$ rpki-client -vvf rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft File: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft (raw, json) Hash identifier: o1ZDuIbLoT0+bDVp/qm93fTRbJmkJuiHIdf/77JTpcQ= Subject key identifier: 02:3C:41:17:DE:CC:00:7C:20:05:56:DD:90:29:B6:55:81:4A:EB:FA Authority key identifier: A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD Certificate issuer: /CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Certificate serial: 47CC9A2255CAA340573BE696984672C51C8A209B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:10:49 +0000 Manifest this update: Thu 23 Jul 2026 21:05:49 +0000 Manifest next update: Fri 24 Jul 2026 21:40:49 +0000 Files and hashes: 1: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl (hash: qe6fe1OwPOWrGi5+HeQNSIDySirFpi7U0aKb9Xg6XFQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cc:9a:22:55:ca:a3:40:57:3b:e6:96:98:46:72:c5:1c:8a:20:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Validity Not Before: Jul 23 21:05:49 2026 GMT Not After : Jul 24 21:40:49 2026 GMT Subject: CN=023C4117DECC007C200556DD9029B655814AEBFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:18:d7:4d:8c:11:c7:74:5a:64:79:68:df: 25:2d:7a:c7:d0:9e:7e:e5:6a:56:a6:8a:c0:5c:f7: 3a:3a:3f:12:b3:d1:c5:0e:08:9e:76:7c:ec:31:d5: c2:54:0b:19:70:c6:99:28:ef:5a:79:c5:ea:18:1e: ea:89:a1:b3:0e:a5:27:94:66:5d:96:63:01:b4:5b: 81:d9:fb:fb:67:72:1e:70:52:68:46:a2:2d:b9:6a: e6:ee:d5:44:50:55:6e:7d:f7:38:47:5d:f8:67:3a: a9:a9:22:e3:3d:44:7e:08:9a:90:78:79:93:f2:a7: 96:b5:8b:43:4d:ce:3c:e8:66:76:3c:49:68:2f:d4: e5:a1:e7:87:ea:73:05:af:61:71:6e:43:28:49:c1: 8f:fa:fa:14:f8:10:6c:41:5d:7a:ce:e5:d7:3e:12: bb:ab:3d:bb:25:86:2b:9f:0e:0f:a9:a8:cc:b9:a0: f5:c8:4a:ce:7b:3d:ca:d6:41:78:9d:6a:79:43:2b: ce:2c:fc:e8:32:40:d6:30:46:89:a2:a2:ea:7b:c5: 38:b1:c1:61:6d:8f:96:71:0b:87:1e:31:3b:d6:59: 7a:9f:4d:2e:f0:b4:fb:79:48:30:c1:29:7d:ef:7b: 85:85:fb:99:06:31:8c:0a:d9:18:cf:32:c1:26:5f: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3C:41:17:DE:CC:00:7C:20:05:56:DD:90:29:B6:55:81:4A:EB:FA X509v3 Authority Key Identifier: keyid:A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:29:e0:ea:9a:7b:be:25:1f:d7:29:d9:ae:2f:52:1f:0b:a8: 63:f1:38:b1:a8:03:c2:8f:93:2b:64:7d:d4:47:ad:1f:f4:30: ce:b9:ae:3d:bd:e0:0a:0d:4f:0c:fc:ed:97:6d:3e:35:9b:6f: ff:e3:28:93:6e:88:5b:15:1f:f7:03:34:f2:a1:35:f3:23:4d: 07:61:a3:3b:81:85:f2:63:54:86:a2:51:a3:93:74:3b:c4:0c: 26:3c:ee:3a:0c:27:85:32:47:fa:31:a9:1d:e6:bd:a1:1e:94: 02:0b:65:95:d8:46:99:aa:f3:0b:cb:c7:6e:bf:bd:eb:a0:f5: 04:74:27:e3:5b:b9:df:64:fe:97:4f:72:0d:af:d2:09:3d:61: 1b:ff:ce:37:d1:93:10:de:a5:59:44:bd:41:ed:d2:e2:4d:40: 8a:7c:de:22:64:bf:f6:f8:f0:bb:7d:42:df:d6:f2:32:bc:d9: 78:66:19:d2:b2:bb:9d:02:01:9a:1f:67:e8:bd:a8:83:10:54: 08:cd:20:e8:7f:f4:b3:10:36:84:3a:d8:27:56:1d:a7:b5:c8: bb:77:e5:7d:54:84:e7:57:53:2f:aa:22:7d:87:6a:ee:ff:94: ca:bc:80:d5:fc:db:57:2d:25:37:eb:86:7f:e2:72:c0:79:a9: 67:96:3c:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8yaIlXKo0BXO+aWmEZyxRyKIJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1QkNE NzkxODFBRDAeFw0yNjA3MjMyMTA1NDlaFw0yNjA3MjQyMTQwNDlaMDMxMTAvBgNV BAMTKDAyM0M0MTE3REVDQzAwN0MyMDA1NTZERDkwMjlCNjU1ODE0QUVCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWaxjXTYwRx3RaZHlo3yUtesfQ nn7lalamisBc9zo6PxKz0cUOCJ52fOwx1cJUCxlwxpko71p5xeoYHuqJobMOpSeU Zl2WYwG0W4HZ+/tnch5wUmhGoi25aubu1URQVW599zhHXfhnOqmpIuM9RH4ImpB4 eZPyp5a1i0NNzjzoZnY8SWgv1OWh54fqcwWvYXFuQyhJwY/6+hT4EGxBXXrO5dc+ ErurPbslhiufDg+pqMy5oPXISs57PcrWQXidanlDK84s/OgyQNYwRomioup7xTix wWFtj5ZxC4ceMTvWWXqfTS7wtPt5SDDBKX3ve4WF+5kGMYwK2RjPMsEmX8u3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAjxBF97MAHwgBVbdkCm2VYFK6/owHwYDVR0j BBgwFoAUpHuz8uvP3cjKv77vngAVvNeRga0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgyM2Q3NGMtNWRiNi00YzJmLTg5ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJF QkNGRERDOENBQkZCRUVGOUUwMDE1QkNENzkxODFBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDdCQjNGMkVCQ0ZEREM4Q0FCRkJFRUY5RTAwMTVCQ0Q3OTE4 MUFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgyM2Q3NGMtNWRiNi00YzJmLTg5 ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1 QkNENzkxODFBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0p4Oqae74lH9cp2a4vUh8LqGPxOLGoA8KP kytkfdRHrR/0MM65rj294AoNTwz87ZdtPjWbb//jKJNuiFsVH/cDNPKhNfMjTQdh ozuBhfJjVIaiUaOTdDvEDCY87joMJ4UyR/oxqR3mvaEelAILZZXYRpmq8wvLx26/ veug9QR0J+Nbud9k/pdPcg2v0gk9YRv/zjfRkxDepVlEvUHt0uJNQIp83iJkv/b4 8Lt9Qt/W8jK82XhmGdKyu50CAZofZ+i9qIMQVAjNIOh/9LMQNoQ62CdWHae1yLt3 5X1UhOdXUy+qIn2Hau7/lMq8gNX821ctJTfrhn/icsB5qWeWPEA= -----END CERTIFICATE-----Generated at Fri Jul 24 01:23:07 2026 by rpki-client