$ rpki-client -vvf rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft File: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft (raw, json) Hash identifier: /lxI3UN+pWPA0AZRpwWxZVu6V93SN6gUANlcLPHN84Q= Subject key identifier: D2:0C:A9:1D:C1:E0:D1:55:FE:22:80:E5:74:D2:91:A1:54:9C:20:7E Authority key identifier: AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A Certificate issuer: /CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Certificate serial: 4E6B22FEE992BA3D7E15D392F4334D202387226B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 06:27:37 +0000 Manifest this update: Sat 20 Jun 2026 06:22:37 +0000 Manifest next update: Sun 21 Jun 2026 08:58:37 +0000 Files and hashes: 1: AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl (hash: bnquvr/9Co9ZDhl9ttNKdMieFi+mHiIsVdaoHjPuf6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 08:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6b:22:fe:e9:92:ba:3d:7e:15:d3:92:f4:33:4d:20:23:87:22:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A Validity Not Before: Jun 20 06:22:37 2026 GMT Not After : Jun 21 08:58:37 2026 GMT Subject: CN=D20CA91DC1E0D155FE2280E574D291A1549C207E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:02:4e:5b:a6:1c:e1:09:90:73:a0:1c:e4:b2: 8d:5a:a3:76:db:92:aa:07:3a:42:93:09:2a:9f:1f: 22:fa:90:ff:4c:9b:c2:5f:1d:41:42:97:9d:fd:2a: 22:09:1c:6f:ff:95:73:ca:c8:bf:e0:79:92:55:08: c8:28:ac:fb:5f:e4:97:85:3e:21:a1:41:c0:59:05: 71:1a:b6:76:d6:dd:84:cd:f3:a9:2b:06:b7:b8:b5: b3:ec:79:68:2b:aa:c9:e2:40:72:5a:8c:da:e5:bc: 92:27:3c:bf:89:3e:30:35:e7:d3:22:42:7e:84:68: c6:12:07:b0:b3:76:a4:4c:03:82:6f:c2:fe:3d:cc: f9:6c:59:20:e8:d3:45:ef:22:af:bc:ef:ca:35:39: 8b:f3:5c:e7:d2:0b:a9:75:00:ad:d4:e9:0b:19:61: 36:68:c5:40:9d:6d:a7:c3:61:c6:ef:b4:e0:9b:dd: c3:1e:0c:5d:3f:a9:e2:71:d2:3d:72:e6:f3:cc:ae: 2d:48:59:82:3b:21:07:8e:8d:69:e0:6f:c2:15:25: 02:64:43:2b:6a:8f:25:11:c4:8a:17:73:12:e5:f9: ae:b0:24:a3:c3:92:1c:24:7a:01:c0:59:b6:29:0a: a0:7b:65:6f:28:5b:13:6b:13:a6:de:28:44:2e:f0: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:A9:1D:C1:E0:D1:55:FE:22:80:E5:74:D2:91:A1:54:9C:20:7E X509v3 Authority Key Identifier: keyid:AA:45:CD:1B:B8:C7:33:4D:5D:DE:F9:36:4A:D6:DC:BB:96:D8:C1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/AA45CD1BB8C7334D5DDEF9364AD6DCBB96D8C12A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:15:af:b3:60:af:0f:bd:6d:e0:27:00:4e:45:40:87:58:a7: e9:19:d2:b8:f3:28:7f:5b:31:64:c4:07:48:1e:be:38:4c:db: 9a:af:d6:7e:42:32:95:f7:76:bd:09:45:53:5d:45:27:04:e6: b8:02:38:89:cf:1c:0c:c4:7b:0e:6c:fa:d8:60:4a:d3:03:9f: 3f:f4:27:72:d0:8d:d6:ef:45:9d:ed:ae:8d:b6:79:64:ec:de: 9c:80:a0:c4:bf:93:5e:7f:59:58:cc:84:54:e2:de:14:4c:96: 16:d5:89:db:10:75:04:bd:42:ea:0a:7e:9b:e0:6f:e4:df:ec: 31:8a:5c:f1:e8:fa:ab:a7:54:27:0a:59:ab:63:2b:0a:a4:ec: f6:c0:24:f2:31:89:25:2c:93:68:be:b7:5b:bd:a8:f2:d1:48: 93:b0:8c:03:bd:bd:f9:a0:4c:c5:b0:70:3b:1f:44:01:54:c4: 0a:55:fa:1a:34:05:ce:bd:ab:13:c3:50:ac:d9:a1:08:b4:16: eb:33:9d:30:4b:24:b7:06:65:69:bb:a7:eb:2f:4f:55:a7:5a: 3d:75:d9:3e:e2:1d:2c:17:77:0a:a0:d9:47:36:2d:ed:d5:53: 45:df:85:ef:97:92:ee:31:3e:6a:8c:79:39:3c:13:c2:88:4f: a6:a7:de:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmsi/umSuj1+FdOS9DNNICOHImswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRDQkI5 NkQ4QzEyQTAeFw0yNjA2MjAwNjIyMzdaFw0yNjA2MjEwODU4MzdaMDMxMTAvBgNV BAMTKEQyMENBOTFEQzFFMEQxNTVGRTIyODBFNTc0RDI5MUExNTQ5QzIwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQAk5bphzhCZBzoBzkso1ao3bb kqoHOkKTCSqfHyL6kP9Mm8JfHUFCl539KiIJHG//lXPKyL/geZJVCMgorPtf5JeF PiGhQcBZBXEatnbW3YTN86krBre4tbPseWgrqsniQHJajNrlvJInPL+JPjA159Mi Qn6EaMYSB7CzdqRMA4Jvwv49zPlsWSDo00XvIq+878o1OYvzXOfSC6l1AK3U6QsZ YTZoxUCdbafDYcbvtOCb3cMeDF0/qeJx0j1y5vPMri1IWYI7IQeOjWngb8IVJQJk QytqjyURxIoXcxLl+a6wJKPDkhwkegHAWbYpCqB7ZW8oWxNrE6beKEQu8PNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0gypHcHg0VX+IoDldNKRoVScIH4wHwYDVR0j BBgwFoAUqkXNG7jHM01d3vk2Stbcu5bYwSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYwMzZiNzQtOGE1ZC00MGFhLTk2MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJC OEM3MzM0RDVEREVGOTM2NEFENkRDQkI5NkQ4QzEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQTQ1Q0QxQkI4QzczMzRENURERUY5MzY0QUQ2RENCQjk2RDhD MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvQUE0NUNEMUJCOEM3MzM0RDVEREVGOTM2NEFENkRD QkI5NkQ4QzEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMVr7Ngrw+9beAnAE5FQIdYp+kZ0rjzKH9b MWTEB0gevjhM25qv1n5CMpX3dr0JRVNdRScE5rgCOInPHAzEew5s+thgStMDnz/0 J3LQjdbvRZ3tro22eWTs3pyAoMS/k15/WVjMhFTi3hRMlhbVidsQdQS9QuoKfpvg b+Tf7DGKXPHo+qunVCcKWatjKwqk7PbAJPIxiSUsk2i+t1u9qPLRSJOwjAO9vfmg TMWwcDsfRAFUxApV+ho0Bc69qxPDUKzZoQi0FusznTBLJLcGZWm7p+svT1WnWj11 2T7iHSwXdwqg2Uc2Le3VU0Xfhe+Xku4xPmqMeTk8E8KIT6an3ps= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:17 2026 by rpki-client