$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft File: A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft (raw, json) Hash identifier: lQ/guSZb5QGNjzh8a21OS0W3P9KahvSUwIPAIin31Jo= Subject key identifier: 4E:EB:39:32:63:6A:6E:C3:39:5F:85:08:B3:45:11:29:F4:01:8C:2D Authority key identifier: A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 Certificate issuer: /CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Certificate serial: 5B166486AB97D113122E56BC28FADDEB46B55253 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 07:27:41 +0000 Manifest this update: Thu 17 Sep 2026 07:22:41 +0000 Manifest next update: Fri 18 Sep 2026 08:52:41 +0000 Files and hashes: 1: A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl (hash: drlhBzsdkRJWtQAnpBanUTdFbC1TNzRrIQhxsGSw920=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:16:64:86:ab:97:d1:13:12:2e:56:bc:28:fa:dd:eb:46:b5:52:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A25F578956A8EFA9E8FDF8A180F632B7693610 Validity Not Before: Sep 17 07:22:41 2026 GMT Not After : Sep 18 08:52:41 2026 GMT Subject: CN=4EEB3932636A6EC3395F8508B3451129F4018C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fa:9b:c3:d5:df:95:fe:ec:c6:ad:58:45:13: f3:40:f2:e2:fd:da:b0:d2:96:99:55:58:ba:c3:4b: 3d:2a:13:23:45:78:64:4b:16:c6:b2:b5:f1:20:a1: e5:2d:a6:f9:89:89:bf:c5:d5:35:a2:b4:a6:3b:82: 1b:6d:74:b6:77:19:ef:34:9a:bf:53:9f:76:6a:e9: b5:0a:32:a9:f9:0b:91:32:c2:f8:45:3f:d8:13:5b: fe:58:7d:a8:f5:ad:54:22:59:95:88:ca:52:a8:00: b4:95:84:e3:ae:66:81:2e:8d:b4:f6:1b:f0:86:98: 48:a3:9b:97:8a:f8:a0:2e:e8:9b:81:28:a0:24:4f: 3a:5e:14:ed:2d:ca:c0:86:9d:7a:81:0e:58:0c:93: 00:bc:41:7b:e5:de:ee:c7:51:d7:e3:a1:d4:bf:c6: bc:3f:b1:37:10:8f:7f:e1:4f:e2:8c:5b:cb:ea:92: 93:ff:d4:b0:14:ba:81:86:d9:ad:37:57:b9:34:99: ec:f2:29:78:8f:fc:5e:76:0d:bd:a1:7b:38:92:29: 5c:6e:00:e9:9d:52:36:7b:cf:f6:5b:3e:7e:cd:b4: 3d:26:4a:86:11:aa:59:97:79:21:48:85:20:74:a5: 7e:56:e6:30:a2:4d:c4:4e:d8:6a:3a:9e:03:5d:e5: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:39:32:63:6A:6E:C3:39:5F:85:08:B3:45:11:29:F4:01:8C:2D X509v3 Authority Key Identifier: keyid:A4:A2:5F:57:89:56:A8:EF:A9:E8:FD:F8:A1:80:F6:32:B7:69:36:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A25F578956A8EFA9E8FDF8A180F632B7693610.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/A4A25F578956A8EFA9E8FDF8A180F632B7693610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:50:62:89:30:e4:33:7a:28:7d:a5:c6:c9:a6:43:50:63:e2: df:91:c9:e4:a9:d4:07:92:75:8d:d6:f8:5c:18:9e:c3:9d:cb: c8:03:ed:2a:cc:9c:76:64:0f:03:ea:91:c8:62:85:64:0f:62: a3:27:6c:5c:e6:9b:8b:0d:ee:06:53:cf:17:60:75:96:f8:d5: 3d:b7:57:82:df:2e:52:08:83:20:ac:22:17:3c:62:f2:6f:10: 5b:83:89:30:01:4f:88:1d:e2:88:78:83:96:e3:ad:f0:47:ff: cb:45:ee:47:f5:d3:bb:c5:5c:cd:ee:50:9f:a8:da:39:f8:a6: 9a:48:37:29:1a:16:63:97:9d:a3:2c:e9:9f:e1:7f:df:9e:1e: 51:43:08:d3:a5:4a:31:d8:68:bb:59:62:31:b6:86:31:8e:39: 81:95:01:19:e3:0e:3a:ca:2e:ab:57:5e:9d:cd:6c:e5:31:aa: d5:35:4e:8d:23:fa:31:a0:11:c3:85:1c:c4:34:ca:6e:13:78: 68:0a:ad:88:30:e8:2b:c3:7b:b1:df:00:d2:8f:9e:24:66:88: e3:6f:1a:a3:25:bc:23:3e:93:34:2e:d4:30:67:a6:b7:f3:9c: 29:a7:e8:23:29:91:5e:a0:9c:47:46:d8:c5:38:c6:70:aa:22: fc:17:bf:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxZkhquX0RMSLla8KPrd60a1UlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2MzJC NzY5MzYxMDAeFw0yNjA5MTcwNzIyNDFaFw0yNjA5MTgwODUyNDFaMDMxMTAvBgNV BAMTKDRFRUIzOTMyNjM2QTZFQzMzOTVGODUwOEIzNDUxMTI5RjQwMThDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1+pvD1d+V/uzGrVhFE/NA8uL9 2rDSlplVWLrDSz0qEyNFeGRLFsaytfEgoeUtpvmJib/F1TWitKY7ghttdLZ3Ge80 mr9Tn3Zq6bUKMqn5C5EywvhFP9gTW/5Yfaj1rVQiWZWIylKoALSVhOOuZoEujbT2 G/CGmEijm5eK+KAu6JuBKKAkTzpeFO0tysCGnXqBDlgMkwC8QXvl3u7HUdfjodS/ xrw/sTcQj3/hT+KMW8vqkpP/1LAUuoGG2a03V7k0mezyKXiP/F52Db2heziSKVxu AOmdUjZ7z/ZbPn7NtD0mSoYRqlmXeSFIhSB0pX5W5jCiTcRO2Go6ngNd5QovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTus5MmNqbsM5X4UIs0URKfQBjC0wHwYDVR0j BBgwFoAUpKJfV4lWqO+p6P34oYD2MrdpNhAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4ZmRlYjAtMzUxMy00ZjNkLTkyNTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4 OTU2QThFRkE5RThGREY4QTE4MEY2MzJCNzY5MzYxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEEyNUY1Nzg5NTZBOEVGQTlFOEZERjhBMTgwRjYzMkI3Njkz NjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvQTRBMjVGNTc4OTU2QThFRkE5RThGREY4QTE4MEY2 MzJCNzY5MzYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpQYokw5DN6KH2lxsmmQ1Bj4t+RyeSp1AeS dY3W+FwYnsOdy8gD7SrMnHZkDwPqkchihWQPYqMnbFzmm4sN7gZTzxdgdZb41T23 V4LfLlIIgyCsIhc8YvJvEFuDiTABT4gd4oh4g5bjrfBH/8tF7kf107vFXM3uUJ+o 2jn4pppINykaFmOXnaMs6Z/hf9+eHlFDCNOlSjHYaLtZYjG2hjGOOYGVARnjDjrK LqtXXp3NbOUxqtU1To0j+jGgEcOFHMQ0ym4TeGgKrYgw6CvDe7HfANKPniRmiONv GqMlvCM+kzQu1DBnprfznCmn6CMpkV6gnEdG2MU4xnCqIvwXv0U= -----END CERTIFICATE-----Generated at Thu Sep 17 10:17:34 2026 by rpki-client