$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft File: A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft (raw, json) Hash identifier: 2qUVcGgtQu7dhH2iFkhjwlgJCsDwhHhjmZQuazel0S8= Subject key identifier: 97:9E:94:5A:14:77:E0:8E:B4:49:26:6C:9F:4D:9A:DE:E8:B3:F9:B0 Authority key identifier: A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 Certificate issuer: /CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Certificate serial: 6766CE17C439A6D941AD8CBA7FE902E40E6377D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft Manifest number: BE Signing time: Wed 23 Sep 2026 09:32:55 +0000 Manifest this update: Wed 23 Sep 2026 09:27:55 +0000 Manifest next update: Thu 24 Sep 2026 11:42:55 +0000 Files and hashes: 1: A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl (hash: XAnjJnS4R5k0k6AYePAzvftihRPxHOv4vUA8S2nfPqc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:66:ce:17:c4:39:a6:d9:41:ad:8c:ba:7f:e9:02:e4:0e:63:77:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Validity Not Before: Sep 23 09:27:55 2026 GMT Not After : Sep 24 11:42:55 2026 GMT Subject: CN=979E945A1477E08EB449266C9F4D9ADEE8B3F9B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1b:c8:81:f5:57:d1:24:dc:73:34:14:a2:7b: ac:99:70:fa:f7:9f:e0:68:43:db:e0:43:0e:27:d8: 2f:1a:b6:72:68:b2:82:24:1c:a7:5e:f3:a3:7b:05: ed:f3:63:76:d0:3c:78:78:94:a7:e2:a5:0a:e2:0a: d2:33:53:36:d9:21:23:2f:f1:bf:8e:f6:5a:b3:3a: e2:92:9a:3c:6d:57:ce:35:72:49:28:f7:39:d5:a6: 0f:f3:9c:20:01:9c:9c:aa:4a:01:c3:0a:2e:7c:d2: 0b:16:b7:ce:69:14:94:3e:2a:e1:79:24:89:42:e6: 86:95:15:c2:5c:98:e7:a3:91:fe:15:2e:53:3c:ab: 21:cf:3c:b1:04:ac:97:a5:d9:2a:6b:e4:b0:c7:d2: 10:b0:3a:bb:53:09:2f:64:1f:7e:19:76:c8:a0:aa: 8c:4f:52:f1:7e:12:12:de:3b:7f:76:e3:31:e2:15: 80:6b:4e:69:7c:08:a1:b1:85:ef:b8:21:ea:16:4a: 8a:6e:6e:f6:10:01:de:ab:97:7c:6d:33:3d:b6:30: 13:dc:3a:b5:ec:00:e9:95:d7:c0:87:0f:19:4d:ff: 22:d8:45:6e:a3:3f:c3:93:57:35:1b:0d:1a:30:7f: 8d:08:8b:76:46:7d:fd:81:c0:12:50:bc:f3:2d:d8: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9E:94:5A:14:77:E0:8E:B4:49:26:6C:9F:4D:9A:DE:E8:B3:F9:B0 X509v3 Authority Key Identifier: keyid:A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a8:84:ac:e5:29:5a:d1:a3:07:47:bb:42:9b:04:a8:2d:33: ba:ff:66:d0:38:d5:79:38:f3:ad:45:ca:92:6c:64:6f:3b:91: 9f:d8:21:99:bd:f8:fb:e1:71:93:b9:c6:c8:41:e5:5e:53:1b: 61:fd:fc:f3:44:1b:52:38:b4:2f:91:9e:e0:39:42:49:f8:6a: 62:90:8c:56:99:54:98:2e:3d:42:57:49:dc:3b:bc:79:38:b0: 6b:24:27:18:1c:39:a2:2d:f0:f7:c4:38:60:c0:f4:a5:52:37: e4:16:56:ca:a3:e6:a4:eb:f7:30:20:ee:a0:04:b6:a9:04:72: 6e:b6:37:45:d7:f4:81:42:a8:46:1c:3d:5a:c1:7e:97:36:0c: 6c:3d:f5:2b:ed:ab:15:ee:5e:71:f9:5d:c5:75:2d:e3:02:41: a3:0a:5b:05:41:24:16:94:c5:80:42:94:db:2f:cd:26:84:fc: 2c:77:6e:8e:39:b7:68:c2:e2:35:d2:3a:60:a0:5c:a4:20:05: 2c:2f:59:a8:aa:0f:38:0a:1a:e3:9a:7a:b2:46:8c:c8:bd:93: b4:85:42:46:03:16:fe:b6:30:26:2c:de:4b:44:03:79:7d:21: cc:ad:30:ef:59:d2:bb:77:0d:67:a0:d0:ce:81:43:d2:bf:ea: 9b:3a:0f:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2bOF8Q5ptlBrYy6f+kC5A5jd9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2MzJC NzY5MzYxMDAeFw0yNjA5MjMwOTI3NTVaFw0yNjA5MjQxMTQyNTVaMDMxMTAvBgNV BAMTKDk3OUU5NDVBMTQ3N0UwOEVCNDQ5MjY2QzlGNEQ5QURFRThCM0Y5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUG8iB9VfRJNxzNBSie6yZcPr3 n+BoQ9vgQw4n2C8atnJosoIkHKde86N7Be3zY3bQPHh4lKfipQriCtIzUzbZISMv 8b+O9lqzOuKSmjxtV841ckko9znVpg/znCABnJyqSgHDCi580gsWt85pFJQ+KuF5 JIlC5oaVFcJcmOejkf4VLlM8qyHPPLEErJel2Spr5LDH0hCwOrtTCS9kH34Zdsig qoxPUvF+EhLeO3924zHiFYBrTml8CKGxhe+4IeoWSopubvYQAd6rl3xtMz22MBPc OrXsAOmV18CHDxlN/yLYRW6jP8OTVzUbDRowf40Ii3ZGff2BwBJQvPMt2LLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl56UWhR34I60SSZsn02a3uiz+bAwHwYDVR0j BBgwFoAUpKJfV4lWqO+p6P34oYD2MrdpNhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4ZmRlYjAtMzUxMy00ZjNkLTkyNTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4 OTU2QThFRkE5RThGREY4QTE4MEY2MzJCNzY5MzYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEEyNUY1Nzg5NTZBOEVGQTlFOEZERjhBMTgwRjYzMkI3Njkz NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2 MzJCNzY5MzYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSohKzlKVrRowdHu0KbBKgtM7r/ZtA41Xk4 861FypJsZG87kZ/YIZm9+PvhcZO5xshB5V5TG2H9/PNEG1I4tC+RnuA5Qkn4amKQ jFaZVJguPUJXSdw7vHk4sGskJxgcOaIt8PfEOGDA9KVSN+QWVsqj5qTr9zAg7qAE tqkEcm62N0XX9IFCqEYcPVrBfpc2DGw99SvtqxXuXnH5XcV1LeMCQaMKWwVBJBaU xYBClNsvzSaE/Cx3bo45t2jC4jXSOmCgXKQgBSwvWaiqDzgKGuOaerJGjMi9k7SF QkYDFv62MCYs3ktEA3l9IcytMO9Z0rt3DWeg0M6BQ9K/6ps6D9U= -----END CERTIFICATE-----Generated at Wed Sep 23 21:36:51 2026 by rpki-client