$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft File: 477D71607466F25C429BF0826B9301DA69A81C15.mft (raw, json) Hash identifier: Zyo27NFvkJ4Z3/Wkwwis8VSVfxa0SHo2+hXsl1Essj4= Subject key identifier: 25:DC:8F:1A:9F:EB:E5:D1:BC:89:D1:A2:D4:B7:24:C4:22:A8:AE:CB Authority key identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 Certificate issuer: /CN=477D71607466F25C429BF0826B9301DA69A81C15 Certificate serial: 40A4FF50EF2AE164CCA66DAC983197C726DF1CC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 11:40:31 +0000 Manifest this update: Wed 23 Sep 2026 11:35:31 +0000 Manifest next update: Thu 24 Sep 2026 14:54:31 +0000 Files and hashes: 1: 477D71607466F25C429BF0826B9301DA69A81C15.crl (hash: AKNu46sqkeYdh+SIhDm3DRBsW3cQSn0sa3yPNt4Mdgs=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: L92at1VBLISZXeLgKyaGu6oCdPY8yBu9x3vzonWkuxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a4:ff:50:ef:2a:e1:64:cc:a6:6d:ac:98:31:97:c7:26:df:1c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477D71607466F25C429BF0826B9301DA69A81C15 Validity Not Before: Sep 23 11:35:31 2026 GMT Not After : Sep 24 14:54:31 2026 GMT Subject: CN=25DC8F1A9FEBE5D1BC89D1A2D4B724C422A8AECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:6f:9d:e0:5d:75:2b:c8:1a:8a:83:64:d9: 77:c4:e1:d8:01:e0:d7:06:37:d5:11:83:7c:2f:f8: 56:8c:12:2c:d0:37:7d:cd:be:15:1e:a2:03:ae:75: a1:88:9e:52:45:81:b6:fc:f4:e1:af:a0:7b:b4:95: db:45:65:74:30:98:e4:58:4d:ea:59:bb:e9:ce:47: 1e:0b:c2:e6:b8:55:d8:7d:43:3e:8d:18:29:18:ef: 2b:2a:b3:81:11:7f:ab:d4:f9:a0:66:ba:3a:26:2d: 54:1a:14:fe:fd:18:1b:5d:75:e9:83:ff:b1:27:6a: 89:a8:be:23:ac:7b:dc:68:65:3c:cf:d6:84:4b:21: 3a:40:be:4c:ae:24:7e:e6:35:5a:d1:20:6f:3a:6f: 9a:31:11:88:52:ad:ea:51:1a:97:cf:57:f5:99:e2: be:c5:ef:0f:7a:ca:31:55:62:45:cc:01:3e:8d:48: 64:2b:b4:f9:3b:20:fc:89:a9:f1:8e:01:eb:6b:4b: 13:18:5d:7b:6d:3f:a9:fe:cf:76:fa:f2:67:7e:a6: 9f:53:dd:65:d2:4e:aa:60:ff:5a:ee:a4:7d:ea:15: ea:e8:9b:42:a6:7c:c2:9d:8b:ed:ba:f0:08:92:91: 82:e7:bf:d2:c4:fd:c2:b3:24:50:11:f1:11:a0:7e: 5c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DC:8F:1A:9F:EB:E5:D1:BC:89:D1:A2:D4:B7:24:C4:22:A8:AE:CB X509v3 Authority Key Identifier: keyid:47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c7:04:06:c1:14:50:a2:ce:44:4f:96:84:95:7a:18:2c:ef: 19:16:0d:28:81:44:bc:48:ca:78:cb:ff:19:00:9c:9e:74:d8: 01:5b:6e:0e:7b:c7:1c:c7:69:9d:6a:8e:dc:31:cb:dd:6b:96: 49:fe:70:ef:9d:61:1a:28:f4:f5:1d:d9:20:a0:b9:fd:f1:e5: 8e:00:0f:a7:be:2e:16:60:90:67:41:42:e5:d0:e7:35:d7:5e: ed:d3:04:6a:87:42:a2:e5:fc:2f:bb:7b:c6:8f:05:43:71:fe: 29:79:64:62:b3:99:41:50:04:d5:fe:91:11:26:4f:ea:8c:02: 1b:38:8d:0b:b4:9e:00:83:3b:44:d0:d4:c2:2a:f6:3c:0d:55: 72:79:a8:e9:b7:df:f5:57:2a:46:b5:78:b9:43:e4:41:94:50: 5e:83:3b:90:4c:38:c8:72:47:32:67:c6:f6:1d:03:d4:fe:34: ca:fc:66:5e:83:84:a0:08:9d:b5:4c:2e:5f:96:54:0d:8f:e2: 30:bf:e0:22:7c:71:52:4b:62:db:ce:17:f7:3a:4f:33:8f:1b: dc:93:d2:b5:09:d4:3f:91:1c:ee:89:37:d5:ac:0a:05:f0:e8: ff:62:41:a3:4a:22:ff:a8:fa:3a:01:ae:a4:76:9e:ad:39:13: 57:58:8a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKT/UO8q4WTMpm2smDGXxybfHMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2 OUE4MUMxNTAeFw0yNjA5MjMxMTM1MzFaFw0yNjA5MjQxNDU0MzFaMDMxMTAvBgNV BAMTKDI1REM4RjFBOUZFQkU1RDFCQzg5RDFBMkQ0QjcyNEM0MjJBOEFFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV8G+d4F11K8gaioNk2XfE4dgB 4NcGN9URg3wv+FaMEizQN33NvhUeogOudaGInlJFgbb89OGvoHu0ldtFZXQwmORY TepZu+nORx4Lwua4Vdh9Qz6NGCkY7ysqs4ERf6vU+aBmujomLVQaFP79GBtddemD /7EnaomoviOse9xoZTzP1oRLITpAvkyuJH7mNVrRIG86b5oxEYhSrepRGpfPV/WZ 4r7F7w96yjFVYkXMAT6NSGQrtPk7IPyJqfGOAetrSxMYXXttP6n+z3b68md+pp9T 3WXSTqpg/1rupH3qFerom0KmfMKdi+268AiSkYLnv9LE/cKzJFAR8RGgflxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJdyPGp/r5dG8idGi1LckxCKorsswHwYDVR0j BBgwFoAUR31xYHRm8lxCm/CCa5MB2mmoHBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1Y2ZiYTMtZTAxNy00ZThhLTlhYzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3 NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2OUE4MUMxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzdENzE2MDc0NjZGMjVDNDI5QkYwODI2QjkzMDFEQTY5QTgx QzE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAx REE2OUE4MUMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXHBAbBFFCizkRPloSVehgs7xkWDSiBRLxI ynjL/xkAnJ502AFbbg57xxzHaZ1qjtwxy91rlkn+cO+dYRoo9PUd2SCguf3x5Y4A D6e+LhZgkGdBQuXQ5zXXXu3TBGqHQqLl/C+7e8aPBUNx/il5ZGKzmUFQBNX+kREm T+qMAhs4jQu0ngCDO0TQ1MIq9jwNVXJ5qOm33/VXKka1eLlD5EGUUF6DO5BMOMhy RzJnxvYdA9T+NMr8Zl6DhKAInbVMLl+WVA2P4jC/4CJ8cVJLYtvOF/c6TzOPG9yT 0rUJ1D+RHO6JN9WsCgXw6P9iQaNKIv+o+joBrqR2nq05E1dYiv0= -----END CERTIFICATE-----Generated at Thu Sep 24 08:40:25 2026 by rpki-client