$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft File: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft (raw, json) Hash identifier: qI+M9NCJOtUPPWSh9zPGjzKMwUZIWYe2yYEOgmfKOuA= Subject key identifier: AC:BA:A7:0A:53:84:34:35:B0:37:24:51:E7:17:47:B7:5F:77:CE:73 Authority key identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A Certificate issuer: /CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Certificate serial: 027BEEC08A012CDCA18E32FA8AF0C06654567684 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:23:34 +0000 Manifest this update: Thu 24 Sep 2026 10:18:34 +0000 Manifest next update: Fri 25 Sep 2026 11:14:34 +0000 Files and hashes: 1: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl (hash: 1b6CERESyn228K0zTeGFiKEZNPf7sIwBGk2YcEizTVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7b:ee:c0:8a:01:2c:dc:a1:8e:32:fa:8a:f0:c0:66:54:56:76:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Validity Not Before: Sep 24 10:18:34 2026 GMT Not After : Sep 25 11:14:34 2026 GMT Subject: CN=ACBAA70A53843435B0372451E71747B75F77CE73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:31:f5:c6:b5:13:78:cf:35:50:1f:49:21: 6c:dc:45:b3:fb:05:25:66:d8:fc:e6:b6:10:d2:52: b9:c1:89:19:14:1f:ee:8e:9f:ea:e6:67:b6:a0:cd: 28:7d:fc:af:03:5c:7f:e8:21:78:b8:b6:31:31:a8: 82:9f:ed:43:0d:87:0b:5b:f0:19:3d:3c:f6:dd:d0: 44:cc:12:49:b0:aa:0d:33:eb:45:60:86:b1:e1:bc: 88:86:7c:74:7a:e0:ca:fe:2b:e4:c8:1f:d0:81:d6: c6:f1:91:70:45:89:7a:0c:e2:fd:a9:12:1b:6b:59: 8f:40:b7:37:d9:29:b9:a4:4e:a0:9f:52:cb:3d:ff: 57:31:22:d3:26:51:eb:1b:0b:55:7c:d0:dc:a5:7f: 53:75:e1:11:c9:8f:a6:c8:d3:7b:8b:03:4f:62:d5: ce:1a:22:87:c1:76:32:6b:70:90:90:63:98:b5:76: 54:30:08:c0:19:68:93:a3:63:09:60:4f:79:40:01: ad:55:b9:82:d8:14:20:b1:9b:d1:f7:c7:91:48:8c: 34:60:40:72:6c:e9:45:22:2e:49:f1:2b:fd:08:15: d5:cf:c7:4a:3d:a0:70:54:ff:cb:9a:b1:0b:ea:80: ac:81:97:e3:af:37:3b:15:7a:6c:05:f6:a1:fd:ce: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:A7:0A:53:84:34:35:B0:37:24:51:E7:17:47:B7:5F:77:CE:73 X509v3 Authority Key Identifier: keyid:AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ad:a0:c4:d8:07:81:76:1a:57:c5:4f:96:4e:ba:70:10:21: c9:1e:ac:37:eb:21:2e:0a:1f:64:8a:19:48:f0:ac:0e:cd:e7: 4c:07:32:bd:96:d8:c5:f7:21:2f:93:52:9f:69:65:14:5d:1d: 73:17:a2:08:5b:de:c7:b8:ed:52:00:0d:34:9d:c2:77:22:8c: b0:20:93:53:b6:5d:b3:86:71:64:b2:0c:35:96:de:e5:6e:77: 51:88:70:6e:52:e7:ee:8a:97:05:fc:17:f7:1b:aa:50:6b:cc: af:3f:f5:97:05:7c:26:1c:31:da:73:36:c4:ba:0f:66:0a:f3: 71:c9:0e:fd:4f:d6:12:e1:91:5f:f5:53:3d:4a:29:fe:d2:a5: 43:82:bf:d4:9b:7b:5a:e1:f6:cb:87:5b:28:2f:e5:ff:84:fa: 96:d7:2d:a8:56:5f:a9:02:c0:1c:52:b2:b1:e0:a1:1a:49:83: 35:7f:2a:d1:71:8b:56:89:35:0e:76:6d:5c:60:5d:c1:43:c4: d1:bd:9c:6d:14:58:ce:fa:49:48:70:9b:f8:e2:42:2f:0d:93: 97:37:f9:c4:b9:c5:7b:9d:60:9a:36:65:31:d3:4c:e5:cc:0c: b1:b1:28:ff:f1:a4:7d:2e:44:1b:0f:45:40:06:dd:7f:31:5d: f7:34:93:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnvuwIoBLNyhjjL6ivDAZlRWdoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRDQkI5 NkQ4QzEyQTAeFw0yNjA5MjQxMDE4MzRaFw0yNjA5MjUxMTE0MzRaMDMxMTAvBgNV BAMTKEFDQkFBNzBBNTM4NDM0MzVCMDM3MjQ1MUU3MTc0N0I3NUY3N0NFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmjH1xrUTeM81UB9JIWzcRbP7 BSVm2PzmthDSUrnBiRkUH+6On+rmZ7agzSh9/K8DXH/oIXi4tjExqIKf7UMNhwtb 8Bk9PPbd0ETMEkmwqg0z60VghrHhvIiGfHR64Mr+K+TIH9CB1sbxkXBFiXoM4v2p EhtrWY9AtzfZKbmkTqCfUss9/1cxItMmUesbC1V80Nylf1N14RHJj6bI03uLA09i 1c4aIofBdjJrcJCQY5i1dlQwCMAZaJOjYwlgT3lAAa1VuYLYFCCxm9H3x5FIjDRg QHJs6UUiLknxK/0IFdXPx0o9oHBU/8uasQvqgKyBl+OvNzsVemwF9qH9zmw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrLqnClOENDWwNyRR5xdHt193znMwHwYDVR0j BBgwFoAUqkXNG7jHM01d3vk2Stbcu5bYwSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYwMzZiNzQtOGE1ZC00MGFhLTk2MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJC OEM3MzM0RDVEREVGOTM2NEFENkRDQkI5NkQ4QzEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTQ1Q0QxQkI4QzczMzRENURERUY5MzY0QUQ2RENCQjk2RDhD MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRD QkI5NkQ4QzEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqtoMTYB4F2GlfFT5ZOunAQIckerDfrIS4K H2SKGUjwrA7N50wHMr2W2MX3IS+TUp9pZRRdHXMXoghb3se47VIADTSdwncijLAg k1O2XbOGcWSyDDWW3uVud1GIcG5S5+6KlwX8F/cbqlBrzK8/9ZcFfCYcMdpzNsS6 D2YK83HJDv1P1hLhkV/1Uz1KKf7SpUOCv9Sbe1rh9suHWygv5f+E+pbXLahWX6kC wBxSsrHgoRpJgzV/KtFxi1aJNQ52bVxgXcFDxNG9nG0UWM76SUhwm/jiQi8Nk5c3 +cS5xXudYJo2ZTHTTOXMDLGxKP/xpH0uRBsPRUAG3X8xXfc0kxk= -----END CERTIFICATE-----Generated at Fri Sep 25 04:45:28 2026 by rpki-client