$ rpki-client -vvf rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft File: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft (raw, json) Hash identifier: X2b/i7SZoq9plNPHyoCBMn9ryKsDLIdmMY6SqjdRRXQ= Subject key identifier: B5:98:53:5D:E1:E4:58:1F:A7:D9:88:7F:60:9A:5C:45:F0:8C:24:B6 Authority key identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A Certificate issuer: /CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Certificate serial: 027C5486E293AE5E4CE037D84E99174CE856E90C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:45:28 +0000 Manifest this update: Thu 23 Jul 2026 16:40:28 +0000 Manifest next update: Fri 24 Jul 2026 20:08:28 +0000 Files and hashes: 1: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl (hash: wEHqqXdHj9lCKaOlHK3sW7yGz6D0kZf6O0gMfZ3vazU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7c:54:86:e2:93:ae:5e:4c:e0:37:d8:4e:99:17:4c:e8:56:e9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Validity Not Before: Jul 23 16:40:28 2026 GMT Not After : Jul 24 20:08:28 2026 GMT Subject: CN=B598535DE1E4581FA7D9887F609A5C45F08C24B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:93:14:8c:bb:09:ad:cd:c3:35:aa:7b:cd: 04:ed:af:b6:30:2a:14:59:bb:f3:72:42:3d:70:d1: 03:16:fa:24:47:b3:57:08:67:95:a3:7c:1b:82:4c: ae:f8:80:70:a4:31:d2:91:44:f5:a0:95:b2:3f:11: e3:20:57:e3:f4:8a:9f:f3:17:f6:a1:7b:23:ce:93: 17:89:7b:33:31:10:51:6c:ba:18:2d:52:af:f8:56: 87:6b:2d:00:56:75:39:2f:6d:ef:49:87:d9:e9:10: f8:ed:47:65:f0:74:5f:56:25:23:ec:02:af:5b:85: a4:a5:dc:3e:3e:9b:7e:e5:8a:72:51:c9:71:e2:18: d5:b8:5d:d7:d6:9f:01:b6:96:a0:cc:f7:f1:52:7f: 39:8a:22:14:de:a3:ab:0b:cc:99:4a:f7:92:d4:69: 6f:b8:99:f9:03:c7:64:6b:78:45:db:c8:78:f7:9d: 5b:3a:2d:32:fd:51:50:6f:89:8b:03:71:bd:20:7c: 7f:9b:01:fb:75:02:c0:39:ac:3c:92:8c:37:ed:a4: b0:3b:16:f0:d7:7c:99:1b:81:2c:6f:68:41:c4:b4: 6d:50:7a:fe:02:db:c3:1e:27:74:f2:a8:33:f8:73: ab:cc:e7:76:c0:fd:42:63:78:3d:a0:5c:9c:71:76: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:98:53:5D:E1:E4:58:1F:A7:D9:88:7F:60:9A:5C:45:F0:8C:24:B6 X509v3 Authority Key Identifier: keyid:AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:92:fd:b3:1a:47:07:8b:ae:2f:dc:83:ea:ad:23:1a:14:dc: c4:98:4e:a6:0d:22:22:2b:52:b6:e9:9b:6b:da:0a:ff:16:e3: 7c:a9:ac:3a:e7:b7:a5:de:23:c2:27:0b:64:0b:a0:58:dd:c9: 81:10:d5:69:e9:dd:5c:88:95:50:78:0c:a2:88:e9:82:13:f4: 98:5a:9c:e8:af:60:be:52:f1:7a:f4:30:fe:e9:83:e0:74:55: 1c:d8:9b:10:55:7d:42:bd:af:f4:2a:51:7f:77:6b:c9:63:b4: d3:7a:71:11:c5:f7:d0:da:b2:df:da:34:e7:ba:08:b2:e5:07: 7a:ac:ea:aa:60:d7:ea:59:51:cb:4a:1b:14:4d:a1:97:56:1d: c8:ed:3c:7e:ae:c4:3b:a4:14:bd:bd:be:c9:35:24:45:d5:e2: 56:84:3a:b3:27:81:cc:ec:c7:fb:dd:bc:8f:e7:a3:b4:34:b2: 2e:94:49:50:3c:33:ad:3e:a6:fc:ac:47:f3:d3:50:9f:44:cf: 91:b8:79:7b:9e:d8:c0:0c:73:f9:c5:c2:d7:7b:21:12:77:05: 68:6a:f7:5e:41:b3:6b:f6:18:41:c3:81:9d:29:5b:e1:78:38: 7a:e5:33:fa:30:56:97:51:f3:89:76:6f:ef:99:e5:70:5e:6d: 18:05:88:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnxUhuKTrl5M4DfYTpkXTOhW6QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRDQkI5 NkQ4QzEyQTAeFw0yNjA3MjMxNjQwMjhaFw0yNjA3MjQyMDA4MjhaMDMxMTAvBgNV BAMTKEI1OTg1MzVERTFFNDU4MUZBN0Q5ODg3RjYwOUE1QzQ1RjA4QzI0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7ZMUjLsJrc3DNap7zQTtr7Yw KhRZu/NyQj1w0QMW+iRHs1cIZ5WjfBuCTK74gHCkMdKRRPWglbI/EeMgV+P0ip/z F/aheyPOkxeJezMxEFFsuhgtUq/4VodrLQBWdTkvbe9Jh9npEPjtR2XwdF9WJSPs Aq9bhaSl3D4+m37linJRyXHiGNW4XdfWnwG2lqDM9/FSfzmKIhTeo6sLzJlK95LU aW+4mfkDx2RreEXbyHj3nVs6LTL9UVBviYsDcb0gfH+bAft1AsA5rDySjDftpLA7 FvDXfJkbgSxvaEHEtG1Qev4C28MeJ3TyqDP4c6vM53bA/UJjeD2gXJxxdvxxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZhTXeHkWB+n2Yh/YJpcRfCMJLYwHwYDVR0j BBgwFoAUqkXNG7jHM01d3vk2Stbcu5bYwSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYwMzZiNzQtOGE1ZC00MGFhLTk2MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJC OEM3MzM0RDVEREVGOTM2NEFENkRDQkI5NkQ4QzEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTQ1Q0QxQkI4QzczMzRENURERUY5MzY0QUQ2RENCQjk2RDhD MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRD QkI5NkQ4QzEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqS/bMaRweLri/cg+qtIxoU3MSYTqYNIiIr Urbpm2vaCv8W43yprDrnt6XeI8InC2QLoFjdyYEQ1Wnp3VyIlVB4DKKI6YIT9Jha nOivYL5S8Xr0MP7pg+B0VRzYmxBVfUK9r/QqUX93a8ljtNN6cRHF99Dast/aNOe6 CLLlB3qs6qpg1+pZUctKGxRNoZdWHcjtPH6uxDukFL29vsk1JEXV4laEOrMngczs x/vdvI/no7Q0si6USVA8M60+pvysR/PTUJ9Ez5G4eXue2MAMc/nFwtd7IRJ3BWhq 915Bs2v2GEHDgZ0pW+F4OHrlM/owVpdR84l2b++Z5XBebRgFiBA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:26 2026 by rpki-client