$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft File: A439C604DD921E0B98280E0F41763C1FFE93A348.mft (raw, json) Hash identifier: 9RkbjGCLej+Sp7QfjVhodOdegLW5krwomdP9ec1ID+4= Subject key identifier: 9F:DE:7C:42:96:7B:CA:1A:3F:1E:B6:4A:38:D6:10:6B:81:F9:2B:D2 Authority key identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 Certificate issuer: /CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Certificate serial: 549515FBC1DE291FDF63D296F32248EA6EF9CB98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 19:09:06 +0000 Manifest this update: Fri 19 Jun 2026 19:04:06 +0000 Manifest next update: Sat 20 Jun 2026 20:17:06 +0000 Files and hashes: 1: A439C604DD921E0B98280E0F41763C1FFE93A348.crl (hash: VXU5NUKfQETGqJrdTkSC6ygcHqquiUh4zr/VvUG+dkw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:95:15:fb:c1:de:29:1f:df:63:d2:96:f3:22:48:ea:6e:f9:cb:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Validity Not Before: Jun 19 19:04:06 2026 GMT Not After : Jun 20 20:17:06 2026 GMT Subject: CN=9FDE7C42967BCA1A3F1EB64A38D6106B81F92BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:66:b4:f6:c3:8f:0f:f3:0a:fc:67:47:57: bc:f0:dd:f8:2b:fe:76:b0:16:be:09:29:3d:e9:38: 36:21:53:4b:1d:71:dc:45:2c:6e:8d:e4:43:26:80: 67:e3:cc:e9:28:3a:b7:68:7a:df:b4:31:cf:2e:fe: 1c:70:5b:7c:99:da:ec:7c:04:8f:1b:4f:f2:b2:84: cc:5f:72:f1:c5:35:3b:9e:15:b2:d9:d2:c6:6d:f9: 35:84:74:f7:ee:b4:22:31:d2:6e:75:bc:01:e8:55: 07:8e:cc:bc:90:05:63:b9:3c:b0:e3:d2:3c:23:0e: 7b:0e:c0:f4:ed:a2:3a:7b:4b:52:75:25:b2:4e:67: 96:7e:07:93:a0:f2:cc:fd:7a:32:c1:b7:51:c9:19: 6c:98:c7:4f:b3:bd:80:b2:0a:94:88:93:dc:8c:ca: 54:9d:0f:90:a2:6b:ed:7b:94:97:24:25:0c:1e:5c: 3e:82:09:82:4a:24:69:29:5c:ca:fa:74:70:2d:5d: 71:c9:73:35:67:a8:c3:00:3c:26:d5:4d:98:48:88: e0:db:2d:bc:4c:eb:66:aa:09:4a:51:2a:9c:35:4f: 78:9b:10:c4:42:25:ff:7e:46:7c:82:51:e9:e4:d2: d4:71:83:cb:a8:69:a3:2d:a3:e1:21:15:14:8f:68: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DE:7C:42:96:7B:CA:1A:3F:1E:B6:4A:38:D6:10:6B:81:F9:2B:D2 X509v3 Authority Key Identifier: keyid:A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:77:5a:ce:7a:70:26:0d:ee:65:07:04:1b:65:50:57:96:f8: cf:57:e6:5b:82:16:16:d6:6f:70:12:5c:e0:3e:c4:34:47:53: 80:7e:97:b8:d3:0b:bd:b9:d2:27:1d:69:28:a4:69:b3:9c:2f: 16:7d:ae:62:45:48:4c:f1:fb:9f:dd:f9:15:ad:4d:f6:5a:af: e9:d4:41:77:18:02:77:fa:32:28:4b:1b:53:81:c4:48:c5:22: 52:58:b7:95:9c:57:0e:b2:ab:f9:b5:91:46:4b:38:8c:27:1c: 89:9d:11:21:a8:0f:01:eb:31:b9:19:3a:18:2a:c3:d0:60:90: e4:fb:01:86:70:d2:5a:bd:00:0c:dd:36:ea:47:ce:29:30:b8: d6:66:0d:88:ac:a1:72:08:4d:66:a2:e0:cd:34:e4:c1:a7:42: 28:4d:06:8c:b9:d0:b8:bb:cb:9c:ea:ad:bc:97:a8:09:6c:06: f2:5b:1b:cc:8b:ac:5b:5b:27:d3:b3:de:b7:15:92:dd:d1:b5: 7b:4b:a8:02:65:67:2d:88:3a:ba:f5:fb:bb:5d:f1:fe:bb:66: 0c:70:45:83:c4:9d:24:18:3a:ec:ec:11:58:d4:d9:88:58:19: 2a:0d:a3:e9:40:cc:79:59:fb:6b:a0:00:e5:e9:58:d1:fd:75: 6b:c8:4f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJUV+8HeKR/fY9KW8yJI6m75y5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZG RTkzQTM0ODAeFw0yNjA2MTkxOTA0MDZaFw0yNjA2MjAyMDE3MDZaMDMxMTAvBgNV BAMTKDlGREU3QzQyOTY3QkNBMUEzRjFFQjY0QTM4RDYxMDZCODFGOTJCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Jma09sOPD/MK/GdHV7zw3fgr /nawFr4JKT3pODYhU0sdcdxFLG6N5EMmgGfjzOkoOrdoet+0Mc8u/hxwW3yZ2ux8 BI8bT/KyhMxfcvHFNTueFbLZ0sZt+TWEdPfutCIx0m51vAHoVQeOzLyQBWO5PLDj 0jwjDnsOwPTtojp7S1J1JbJOZ5Z+B5Og8sz9ejLBt1HJGWyYx0+zvYCyCpSIk9yM ylSdD5Cia+17lJckJQweXD6CCYJKJGkpXMr6dHAtXXHJczVnqMMAPCbVTZhIiODb LbxM62aqCUpRKpw1T3ibEMRCJf9+RnyCUenk0tRxg8uoaaMto+EhFRSPaDlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn958QpZ7yho/HrZKONYQa4H5K9IwHwYDVR0j BBgwFoAUpDnGBN2SHguYKA4PQXY8H/6To0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhMTZlYzUtNTg3ZS00N2E0LThhZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRE RDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZGRTkzQTM0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDM5QzYwNEREOTIxRTBCOTgyODBFMEY0MTc2M0MxRkZFOTNB MzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjND MUZGRTkzQTM0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJ3Ws56cCYN7mUHBBtlUFeW+M9X5luCFhbW b3ASXOA+xDRHU4B+l7jTC7250icdaSikabOcLxZ9rmJFSEzx+5/d+RWtTfZar+nU QXcYAnf6MihLG1OBxEjFIlJYt5WcVw6yq/m1kUZLOIwnHImdESGoDwHrMbkZOhgq w9BgkOT7AYZw0lq9AAzdNupHzikwuNZmDYisoXIITWai4M005MGnQihNBoy50Li7 y5zqrbyXqAlsBvJbG8yLrFtbJ9Oz3rcVkt3RtXtLqAJlZy2IOrr1+7td8f67Zgxw RYPEnSQYOuzsEVjU2YhYGSoNo+lAzHlZ+2ugAOXpWNH9dWvIT74= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:23 2026 by rpki-client