$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft File: A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft (raw, json) Hash identifier: 812mMy0HgLdAJfRtWxcZuYlMspiRPF6nkJlAJL2mOQQ= Subject key identifier: 02:BF:EF:C6:95:C0:52:38:9D:7A:01:30:73:0D:3D:0D:4A:48:A1:2C Authority key identifier: A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 Certificate issuer: /CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Certificate serial: 7A8544D5BD194245F329D076F0F1B0019672E20F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:13:37 +0000 Manifest this update: Tue 12 May 2026 21:08:37 +0000 Manifest next update: Wed 13 May 2026 23:38:37 +0000 Files and hashes: 1: A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl (hash: 8jBkKP2JxyrcUQOS8T/e78y6uwrXu3lHJCOnOmLEw/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:85:44:d5:bd:19:42:45:f3:29:d0:76:f0:f1:b0:01:96:72:e2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Validity Not Before: May 12 21:08:37 2026 GMT Not After : May 13 23:38:37 2026 GMT Subject: CN=02BFEFC695C052389D7A0130730D3D0D4A48A12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:39:02:e5:1b:5d:ec:3a:74:10:16:a9:ad:3a: e0:3e:85:b8:d8:a5:3a:5a:63:ef:fb:a3:12:26:16: b9:57:f1:90:46:18:67:55:79:7a:69:8d:a7:e8:b3: 16:f2:4e:12:a0:f9:ea:d1:87:fb:71:1e:d7:d1:10: 7b:f4:98:4d:94:74:66:42:71:85:09:f0:bf:af:7d: 39:a2:f7:71:33:c1:d5:9c:e9:8e:80:4f:ae:a5:cd: e6:ef:e6:31:f5:44:4e:a1:53:48:ff:20:82:6c:c2: 0a:90:5f:bc:0e:e1:13:6f:1c:ef:90:3b:f5:2b:52: a2:f8:d0:3d:8c:0e:6c:59:bb:57:f3:5f:82:56:d7: 49:9f:0e:d8:a0:92:09:36:0f:6d:4d:7c:15:5d:00: 4a:50:ca:2d:d4:1e:ae:cd:16:8f:63:4f:07:6e:03: 6c:ef:85:ce:2d:27:2f:19:ab:21:fa:e7:60:5e:4a: 86:26:93:13:a0:51:ac:26:16:67:91:74:21:47:2c: 8f:88:76:13:28:55:d4:f6:7c:b6:86:98:14:62:15: 6d:68:29:a1:b2:b0:51:d2:34:fb:cd:19:1f:d7:ff: 64:36:4a:2d:9a:16:9a:4c:25:85:e7:d3:a7:76:74: 6d:88:e8:9e:0f:a2:1d:37:08:85:68:20:70:6c:f9: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BF:EF:C6:95:C0:52:38:9D:7A:01:30:73:0D:3D:0D:4A:48:A1:2C X509v3 Authority Key Identifier: keyid:A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c3:98:87:55:fe:38:11:6f:1b:5a:c0:19:d2:1f:a4:86:b4: 5d:7a:c2:9c:21:f2:68:55:5e:82:40:ed:69:8e:ba:3c:fd:9e: 1d:14:34:e2:bc:0a:f1:61:62:7f:81:5b:57:a4:58:51:e4:aa: 8d:38:c2:ec:24:f4:76:98:f6:e0:92:fb:28:5d:44:05:a8:69: b7:8e:26:25:95:6e:52:4b:c5:b7:dc:9d:ba:a6:cb:18:bb:f9: 1b:f1:01:70:2f:2e:bf:af:49:6b:3a:c1:5a:da:1c:93:29:33: c9:23:6d:ae:b3:42:75:6c:88:c6:7b:1c:e3:0a:aa:3b:55:04: 58:27:b3:f8:a6:f1:18:c7:7a:0f:51:ae:98:a5:9b:ba:8c:eb: 60:1b:2e:5d:19:9c:37:82:fb:d4:8c:4d:fc:16:a3:67:2f:fe: e8:83:21:d5:2f:0e:1f:4e:05:00:39:8a:bc:af:ae:d8:5d:ff: 75:9f:ad:68:ec:b3:ba:3b:32:f7:7d:92:ae:34:a0:49:1f:d5: fe:61:28:62:a3:3f:4c:12:3e:ef:13:6e:da:ab:b0:7c:06:d4: 71:b2:e5:a9:f5:c5:d0:bd:9a:f3:f8:77:bc:35:98:06:b7:2e: 8b:1e:05:6f:5a:1e:77:16:88:ca:b9:21:8d:48:1f:dd:55:24: f4:84:e8:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoVE1b0ZQkXzKdB28PGwAZZy4g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2MzJC NzY5MzYxMDAeFw0yNjA1MTIyMTA4MzdaFw0yNjA1MTMyMzM4MzdaMDMxMTAvBgNV BAMTKDAyQkZFRkM2OTVDMDUyMzg5RDdBMDEzMDczMEQzRDBENEE0OEExMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiOQLlG13sOnQQFqmtOuA+hbjY pTpaY+/7oxImFrlX8ZBGGGdVeXppjafosxbyThKg+erRh/txHtfREHv0mE2UdGZC cYUJ8L+vfTmi93EzwdWc6Y6AT66lzebv5jH1RE6hU0j/IIJswgqQX7wO4RNvHO+Q O/UrUqL40D2MDmxZu1fzX4JW10mfDtigkgk2D21NfBVdAEpQyi3UHq7NFo9jTwdu A2zvhc4tJy8ZqyH652BeSoYmkxOgUawmFmeRdCFHLI+IdhMoVdT2fLaGmBRiFW1o KaGysFHSNPvNGR/X/2Q2Si2aFppMJYXn06d2dG2I6J4Poh03CIVoIHBs+TNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAr/vxpXAUjidegEwcw09DUpIoSwwHwYDVR0j BBgwFoAUpKJfV4lWqO+p6P34oYD2MrdpNhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4ZmRlYjAtMzUxMy00ZjNkLTkyNTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4 OTU2QThFRkE5RThGREY4QTE4MEY2MzJCNzY5MzYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEEyNUY1Nzg5NTZBOEVGQTlFOEZERjhBMTgwRjYzMkI3Njkz NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2 MzJCNzY5MzYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbDmIdV/jgRbxtawBnSH6SGtF16wpwh8mhV XoJA7WmOujz9nh0UNOK8CvFhYn+BW1ekWFHkqo04wuwk9HaY9uCS+yhdRAWoabeO JiWVblJLxbfcnbqmyxi7+RvxAXAvLr+vSWs6wVraHJMpM8kjba6zQnVsiMZ7HOMK qjtVBFgns/im8RjHeg9Rrpilm7qM62AbLl0ZnDeC+9SMTfwWo2cv/uiDIdUvDh9O BQA5iryvrthd/3WfrWjss7o7Mvd9kq40oEkf1f5hKGKjP0wSPu8TbtqrsHwG1HGy 5an1xdC9mvP4d7w1mAa3LoseBW9aHncWiMq5IY1IH91VJPSE6LA= -----END CERTIFICATE-----Generated at Wed May 13 03:51:27 2026 by rpki-client