$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft File: A439C604DD921E0B98280E0F41763C1FFE93A348.mft (raw, json) Hash identifier: N/w2AKxR2sXTKK1e6US0GLOZZxOCcizmHxfMNcpyJbk= Subject key identifier: A6:2E:12:23:D8:5B:EA:6C:F0:CC:61:31:10:98:FF:88:CA:04:70:48 Authority key identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 Certificate issuer: /CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Certificate serial: 7441627514D824049DF22A1900583E45562E327C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft Manifest number: 6D Signing time: Fri 24 Jul 2026 00:09:18 +0000 Manifest this update: Fri 24 Jul 2026 00:04:18 +0000 Manifest next update: Sat 25 Jul 2026 02:15:18 +0000 Files and hashes: 1: A439C604DD921E0B98280E0F41763C1FFE93A348.crl (hash: bzwwLva+qmowFzt+ku9i3AmgJCIJjBpii4M5dawNsSo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:41:62:75:14:d8:24:04:9d:f2:2a:19:00:58:3e:45:56:2e:32:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Validity Not Before: Jul 24 00:04:18 2026 GMT Not After : Jul 25 02:15:18 2026 GMT Subject: CN=A62E1223D85BEA6CF0CC61311098FF88CA047048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:50:aa:80:cc:d2:92:1f:ce:b3:5e:6c:d1: ad:7c:63:c0:20:4a:c0:42:a3:e0:90:f6:d3:8e:2b: 66:72:1e:48:a8:00:21:79:1b:63:a7:40:a1:d9:81: 85:90:6b:26:90:5b:81:ae:a2:c7:fc:cc:d2:28:7d: 3b:0e:5e:3e:c5:d1:c2:26:76:97:98:ed:aa:44:64: 88:36:e9:40:80:8e:55:ec:c3:77:6b:97:76:5d:67: e0:77:aa:25:90:cc:1c:3b:09:0a:f0:60:fb:84:cf: 6a:46:49:65:7f:bb:ea:2d:29:45:31:ad:da:68:a8: d4:f6:ca:61:50:53:81:c3:0f:0b:ef:af:3c:04:ce: 44:a0:b6:0d:60:28:93:6b:b7:4e:26:25:72:e4:e5: 35:c3:b7:07:8d:bf:30:fe:dc:db:44:8e:43:1e:be: 5c:3f:3f:ad:f5:8a:28:4a:09:b3:6e:8a:07:dd:47: 13:3f:5d:23:81:18:3a:0b:cd:ca:96:51:a0:2f:89: b9:06:97:6d:79:96:ea:3c:01:ca:8f:63:b4:0e:e0: 84:6c:70:74:bf:0e:88:03:08:91:93:ce:5c:6b:67: 17:a7:ca:4e:02:09:63:80:69:7a:d4:1f:59:b0:3b: 98:0c:95:fb:e8:3a:47:d8:8c:51:90:88:2a:1a:5e: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2E:12:23:D8:5B:EA:6C:F0:CC:61:31:10:98:FF:88:CA:04:70:48 X509v3 Authority Key Identifier: keyid:A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0a:39:13:24:9c:6a:e3:f0:b2:7f:70:91:74:65:fa:94:f6: 6d:32:4e:1a:a5:48:2c:04:42:2d:cc:da:8e:73:f9:db:a6:b5: 6c:7e:0a:d8:0d:5e:05:84:a4:7e:5d:71:c9:51:63:d5:d5:66: 90:c2:38:08:f7:ba:f2:e7:9d:77:22:96:71:61:96:95:1e:a8: 28:a1:df:0c:f4:a9:ca:2e:70:23:c6:8f:5c:02:a8:a1:b3:93: 6a:c1:3a:ad:da:8c:a2:5e:86:7d:46:3c:f3:3d:4f:ba:91:a6: 8d:ef:12:35:09:f4:57:00:10:7d:4a:52:8d:9a:92:79:d2:e5: 9a:b1:b7:64:8a:2e:23:a1:c0:e2:14:0f:84:31:a9:a7:8e:3a: 52:0e:42:3b:32:7e:cd:70:a6:d0:97:8b:fd:7e:7c:1a:c4:b4: 53:76:b0:4d:0c:02:6f:b2:54:6d:7d:a8:48:82:32:57:8d:42: af:f7:b7:ea:af:2d:c1:ad:5e:29:17:26:c4:fc:af:5f:90:52: 4e:28:e9:d3:f8:81:ad:cf:47:17:66:c7:1b:19:8f:ca:54:1d: 1f:7a:96:5d:fa:33:be:1b:b7:3d:d6:0e:94:23:d3:29:91:83: 32:6c:59:a5:30:b1:f4:40:7e:1e:ec:23:72:19:b3:84:60:99: 08:39:8a:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEFidRTYJASd8ioZAFg+RVYuMnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZG RTkzQTM0ODAeFw0yNjA3MjQwMDA0MThaFw0yNjA3MjUwMjE1MThaMDMxMTAvBgNV BAMTKEE2MkUxMjIzRDg1QkVBNkNGMENDNjEzMTEwOThGRjg4Q0EwNDcwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcD1CqgMzSkh/Os15s0a18Y8Ag SsBCo+CQ9tOOK2ZyHkioACF5G2OnQKHZgYWQayaQW4Guosf8zNIofTsOXj7F0cIm dpeY7apEZIg26UCAjlXsw3drl3ZdZ+B3qiWQzBw7CQrwYPuEz2pGSWV/u+otKUUx rdpoqNT2ymFQU4HDDwvvrzwEzkSgtg1gKJNrt04mJXLk5TXDtweNvzD+3NtEjkMe vlw/P631iihKCbNuigfdRxM/XSOBGDoLzcqWUaAvibkGl215luo8AcqPY7QO4IRs cHS/DogDCJGTzlxrZxenyk4CCWOAaXrUH1mwO5gMlfvoOkfYjFGQiCoaXl9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpi4SI9hb6mzwzGExEJj/iMoEcEgwHwYDVR0j BBgwFoAUpDnGBN2SHguYKA4PQXY8H/6To0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhMTZlYzUtNTg3ZS00N2E0LThhZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRE RDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZGRTkzQTM0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDM5QzYwNEREOTIxRTBCOTgyODBFMEY0MTc2M0MxRkZFOTNB MzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjND MUZGRTkzQTM0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4KORMknGrj8LJ/cJF0ZfqU9m0yThqlSCwE Qi3M2o5z+dumtWx+CtgNXgWEpH5dcclRY9XVZpDCOAj3uvLnnXcilnFhlpUeqCih 3wz0qcoucCPGj1wCqKGzk2rBOq3ajKJehn1GPPM9T7qRpo3vEjUJ9FcAEH1KUo2a knnS5Zqxt2SKLiOhwOIUD4QxqaeOOlIOQjsyfs1wptCXi/1+fBrEtFN2sE0MAm+y VG19qEiCMleNQq/3t+qvLcGtXikXJsT8r1+QUk4o6dP4ga3PRxdmxxsZj8pUHR96 ll36M74btz3WDpQj0ymRgzJsWaUwsfRAfh7sI3IZs4RgmQg5isI= -----END CERTIFICATE-----Generated at Fri Jul 24 08:23:18 2026 by rpki-client