$ rpki-client -vvf rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft File: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft (raw, json) Hash identifier: WnqtjC01HJKg0E+5xbPtD/fJm5vPs0ciJCssr9gFtiU= Subject key identifier: 69:FF:A4:6A:64:68:14:32:9C:D1:4B:62:49:94:68:B7:FC:FD:40:81 Authority key identifier: A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD Certificate issuer: /CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Certificate serial: 0E1ACF6B47615DB24F5E2BD41937612B26ADF1F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:03:01 +0000 Manifest this update: Tue 12 May 2026 17:58:01 +0000 Manifest next update: Wed 13 May 2026 18:33:01 +0000 Files and hashes: 1: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl (hash: vJiOGI5Hne7S3Tp6VpukwPMavHpvQjpuHz3XwUrTsa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1a:cf:6b:47:61:5d:b2:4f:5e:2b:d4:19:37:61:2b:26:ad:f1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Validity Not Before: May 12 17:58:01 2026 GMT Not After : May 13 18:33:01 2026 GMT Subject: CN=69FFA46A646814329CD14B62499468B7FCFD4081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:ee:e6:3e:fc:ca:90:16:c9:fb:2b:85:41: e0:09:60:a5:46:62:a3:a2:1b:28:b2:8b:9e:72:91: b8:82:cd:fd:f4:4e:54:9e:70:ee:bb:3c:85:08:32: d5:0e:84:e8:c7:46:b9:65:f7:47:dc:f6:00:84:2c: e6:ae:9c:d9:24:ac:e2:25:88:19:cd:e4:ff:70:f6: 3b:e9:29:09:1f:1a:19:c1:ce:33:b0:9b:67:10:e1: 25:98:9b:21:5f:c3:43:ac:d3:c0:d5:b0:13:c1:de: 68:23:c3:dc:ca:49:80:a5:bc:ff:f2:df:30:4e:2d: c0:0e:bf:d0:9f:b6:89:7f:44:21:4d:9d:94:93:af: e3:57:8d:3a:e4:68:73:cc:54:1c:73:60:58:de:09: da:e7:09:d6:f3:b7:47:da:a3:f7:13:d8:64:31:3c: 76:99:ad:6d:24:f3:49:27:8d:e6:b6:dd:ec:c6:3b: 58:a5:a4:4d:db:d0:6a:75:55:88:3f:d0:c7:79:fa: e2:4b:07:69:da:77:3f:1b:49:c3:a6:2a:95:07:5d: 11:01:85:f4:ab:93:4b:ea:6c:27:4d:0a:e2:a3:bd: bd:92:9e:26:59:14:3e:2c:b2:dd:1c:5e:8b:33:7f: a8:9b:bc:39:d9:5e:cb:f3:f6:8a:73:c6:29:3d:b2: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:A4:6A:64:68:14:32:9C:D1:4B:62:49:94:68:B7:FC:FD:40:81 X509v3 Authority Key Identifier: keyid:A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cc:42:4d:8a:67:e3:8f:09:02:d5:71:17:62:01:49:a1:4e: a4:ec:b7:c7:bb:61:f9:84:d0:78:e4:34:2e:9e:f4:c2:74:ce: a4:c1:f7:45:93:b2:c5:77:60:e3:e9:06:2a:f3:97:ef:18:86: be:9c:b7:f6:15:06:7c:cf:79:1e:e1:e5:ec:af:df:27:f0:01: 48:0f:d4:bc:76:75:30:0a:4b:63:ce:0d:d6:f0:0e:93:eb:a2: 33:2b:8a:e2:31:2f:75:52:df:2d:b7:08:04:8a:f1:00:8e:07: 2f:8e:aa:6a:9b:e9:ae:7a:95:aa:ea:14:78:2f:d7:fb:51:20: 64:e3:f7:30:03:64:10:b8:8b:10:5a:53:ce:e4:b1:f5:0a:c7: 1f:90:af:7d:c3:da:c4:7b:95:fc:e6:9f:a3:4f:6e:88:55:8f: 28:6e:0f:19:ae:6f:67:3b:e4:c9:c5:0c:ee:f3:e8:f3:21:23: b4:78:0a:c2:81:a2:20:cb:dc:98:6c:19:28:33:53:53:96:ce: 95:51:2c:a8:c6:26:a7:65:2d:a1:70:2f:2c:c8:50:4e:eb:31: 6d:cf:e6:82:a5:0c:8f:ec:ff:de:a1:1c:43:1f:72:19:06:ec: fc:bc:b8:52:05:41:55:41:93:5e:52:83:5a:fa:b6:22:e5:2a: 54:f5:c2:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhrPa0dhXbJPXivUGTdhKyat8fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1QkNE NzkxODFBRDAeFw0yNjA1MTIxNzU4MDFaFw0yNjA1MTMxODMzMDFaMDMxMTAvBgNV BAMTKDY5RkZBNDZBNjQ2ODE0MzI5Q0QxNEI2MjQ5OTQ2OEI3RkNGRDQwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbpu7mPvzKkBbJ+yuFQeAJYKVG YqOiGyiyi55ykbiCzf30TlSecO67PIUIMtUOhOjHRrll90fc9gCELOaunNkkrOIl iBnN5P9w9jvpKQkfGhnBzjOwm2cQ4SWYmyFfw0Os08DVsBPB3mgjw9zKSYClvP/y 3zBOLcAOv9Cftol/RCFNnZSTr+NXjTrkaHPMVBxzYFjeCdrnCdbzt0fao/cT2GQx PHaZrW0k80knjea23ezGO1ilpE3b0Gp1VYg/0Md5+uJLB2nadz8bScOmKpUHXREB hfSrk0vqbCdNCuKjvb2SniZZFD4sst0cXoszf6ibvDnZXsvz9opzxik9svxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaf+kamRoFDKc0UtiSZRot/z9QIEwHwYDVR0j BBgwFoAUpHuz8uvP3cjKv77vngAVvNeRga0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgyM2Q3NGMtNWRiNi00YzJmLTg5ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJF QkNGRERDOENBQkZCRUVGOUUwMDE1QkNENzkxODFBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDdCQjNGMkVCQ0ZEREM4Q0FCRkJFRUY5RTAwMTVCQ0Q3OTE4 MUFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgyM2Q3NGMtNWRiNi00YzJmLTg5 ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1 QkNENzkxODFBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7MQk2KZ+OPCQLVcRdiAUmhTqTst8e7YfmE 0HjkNC6e9MJ0zqTB90WTssV3YOPpBirzl+8Yhr6ct/YVBnzPeR7h5eyv3yfwAUgP 1Lx2dTAKS2PODdbwDpProjMriuIxL3VS3y23CASK8QCOBy+Oqmqb6a56larqFHgv 1/tRIGTj9zADZBC4ixBaU87ksfUKxx+Qr33D2sR7lfzmn6NPbohVjyhuDxmub2c7 5MnFDO7z6PMhI7R4CsKBoiDL3JhsGSgzU1OWzpVRLKjGJqdlLaFwLyzIUE7rMW3P 5oKlDI/s/96hHEMfchkG7Py8uFIFQVVBk15Sg1r6tiLlKlT1wos= -----END CERTIFICATE-----Generated at Wed May 13 01:10:56 2026 by rpki-client