$ rpki-client -vvf rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft File: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft (raw, json) Hash identifier: F55rcQcpCq6tYugAuoOvU4KRPpqmxJMbhlIkehXBLEY= Subject key identifier: 2C:9D:B9:A1:AF:D9:30:2E:45:F8:49:A1:4A:22:9C:CC:E8:DD:F6:77 Authority key identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A Certificate issuer: /CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Certificate serial: 2830A1564D46E00B51347686B01BB9534C09E005 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 07:01:25 +0000 Manifest this update: Wed 17 Jun 2026 06:56:25 +0000 Manifest next update: Thu 18 Jun 2026 08:04:25 +0000 Files and hashes: 1: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl (hash: AGE80dnoDXI8rjbYUS+RBGQiNUAmFDgl6fos9xg3dr0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:30:a1:56:4d:46:e0:0b:51:34:76:86:b0:1b:b9:53:4c:09:e0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Validity Not Before: Jun 17 06:56:25 2026 GMT Not After : Jun 18 08:04:25 2026 GMT Subject: CN=2C9DB9A1AFD9302E45F849A14A229CCCE8DDF677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:3b:60:d9:d1:03:3e:04:0a:e8:7a:e8:c6: bd:c1:c4:09:99:96:e5:2d:2e:83:a9:7d:ae:9a:74: 44:c2:2b:aa:a5:08:1f:91:cc:eb:37:49:ef:6d:60: 66:d3:ed:93:ee:4a:bf:cb:35:69:5e:38:c0:10:17: 59:3c:2b:f2:29:26:af:88:e6:58:d9:ad:4f:5e:aa: fd:53:1b:57:62:a8:0e:da:d1:ca:3f:42:21:b5:0f: 42:58:3b:c5:4a:d3:60:85:68:86:42:b3:46:d6:88: d8:e5:87:d9:76:9a:0b:fe:b6:59:eb:75:14:a0:2c: 47:3c:b5:75:2d:49:53:af:39:95:8c:11:cd:84:2c: 5f:87:90:08:2c:80:77:94:f8:eb:78:08:1f:a8:7b: 4d:d0:3c:cf:cc:7d:bc:7f:99:72:14:e6:e6:78:70: 9a:49:e3:6c:85:f8:15:61:a5:a0:f3:5b:d1:46:0c: 54:08:ab:02:73:d9:f5:0e:0e:1c:3f:d6:62:b1:3d: 67:f4:cb:06:14:80:23:e4:d8:6d:99:56:4b:71:ae: 8c:44:e9:5d:2a:02:17:04:43:7f:95:d3:23:dd:9c: 45:80:84:be:81:1c:d2:e2:c7:ad:9f:94:40:b6:76: b2:eb:e7:57:06:aa:c2:2e:a2:40:fe:71:0e:5b:20: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9D:B9:A1:AF:D9:30:2E:45:F8:49:A1:4A:22:9C:CC:E8:DD:F6:77 X509v3 Authority Key Identifier: keyid:AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fd:60:ff:76:f9:1d:5b:40:4f:b4:3e:f0:6c:5a:e8:54:01: 17:b4:2b:aa:e5:90:c5:e1:46:ca:9a:2e:eb:50:9e:44:22:e5: 68:ba:af:06:16:17:68:5f:4c:ca:97:e8:54:30:bd:0b:5f:eb: 84:b9:66:22:8c:97:9e:f8:82:19:fe:c0:cb:cc:98:63:9b:2a: 36:4d:c2:18:e9:30:70:7d:40:30:92:87:78:f4:30:26:16:92: 26:9a:26:4e:70:ff:64:c2:dc:68:a2:6a:96:6e:06:20:1c:13: 25:d9:21:cf:fe:ee:73:fb:dd:ee:8e:fa:e6:7e:4b:da:b6:77: 25:f5:55:cb:c3:d8:36:c5:dc:73:58:6b:19:32:e8:68:62:06: 74:b2:c2:26:11:15:83:21:3b:e8:b4:dd:34:dc:32:81:d7:c3: 2c:97:57:28:3f:7a:8f:3c:3d:aa:9f:ec:e9:16:bf:53:40:c5: 4c:b6:7b:15:c7:e0:44:9d:28:9f:f9:1c:b4:f3:60:5a:5d:be: 37:ea:bb:cb:dd:0b:bd:55:1c:ec:0c:03:3e:16:3f:8d:cb:3e: 14:28:8c:4b:99:dc:be:47:23:f2:8a:1c:ae:15:5e:dd:49:0b: 24:b9:f7:49:cf:83:fb:34:d1:37:6b:e6:64:2d:7f:32:0a:35: 84:7d:af:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDChVk1G4AtRNHaGsBu5U0wJ4AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRDQkI5 NkQ4QzEyQTAeFw0yNjA2MTcwNjU2MjVaFw0yNjA2MTgwODA0MjVaMDMxMTAvBgNV BAMTKDJDOURCOUExQUZEOTMwMkU0NUY4NDlBMTRBMjI5Q0NDRThEREY2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LTtg2dEDPgQK6Hroxr3BxAmZ luUtLoOpfa6adETCK6qlCB+RzOs3Se9tYGbT7ZPuSr/LNWleOMAQF1k8K/IpJq+I 5ljZrU9eqv1TG1diqA7a0co/QiG1D0JYO8VK02CFaIZCs0bWiNjlh9l2mgv+tlnr dRSgLEc8tXUtSVOvOZWMEc2ELF+HkAgsgHeU+Ot4CB+oe03QPM/Mfbx/mXIU5uZ4 cJpJ42yF+BVhpaDzW9FGDFQIqwJz2fUODhw/1mKxPWf0ywYUgCPk2G2ZVktxroxE 6V0qAhcEQ3+V0yPdnEWAhL6BHNLix62flEC2drLr51cGqsIuokD+cQ5bIG6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULJ25oa/ZMC5F+EmhSiKczOjd9ncwHwYDVR0j BBgwFoAUqkXNG7jHM01d3vk2Stbcu5bYwSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYwMzZiNzQtOGE1ZC00MGFhLTk2MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJC OEM3MzM0RDVEREVGOTM2NEFENkRDQkI5NkQ4QzEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTQ1Q0QxQkI4QzczMzRENURERUY5MzY0QUQ2RENCQjk2RDhD MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRD QkI5NkQ4QzEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJr9YP92+R1bQE+0PvBsWuhUARe0K6rlkMXh RsqaLutQnkQi5Wi6rwYWF2hfTMqX6FQwvQtf64S5ZiKMl574ghn+wMvMmGObKjZN whjpMHB9QDCSh3j0MCYWkiaaJk5w/2TC3GiiapZuBiAcEyXZIc/+7nP73e6O+uZ+ S9q2dyX1VcvD2DbF3HNYaxky6GhiBnSywiYRFYMhO+i03TTcMoHXwyyXVyg/eo88 Paqf7OkWv1NAxUy2exXH4ESdKJ/5HLTzYFpdvjfqu8vdC71VHOwMAz4WP43LPhQo jEuZ3L5HI/KKHK4VXt1JCyS590nPg/s00Tdr5mQtfzIKNYR9r/A= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:10 2026 by rpki-client