$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft File: A439C604DD921E0B98280E0F41763C1FFE93A348.mft (raw, json) Hash identifier: SH3myT71qPy/kwuwCbdqa45qs2iAZc50h+8lOXaEAC0= Subject key identifier: 22:2D:F0:D8:78:A6:B6:EA:B5:03:A3:79:CE:54:4E:0E:4B:17:30:F0 Authority key identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 Certificate issuer: /CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Certificate serial: 41A3C2BD4B5A7E59D3BF4C0A6D6F329BFCC15FCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft Manifest number: BF Signing time: Wed 23 Sep 2026 13:27:45 +0000 Manifest this update: Wed 23 Sep 2026 13:22:45 +0000 Manifest next update: Thu 24 Sep 2026 16:24:45 +0000 Files and hashes: 1: A439C604DD921E0B98280E0F41763C1FFE93A348.crl (hash: KY9FsQjOKVAfkluIOfGffFA64dzgwoVRBXlm/tu9W6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a3:c2:bd:4b:5a:7e:59:d3:bf:4c:0a:6d:6f:32:9b:fc:c1:5f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Validity Not Before: Sep 23 13:22:45 2026 GMT Not After : Sep 24 16:24:45 2026 GMT Subject: CN=222DF0D878A6B6EAB503A379CE544E0E4B1730F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:b6:4e:2e:74:75:57:f5:f9:e3:44:89:3b: 4a:af:23:d0:8c:29:b1:66:42:ce:ef:0c:62:78:ff: f1:ea:4c:d6:ec:08:db:64:ab:80:c8:f0:fe:a9:11: cc:7c:4e:0f:c3:e3:77:9c:77:78:e1:e2:41:84:c4: 7e:8a:94:0a:ff:ab:92:ad:b1:74:d8:78:1d:66:10: aa:4a:da:9c:d0:d3:86:66:6d:49:7c:65:1d:36:84: 63:90:b5:13:08:c4:c6:94:2d:0f:35:9b:65:62:50: b7:e3:98:72:ad:19:ab:00:b2:c3:bc:22:94:88:3b: 45:11:4b:c6:7a:a0:36:53:28:96:75:f5:b4:75:0b: 87:ff:4a:d4:98:34:76:f4:ac:fd:cb:36:69:be:2e: af:80:42:c3:e7:d4:bb:86:0b:51:f9:24:c1:c0:ec: ab:9b:53:1e:33:99:9b:b5:29:ef:79:60:8b:b3:bd: 42:77:d2:78:ac:e7:67:bc:fa:2c:4c:80:62:1c:b6: 45:65:1a:e8:9c:63:2f:b0:da:03:6c:f6:7d:3d:fd: b2:a2:9d:43:58:9e:33:e6:80:8a:ff:e9:57:df:ad: 3f:ad:d1:fe:ba:c3:f5:00:60:82:df:ae:fa:6e:24: 75:66:1d:80:1b:6b:32:b7:11:09:2f:28:84:90:f1: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2D:F0:D8:78:A6:B6:EA:B5:03:A3:79:CE:54:4E:0E:4B:17:30:F0 X509v3 Authority Key Identifier: keyid:A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e2:b7:06:91:bc:ad:17:e4:4f:21:f7:04:68:23:50:b1:90: 8a:97:26:ab:8f:89:97:57:a3:ff:d8:41:57:67:c8:9b:71:11: 94:99:b6:d7:0c:be:6e:3e:2c:4f:0d:9d:e5:ac:e1:19:c2:67: b6:3d:e5:e4:3b:63:2f:03:7b:88:6b:a8:28:49:05:9a:ac:b8: 98:7d:f5:83:78:87:e9:db:aa:7a:3b:3f:1e:4c:c5:0b:58:aa: 06:99:fc:eb:ce:97:bc:86:5d:85:f2:9f:a3:10:cd:ba:f8:09: 39:db:cd:3d:1c:99:bf:8d:99:bf:f6:e3:81:78:db:d4:da:3f: 20:cf:c2:b3:7f:2b:a6:23:a8:95:f1:ab:8d:76:b2:eb:6a:58: d2:c6:17:f0:e8:04:f0:f9:42:70:a9:04:d4:fe:5e:26:8f:03: b5:e4:60:8c:13:95:6d:ce:02:5f:94:2d:e7:9a:22:10:e0:a9: 28:2f:81:a7:52:3f:5d:0b:0b:32:56:3a:2c:d2:7a:f6:f3:ad: 7c:05:c4:ca:dc:ae:6c:00:70:c7:92:71:44:6e:df:05:82:3e: c6:c8:b7:2a:d8:7d:10:f1:d8:c9:cb:a7:24:39:51:36:47:96: 1c:da:be:96:2b:dc:02:22:84:43:b0:0f:6e:85:d0:d4:15:29: 87:fe:46:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQaPCvUtaflnTv0wKbW8ym/zBX84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZG RTkzQTM0ODAeFw0yNjA5MjMxMzIyNDVaFw0yNjA5MjQxNjI0NDVaMDMxMTAvBgNV BAMTKDIyMkRGMEQ4NzhBNkI2RUFCNTAzQTM3OUNFNTQ0RTBFNEIxNzMwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXt7ZOLnR1V/X540SJO0qvI9CM KbFmQs7vDGJ4//HqTNbsCNtkq4DI8P6pEcx8Tg/D43ecd3jh4kGExH6KlAr/q5Kt sXTYeB1mEKpK2pzQ04ZmbUl8ZR02hGOQtRMIxMaULQ81m2ViULfjmHKtGasAssO8 IpSIO0URS8Z6oDZTKJZ19bR1C4f/StSYNHb0rP3LNmm+Lq+AQsPn1LuGC1H5JMHA 7KubUx4zmZu1Ke95YIuzvUJ30nis52e8+ixMgGIctkVlGuicYy+w2gNs9n09/bKi nUNYnjPmgIr/6VffrT+t0f66w/UAYILfrvpuJHVmHYAbazK3EQkvKISQ8RT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIi3w2Himtuq1A6N5zlRODksXMPAwHwYDVR0j BBgwFoAUpDnGBN2SHguYKA4PQXY8H/6To0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhMTZlYzUtNTg3ZS00N2E0LThhZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRE RDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZGRTkzQTM0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDM5QzYwNEREOTIxRTBCOTgyODBFMEY0MTc2M0MxRkZFOTNB MzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjND MUZGRTkzQTM0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbitwaRvK0X5E8h9wRoI1CxkIqXJquPiZdX o//YQVdnyJtxEZSZttcMvm4+LE8NneWs4RnCZ7Y95eQ7Yy8De4hrqChJBZqsuJh9 9YN4h+nbqno7Px5MxQtYqgaZ/OvOl7yGXYXyn6MQzbr4CTnbzT0cmb+Nmb/244F4 29TaPyDPwrN/K6YjqJXxq412sutqWNLGF/DoBPD5QnCpBNT+XiaPA7XkYIwTlW3O Al+ULeeaIhDgqSgvgadSP10LCzJWOizSevbzrXwFxMrcrmwAcMeScURu3wWCPsbI tyrYfRDx2MnLpyQ5UTZHlhzavpYr3AIihEOwD26F0NQVKYf+RvY= -----END CERTIFICATE-----Generated at Thu Sep 24 01:07:10 2026 by rpki-client