$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft File: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft (raw, json) Hash identifier: kjVU5f2EXy3eIjDXs93+Y1WBQvmzZ0o5GU/msH3cKvg= Subject key identifier: 40:77:6B:4D:24:16:20:4E:CB:34:C6:80:33:53:51:4B:B5:02:47:CA Authority key identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A Certificate issuer: /CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Certificate serial: 7E498DCDB835A41AFBFF8B93DFD7F6DBC211505F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:47:27 +0000 Manifest this update: Wed 16 Sep 2026 18:42:27 +0000 Manifest next update: Thu 17 Sep 2026 22:38:27 +0000 Files and hashes: 1: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl (hash: 11F0l0N9y3rlk3wzAtF0DVWPFPe4AZEzRKuS978eNXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:49:8d:cd:b8:35:a4:1a:fb:ff:8b:93:df:d7:f6:db:c2:11:50:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Validity Not Before: Sep 16 18:42:27 2026 GMT Not After : Sep 17 22:38:27 2026 GMT Subject: CN=40776B4D2416204ECB34C6803353514BB50247CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:d5:59:2c:63:e1:34:a4:31:25:6c:6a:b6: bb:a1:b6:15:f4:a9:0c:61:82:3c:b2:fe:7b:b4:9c: 96:ce:93:74:f2:1f:25:6e:55:dc:c8:c0:53:4b:1f: 3b:d3:98:7e:64:d6:eb:a6:71:94:e3:84:76:87:d5: 6e:7f:67:65:5b:39:ed:45:81:a9:ec:7c:ca:b1:c4: 9c:8f:4b:65:cc:35:52:a4:85:0f:ca:85:74:59:fc: 7f:9f:90:d5:2c:0d:bd:82:f9:9c:94:a5:e6:3d:9b: d8:c6:30:c1:c3:bd:fa:c7:c0:fd:00:91:82:92:e4: 7c:cf:7b:95:20:26:e3:f6:fa:d7:33:99:38:3b:39: fa:d0:c7:62:73:b6:c4:c0:41:f7:31:2f:cf:72:ef: d2:43:50:74:38:fe:4a:8a:a3:6e:92:20:80:45:06: 02:03:23:db:5d:d7:e8:f7:5c:f9:af:93:b7:4d:e1: 21:91:12:f2:d4:31:c9:ee:4b:0a:43:89:d0:dd:c3: ea:62:e7:8b:0d:68:93:49:81:0e:c6:c8:14:37:d3: 0e:5a:b9:61:3e:51:8d:8c:13:e8:88:56:be:1c:59: d6:f7:3b:6c:47:d2:ca:3f:1e:65:5a:0b:5e:64:ef: ba:f8:d7:ad:96:c7:3a:46:5a:8d:99:c9:9c:bb:6e: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:77:6B:4D:24:16:20:4E:CB:34:C6:80:33:53:51:4B:B5:02:47:CA X509v3 Authority Key Identifier: keyid:AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e9:ed:cc:24:f0:21:f8:d7:2c:18:b4:d0:49:67:4f:c9:54: 80:23:0b:f3:69:5f:5c:4e:94:44:a4:07:08:98:2f:1a:8a:98: 8b:8d:34:db:8e:9e:7e:d1:fe:21:31:62:8e:e0:c6:10:81:9a: 44:a5:41:54:83:f8:2f:de:71:25:fd:77:a4:50:81:e7:43:11: c9:a1:6f:2a:ca:ae:90:95:bf:9c:9e:33:63:98:7b:e3:77:3b: a7:3a:91:1d:3b:ac:45:99:16:8b:9d:c0:3e:32:52:e3:88:c3: c1:ae:dd:8b:73:45:b6:3d:3f:84:ea:d7:06:04:6b:a1:c3:f7: 5a:d1:f3:6e:23:38:bd:76:e6:a2:1c:91:bc:5d:39:6f:12:ea: bd:ec:1e:72:c1:11:b3:48:5e:05:85:0a:a2:b6:ca:b2:e1:fb: 99:0b:7d:c7:55:af:ae:ca:2b:25:ec:08:24:ad:00:f3:f4:35: 5c:2a:5d:5c:b8:51:ca:0b:cb:5b:6a:07:7f:b3:1a:83:cd:d2: a5:3b:16:90:74:89:f3:9d:af:91:d9:b8:06:56:11:9d:9c:f9: 9c:96:77:86:cb:a5:d6:b1:4a:90:8a:c7:7c:45:64:79:71:79: ba:89:04:83:3a:ee:cb:a3:08:2c:01:e6:c3:89:f1:27:10:ae: c9:30:2a:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkmNzbg1pBr7/4uT39f228IRUF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRDQkI5 NkQ4QzEyQTAeFw0yNjA5MTYxODQyMjdaFw0yNjA5MTcyMjM4MjdaMDMxMTAvBgNV BAMTKDQwNzc2QjREMjQxNjIwNEVDQjM0QzY4MDMzNTM1MTRCQjUwMjQ3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVdVZLGPhNKQxJWxqtruhthX0 qQxhgjyy/nu0nJbOk3TyHyVuVdzIwFNLHzvTmH5k1uumcZTjhHaH1W5/Z2VbOe1F gansfMqxxJyPS2XMNVKkhQ/KhXRZ/H+fkNUsDb2C+ZyUpeY9m9jGMMHDvfrHwP0A kYKS5HzPe5UgJuP2+tczmTg7OfrQx2JztsTAQfcxL89y79JDUHQ4/kqKo26SIIBF BgIDI9td1+j3XPmvk7dN4SGREvLUMcnuSwpDidDdw+pi54sNaJNJgQ7GyBQ30w5a uWE+UY2ME+iIVr4cWdb3O2xH0so/HmVaC15k77r4162WxzpGWo2ZyZy7bms7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQHdrTSQWIE7LNMaAM1NRS7UCR8owHwYDVR0j BBgwFoAUqkXNG7jHM01d3vk2Stbcu5bYwSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYwMzZiNzQtOGE1ZC00MGFhLTk2MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJC OEM3MzM0RDVEREVGOTM2NEFENkRDQkI5NkQ4QzEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTQ1Q0QxQkI4QzczMzRENURERUY5MzY0QUQ2RENCQjk2RDhD MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRD QkI5NkQ4QzEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErp7cwk8CH41ywYtNBJZ0/JVIAjC/NpX1xO lESkBwiYLxqKmIuNNNuOnn7R/iExYo7gxhCBmkSlQVSD+C/ecSX9d6RQgedDEcmh byrKrpCVv5yeM2OYe+N3O6c6kR07rEWZFoudwD4yUuOIw8Gu3YtzRbY9P4Tq1wYE a6HD91rR824jOL125qIckbxdOW8S6r3sHnLBEbNIXgWFCqK2yrLh+5kLfcdVr67K KyXsCCStAPP0NVwqXVy4UcoLy1tqB3+zGoPN0qU7FpB0ifOdr5HZuAZWEZ2c+ZyW d4bLpdaxSpCKx3xFZHlxebqJBIM67sujCCwB5sOJ8ScQrskwKm0= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:43 2026 by rpki-client