$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft File: A439C604DD921E0B98280E0F41763C1FFE93A348.mft (raw, json) Hash identifier: gt1EJDVbco4jfw0ewSgq0zCjNBi70IXUD9q1LczRuEc= Subject key identifier: 5B:57:71:E0:C2:01:6D:5E:C2:0C:E5:15:B1:F5:37:B6:56:C0:59:CD Authority key identifier: A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 Certificate issuer: /CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Certificate serial: 5419459654786EEFB381AAC48553C1187F218960 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 07:32:51 +0000 Manifest this update: Thu 17 Sep 2026 07:27:51 +0000 Manifest next update: Fri 18 Sep 2026 10:31:51 +0000 Files and hashes: 1: A439C604DD921E0B98280E0F41763C1FFE93A348.crl (hash: 7c5eO7UoOV6g/RJxHefWabXwPAVP23TdcAuoaYcOCfQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:19:45:96:54:78:6e:ef:b3:81:aa:c4:85:53:c1:18:7f:21:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A439C604DD921E0B98280E0F41763C1FFE93A348 Validity Not Before: Sep 17 07:27:51 2026 GMT Not After : Sep 18 10:31:51 2026 GMT Subject: CN=5B5771E0C2016D5EC20CE515B1F537B656C059CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:c1:17:72:6b:3d:09:8d:b4:e3:98:5e:8c: 9a:3d:be:3d:a4:46:5b:56:16:6b:da:34:2a:3a:a3: 0d:60:d2:72:a0:c7:1f:c1:17:23:5e:7a:e0:3b:4d: 6c:4e:44:5f:4d:b3:5f:23:07:d8:b6:ed:4d:6c:07: 38:d0:19:7e:09:b9:bb:47:9d:92:dc:a1:79:77:fb: 25:c5:0f:78:76:c5:95:37:b4:04:42:a0:51:eb:e1: fd:8d:ae:b8:b6:e6:7c:fc:c3:e0:ce:16:be:be:28: 76:f5:2f:25:ea:aa:bf:9e:06:85:97:24:3d:77:fc: 20:a2:4b:16:d3:07:a9:e2:1b:a8:a3:38:7b:e7:bb: cd:4e:34:c5:72:09:1d:65:cb:11:39:70:bc:07:af: 26:04:16:a6:f7:14:c3:a1:d0:a8:f5:47:11:82:53: 66:88:2e:ff:c5:de:12:d5:0d:6b:31:5b:3c:7c:fe: 60:bb:7d:62:fe:ee:f8:76:e3:55:12:05:4a:a4:6e: 90:28:5a:d0:43:c4:57:0d:a0:3e:f2:5f:f7:a6:ca: 0c:2f:ee:c7:38:20:0d:e3:c9:ea:e6:02:75:cf:86: 3c:6d:cf:03:64:46:fb:99:22:90:38:8d:49:bf:95: 41:95:7b:ac:f6:85:b4:8e:d2:8a:d4:66:d5:00:89: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:57:71:E0:C2:01:6D:5E:C2:0C:E5:15:B1:F5:37:B6:56:C0:59:CD X509v3 Authority Key Identifier: keyid:A4:39:C6:04:DD:92:1E:0B:98:28:0E:0F:41:76:3C:1F:FE:93:A3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A439C604DD921E0B98280E0F41763C1FFE93A348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/A439C604DD921E0B98280E0F41763C1FFE93A348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:a9:ab:cd:21:d9:41:2a:55:f6:19:e8:df:7d:a2:55:fc: eb:6f:d2:68:a3:50:61:b9:56:0c:f1:00:a9:cf:58:9e:a3:f9: 39:c1:f2:26:c2:fd:b0:ee:9b:c4:1c:81:87:6f:2f:c1:6c:d0: bd:74:01:22:a0:40:3c:0e:49:3c:dc:c6:cf:d9:9d:f2:b5:22: 16:1b:92:48:6a:0c:ce:fb:a3:45:c8:41:3a:a7:22:c2:46:c8: 5b:4e:6c:13:e5:fd:3e:29:e1:24:5e:37:9d:1f:e0:70:1e:40: 1b:be:ca:ae:51:b9:f6:b5:0b:fc:2a:80:40:16:7b:14:84:74: 95:b7:d2:e7:ae:a7:09:c7:2b:7e:20:3b:41:2a:ac:cc:69:79: 6c:fd:f0:03:8a:e4:c7:f6:e2:38:1b:3a:b4:4e:a4:59:9e:af: b7:84:62:8d:71:53:cf:4d:00:bd:a7:33:c6:0b:da:4f:bb:48: e1:5c:1e:81:ab:64:b7:c7:30:47:8b:43:57:de:27:68:f0:d2: e9:00:84:17:57:a8:62:c8:15:2f:36:f4:13:2f:21:29:96:e1: cd:f2:9f:69:d4:f5:a8:03:f7:ea:a5:7d:55:20:86:65:cd:74: 17:3c:35:e7:e8:8e:52:b3:97:88:6e:2a:11:59:95:67:2e:f9: e8:d6:1f:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBlFllR4bu+zgarEhVPBGH8hiWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZG RTkzQTM0ODAeFw0yNjA5MTcwNzI3NTFaFw0yNjA5MTgxMDMxNTFaMDMxMTAvBgNV BAMTKDVCNTc3MUUwQzIwMTZENUVDMjBDRTUxNUIxRjUzN0I2NTZDMDU5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLMEXcms9CY2045hejJo9vj2k RltWFmvaNCo6ow1g0nKgxx/BFyNeeuA7TWxORF9Ns18jB9i27U1sBzjQGX4JubtH nZLcoXl3+yXFD3h2xZU3tARCoFHr4f2Nrri25nz8w+DOFr6+KHb1LyXqqr+eBoWX JD13/CCiSxbTB6niG6ijOHvnu81ONMVyCR1lyxE5cLwHryYEFqb3FMOh0Kj1RxGC U2aILv/F3hLVDWsxWzx8/mC7fWL+7vh241USBUqkbpAoWtBDxFcNoD7yX/emygwv 7sc4IA3jyermAnXPhjxtzwNkRvuZIpA4jUm/lUGVe6z2hbSO0orUZtUAiTaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW1dx4MIBbV7CDOUVsfU3tlbAWc0wHwYDVR0j BBgwFoAUpDnGBN2SHguYKA4PQXY8H/6To0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhMTZlYzUtNTg3ZS00N2E0LThhZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRE RDkyMUUwQjk4MjgwRTBGNDE3NjNDMUZGRTkzQTM0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDM5QzYwNEREOTIxRTBCOTgyODBFMEY0MTc2M0MxRkZFOTNB MzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvQTQzOUM2MDRERDkyMUUwQjk4MjgwRTBGNDE3NjND MUZGRTkzQTM0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV7qavNIdlBKlX2GejffaJV/Otv0mijUGG5 VgzxAKnPWJ6j+TnB8ibC/bDum8QcgYdvL8Fs0L10ASKgQDwOSTzcxs/ZnfK1IhYb kkhqDM77o0XIQTqnIsJGyFtObBPl/T4p4SReN50f4HAeQBu+yq5Rufa1C/wqgEAW exSEdJW30ueupwnHK34gO0EqrMxpeWz98AOK5Mf24jgbOrROpFmer7eEYo1xU89N AL2nM8YL2k+7SOFcHoGrZLfHMEeLQ1feJ2jw0ukAhBdXqGLIFS829BMvISmW4c3y n2nU9agD9+qlfVUghmXNdBc8NefojlKzl4huKhFZlWcu+ejWH/Q= -----END CERTIFICATE-----Generated at Thu Sep 17 14:03:31 2026 by rpki-client