$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft File: A439C604DD921E0B98280E0F41763C1FFE93A348.mft (raw, json) Hash identifier: mBPcO5rbjAjQoVB3akPLssPQ83Z22nRfat6KfXgFBjg= Subject key identifier: C8:FB:54:A2:E8:9A:18:39:CC:BA:5B:17:71:06:56:0A:9D:16:E5:CC Authority key identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 Certificate issuer: /CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Certificate serial: 39AD46A7D67DC7A3D807AB16E08B1201291AA397 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft Manifest number: 3A Signing time: Mon 15 Jun 2026 11:55:25 +0000 Manifest this update: Mon 15 Jun 2026 11:50:25 +0000 Manifest next update: Tue 16 Jun 2026 15:13:25 +0000 Files and hashes: 1: A439C604DD921E0B98280E0F41763C1FFE93A348.crl (hash: fOAzDqVWymWRIp/HSiadCbxXAo9jpPRWj2ua12d+3Dw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ad:46:a7:d6:7d:c7:a3:d8:07:ab:16:e0:8b:12:01:29:1a:a3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Validity Not Before: Jun 15 11:50:25 2026 GMT Not After : Jun 16 15:13:25 2026 GMT Subject: CN=C8FB54A2E89A1839CCBA5B177106560A9D16E5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:ae:a1:ef:e5:f2:13:10:03:7a:e3:fd:4c: 72:a4:25:c9:9c:36:8a:d8:35:de:ca:2c:fe:f1:e0: af:63:e0:ee:14:ec:b5:1f:e3:52:99:1a:6b:37:dc: 78:f4:50:c5:5b:32:9a:e5:f0:28:d5:5d:5e:16:72: db:60:50:fd:0d:28:18:ff:73:2e:48:39:9d:39:57: b7:5e:d0:19:ae:db:23:d2:32:09:6d:29:3e:52:27: 67:ac:e3:72:4a:1e:19:b7:cf:bc:b9:3b:27:1e:d4: d6:49:7f:41:49:d1:ea:ae:de:ad:7f:85:44:e3:a6: 72:bc:07:bf:c6:cd:c5:df:02:d2:be:61:4f:46:ee: b3:bb:10:88:a1:fd:95:6c:c3:67:42:74:3a:5a:3e: ee:0d:c9:1f:9c:ee:af:ca:80:b0:22:d7:7e:69:61: eb:a0:7d:79:2d:20:08:67:ce:03:eb:94:06:10:23: 0b:96:ae:7f:9c:bb:fd:94:d3:f9:76:2d:df:39:82: c9:f2:20:4f:6f:e6:19:c0:8d:96:d4:03:a4:70:7f: 81:17:40:35:a2:7a:27:ba:35:70:bf:6c:95:c4:a5: c3:ab:61:10:a5:7c:f1:7d:5c:bf:b0:ba:7c:e6:ff: 0d:21:d9:27:ba:32:72:92:63:56:22:f9:ec:81:97: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FB:54:A2:E8:9A:18:39:CC:BA:5B:17:71:06:56:0A:9D:16:E5:CC X509v3 Authority Key Identifier: keyid:A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:11:c4:c7:26:4b:86:c1:16:fd:6b:09:9e:6a:21:e6:fc:07: 9a:e5:4d:db:67:ec:b7:cc:c7:85:d1:f9:27:48:07:40:92:e6: 5d:f2:d6:2a:f4:bd:e8:02:a9:f1:39:3d:02:d7:fc:43:5d:4b: 57:d1:6c:e7:2d:02:f0:26:ac:ac:73:b5:c9:70:03:e7:64:e6: ee:fa:aa:da:41:0c:53:e1:08:3f:e6:43:b6:2a:13:50:4c:1a: 60:af:9b:0e:8a:4c:19:52:a0:51:27:06:2d:60:8d:52:8e:e8: e4:8a:e3:7f:68:25:c7:63:11:2f:cc:0a:6e:8d:98:c1:de:ae: e1:41:1c:9d:d6:70:1d:f0:86:d5:46:8b:dd:88:a0:05:89:a3: ef:fe:33:d5:f7:f1:86:8a:e7:8d:b1:43:ed:d7:29:70:45:57: 0c:16:ac:ee:7d:67:a5:93:60:ca:9c:b8:64:39:b3:06:c2:de: 3d:5d:e4:c8:20:66:43:8b:fb:64:b4:6a:d5:76:b9:e0:cf:da: 96:a0:00:11:77:0d:86:45:87:62:54:d3:9b:be:62:a9:74:85: eb:f2:53:f6:23:b8:f7:63:b5:6a:ef:95:03:53:ad:ea:4d:78: da:36:97:6a:20:46:f8:2c:fe:bd:5d:d1:d7:18:af:12:df:8d: ef:05:59:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOa1Gp9Z9x6PYB6sW4IsSASkao5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZG RTkzQTM0ODAeFw0yNjA2MTUxMTUwMjVaFw0yNjA2MTYxNTEzMjVaMDMxMTAvBgNV BAMTKEM4RkI1NEEyRTg5QTE4MzlDQ0JBNUIxNzcxMDY1NjBBOUQxNkU1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9q6h7+XyExADeuP9THKkJcmc NorYNd7KLP7x4K9j4O4U7LUf41KZGms33Hj0UMVbMprl8CjVXV4WcttgUP0NKBj/ cy5IOZ05V7de0Bmu2yPSMgltKT5SJ2es43JKHhm3z7y5Oyce1NZJf0FJ0equ3q1/ hUTjpnK8B7/GzcXfAtK+YU9G7rO7EIih/ZVsw2dCdDpaPu4NyR+c7q/KgLAi135p YeugfXktIAhnzgPrlAYQIwuWrn+cu/2U0/l2Ld85gsnyIE9v5hnAjZbUA6Rwf4EX QDWieie6NXC/bJXEpcOrYRClfPF9XL+wunzm/w0h2Se6MnKSY1Yi+eyBlxurAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPtUouiaGDnMulsXcQZWCp0W5cwwHwYDVR0j BBgwFoAUpDnGBN2SHguYKA4PQXY8H/6To0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhMTZlYzUtNTg3ZS00N2E0LThhZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRE RDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZGRTkzQTM0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDM5QzYwNEREOTIxRTBCOTgyODBFMEY0MTc2M0MxRkZFOTNB MzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjND MUZGRTkzQTM0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8RxMcmS4bBFv1rCZ5qIeb8B5rlTdtn7LfM x4XR+SdIB0CS5l3y1ir0vegCqfE5PQLX/ENdS1fRbOctAvAmrKxztclwA+dk5u76 qtpBDFPhCD/mQ7YqE1BMGmCvmw6KTBlSoFEnBi1gjVKO6OSK439oJcdjES/MCm6N mMHeruFBHJ3WcB3whtVGi92IoAWJo+/+M9X38YaK542xQ+3XKXBFVwwWrO59Z6WT YMqcuGQ5swbC3j1d5MggZkOL+2S0atV2ueDP2pagABF3DYZFh2JU05u+Yql0hevy U/YjuPdjtWrvlQNTrepNeNo2l2ogRvgs/r1d0dcYrxLfje8FWVU= -----END CERTIFICATE-----Generated at Mon Jun 15 14:13:32 2026 by rpki-client