$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft File: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft (raw, json) Hash identifier: cISFqT0uJFEJXT1rtJxcBTwQWcloJnjQ4A+/z7FuVmc= Subject key identifier: 1C:A8:60:81:83:EF:46:39:6C:12:D4:C4:4B:96:76:0D:53:4E:23:6C Authority key identifier: AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F Certificate issuer: /CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Certificate serial: 5AFFC8A2FCD5FEFB88483C226E752CE504C87816 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft Manifest number: F0 Signing time: Wed 28 Oct 2026 20:50:57 +0000 Manifest this update: Wed 28 Oct 2026 20:45:57 +0000 Manifest next update: Thu 29 Oct 2026 21:08:57 +0000 Files and hashes: 1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: CU3XMv/aCTAU0lNSmPec78wDsAVLMqlo9Sb+WUKv5ZY=) 2: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl (hash: ZF4KseaosLzirMsh9VpNQgCEpuYuJ3/HVW2K1GJQQR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 21:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ff:c8:a2:fc:d5:fe:fb:88:48:3c:22:6e:75:2c:e5:04:c8:78:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Validity Not Before: Oct 28 20:45:57 2026 GMT Not After : Oct 29 21:08:57 2026 GMT Subject: CN=1CA8608183EF46396C12D4C44B96760D534E236C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:7a:7a:ec:e9:e5:03:18:fc:1b:d1:ef:b4: c2:11:08:9c:51:cb:d4:78:54:1c:3d:a5:9f:e0:91: 03:17:6a:d0:a5:4c:0c:d0:5b:ab:d0:bf:a9:4e:fa: a6:41:c9:94:d5:61:fe:e9:6c:e4:fa:95:13:e3:9b: 02:30:2d:bc:24:5b:b1:a2:73:d9:ee:79:da:3c:81: f8:d8:37:11:0e:dd:e6:69:f1:1d:c8:3f:ac:e8:f8: 6a:de:ac:c1:ee:3a:9f:85:74:2e:20:22:ab:20:b6: ca:51:66:72:7b:16:61:97:c1:96:0c:1b:34:af:98: f3:9f:07:88:38:5e:7a:ef:dc:4b:c1:ac:2e:34:05: 52:7f:a7:1b:98:2d:43:81:20:4c:28:39:b2:5f:b5: 40:21:7d:77:fa:83:fb:51:fc:ab:0f:a1:ea:86:64: 71:d2:5b:37:5e:4c:9f:73:35:6e:2f:73:be:fd:70: 99:27:42:75:19:fa:69:1d:5b:30:ab:1e:2b:9a:57: 0d:d8:03:83:da:ab:2a:2c:f2:c0:d0:7c:b1:87:cb: 1f:c9:6d:02:9c:de:1d:d1:63:fa:d5:79:b1:02:6b: c4:d6:6a:66:81:b1:59:8f:af:ca:41:2b:e5:02:de: ab:0b:6c:13:6d:1c:36:2d:1f:d4:0e:b9:e4:a3:7f: e9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A8:60:81:83:EF:46:39:6C:12:D4:C4:4B:96:76:0D:53:4E:23:6C X509v3 Authority Key Identifier: keyid:AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5a:ab:52:36:1b:ad:aa:1d:6a:29:05:f7:89:9a:11:70:da: c8:fe:c1:36:9c:c2:03:c1:55:b1:f2:1e:d2:3c:1d:d8:46:2e: 8e:a7:6d:54:05:2b:5e:c5:f8:c3:cf:af:34:7a:d1:3f:16:56: 99:0d:78:50:50:f8:21:bb:00:7b:c7:d8:19:36:09:17:3b:35: e0:cb:9b:48:4b:46:44:d1:97:86:74:cd:b2:e4:21:76:33:ac: ae:18:77:b0:a5:70:61:48:73:42:78:51:0c:ac:28:2d:4c:8d: ad:38:4d:f9:87:7d:ca:b3:9a:65:92:38:30:6d:35:b5:cb:43: 39:fc:ed:f8:e8:56:85:19:09:5b:70:d4:b1:be:10:3a:15:09: dd:1d:8d:86:f9:f3:a0:37:01:2f:f3:3a:8e:9c:be:f6:67:87: 73:01:b5:da:a8:1c:84:1d:2a:8a:9f:2b:49:d8:9b:2a:16:52: 93:24:fd:85:1e:ec:53:b6:59:38:5b:87:b9:a8:23:51:a2:84: c1:91:e7:9f:b6:72:c4:6a:bd:50:ac:09:2e:2a:12:b9:90:01: 33:39:d3:ab:77:2a:2a:27:11:e3:f0:09:9f:93:6a:fa:4b:61: 9f:99:cf:08:e5:41:98:95:dd:9f:cb:81:bb:d5:2b:2b:8c:24: f8:e2:0b:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWv/IovzV/vuISDwibnUs5QTIeBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0 NkNBNjgxRjAeFw0yNjEwMjgyMDQ1NTdaFw0yNjEwMjkyMTA4NTdaMDMxMTAvBgNV BAMTKDFDQTg2MDgxODNFRjQ2Mzk2QzEyRDRDNDRCOTY3NjBENTM0RTIzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcXp67OnlAxj8G9HvtMIRCJxR y9R4VBw9pZ/gkQMXatClTAzQW6vQv6lO+qZByZTVYf7pbOT6lRPjmwIwLbwkW7Gi c9nuedo8gfjYNxEO3eZp8R3IP6zo+GrerMHuOp+FdC4gIqsgtspRZnJ7FmGXwZYM GzSvmPOfB4g4Xnrv3EvBrC40BVJ/pxuYLUOBIEwoObJftUAhfXf6g/tR/KsPoeqG ZHHSWzdeTJ9zNW4vc779cJknQnUZ+mkdWzCrHiuaVw3YA4Paqyos8sDQfLGHyx/J bQKc3h3RY/rVebECa8TWamaBsVmPr8pBK+UC3qsLbBNtHDYtH9QOueSjf+nVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHKhggYPvRjlsEtTES5Z2DVNOI2wwHwYDVR0j BBgwFoAUqsk2NqavLKsCHVJjotNomkbKaB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjYxNGNlZTAtNWRmNi00YjJiLWJiM2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZB NkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0NkNBNjgxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUM5MzYzNkE2QUYyQ0FCMDIxRDUyNjNBMkQzNjg5QTQ2Q0E2 ODFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4 OUE0NkNBNjgxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1aq1I2G62qHWopBfeJmhFw2sj+wTacwgPB VbHyHtI8HdhGLo6nbVQFK17F+MPPrzR60T8WVpkNeFBQ+CG7AHvH2Bk2CRc7NeDL m0hLRkTRl4Z0zbLkIXYzrK4Yd7ClcGFIc0J4UQysKC1Mja04TfmHfcqzmmWSODBt NbXLQzn87fjoVoUZCVtw1LG+EDoVCd0djYb586A3AS/zOo6cvvZnh3MBtdqoHIQd KoqfK0nYmyoWUpMk/YUe7FO2WThbh7moI1GihMGR55+2csRqvVCsCS4qErmQATM5 06t3KionEePwCZ+TavpLYZ+ZzwjlQZiV3Z/LgbvVKyuMJPjiC9U= -----END CERTIFICATE-----Generated at Thu Oct 29 06:45:40 2026 by rpki-client