$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft File: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft (raw, json) Hash identifier: i62cxd7tjKoqAbM7OJ/cU6h2GOPfRTKEILIsTo+yXQE= Subject key identifier: F3:B8:01:F5:F2:C4:0B:98:EB:86:0D:A4:2A:E4:C6:6A:30:B6:F0:B9 Authority key identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB Certificate issuer: /CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Certificate serial: 20537B5D7052334AFC493AD67B80DA273256E230 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft Manifest number: 6C Signing time: Thu 23 Jul 2026 18:58:23 +0000 Manifest this update: Thu 23 Jul 2026 18:53:23 +0000 Manifest next update: Fri 24 Jul 2026 19:08:23 +0000 Files and hashes: 1: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl (hash: uqXKwFvIKL6a7BIW1XIjCIRuj8zwwfsLj2WVnu/x3yg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:53:7b:5d:70:52:33:4a:fc:49:3a:d6:7b:80:da:27:32:56:e2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Validity Not Before: Jul 23 18:53:23 2026 GMT Not After : Jul 24 19:08:23 2026 GMT Subject: CN=F3B801F5F2C40B98EB860DA42AE4C66A30B6F0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:be:47:2e:b7:0b:41:cf:9d:5f:af:d8:62: fd:66:7e:88:b4:11:da:52:92:da:51:4c:69:19:57: 66:3d:37:0e:c0:fe:99:cf:e8:f8:bd:22:94:8b:e5: 70:16:6b:5d:2a:a4:31:78:90:19:fb:0b:2a:e0:f2: 51:ef:87:43:f2:bd:2f:2d:d4:aa:ea:53:42:8a:fc: d6:ff:4c:27:db:db:f6:e7:b3:67:b9:59:b2:2f:05: 48:4b:8d:ff:0b:b3:a1:64:5c:b6:a7:07:eb:29:ba: 82:85:84:59:d8:2d:aa:34:07:ba:5d:7c:b4:ec:7a: 49:c6:d0:aa:28:67:0c:b9:3e:e5:d0:eb:18:bc:65: cc:2a:81:b1:f9:a9:d7:d6:43:0e:01:a2:6e:77:52: 0d:8a:2d:20:46:2e:38:69:c1:e4:57:c3:26:1f:aa: 9b:4c:a9:e0:9b:cb:0b:21:cb:b9:45:c4:c4:d5:a7: 5d:3f:0e:ce:2f:da:05:71:37:68:1d:5f:1f:e4:72: b0:07:de:fc:09:e6:46:be:5e:ab:db:f0:03:98:5d: ee:d5:e5:dc:ba:ad:f5:56:53:78:44:47:af:b3:5f: 7d:73:0e:0a:c9:eb:88:8c:b4:7f:0f:45:b2:4b:e5: 66:5b:7d:f4:ce:15:e1:f1:72:e4:13:aa:16:37:82: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B8:01:F5:F2:C4:0B:98:EB:86:0D:A4:2A:E4:C6:6A:30:B6:F0:B9 X509v3 Authority Key Identifier: keyid:D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ea:57:e3:6c:64:0e:6f:67:0f:2b:dc:d3:9e:07:94:f0:12: 43:64:74:6f:f5:e3:b8:04:2d:6f:89:f7:a0:9a:2e:c9:e6:bb: 06:e1:38:64:a1:50:f1:be:62:5f:6b:fa:ac:1e:cf:3d:19:a1: 2f:d1:43:0d:8e:eb:04:33:ee:5e:04:de:c4:49:3c:7e:8b:91: 1e:39:3b:26:7b:27:b3:a8:c5:c0:1e:9b:83:7d:37:5f:ad:ba: 06:08:7a:58:b3:5d:88:1a:8d:8d:1a:15:c9:f9:ed:39:04:58: ef:57:86:5d:9f:43:91:42:16:ef:40:20:f1:a5:ba:57:55:29: d7:76:34:a5:82:9f:0f:6f:34:92:31:27:48:8d:3d:67:58:80: 59:87:f0:cd:90:62:10:b9:8f:ed:2b:34:94:bc:cd:62:cf:75: 76:70:25:df:2e:6f:41:d1:e1:6d:df:40:3a:33:9c:0d:fb:8e: 75:48:20:9d:12:a6:a5:eb:2f:60:65:84:ae:bb:cf:69:ef:b7: 92:02:bc:6b:ff:1e:04:d6:24:e3:41:ea:14:e1:19:e8:97:f0: c0:7d:30:3a:c4:11:90:a0:b7:1e:e7:a6:3b:71:15:bf:ce:18: 64:87:10:33:24:1b:ce:4f:3c:78:dd:9f:67:9c:56:ed:62:7a: 46:1b:91:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFN7XXBSM0r8STrWe4DaJzJW4jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQw MDEyRTRBQjAeFw0yNjA3MjMxODUzMjNaFw0yNjA3MjQxOTA4MjNaMDMxMTAvBgNV BAMTKEYzQjgwMUY1RjJDNDBCOThFQjg2MERBNDJBRTRDNjZBMzBCNkYwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6SL5HLrcLQc+dX6/YYv1mfoi0 EdpSktpRTGkZV2Y9Nw7A/pnP6Pi9IpSL5XAWa10qpDF4kBn7Cyrg8lHvh0PyvS8t 1KrqU0KK/Nb/TCfb2/bns2e5WbIvBUhLjf8Ls6FkXLanB+spuoKFhFnYLao0B7pd fLTseknG0KooZwy5PuXQ6xi8ZcwqgbH5qdfWQw4Bom53Ug2KLSBGLjhpweRXwyYf qptMqeCbywshy7lFxMTVp10/Ds4v2gVxN2gdXx/kcrAH3vwJ5ka+Xqvb8AOYXe7V 5dy6rfVWU3hER6+zX31zDgrJ64iMtH8PRbJL5WZbffTOFeHxcuQTqhY3gucRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU87gB9fLEC5jrhg2kKuTGajC28LkwHwYDVR0j BBgwFoAU1HKlDH8RJvHZfo6YFkp8XQAS5KswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlNDYzNjUtNzRkMy00ZTYwLTk1MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3 RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQwMDEyRTRBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDcyQTUwQzdGMTEyNkYxRDk3RThFOTgxNjRBN0M1RDAwMTJF NEFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdD NUQwMDEyRTRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/qV+NsZA5vZw8r3NOeB5TwEkNkdG/147gE LW+J96CaLsnmuwbhOGShUPG+Yl9r+qwezz0ZoS/RQw2O6wQz7l4E3sRJPH6LkR45 OyZ7J7OoxcAem4N9N1+tugYIelizXYgajY0aFcn57TkEWO9Xhl2fQ5FCFu9AIPGl uldVKdd2NKWCnw9vNJIxJ0iNPWdYgFmH8M2QYhC5j+0rNJS8zWLPdXZwJd8ub0HR 4W3fQDoznA37jnVIIJ0SpqXrL2BlhK67z2nvt5ICvGv/HgTWJONB6hThGeiX8MB9 MDrEEZCgtx7npjtxFb/OGGSHEDMkG85PPHjdn2ecVu1iekYbkYs= -----END CERTIFICATE-----Generated at Fri Jul 24 11:48:04 2026 by rpki-client