$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft File: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft (raw, json) Hash identifier: ubVKdqQzFxREUhzvlmXRJBSt9RLpbc3XY7DBm44mE1I= Subject key identifier: AA:EE:20:18:00:69:A1:88:95:21:D6:99:74:A8:7D:67:BB:BD:A3:75 Authority key identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB Certificate issuer: /CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Certificate serial: 3D135A4508760FD9B8C25D819062030DE6C64B50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft Manifest number: CC Signing time: Sat 03 Oct 2026 17:47:15 +0000 Manifest this update: Sat 03 Oct 2026 17:42:15 +0000 Manifest next update: Sun 04 Oct 2026 19:42:15 +0000 Files and hashes: 1: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl (hash: vJWFSDQS3PB7giv1yIt/FUbh8nJoio58L4IGuFaGsrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 15:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:13:5a:45:08:76:0f:d9:b8:c2:5d:81:90:62:03:0d:e6:c6:4b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Validity Not Before: Oct 3 17:42:15 2026 GMT Not After : Oct 4 19:42:15 2026 GMT Subject: CN=AAEE20180069A1889521D69974A87D67BBBDA375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:c2:08:6c:23:95:d2:73:92:c0:6c:4b:7f: a4:cb:10:fd:b9:c8:e7:85:e2:7c:df:14:f0:a4:f2: 58:86:e1:80:69:bc:71:7e:9c:83:40:a1:77:53:29: 49:7a:04:4a:48:b0:56:d8:36:46:ab:bd:aa:27:71: 25:30:c8:f8:95:5a:b3:bf:a4:a9:eb:c8:ba:94:28: d9:79:f7:f7:ec:40:1b:0f:69:3b:f0:bd:b1:f7:3d: 2c:6f:47:b6:a1:b9:6b:1b:b8:7b:2f:8e:f5:b9:51: 9b:2e:58:c7:88:1d:2c:5c:c3:84:89:58:d9:42:9f: d5:21:64:e5:3a:54:22:9e:2e:30:34:53:60:7e:5e: 44:44:2d:bb:fe:0b:63:bb:04:88:f7:39:bb:2e:48: 64:2c:f0:c5:7a:57:48:78:78:4d:68:fd:10:7c:0d: 53:a2:58:ce:f0:65:b7:84:8b:03:38:81:32:56:4f: 05:9d:49:d9:fe:49:45:6c:3b:47:a5:81:5c:31:27: 35:33:7f:b3:61:18:bb:e7:fc:19:04:a3:a0:9a:34: 56:a9:96:72:d8:19:a7:f2:e9:6c:38:33:a6:c7:55: 31:89:90:58:40:90:0c:05:7d:ff:2b:05:43:2d:2f: 94:a2:48:9b:5b:fc:72:95:9d:10:a3:07:55:8a:0e: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EE:20:18:00:69:A1:88:95:21:D6:99:74:A8:7D:67:BB:BD:A3:75 X509v3 Authority Key Identifier: keyid:D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5a:8f:b2:a1:46:4f:f7:ac:bd:85:19:4b:0d:24:09:a3:c0: 94:5c:56:2e:a4:33:70:9c:bb:c8:ee:c9:98:04:ef:86:0a:17: 9f:37:7f:3b:1f:55:1c:1b:d6:f4:14:cf:26:16:dd:46:e9:ae: 2c:f2:cc:bf:36:15:4f:09:38:5b:53:67:6e:ef:ce:ad:8d:a8: 52:14:48:ad:a6:5e:3b:63:9b:a3:ac:fb:72:82:11:a9:76:be: 75:45:8b:be:96:71:aa:c1:0f:84:c1:d5:23:88:35:dd:c3:49: f1:6d:15:48:26:d0:60:6e:fb:65:4a:49:56:d9:07:af:6d:bd: 91:10:02:14:ad:87:3f:19:85:8a:87:71:27:61:a1:b9:f6:ca: 68:3b:cc:cb:e0:51:73:01:2e:ff:8b:e9:66:8a:01:3b:33:ff: 8e:30:07:da:8a:55:ca:5f:22:9e:30:ed:69:9c:51:a7:db:a9: 80:f2:c9:c3:06:28:98:5d:73:e2:c8:9e:49:5d:fb:58:7f:80: fe:5e:41:48:95:20:17:70:ba:b7:7f:30:34:f7:5b:1d:40:b3: 11:ce:98:df:a5:17:aa:8c:b1:29:dc:97:4c:56:a9:5c:c4:8b: f1:16:77:05:e6:1e:2e:08:d6:ef:dd:75:19:08:77:a3:20:fe: f5:9c:54:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRNaRQh2D9m4wl2BkGIDDebGS1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQw MDEyRTRBQjAeFw0yNjEwMDMxNzQyMTVaFw0yNjEwMDQxOTQyMTVaMDMxMTAvBgNV BAMTKEFBRUUyMDE4MDA2OUExODg5NTIxRDY5OTc0QTg3RDY3QkJCREEzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwcIIbCOV0nOSwGxLf6TLEP25 yOeF4nzfFPCk8liG4YBpvHF+nINAoXdTKUl6BEpIsFbYNkarvaoncSUwyPiVWrO/ pKnryLqUKNl59/fsQBsPaTvwvbH3PSxvR7ahuWsbuHsvjvW5UZsuWMeIHSxcw4SJ WNlCn9UhZOU6VCKeLjA0U2B+XkRELbv+C2O7BIj3ObsuSGQs8MV6V0h4eE1o/RB8 DVOiWM7wZbeEiwM4gTJWTwWdSdn+SUVsO0elgVwxJzUzf7NhGLvn/BkEo6CaNFap lnLYGafy6Ww4M6bHVTGJkFhAkAwFff8rBUMtL5SiSJtb/HKVnRCjB1WKDrGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqu4gGABpoYiVIdaZdKh9Z7u9o3UwHwYDVR0j BBgwFoAU1HKlDH8RJvHZfo6YFkp8XQAS5KswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlNDYzNjUtNzRkMy00ZTYwLTk1MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3 RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQwMDEyRTRBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDcyQTUwQzdGMTEyNkYxRDk3RThFOTgxNjRBN0M1RDAwMTJF NEFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdD NUQwMDEyRTRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5aj7KhRk/3rL2FGUsNJAmjwJRcVi6kM3Cc u8juyZgE74YKF583fzsfVRwb1vQUzyYW3UbprizyzL82FU8JOFtTZ27vzq2NqFIU SK2mXjtjm6Os+3KCEal2vnVFi76WcarBD4TB1SOINd3DSfFtFUgm0GBu+2VKSVbZ B69tvZEQAhSthz8ZhYqHcSdhobn2ymg7zMvgUXMBLv+L6WaKATsz/44wB9qKVcpf Ip4w7WmcUafbqYDyycMGKJhdc+LInkld+1h/gP5eQUiVIBdwurd/MDT3Wx1AsxHO mN+lF6qMsSncl0xWqVzEi/EWdwXmHi4I1u/ddRkId6Mg/vWcVB8= -----END CERTIFICATE-----Generated at Sat Oct 3 22:44:54 2026 by rpki-client