$ rpki-client -vvf rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft File: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft (raw, json) Hash identifier: 42AhmwpWVsh6zrE5GOf0VHB0WDKee0eB9mhkQbIF4vs= Subject key identifier: C5:19:4B:14:C8:7D:0B:B5:3F:E8:E3:BD:F8:C3:56:E9:AB:DB:51:F7 Authority key identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A Certificate issuer: /CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Certificate serial: 629C5AFCE3C3194ADF180D9A9918E5BD68683DB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:08:17 +0000 Manifest this update: Tue 12 May 2026 18:03:17 +0000 Manifest next update: Wed 13 May 2026 21:01:17 +0000 Files and hashes: 1: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl (hash: M8Vo4lDvSacAE87DhxiWDG50cGSvUScTbZ9IryodurU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9c:5a:fc:e3:c3:19:4a:df:18:0d:9a:99:18:e5:bd:68:68:3d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Validity Not Before: May 12 18:03:17 2026 GMT Not After : May 13 21:01:17 2026 GMT Subject: CN=C5194B14C87D0BB53FE8E3BDF8C356E9ABDB51F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:7e:60:6b:71:b5:0a:d0:a1:3f:51:35:76: 10:16:b8:23:1c:0d:73:99:7e:fb:9a:12:ef:fc:f0: 96:62:22:08:47:9d:1c:71:04:3c:3c:12:33:84:06: 27:d0:da:1d:27:9e:de:b8:af:9f:0a:33:96:f2:45: f4:a4:c7:42:37:fb:41:de:8e:48:99:61:4d:53:47: cd:b9:37:8a:0a:a4:a0:7a:8b:77:16:0a:81:53:8b: 6d:e7:16:9d:a7:6b:7e:cf:98:7e:b0:a8:8a:9b:1a: 70:0f:8e:24:06:fa:1c:f7:02:a5:d9:06:b4:4c:12: a3:46:06:6f:8d:a4:4e:d4:bd:1f:01:29:35:e5:ea: ad:c8:de:96:e9:03:03:5f:78:5c:06:8a:bd:a4:f3: c9:ce:0d:46:0f:a7:a7:8b:ae:d2:ab:c7:1d:e3:f6: 02:59:36:27:fc:97:69:9d:1d:3e:35:9e:81:ed:0a: 14:c3:6c:76:72:1e:66:a0:3e:70:73:98:32:45:11: 1c:75:9f:d5:70:7d:8f:a0:a8:0c:90:0e:db:e0:73: 92:a5:40:5e:e8:a0:a1:93:05:42:ea:08:e8:f3:13: d3:b5:be:29:0d:6e:7d:b3:41:7c:b7:15:27:a9:c7: 39:92:29:8a:c8:09:51:71:7e:a8:b8:4f:d4:2b:a5: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:19:4B:14:C8:7D:0B:B5:3F:E8:E3:BD:F8:C3:56:E9:AB:DB:51:F7 X509v3 Authority Key Identifier: keyid:AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:83:5d:2b:26:76:64:ac:de:d0:3d:99:b7:7f:9b:fb:0b:8c: 48:e8:51:bf:71:a8:5c:3b:03:d5:df:54:f1:03:09:a9:9a:21: 6b:11:27:e0:7e:49:ee:52:ff:ce:f8:36:fb:28:b7:ac:c0:0e: a1:6b:50:c1:c4:74:ca:3f:ae:a2:6b:c5:b4:ff:96:be:4b:4a: 89:28:93:6e:9e:68:ed:82:31:2f:dd:36:c4:8a:19:e6:63:a5: 7b:45:e3:61:73:63:1f:e7:a7:26:d8:14:f2:e9:fc:90:5c:3f: 91:80:72:16:d0:62:17:c3:a6:12:4b:b4:54:81:f4:cf:3e:85: 3e:70:87:5f:8e:17:7c:dd:c4:3e:13:c9:ab:4f:28:8b:96:fd: a6:d3:82:b8:ed:2c:19:b4:63:bc:02:d7:f0:4c:49:03:0b:32: c3:19:cb:9c:6e:67:df:6f:21:33:6b:c8:04:e9:75:c5:b6:5d: f2:58:e5:92:ac:64:de:9b:9f:65:d9:58:4a:c0:4c:7a:b2:0a: ff:95:4d:03:fa:5b:34:00:34:6b:ea:40:61:9f:48:9e:48:5d: 8f:35:c5:a4:f1:af:2a:a4:33:4b:1f:b4:6b:15:c8:b2:d0:09: 4b:4d:9d:11:a6:2e:67:68:cc:e0:33:67:b7:86:0c:c2:53:0b: 90:98:64:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpxa/OPDGUrfGA2amRjlvWhoPbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRDQkI5 NkQ4QzEyQTAeFw0yNjA1MTIxODAzMTdaFw0yNjA1MTMyMTAxMTdaMDMxMTAvBgNV BAMTKEM1MTk0QjE0Qzg3RDBCQjUzRkU4RTNCREY4QzM1NkU5QUJEQjUxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEh35ga3G1CtChP1E1dhAWuCMc DXOZfvuaEu/88JZiIghHnRxxBDw8EjOEBifQ2h0nnt64r58KM5byRfSkx0I3+0He jkiZYU1TR825N4oKpKB6i3cWCoFTi23nFp2na37PmH6wqIqbGnAPjiQG+hz3AqXZ BrRMEqNGBm+NpE7UvR8BKTXl6q3I3pbpAwNfeFwGir2k88nODUYPp6eLrtKrxx3j 9gJZNif8l2mdHT41noHtChTDbHZyHmagPnBzmDJFERx1n9VwfY+gqAyQDtvgc5Kl QF7ooKGTBULqCOjzE9O1vikNbn2zQXy3FSepxzmSKYrICVFxfqi4T9QrpSA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRlLFMh9C7U/6OO9+MNW6avbUfcwHwYDVR0j BBgwFoAUqkXNG7jHM01d3vk2Stbcu5bYwSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYwMzZiNzQtOGE1ZC00MGFhLTk2MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJC OEM3MzM0RDVEREVGOTM2NEFENkRDQkI5NkQ4QzEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTQ1Q0QxQkI4QzczMzRENURERUY5MzY0QUQ2RENCQjk2RDhD MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRD QkI5NkQ4QzEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2DXSsmdmSs3tA9mbd/m/sLjEjoUb9xqFw7 A9XfVPEDCamaIWsRJ+B+Se5S/874Nvsot6zADqFrUMHEdMo/rqJrxbT/lr5LSoko k26eaO2CMS/dNsSKGeZjpXtF42FzYx/npybYFPLp/JBcP5GAchbQYhfDphJLtFSB 9M8+hT5wh1+OF3zdxD4TyatPKIuW/abTgrjtLBm0Y7wC1/BMSQMLMsMZy5xuZ99v ITNryATpdcW2XfJY5ZKsZN6bn2XZWErATHqyCv+VTQP6WzQANGvqQGGfSJ5IXY81 xaTxryqkM0sftGsVyLLQCUtNnRGmLmdozOAzZ7eGDMJTC5CYZDY= -----END CERTIFICATE-----Generated at Tue May 12 23:20:41 2026 by rpki-client