$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft File: 476A27F6557241F0C8B13CD6474412B065E838A1.mft (raw, json) Hash identifier: 0jfx4dpDQhbnoA/qvWUYSUnLvhIZ/WtyoGSJnhITgGM= Subject key identifier: 80:2F:96:34:7B:80:74:F7:D6:3B:81:AA:59:61:95:BA:CF:C7:E5:D0 Authority key identifier: 47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1 Certificate issuer: /CN=476A27F6557241F0C8B13CD6474412B065E838A1 Certificate serial: 5541B6D05765ED9532A7E4167D0FAEDAEB33951D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 22:23:14 +0000 Manifest this update: Thu 24 Sep 2026 22:18:14 +0000 Manifest next update: Fri 25 Sep 2026 22:58:14 +0000 Files and hashes: 1: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: OYr7fPU7LqGA/4X0nRg4WLnhKqVCaQ39UeYK0Ag4/eg=) 2: 476A27F6557241F0C8B13CD6474412B065E838A1.crl (hash: HCcELezc1TjSlHseI4FjMDPj6sG+MsYJ9rW7PfTP944=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:41:b6:d0:57:65:ed:95:32:a7:e4:16:7d:0f:ae:da:eb:33:95:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=476A27F6557241F0C8B13CD6474412B065E838A1 Validity Not Before: Sep 24 22:18:14 2026 GMT Not After : Sep 25 22:58:14 2026 GMT Subject: CN=802F96347B8074F7D63B81AA596195BACFC7E5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:ec:68:da:33:b6:6d:46:b5:14:3e:fc:40: 8a:86:0a:19:2d:b9:d5:e2:95:ab:cf:93:e0:f8:ca: 36:db:28:ae:35:b0:7f:a3:f9:25:74:4b:cc:9b:9f: 40:46:8c:2e:38:f5:fa:eb:27:2c:80:9e:87:3c:3e: 67:6a:67:ef:2a:67:f3:b6:0e:c4:0b:a9:46:2a:cb: 98:fd:9a:48:69:1c:03:f9:08:89:27:47:1f:c8:68: f5:d1:8a:0e:f3:b2:db:90:9c:fa:4e:ad:1f:39:5b: 2e:c6:36:93:b4:af:a8:ea:05:5c:b0:a0:06:ea:a8: f0:97:e6:85:ae:c1:a8:6e:77:8f:0d:71:4b:b2:8f: 11:b0:41:34:d1:96:7c:3f:7d:89:5a:39:ea:a3:36: f9:5b:bf:a8:8c:e1:61:f0:48:ad:b0:1f:88:74:ff: 79:67:a8:06:44:06:10:4a:19:0f:86:91:3c:26:5b: 9e:59:61:ae:7c:b6:0c:d6:53:94:ee:0c:d3:b0:aa: 25:c6:fc:44:fe:d2:59:95:c0:f8:84:f5:94:a3:97: 22:2d:d6:a7:61:9c:8c:09:28:93:4c:9d:8a:93:ac: 7c:3a:f4:41:91:50:88:02:5c:dc:1d:e0:4d:f0:97: df:43:ab:bf:05:e5:22:e4:26:4b:b8:14:ac:22:96: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2F:96:34:7B:80:74:F7:D6:3B:81:AA:59:61:95:BA:CF:C7:E5:D0 X509v3 Authority Key Identifier: keyid:47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:35:5e:64:51:92:f7:02:94:36:b1:ec:e7:7a:c5:42:84:21: 02:be:b3:ed:0b:bc:dc:e8:50:d2:46:39:8d:8a:47:52:b3:8b: a6:fc:b0:d0:6d:a3:c6:d2:e7:27:d0:8d:97:f6:5b:e0:a3:96: c4:0a:c7:b7:7d:b5:ff:58:fb:03:ca:c0:0b:ec:0d:ac:92:4e: 55:4d:74:0a:3e:21:9f:63:8c:15:83:e3:b7:21:31:23:77:46: 73:53:b6:15:40:dc:7c:5d:28:6b:52:be:d5:81:8a:b4:76:1b: b9:31:8f:63:43:7a:4d:52:a2:82:6e:f6:1e:84:a3:6b:c9:26: 5a:3b:45:93:0f:78:d1:07:7b:f3:28:c0:45:12:22:5e:87:3b: d9:54:5a:f4:04:a7:45:9d:8f:0e:1d:05:31:c5:6a:2d:17:f1: 3f:c3:ee:26:bb:2a:f3:65:5e:09:b2:b7:ae:96:2e:e3:39:a9: 22:79:e4:16:7c:ff:75:50:6a:d9:20:2f:ef:d9:31:a8:e9:4d: 7f:64:bd:d8:fd:7c:44:75:7c:a8:59:d7:e0:f7:b4:18:37:47: 8a:a1:cb:9f:25:a9:17:de:38:4b:02:7d:79:09:1c:00:d6:5a: d1:f6:c3:d8:fa:12:17:0c:d1:02:ea:23:13:a1:f8:c1:55:68: f8:35:e5:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUG20Fdl7ZUyp+QWfQ+u2uszlR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2QTI3RjY1NTcyNDFGMEM4QjEzQ0Q2NDc0NDEyQjA2 NUU4MzhBMTAeFw0yNjA5MjQyMjE4MTRaFw0yNjA5MjUyMjU4MTRaMDMxMTAvBgNV BAMTKDgwMkY5NjM0N0I4MDc0RjdENjNCODFBQTU5NjE5NUJBQ0ZDN0U1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeeexo2jO2bUa1FD78QIqGChkt udXilavPk+D4yjbbKK41sH+j+SV0S8ybn0BGjC449frrJyyAnoc8PmdqZ+8qZ/O2 DsQLqUYqy5j9mkhpHAP5CIknRx/IaPXRig7zstuQnPpOrR85Wy7GNpO0r6jqBVyw oAbqqPCX5oWuwahud48NcUuyjxGwQTTRlnw/fYlaOeqjNvlbv6iM4WHwSK2wH4h0 /3lnqAZEBhBKGQ+GkTwmW55ZYa58tgzWU5TuDNOwqiXG/ET+0lmVwPiE9ZSjlyIt 1qdhnIwJKJNMnYqTrHw69EGRUIgCXNwd4E3wl99Dq78F5SLkJku4FKwiltEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgC+WNHuAdPfWO4GqWWGVus/H5dAwHwYDVR0j BBgwFoAUR2on9lVyQfDIsTzWR0QSsGXoOKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGVkMjhkZTgtMzBhMS00OTMyLWI1MzktMjIzOGJhNzU5MzBhLzAvNDc2QTI3RjY1 NTcyNDFGMEM4QjEzQ0Q2NDc0NDEyQjA2NUU4MzhBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzZBMjdGNjU1NzI0MUYwQzhCMTNDRDY0NzQ0MTJCMDY1RTgz OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1 MzktMjIzOGJhNzU5MzBhLzAvNDc2QTI3RjY1NTcyNDFGMEM4QjEzQ0Q2NDc0NDEy QjA2NUU4MzhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk1XmRRkvcClDax7Od6xUKEIQK+s+0LvNzo UNJGOY2KR1Kzi6b8sNBto8bS5yfQjZf2W+CjlsQKx7d9tf9Y+wPKwAvsDaySTlVN dAo+IZ9jjBWD47chMSN3RnNTthVA3HxdKGtSvtWBirR2G7kxj2NDek1SooJu9h6E o2vJJlo7RZMPeNEHe/MowEUSIl6HO9lUWvQEp0Wdjw4dBTHFai0X8T/D7ia7KvNl Xgmyt66WLuM5qSJ55BZ8/3VQatkgL+/ZMajpTX9kvdj9fER1fKhZ1+D3tBg3R4qh y58lqRfeOEsCfXkJHADWWtH2w9j6EhcM0QLqIxOh+MFVaPg15Zs= -----END CERTIFICATE-----Generated at Fri Sep 25 15:25:02 2026 by rpki-client