$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft File: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft (raw, json) Hash identifier: tqfEdrgWylHDzY4FyMoCKBtUfA2LaDfr0RSAvy42NYA= Subject key identifier: 5F:96:97:14:0A:26:55:C0:5E:1A:24:6A:9F:83:A7:7F:89:D6:C7:B8 Authority key identifier: AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F Certificate issuer: /CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Certificate serial: 5207EDB9DD2345059C6658F826D3CBB9B5D82DD1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft Manifest number: AF Signing time: Thu 10 Sep 2026 05:13:25 +0000 Manifest this update: Thu 10 Sep 2026 05:08:25 +0000 Manifest next update: Fri 11 Sep 2026 07:43:25 +0000 Files and hashes: 1: AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl (hash: 56myanrTyAtmu+YCc1qpSZdvHKXdYBSCGZhqPSCWeOw=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: CU3XMv/aCTAU0lNSmPec78wDsAVLMqlo9Sb+WUKv5ZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 07:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:07:ed:b9:dd:23:45:05:9c:66:58:f8:26:d3:cb:b9:b5:d8:2d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC93636A6AF2CAB021D5263A2D3689A46CA681F Validity Not Before: Sep 10 05:08:25 2026 GMT Not After : Sep 11 07:43:25 2026 GMT Subject: CN=5F9697140A2655C05E1A246A9F83A77F89D6C7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:54:46:7f:53:e3:12:3e:08:65:fe:49:a1:55: ed:58:2c:2e:ce:a7:38:d6:5a:fa:79:dd:64:29:ad: bb:47:d3:da:d5:e8:5b:c8:98:96:d7:92:39:8a:3d: 94:24:9d:f4:96:eb:07:c5:85:e5:3e:ba:f0:ad:73: 05:92:8c:62:73:36:d6:79:f0:ad:a4:96:8a:96:22: 77:97:a8:58:f1:8e:70:0e:f9:21:bf:cc:18:e2:d0: 65:ef:58:c7:d1:6d:6e:83:c2:a1:2a:5a:ec:30:19: 7b:b9:82:bd:e3:4b:bc:7c:3c:f9:b9:b3:b9:a6:9d: 4e:47:93:e5:04:a4:96:30:d7:4f:63:c0:8d:5d:2a: eb:c5:39:00:41:d2:f2:27:e2:84:e8:8d:97:69:88: 0a:81:3f:f0:06:70:41:1b:37:cf:9d:5f:8f:31:5a: 2d:80:3a:b8:cf:ff:58:52:d8:f3:c8:5e:96:f4:2d: 16:37:67:c4:2c:50:b0:e6:93:e8:f3:4e:e1:2c:d3: 85:36:f0:52:6e:41:b6:ff:9d:54:f1:f1:2f:24:fc: 79:21:20:c6:13:f9:9b:07:5f:a1:45:65:5b:b0:1e: 85:75:4b:02:90:7c:d9:ec:b9:04:b8:19:fe:f4:f7: cf:e2:78:42:04:d6:76:7e:63:d8:ea:79:75:ec:30: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:96:97:14:0A:26:55:C0:5E:1A:24:6A:9F:83:A7:7F:89:D6:C7:B8 X509v3 Authority Key Identifier: keyid:AA:C9:36:36:A6:AF:2C:AB:02:1D:52:63:A2:D3:68:9A:46:CA:68:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/AAC93636A6AF2CAB021D5263A2D3689A46CA681F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5c:ff:2e:93:7f:07:e6:8e:8e:be:1b:7d:e1:d4:68:b6:45: df:3e:a1:4f:a1:19:1a:a7:71:42:91:66:cb:c3:e3:54:d9:c2: 54:a2:5a:ac:2a:94:a7:e0:82:d8:cc:df:fc:61:c3:ca:55:03: f6:e1:cc:83:2f:34:3a:8d:09:67:be:44:f8:21:03:17:0f:cc: 14:50:d1:64:e8:6d:46:d9:5a:49:f8:6c:04:4e:70:78:dc:7c: 82:bb:7b:a8:b6:85:02:50:70:33:bb:9c:87:31:96:cb:06:cd: 50:d1:5c:82:36:e4:5b:e1:11:5c:cf:72:85:4e:c6:78:e1:95: 41:3b:b5:2e:c3:c7:33:0e:96:00:7c:5e:b5:93:0b:99:37:93: 42:61:2d:e7:a5:e1:48:8f:30:a6:31:54:c6:82:a7:d9:c3:bf: 56:85:17:c2:ca:30:04:0c:17:3e:ac:39:e5:05:ed:0b:ac:f8: 4a:e7:29:a5:c8:0d:54:4e:c3:1a:d4:99:52:75:cc:7d:b0:e6: 0d:47:09:b8:71:2c:00:68:dc:c0:a2:95:86:50:15:96:c8:69: fb:85:41:d8:65:f6:78:3f:20:fa:78:8e:af:05:9c:a0:80:64: f1:de:40:d8:8f:07:fa:4d:5e:61:a2:12:bc:fb:b5:d5:fb:13: f8:1f:db:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgftud0jRQWcZlj4JtPLubXYLdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0 NkNBNjgxRjAeFw0yNjA5MTAwNTA4MjVaFw0yNjA5MTEwNzQzMjVaMDMxMTAvBgNV BAMTKDVGOTY5NzE0MEEyNjU1QzA1RTFBMjQ2QTlGODNBNzdGODlENkM3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVEZ/U+MSPghl/kmhVe1YLC7O pzjWWvp53WQprbtH09rV6FvImJbXkjmKPZQknfSW6wfFheU+uvCtcwWSjGJzNtZ5 8K2kloqWIneXqFjxjnAO+SG/zBji0GXvWMfRbW6DwqEqWuwwGXu5gr3jS7x8PPm5 s7mmnU5Hk+UEpJYw109jwI1dKuvFOQBB0vIn4oTojZdpiAqBP/AGcEEbN8+dX48x Wi2AOrjP/1hS2PPIXpb0LRY3Z8QsULDmk+jzTuEs04U28FJuQbb/nVTx8S8k/Hkh IMYT+ZsHX6FFZVuwHoV1SwKQfNnsuQS4Gf7098/ieEIE1nZ+Y9jqeXXsMP1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5aXFAomVcBeGiRqn4Onf4nWx7gwHwYDVR0j BBgwFoAUqsk2NqavLKsCHVJjotNomkbKaB8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjYxNGNlZTAtNWRmNi00YjJiLWJiM2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZB NkFGMkNBQjAyMUQ1MjYzQTJEMzY4OUE0NkNBNjgxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQUM5MzYzNkE2QUYyQ0FCMDIxRDUyNjNBMkQzNjg5QTQ2Q0E2 ODFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvQUFDOTM2MzZBNkFGMkNBQjAyMUQ1MjYzQTJEMzY4 OUE0NkNBNjgxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBc/y6Tfwfmjo6+G33h1Gi2Rd8+oU+hGRqn cUKRZsvD41TZwlSiWqwqlKfggtjM3/xhw8pVA/bhzIMvNDqNCWe+RPghAxcPzBRQ 0WTobUbZWkn4bAROcHjcfIK7e6i2hQJQcDO7nIcxlssGzVDRXII25FvhEVzPcoVO xnjhlUE7tS7DxzMOlgB8XrWTC5k3k0JhLeel4UiPMKYxVMaCp9nDv1aFF8LKMAQM Fz6sOeUF7Qus+ErnKaXIDVROwxrUmVJ1zH2w5g1HCbhxLABo3MCilYZQFZbIafuF Qdhl9ng/IPp4jq8FnKCAZPHeQNiPB/pNXmGiErz7tdX7E/gf21g= -----END CERTIFICATE-----Generated at Fri Sep 11 02:06:04 2026 by rpki-client