$ rpki-client -vvvf rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft File: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft (raw, json) Hash identifier: KYfierQwMjiH5c9KNp6RzRLP4OS454oX927UR1zgQLQ= Subject key identifier: C1:CA:23:0D:92:4A:BE:E6:96:A7:A7:8F:A2:46:FC:AB:F5:52:41:EC Authority key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 Certificate issuer: /CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Certificate serial: 167CB858625DCD8D052E8A99E69773F6DD7F7629 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft Manifest number: BD Signing time: Sun 20 Sep 2026 11:51:49 +0000 Manifest this update: Sun 20 Sep 2026 11:46:49 +0000 Manifest next update: Mon 21 Sep 2026 12:38:49 +0000 Files and hashes: 1: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl (hash: K+IquadFUj3eVTuZ73EVsUcEEde1dyuwutkKMA90ENk=) 2: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: Cw+u02HjQBz4UCjHcubQmRW6z/LpqGrri/10Si/nkow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7c:b8:58:62:5d:cd:8d:05:2e:8a:99:e6:97:73:f6:dd:7f:76:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Validity Not Before: Sep 20 11:46:49 2026 GMT Not After : Sep 21 12:38:49 2026 GMT Subject: CN=C1CA230D924ABEE696A7A78FA246FCABF55241EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:91:66:ed:be:ad:be:58:7d:a0:67:43:b5: 07:8b:5d:08:a3:e1:1d:1c:8f:eb:b4:ad:56:94:20: 10:3a:4c:35:ea:c3:50:48:e8:cb:45:9a:5a:24:bf: 2a:c3:d7:50:9d:9d:8f:0a:fa:b0:37:ad:77:3e:75: 1d:cd:39:b7:5f:7a:32:a8:ee:16:67:0a:11:a3:27: 22:ff:b1:e2:2a:76:51:12:e4:31:b4:fe:00:a5:1d: 68:d9:31:7f:8b:9a:77:80:4a:f4:51:27:9e:18:f6: d6:99:ee:b8:3b:4e:45:58:e4:2c:a9:e4:8e:15:ff: 11:ac:67:eb:76:6f:1b:f2:f2:02:21:d4:26:38:d1: e0:4a:5f:a6:c9:6a:c4:9d:4c:00:2f:34:70:27:d4: 67:c9:61:73:5d:cb:97:6e:eb:24:c0:6c:25:64:c6: 72:6c:e5:c1:7d:cb:27:a9:f2:63:0b:b9:54:4f:8b: da:c9:df:c4:bd:98:d5:fe:96:23:52:24:9f:9f:1f: d1:83:37:3e:b4:02:79:04:c7:ac:f5:ce:3f:4b:b6: 17:a8:c3:b4:93:af:a1:f3:e5:4a:f5:cf:e5:8c:f6: 22:2d:da:54:24:f8:cc:b6:96:e9:6c:d5:57:ed:78: 95:8c:19:b2:99:d0:13:16:1e:97:54:04:d0:df:ec: a2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CA:23:0D:92:4A:BE:E6:96:A7:A7:8F:A2:46:FC:AB:F5:52:41:EC X509v3 Authority Key Identifier: keyid:47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fe:ce:1f:bb:a5:12:84:83:f8:df:47:81:39:3a:d1:f0:90: ab:7d:b4:0d:44:cf:2c:64:89:79:fd:ef:8a:60:e3:a2:dc:f7: f0:64:0b:9e:2d:99:2b:0c:44:64:b0:9b:3f:d3:6a:ce:9a:ce: ab:bf:7c:5e:8a:c7:be:6e:2d:10:90:c2:c6:7a:9a:71:87:cb: d6:09:f5:53:f5:f4:f2:f4:ab:9a:a6:74:35:a9:35:97:c7:53: 26:43:f5:77:d4:cc:8f:8b:5e:d2:c6:fa:d6:11:89:40:4d:b3: 4e:e1:d6:12:11:9e:de:c5:9b:95:67:81:b4:9b:00:86:d5:3c: 8d:73:06:77:76:b5:a3:12:ca:d5:89:26:89:1e:8b:a5:80:d0: fc:d4:fd:f1:68:64:15:ec:ef:cd:19:95:40:8c:3a:ee:02:4d: da:98:13:e4:7a:8c:32:03:5b:0a:31:63:5a:19:16:aa:99:e7: bc:30:72:36:26:8b:3c:57:40:d9:73:b9:76:9f:ec:d3:cf:57: a2:6c:b6:3c:43:e1:30:5a:84:fb:05:66:8f:e1:d8:49:67:99: df:4c:ea:9e:b1:c1:4c:5e:09:6f:c6:c4:0c:78:cf:c3:c0:18: 67:dd:4e:d6:eb:cf:35:9c:fe:75:8d:36:70:5d:04:f8:52:c5: 8c:41:4b:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFny4WGJdzY0FLoqZ5pdz9t1/dikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3 RDEwQ0NBNjAeFw0yNjA5MjAxMTQ2NDlaFw0yNjA5MjExMjM4NDlaMDMxMTAvBgNV BAMTKEMxQ0EyMzBEOTI0QUJFRTY5NkE3QTc4RkEyNDZGQ0FCRjU1MjQxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAd5Fm7b6tvlh9oGdDtQeLXQij 4R0cj+u0rVaUIBA6TDXqw1BI6MtFmlokvyrD11CdnY8K+rA3rXc+dR3NObdfejKo 7hZnChGjJyL/seIqdlES5DG0/gClHWjZMX+LmneASvRRJ54Y9taZ7rg7TkVY5Cyp 5I4V/xGsZ+t2bxvy8gIh1CY40eBKX6bJasSdTAAvNHAn1GfJYXNdy5du6yTAbCVk xnJs5cF9yyep8mMLuVRPi9rJ38S9mNX+liNSJJ+fH9GDNz60AnkEx6z1zj9Ltheo w7STr6Hz5Ur1z+WM9iIt2lQk+My2luls1VfteJWMGbKZ0BMWHpdUBNDf7KJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwcojDZJKvuaWp6ePokb8q/VSQewwHwYDVR0j BBgwFoAUR5uSjb7pABuZsh/Dygul830QzKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQzZjI5ZWEtODc0YS00ZDFhLWFiY2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERC RUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3RDEwQ0NBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzlCOTI4REJFRTkwMDFCOTlCMjFGQzNDQTBCQTVGMzdEMTBD Q0E2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1 RjM3RDEwQ0NBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn+zh+7pRKEg/jfR4E5OtHwkKt9tA1Ezyxk iXn974pg46Lc9/BkC54tmSsMRGSwmz/Tas6azqu/fF6Kx75uLRCQwsZ6mnGHy9YJ 9VP19PL0q5qmdDWpNZfHUyZD9XfUzI+LXtLG+tYRiUBNs07h1hIRnt7Fm5VngbSb AIbVPI1zBnd2taMSytWJJokei6WA0PzU/fFoZBXs780ZlUCMOu4CTdqYE+R6jDID WwoxY1oZFqqZ57wwcjYmizxXQNlzuXaf7NPPV6JstjxD4TBahPsFZo/h2Elnmd9M 6p6xwUxeCW/GxAx4z8PAGGfdTtbrzzWc/nWNNnBdBPhSxYxBS8M= -----END CERTIFICATE-----Generated at Sun Sep 20 21:11:07 2026 by rpki-client