$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft File: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft (raw, json) Hash identifier: r9jqapeTc9Z59Mt2M+kX0CtNvE/mbzauTDNYmg0VqV0= Subject key identifier: 93:CB:79:F6:AD:4A:11:90:B8:FD:4A:FF:E7:E4:8D:56:F6:1C:B1:46 Authority key identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A Certificate issuer: /CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Certificate serial: 0BAB4778AA58C8BA281F96A3C37F9FE8050F68E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:18:02 +0000 Manifest this update: Mon 21 Sep 2026 09:13:02 +0000 Manifest next update: Tue 22 Sep 2026 11:45:02 +0000 Files and hashes: 1: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl (hash: 5dFLSeR0rwpk/o68Up1U92uMmw7AUzjqwpyUa7MSaP8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ab:47:78:aa:58:c8:ba:28:1f:96:a3:c3:7f:9f:e8:05:0f:68:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Validity Not Before: Sep 21 09:13:02 2026 GMT Not After : Sep 22 11:45:02 2026 GMT Subject: CN=93CB79F6AD4A1190B8FD4AFFE7E48D56F61CB146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:e8:2d:2f:af:e3:76:49:e2:99:8c:f2:c8: 13:45:62:54:68:57:3f:8d:9c:ca:f8:94:c2:9a:c3: 55:d9:03:c0:0c:78:72:ae:f4:ec:30:4d:ed:b0:44: 3f:81:5a:5b:0b:e6:e4:89:6a:e3:5a:e7:1e:68:7f: 68:fa:20:09:aa:2f:34:82:14:84:05:4d:90:63:18: f3:81:17:f1:39:46:4b:7c:00:46:34:6a:bf:e0:a0: 70:18:4a:26:2f:83:04:cf:67:d0:6e:d3:71:33:3b: b8:27:36:45:1d:28:a5:01:e8:f7:51:29:78:3e:80: ff:5b:bf:4e:e5:3c:21:d0:73:3d:86:34:48:20:37: 92:3a:21:8a:80:76:81:8e:32:5e:ce:e8:b1:47:7c: 57:69:e5:9d:6f:59:d8:a4:5a:a6:31:55:72:dc:24: 3d:44:4e:3e:fa:21:57:e4:20:80:95:41:b0:47:ba: bb:45:21:64:12:1a:ff:2f:4e:5c:5c:29:b1:a9:aa: ea:99:46:0b:77:03:26:5c:71:ad:b5:f7:7c:92:0c: 36:e7:1c:96:5e:06:6d:ed:f5:f6:2c:26:be:d4:92: 12:36:bc:15:1e:ab:74:7c:f2:17:28:ce:56:6b:5a: cc:27:fc:10:53:38:c3:fa:00:4a:f8:8a:c0:5b:6c: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CB:79:F6:AD:4A:11:90:B8:FD:4A:FF:E7:E4:8D:56:F6:1C:B1:46 X509v3 Authority Key Identifier: keyid:AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d4:75:00:d4:bb:73:a0:a4:21:9a:2e:06:47:3a:77:d6:f1: 56:bc:4e:8b:9b:1b:66:2b:23:6a:c6:39:a7:c0:fe:f4:38:d3: 4a:87:38:1d:81:d9:0d:11:0b:12:c3:b6:6b:01:d6:d2:fe:1a: bc:10:32:6d:6f:57:8b:5c:70:8c:4c:c9:b8:44:50:26:75:36: 66:2e:51:f9:8a:44:c5:5d:21:60:88:aa:6d:29:58:9f:8b:8f: 48:2d:77:9e:02:8d:e0:fb:91:6b:71:6e:9f:31:0b:62:ea:cc: 97:81:a8:04:11:dc:6d:40:ad:92:89:01:a6:3c:c1:9e:57:44: 08:98:b6:b1:f7:3f:24:e7:01:f9:2c:ce:7b:27:73:4d:5e:cf: 01:18:b4:b7:b2:12:4b:6c:36:c1:4c:f0:d5:54:b5:c9:78:0e: 6c:ba:3c:07:6c:ed:fc:24:a3:d0:14:c5:13:9f:d3:41:f5:6e: f4:3d:73:e2:5c:56:b3:eb:46:54:3a:99:ac:7d:72:ad:9f:70: be:fb:78:15:17:2d:4b:46:a1:f7:6a:30:42:20:ce:ff:50:3d: d1:69:7c:10:53:b4:e6:b6:7a:c6:1b:c8:a1:c0:7f:54:fe:15: fd:0b:45:32:36:d3:3d:12:73:de:fd:86:79:93:75:22:d6:d3: 51:1a:c7:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6tHeKpYyLooH5ajw3+f6AUPaOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRDQkI5 NkQ4QzEyQTAeFw0yNjA5MjEwOTEzMDJaFw0yNjA5MjIxMTQ1MDJaMDMxMTAvBgNV BAMTKDkzQ0I3OUY2QUQ0QTExOTBCOEZENEFGRkU3RTQ4RDU2RjYxQ0IxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaiugtL6/jdknimYzyyBNFYlRo Vz+NnMr4lMKaw1XZA8AMeHKu9OwwTe2wRD+BWlsL5uSJauNa5x5of2j6IAmqLzSC FIQFTZBjGPOBF/E5Rkt8AEY0ar/goHAYSiYvgwTPZ9Bu03EzO7gnNkUdKKUB6PdR KXg+gP9bv07lPCHQcz2GNEggN5I6IYqAdoGOMl7O6LFHfFdp5Z1vWdikWqYxVXLc JD1ETj76IVfkIICVQbBHurtFIWQSGv8vTlxcKbGpquqZRgt3AyZcca2193ySDDbn HJZeBm3t9fYsJr7UkhI2vBUeq3R88hcozlZrWswn/BBTOMP6AEr4isBbbIKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk8t59q1KEZC4/Ur/5+SNVvYcsUYwHwYDVR0j BBgwFoAUqkXNG7jHM01d3vk2Stbcu5bYwSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYwMzZiNzQtOGE1ZC00MGFhLTk2MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJC OEM3MzM0RDVEREVGOTM2NEFENkRDQkI5NkQ4QzEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTQ1Q0QxQkI4QzczMzRENURERUY5MzY0QUQ2RENCQjk2RDhD MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRD QkI5NkQ4QzEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTUdQDUu3OgpCGaLgZHOnfW8Va8ToubG2Yr I2rGOafA/vQ400qHOB2B2Q0RCxLDtmsB1tL+GrwQMm1vV4tccIxMybhEUCZ1NmYu UfmKRMVdIWCIqm0pWJ+Lj0gtd54CjeD7kWtxbp8xC2LqzJeBqAQR3G1ArZKJAaY8 wZ5XRAiYtrH3PyTnAfksznsnc01ezwEYtLeyEktsNsFM8NVUtcl4Dmy6PAds7fwk o9AUxROf00H1bvQ9c+JcVrPrRlQ6max9cq2fcL77eBUXLUtGofdqMEIgzv9QPdFp fBBTtOa2esYbyKHAf1T+Ff0LRTI20z0Sc979hnmTdSLW01Eax5w= -----END CERTIFICATE-----Generated at Mon Sep 21 17:40:07 2026 by rpki-client