$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft File: A439C604DD921E0B98280E0F41763C1FFE93A348.mft (raw, json) Hash identifier: rcgIBPgmI1qm4QVqQPWILDPK6ihBJ8KM8/foDwvPE4I= Subject key identifier: 97:FF:71:9C:DD:BC:A0:BC:B6:B5:93:13:9C:81:6A:BD:8D:DB:C8:42 Authority key identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 Certificate issuer: /CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Certificate serial: 62C259A067DAD29DEE41FC721A961A854414BFD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:06:53 +0000 Manifest this update: Tue 12 May 2026 17:01:53 +0000 Manifest next update: Wed 13 May 2026 20:49:53 +0000 Files and hashes: 1: A439C604DD921E0B98280E0F41763C1FFE93A348.crl (hash: PIWaIoSOBmI8Dfug+M9BHWkwt9pwu+/hPZKcj47o4Fk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c2:59:a0:67:da:d2:9d:ee:41:fc:72:1a:96:1a:85:44:14:bf:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Validity Not Before: May 12 17:01:53 2026 GMT Not After : May 13 20:49:53 2026 GMT Subject: CN=97FF719CDDBCA0BCB6B593139C816ABD8DDBC842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:eb:b1:cc:7e:36:50:95:9f:6c:d5:d2:8a:bd: a6:94:89:e6:9f:da:dd:4a:f6:f9:2d:ec:c9:0f:15: 4e:47:c4:86:0c:05:04:7e:f8:b2:f0:08:34:3b:5b: ea:fa:50:75:5c:f0:70:70:ac:2d:22:bb:6c:d1:7c: 2f:f7:ac:1e:3c:8d:5c:2d:3d:e1:ea:d2:c1:a9:dd: ab:76:3e:0d:ac:bf:4d:ec:34:44:ac:12:20:0c:bc: be:a9:f5:d1:c4:68:97:6c:d1:8e:31:be:a0:ef:96: 9a:93:b6:5d:14:10:bc:9e:2d:f8:4c:03:d7:a9:a6: 0b:d2:f3:d5:d2:cf:e5:62:39:58:78:e6:ef:c8:a9: c6:62:80:52:12:56:21:cf:4a:3a:3f:74:83:b0:db: 0f:a0:8d:da:af:2f:bf:95:41:08:85:f2:e3:62:f5: 77:70:c6:41:b2:fa:d4:4a:8d:e4:ff:75:b9:8b:eb: 88:a4:ec:b3:90:29:76:61:97:ef:e9:18:3b:26:af: 74:53:06:9f:48:e4:70:3d:2f:f7:68:ed:99:dd:73: f6:14:93:b8:e4:67:6d:3e:9b:a7:8e:38:8c:a5:7b: 75:e8:59:1c:9c:9d:0e:3c:6b:66:86:f9:b0:15:38: d2:95:06:8d:44:bd:4b:0a:af:96:bb:6e:d5:72:ba: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:71:9C:DD:BC:A0:BC:B6:B5:93:13:9C:81:6A:BD:8D:DB:C8:42 X509v3 Authority Key Identifier: keyid:A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:85:10:b7:58:80:67:f1:f5:a7:8b:72:bd:6a:1d:ff:c0:e1: 14:97:03:a4:e6:9e:82:3f:13:8e:d0:f5:66:c2:92:15:bb:65: f3:31:d8:6d:97:43:5e:b2:23:a1:8c:9a:0c:9d:17:97:d9:2a: ba:d3:3b:8e:53:6b:e6:a7:3c:33:6a:01:da:49:9e:39:85:8f: 15:1f:3a:8d:78:ed:7b:3b:02:d6:75:b6:20:39:e5:8b:17:04: 65:81:ac:e3:37:98:cb:f2:6f:fa:61:8c:79:08:29:72:4a:34: f3:92:22:4d:5c:55:f2:97:f3:a2:d8:8a:9e:d1:15:e2:1b:79: 23:0f:2c:ea:a0:0a:52:2d:b9:46:90:c1:ae:97:37:93:54:c2: 88:e6:1a:56:bd:ee:93:b7:4b:d4:d8:d1:29:ed:e5:fb:eb:6b: 25:cd:26:ef:5f:29:8a:9e:27:a6:16:e4:c0:51:27:6f:20:3d: 2f:59:c9:5a:e5:24:b4:b5:d2:6a:9c:c1:9e:b3:b3:14:25:23: ba:d4:2c:86:0e:73:9b:45:61:09:0f:c1:99:65:bc:e7:b0:c1: 7f:fc:5f:35:98:d7:e6:f0:84:8f:e2:a4:b9:e7:e1:a7:1f:ec: 38:bf:6e:63:70:b7:b9:cd:e4:33:a4:8b:3d:ea:85:d0:6d:ef: 7b:69:9d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYsJZoGfa0p3uQfxyGpYahUQUv9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZG RTkzQTM0ODAeFw0yNjA1MTIxNzAxNTNaFw0yNjA1MTMyMDQ5NTNaMDMxMTAvBgNV BAMTKDk3RkY3MTlDRERCQ0EwQkNCNkI1OTMxMzlDODE2QUJEOEREQkM4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO67HMfjZQlZ9s1dKKvaaUieaf 2t1K9vkt7MkPFU5HxIYMBQR++LLwCDQ7W+r6UHVc8HBwrC0iu2zRfC/3rB48jVwt PeHq0sGp3at2Pg2sv03sNESsEiAMvL6p9dHEaJds0Y4xvqDvlpqTtl0UELyeLfhM A9eppgvS89XSz+ViOVh45u/IqcZigFISViHPSjo/dIOw2w+gjdqvL7+VQQiF8uNi 9XdwxkGy+tRKjeT/dbmL64ik7LOQKXZhl+/pGDsmr3RTBp9I5HA9L/do7Zndc/YU k7jkZ20+m6eOOIyle3XoWRycnQ48a2aG+bAVONKVBo1EvUsKr5a7btVyuh/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl/9xnN28oLy2tZMTnIFqvY3byEIwHwYDVR0j BBgwFoAUpDnGBN2SHguYKA4PQXY8H/6To0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhMTZlYzUtNTg3ZS00N2E0LThhZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRE RDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZGRTkzQTM0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDM5QzYwNEREOTIxRTBCOTgyODBFMEY0MTc2M0MxRkZFOTNB MzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjND MUZGRTkzQTM0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyFELdYgGfx9aeLcr1qHf/A4RSXA6TmnoI/ E47Q9WbCkhW7ZfMx2G2XQ16yI6GMmgydF5fZKrrTO45Ta+anPDNqAdpJnjmFjxUf Oo147Xs7AtZ1tiA55YsXBGWBrOM3mMvyb/phjHkIKXJKNPOSIk1cVfKX86LYip7R FeIbeSMPLOqgClItuUaQwa6XN5NUwojmGla97pO3S9TY0Snt5fvrayXNJu9fKYqe J6YW5MBRJ28gPS9ZyVrlJLS10mqcwZ6zsxQlI7rULIYOc5tFYQkPwZllvOewwX/8 XzWY1+bwhI/ipLnn4acf7Di/bmNwt7nN5DOkiz3qhdBt73tpncM= -----END CERTIFICATE-----Generated at Wed May 13 04:19:25 2026 by rpki-client