$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft File: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft (raw, json) Hash identifier: cIU2sOFK5u4fuHHyq/9z3uL8LPETyq05FsiGlOs1y2I= Subject key identifier: B3:F4:56:37:A4:BB:3C:2F:EC:43:18:4A:4B:F5:F8:25:5B:31:5E:AF Authority key identifier: A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD Certificate issuer: /CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Certificate serial: 64D2A2B6137F4C46ABA040C846AC15373F5EC3E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 19:34:46 +0000 Manifest this update: Thu 24 Sep 2026 19:29:46 +0000 Manifest next update: Fri 25 Sep 2026 22:47:46 +0000 Files and hashes: 1: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl (hash: Cn+28zyZAm0l5GF/5mZR4Z8dYSiJaZFvWTuZXDG5COM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d2:a2:b6:13:7f:4c:46:ab:a0:40:c8:46:ac:15:37:3f:5e:c3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Validity Not Before: Sep 24 19:29:46 2026 GMT Not After : Sep 25 22:47:46 2026 GMT Subject: CN=B3F45637A4BB3C2FEC43184A4BF5F8255B315EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:07:43:d8:15:11:50:d1:e8:8d:48:69:49: 5b:95:a1:17:5e:1b:57:d7:44:18:d1:4f:92:4a:da: e2:de:05:f3:c7:62:a1:5a:c1:ba:6a:ca:b6:2e:52: 47:8f:64:83:da:97:1c:a6:e3:33:4b:b9:28:c2:30: 2d:7e:bc:8a:5c:6d:d8:f5:af:22:4f:1a:fd:cb:4b: 65:8c:e3:4b:8f:22:99:6f:99:87:98:a0:49:a5:55: e9:ff:8e:ab:f9:25:93:f6:fa:c9:96:4d:97:1e:3d: 6a:58:ef:f7:8e:36:d2:da:98:d0:50:7d:f7:41:b4: db:c1:b6:61:6c:0f:8b:d6:74:e7:d5:5f:9f:f0:6a: 6c:ee:17:9e:72:3f:f6:9f:00:a0:cf:46:97:34:51: fd:e8:98:75:cb:b8:7d:b0:e6:b7:67:1f:53:bd:af: b7:90:d8:c3:22:65:5f:5d:2c:6f:b8:da:35:05:ae: a6:aa:ac:32:37:06:14:34:cc:1b:50:75:b7:de:e6: f6:ff:07:b1:21:cf:a8:e7:cb:02:4c:d8:fa:c5:85: 67:38:33:54:7a:89:2b:d4:9b:ba:51:57:06:ed:36: bc:ba:30:24:1e:41:94:df:aa:10:cc:32:23:0c:0f: 43:ee:e4:ea:44:e2:09:31:a1:b0:89:8f:87:2c:12: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F4:56:37:A4:BB:3C:2F:EC:43:18:4A:4B:F5:F8:25:5B:31:5E:AF X509v3 Authority Key Identifier: keyid:A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4d:2d:83:94:2e:d3:6e:c0:ba:0b:cc:5b:ec:e8:82:38:b7: dd:32:4c:ca:72:84:ba:fc:36:88:1a:1d:4e:25:b9:fe:f2:c9: bd:c4:c8:d0:ea:3a:49:9d:c3:d1:6b:9c:da:d5:9c:a3:67:ec: e9:38:3b:52:75:ce:fb:00:86:db:59:10:9e:e1:62:8b:36:34: c3:85:be:9c:bf:77:9a:29:40:b8:ad:ae:56:8b:28:ff:bf:ca: 90:90:5f:f0:a7:5f:4e:c2:b3:0e:09:d4:4a:1e:82:82:29:d7: 66:f7:bc:0f:ae:e1:26:cb:85:d6:69:43:f5:55:5d:c4:f7:54: 20:fb:77:32:5b:64:91:b2:81:55:05:87:fe:cc:0e:bb:18:81: 29:2d:b0:50:4a:3f:f5:d6:77:15:c8:fb:53:3a:e9:2f:40:6e: da:17:0a:ac:75:6e:30:a5:fc:2e:b0:b1:6c:28:a1:32:be:68: df:5f:13:6c:3a:b0:3b:b2:b1:ce:0b:04:e1:8b:d3:0c:39:85: d9:b3:e5:a0:62:88:d8:2c:8f:d9:24:0c:ed:0e:6c:6d:7c:e6: 48:86:3f:15:44:74:f2:c1:38:40:eb:b3:c4:e7:a0:ff:6f:b7: cd:76:d9:df:d8:69:4d:61:89:aa:32:6d:79:48:5e:89:7f:68: d9:bb:c7:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNKithN/TEaroEDIRqwVNz9ew+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1QkNE NzkxODFBRDAeFw0yNjA5MjQxOTI5NDZaFw0yNjA5MjUyMjQ3NDZaMDMxMTAvBgNV BAMTKEIzRjQ1NjM3QTRCQjNDMkZFQzQzMTg0QTRCRjVGODI1NUIzMTVFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1AdD2BURUNHojUhpSVuVoRde G1fXRBjRT5JK2uLeBfPHYqFawbpqyrYuUkePZIPalxym4zNLuSjCMC1+vIpcbdj1 ryJPGv3LS2WM40uPIplvmYeYoEmlVen/jqv5JZP2+smWTZcePWpY7/eONtLamNBQ ffdBtNvBtmFsD4vWdOfVX5/wamzuF55yP/afAKDPRpc0Uf3omHXLuH2w5rdnH1O9 r7eQ2MMiZV9dLG+42jUFrqaqrDI3BhQ0zBtQdbfe5vb/B7Ehz6jnywJM2PrFhWc4 M1R6iSvUm7pRVwbtNry6MCQeQZTfqhDMMiMMD0Pu5OpE4gkxobCJj4csEnhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/RWN6S7PC/sQxhKS/X4JVsxXq8wHwYDVR0j BBgwFoAUpHuz8uvP3cjKv77vngAVvNeRga0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgyM2Q3NGMtNWRiNi00YzJmLTg5ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJF QkNGRERDOENBQkZCRUVGOUUwMDE1QkNENzkxODFBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDdCQjNGMkVCQ0ZEREM4Q0FCRkJFRUY5RTAwMTVCQ0Q3OTE4 MUFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgyM2Q3NGMtNWRiNi00YzJmLTg5 ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1 QkNENzkxODFBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFNLYOULtNuwLoLzFvs6II4t90yTMpyhLr8 NogaHU4luf7yyb3EyNDqOkmdw9FrnNrVnKNn7Ok4O1J1zvsAhttZEJ7hYos2NMOF vpy/d5opQLitrlaLKP+/ypCQX/CnX07Csw4J1EoegoIp12b3vA+u4SbLhdZpQ/VV XcT3VCD7dzJbZJGygVUFh/7MDrsYgSktsFBKP/XWdxXI+1M66S9AbtoXCqx1bjCl /C6wsWwooTK+aN9fE2w6sDuysc4LBOGL0ww5hdmz5aBiiNgsj9kkDO0ObG185kiG PxVEdPLBOEDrs8TnoP9vt8122d/YaU1hiaoybXlIXol/aNm7x4E= -----END CERTIFICATE-----Generated at Fri Sep 25 01:07:38 2026 by rpki-client