$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft File: A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft (raw, json) Hash identifier: GMJe9Gi4FgKuxP8UypiJNyEG1Qh5YInuLBVPK4RpovY= Subject key identifier: 42:75:EE:B8:D7:CB:C3:1D:A9:50:4A:D4:66:68:57:9C:8E:2E:D7:B4 Authority key identifier: A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 Certificate issuer: /CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Certificate serial: 7481A2FA7D168515A286E07C2EA522CF818D023B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft Manifest number: BB Signing time: Mon 21 Sep 2026 03:05:19 +0000 Manifest this update: Mon 21 Sep 2026 03:00:19 +0000 Manifest next update: Tue 22 Sep 2026 06:59:19 +0000 Files and hashes: 1: A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl (hash: ZeEwzztpZY1TxuXmhmxy3M4aczhtUQwSanPlqWckZiA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 06:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:81:a2:fa:7d:16:85:15:a2:86:e0:7c:2e:a5:22:cf:81:8d:02:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Validity Not Before: Sep 21 03:00:19 2026 GMT Not After : Sep 22 06:59:19 2026 GMT Subject: CN=4275EEB8D7CBC31DA9504AD46668579C8E2ED7B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:b0:32:33:1a:8e:68:7f:0e:11:be:43:4e: a2:c4:69:aa:fc:c0:4a:51:7c:32:37:15:18:68:56: c6:29:f7:6d:f3:9d:15:6a:08:5e:c2:3e:f0:e1:4e: a2:72:94:d1:3e:59:fd:b1:75:f7:fb:41:79:56:33: 96:8d:9f:13:a6:f3:e1:80:75:d8:3b:c4:40:e3:0b: 00:02:e8:ab:e7:52:72:e0:37:cc:57:1b:3d:e5:28: 7d:f0:3f:af:ab:3e:89:99:4b:6f:6f:04:6d:98:1f: 05:0a:a8:dd:ba:1e:ea:0a:83:d6:15:6f:ab:ad:48: 42:b2:74:d7:64:f2:14:25:a4:96:4e:8e:67:cd:79: a4:90:97:76:2b:70:dc:74:38:79:77:36:0c:48:82: 31:07:e4:1e:d4:c6:2f:5c:96:66:18:30:aa:ab:3e: f1:f9:67:0a:2d:7f:bc:c1:ad:1c:36:34:f1:05:ca: 32:c1:5b:a7:43:af:0d:23:37:87:fc:d7:b7:a0:71: 6a:3d:96:83:da:36:7c:1c:13:8a:04:16:0c:e1:29: da:0a:a7:63:c4:2a:c6:d1:a3:32:62:92:67:22:ac: b0:39:34:45:08:66:e2:50:51:ae:d7:d7:6a:f5:95: dd:a4:fe:6a:3c:4c:f0:79:8a:d4:66:94:b5:15:e6: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:75:EE:B8:D7:CB:C3:1D:A9:50:4A:D4:66:68:57:9C:8E:2E:D7:B4 X509v3 Authority Key Identifier: keyid:A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:26:66:1b:13:6e:41:e8:e1:bb:da:75:d2:40:fa:31:75:f4: fd:20:0b:ac:5d:0b:3f:45:66:c7:e4:80:a3:c3:88:1f:7e:95: 3e:0a:eb:e8:da:62:00:e7:78:76:d2:44:38:5b:8c:6d:a2:80: 33:db:1d:9b:eb:1c:86:30:b8:7e:61:97:d7:d6:d2:ea:11:1d: 90:51:ad:93:20:5d:56:fb:52:45:c7:b1:10:4d:ba:0e:01:3a: ca:04:53:fe:5c:bb:38:48:ee:99:bc:94:b1:27:6b:fa:22:b0: 04:fb:d5:89:54:48:95:f7:fc:6e:04:d4:a8:86:b8:e5:f0:0b: 1e:29:f5:a4:e5:c3:b6:a5:53:41:bc:b7:cf:96:69:01:ea:69: 17:90:e2:2c:eb:ac:56:bc:c1:6f:72:dd:a1:8f:52:f2:95:0e: 01:3d:fe:68:ad:92:4b:74:90:20:21:50:52:da:46:69:3f:05: bb:d1:da:ea:c4:1a:95:94:32:32:2e:78:06:9e:d2:40:e6:47: f7:72:7a:cf:58:af:98:b9:29:ac:af:95:a3:a3:2c:2d:7e:61: 18:39:bf:cc:03:f7:37:a4:9c:28:7a:82:e5:48:22:54:97:fb: 98:9e:e5:b2:9a:25:89:36:4c:81:f5:5d:1e:75:8c:0b:00:85: 59:1e:9e:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIGi+n0WhRWihuB8LqUiz4GNAjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2MzJC NzY5MzYxMDAeFw0yNjA5MjEwMzAwMTlaFw0yNjA5MjIwNjU5MTlaMDMxMTAvBgNV BAMTKDQyNzVFRUI4RDdDQkMzMURBOTUwNEFENDY2Njg1NzlDOEUyRUQ3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmr7AyMxqOaH8OEb5DTqLEaar8 wEpRfDI3FRhoVsYp923znRVqCF7CPvDhTqJylNE+Wf2xdff7QXlWM5aNnxOm8+GA ddg7xEDjCwAC6KvnUnLgN8xXGz3lKH3wP6+rPomZS29vBG2YHwUKqN26HuoKg9YV b6utSEKydNdk8hQlpJZOjmfNeaSQl3YrcNx0OHl3NgxIgjEH5B7Uxi9clmYYMKqr PvH5Zwotf7zBrRw2NPEFyjLBW6dDrw0jN4f817egcWo9loPaNnwcE4oEFgzhKdoK p2PEKsbRozJikmcirLA5NEUIZuJQUa7X12r1ld2k/mo8TPB5itRmlLUV5ri9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQnXuuNfLwx2pUErUZmhXnI4u17QwHwYDVR0j BBgwFoAUpKJfV4lWqO+p6P34oYD2MrdpNhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4ZmRlYjAtMzUxMy00ZjNkLTkyNTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4 OTU2QThFRkE5RThGREY4QTE4MEY2MzJCNzY5MzYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEEyNUY1Nzg5NTZBOEVGQTlFOEZERjhBMTgwRjYzMkI3Njkz NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2 MzJCNzY5MzYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMmZhsTbkHo4bvaddJA+jF19P0gC6xdCz9F ZsfkgKPDiB9+lT4K6+jaYgDneHbSRDhbjG2igDPbHZvrHIYwuH5hl9fW0uoRHZBR rZMgXVb7UkXHsRBNug4BOsoEU/5cuzhI7pm8lLEna/oisAT71YlUSJX3/G4E1KiG uOXwCx4p9aTlw7alU0G8t8+WaQHqaReQ4izrrFa8wW9y3aGPUvKVDgE9/mitkkt0 kCAhUFLaRmk/BbvR2urEGpWUMjIueAae0kDmR/dyes9Yr5i5KayvlaOjLC1+YRg5 v8wD9zeknCh6guVIIlSX+5ie5bKaJYk2TIH1XR51jAsAhVkenp8= -----END CERTIFICATE-----Generated at Tue Sep 22 00:36:11 2026 by rpki-client