$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft File: A439C604DD921E0B98280E0F41763C1FFE93A348.mft (raw, json) Hash identifier: 5oTmig0x/zYnSe7VrXLs/D7eGAYjOwsRLXNJc7npAy8= Subject key identifier: 34:30:4B:61:79:48:0C:9F:9B:E1:D8:C4:99:EE:BF:8D:9D:49:7B:0D Authority key identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 Certificate issuer: /CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Certificate serial: 60FFB54409FB0E2DF75060034CD788C1C39DDE85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 02:53:56 +0000 Manifest this update: Fri 25 Sep 2026 02:48:55 +0000 Manifest next update: Sat 26 Sep 2026 03:14:55 +0000 Files and hashes: 1: A439C604DD921E0B98280E0F41763C1FFE93A348.crl (hash: cobnNUd/GhqSjrBZlbvLnUlWQfh4JwdasTZLKq9/bfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ff:b5:44:09:fb:0e:2d:f7:50:60:03:4c:d7:88:c1:c3:9d:de:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Validity Not Before: Sep 25 02:48:55 2026 GMT Not After : Sep 26 03:14:55 2026 GMT Subject: CN=34304B6179480C9F9BE1D8C499EEBF8D9D497B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9a:ce:82:e4:8c:61:3d:06:13:9a:a1:94:d6: d5:61:2c:2b:d1:a2:7a:05:f8:b8:fa:4b:a5:c4:e4: f8:25:6c:d9:f0:d7:08:58:17:c6:ff:2f:e8:49:ab: 2a:62:10:fc:4d:4a:fc:a5:81:ff:44:b4:1e:fe:c0: d3:44:80:49:97:e7:f5:e9:e4:41:6e:16:85:d2:0c: 5a:bd:77:a4:00:56:8f:86:99:58:1c:a4:c5:3f:0c: 2e:b3:23:da:c9:fc:de:31:fe:67:ba:7a:2d:d1:d5: d0:2a:33:a6:e4:2d:0b:44:25:f7:df:8c:89:ea:be: b7:4d:62:a5:35:69:e6:e3:a6:00:2a:cc:af:30:e8: dd:d4:8c:9e:3a:45:21:ca:8e:70:ba:26:ed:8d:34: ce:de:88:c5:e3:99:ec:cf:8c:96:04:c4:61:60:74: e3:6e:fd:20:62:bb:71:c3:d5:79:1a:61:c6:da:95: 59:7a:6b:30:67:f7:a6:e8:0b:d7:16:6a:04:ee:eb: 49:8a:7e:e8:29:fe:7a:51:69:0f:00:17:40:33:bf: 47:d8:56:70:a1:f7:d8:0f:a9:f2:e4:a6:05:1b:be: fd:73:a1:8a:8a:ad:07:e6:a1:49:d1:46:c1:9e:89: 3d:64:3e:25:f9:3b:82:ce:21:47:49:8e:5f:8e:7a: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:30:4B:61:79:48:0C:9F:9B:E1:D8:C4:99:EE:BF:8D:9D:49:7B:0D X509v3 Authority Key Identifier: keyid:A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8d:48:f8:ac:de:f9:93:5b:c2:09:af:ce:02:dc:6b:cc:3f: 7c:cb:d8:ee:c6:d7:57:23:2b:0b:6a:c8:98:91:01:96:c9:e5: 52:5d:23:92:04:d7:85:26:93:8f:5c:6b:f1:5f:6d:1d:22:50: b5:76:ea:4d:a9:c4:57:63:89:22:e0:c1:a5:e1:93:83:a8:c3: cd:5e:28:9b:f0:f4:23:ec:e3:36:36:e0:74:cf:e9:01:87:46: 04:7c:69:ad:ed:46:52:1b:b2:29:bb:07:6a:bb:32:d3:b7:ff: 97:65:80:8f:1b:69:86:53:ef:74:5a:3f:a8:66:ad:70:dc:8a: 93:6b:eb:0a:21:e5:31:e8:38:35:24:c2:97:a8:76:12:b7:2c: 60:3a:d2:6b:76:f8:92:c4:bc:6c:b0:86:ea:16:db:a9:67:70: 25:23:15:f1:e7:48:35:58:c7:ee:d7:72:3b:4a:b1:ec:59:59: 29:68:90:43:c2:b6:ef:a6:2f:94:26:b7:2c:d0:8f:1b:fe:1b: 74:27:df:c1:df:a9:79:c6:6a:45:60:3a:8f:dc:3a:6f:86:4c: 4a:98:6b:dc:6b:4f:4e:d3:ea:ec:54:c5:98:50:18:7c:89:54: 30:e6:9d:19:04:45:47:2c:8f:a8:e4:ea:e9:dc:4d:bf:e2:9d: 16:ec:84:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYP+1RAn7Di33UGADTNeIwcOd3oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZG RTkzQTM0ODAeFw0yNjA5MjUwMjQ4NTVaFw0yNjA5MjYwMzE0NTVaMDMxMTAvBgNV BAMTKDM0MzA0QjYxNzk0ODBDOUY5QkUxRDhDNDk5RUVCRjhEOUQ0OTdCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMms6C5IxhPQYTmqGU1tVhLCvR onoF+Lj6S6XE5PglbNnw1whYF8b/L+hJqypiEPxNSvylgf9EtB7+wNNEgEmX5/Xp 5EFuFoXSDFq9d6QAVo+GmVgcpMU/DC6zI9rJ/N4x/me6ei3R1dAqM6bkLQtEJfff jInqvrdNYqU1aebjpgAqzK8w6N3UjJ46RSHKjnC6Ju2NNM7eiMXjmezPjJYExGFg dONu/SBiu3HD1XkaYcbalVl6azBn96boC9cWagTu60mKfugp/npRaQ8AF0Azv0fY VnCh99gPqfLkpgUbvv1zoYqKrQfmoUnRRsGeiT1kPiX5O4LOIUdJjl+OehE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNDBLYXlIDJ+b4djEme6/jZ1Jew0wHwYDVR0j BBgwFoAUpDnGBN2SHguYKA4PQXY8H/6To0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhMTZlYzUtNTg3ZS00N2E0LThhZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRE RDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZGRTkzQTM0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDM5QzYwNEREOTIxRTBCOTgyODBFMEY0MTc2M0MxRkZFOTNB MzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjND MUZGRTkzQTM0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeNSPis3vmTW8IJr84C3GvMP3zL2O7G11cj KwtqyJiRAZbJ5VJdI5IE14Umk49ca/FfbR0iULV26k2pxFdjiSLgwaXhk4Oow81e KJvw9CPs4zY24HTP6QGHRgR8aa3tRlIbsim7B2q7MtO3/5dlgI8baYZT73RaP6hm rXDcipNr6woh5THoODUkwpeodhK3LGA60mt2+JLEvGywhuoW26lncCUjFfHnSDVY x+7XcjtKsexZWSlokEPCtu+mL5QmtyzQjxv+G3Qn38HfqXnGakVgOo/cOm+GTEqY a9xrT07T6uxUxZhQGHyJVDDmnRkERUcsj6jk6uncTb/inRbshPU= -----END CERTIFICATE-----Generated at Fri Sep 25 18:01:19 2026 by rpki-client