b:41: 32:30:c3:70:c0:bc:04:d5:c1:a6:ae:73:29:94:ec:7c:58:f6: 94:f1:81:0a:2c:08:18:15:2c:9f:f4:a1:75:95:56:fb:ac:51: 9a:b8:14:24:02:9c:0b:1a:5a:eb:d0:fa:02:d2:c0:d9:dd:f3: 87:91:7d:fc:52:03:39:59:61:e6:92:c9:65:d9:b0:72:42:b1: b8:cb:ef:fe:d4:60:05:60:19:38:78:20:9f:b7:5a:c3:e4:e2: a2:d1:c2:46:61:25:41:7e:b9:89:42:4d:1b:9c:c9:f5:57:30: 56:a2:81:60:a7:c7:75:f1:58:78:e5:25:06:72:c3:fe:1e:0d: 81:14:9a:03:61:07:dc:c3:6b:6e:6c:d0:71:39:70:1a:af:c6: 68:b9:ad:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZCknnKii6tHHPJkvdviEt9UNpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0 NkNBNjgxRjAeFw0yNjA5MTAyMzQwNDVaFw0yNjA5MTIwMjI4NDVaMDMxMTAvBgNV BAMTKEU3Qzg2ODYzQUVBNTUzRjMzRThBRTIxNkU2Q0ZFMTc1OEJFMDYzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Le3vtPlp8JNzZhV9ANYTfJSO R46CxCAUbvXUY+SrWs2XquNANuOjiw3k93yE6XqEhAbwdNiajddLy99pxJOxpxJ2 1L3uLhidr9jE14PQssAJbx2giONJEglylhaJHk0n0AAqSZbpQABfT5CAtxH/3d1n gfiINvFVzFQ68TRZZLtVS9aFjZ9Yb2U8gk0kBXxp36SDa0n0BjTeS9jA1rC5mFBv ZsF7VVx/6WF9F4GTZx6yUIMN73AlNhq+NklQwYhi5v48BPl44bUNPVMIW4peLB4V e0UZAn4fs2x7bBmD2fgbdmWIKtlECY3TBAEhQKjOVsOSm5WsvypBONfqxV0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58hoY66lU/M+iuIW5s/hdYvgYzgwHwYDVR0j BBgwFoAUqsk2NqavLKsCHVJjotNomkbKaB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjYxNGNlZTAtNWRmNi00YjJiLWJiM2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZB NkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0NkNBNjgxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUM5MzYzNkE2QUYyQ0FCMDIxRDUyNjNBMkQzNjg5QTQ2Q0E2 ODFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4 OUE0NkNBNjgxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnZ2j4eenzx+HyBionbQmpZ03/qkH/lMP8+ n3yGxyES/u7A1dRJGfi5CeiwyrW5EBykIou3shBosctmXQkcbDCt9TEUkG9KvpyR w9q8PvPMZdZ7tz2uePe1PQlnCUUXrShNO6unn/txUoMrQTIww3DAvATVwaaucymU 7HxY9pTxgQosCBgVLJ/0oXWVVvusUZq4FCQCnAsaWuvQ+gLSwNnd84eRffxSAzlZ YeaSyWXZsHJCsbjL7/7UYAVgGTh4IJ+3WsPk4qLRwkZhJUF+uYlCTRucyfVXMFai gWCnx3XxWHjlJQZyw/4eDYEUmgNhB9zDa25s0HE5cBqvxmi5rc4= -----END CERTIFICATE-----Generated at Fri Sep 11 02:49:08 2026 by rpki-client