$ rpki-client -vvf rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft File: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft (raw, json) Hash identifier: esuCRLUCh8PetQkHGIJqCvxRJ4WWEILVgWgnvjvQEfY= Subject key identifier: 55:3D:0D:98:1F:B6:9F:A1:48:90:28:BC:59:BF:FB:26:7F:B7:0E:AF Authority key identifier: A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD Certificate issuer: /CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Certificate serial: 395A3C5A84C2DAFBA7DB4E7C0877C7961775D12B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 05:34:35 +0000 Manifest this update: Wed 17 Jun 2026 05:29:35 +0000 Manifest next update: Thu 18 Jun 2026 08:37:35 +0000 Files and hashes: 1: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl (hash: gU5wRD7wOM9f+KpeLCaQsinFM2fDKscky+03LxffkGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5a:3c:5a:84:c2:da:fb:a7:db:4e:7c:08:77:c7:96:17:75:d1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Validity Not Before: Jun 17 05:29:35 2026 GMT Not After : Jun 18 08:37:35 2026 GMT Subject: CN=553D0D981FB69FA1489028BC59BFFB267FB70EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:2d:63:72:21:5e:b3:6f:e5:f3:ae:be:4b: 71:07:f3:1d:4a:b2:31:1a:6e:9d:fd:2e:22:82:72: 33:80:05:dc:9a:47:cd:27:39:48:dc:3b:be:62:01: b8:bc:6a:96:99:aa:ed:90:39:ed:46:8e:fb:a6:35: 90:18:09:46:8c:37:ca:69:26:c4:90:7a:4b:22:4b: 6d:b2:67:6a:ec:e5:85:1b:ab:c7:f4:ab:68:72:1d: a0:92:76:1a:2f:8c:d2:ac:ad:d8:5f:c6:5a:ad:e2: 2c:c9:f5:57:5e:0e:a6:78:4e:85:74:97:95:b2:36: 72:67:e3:11:79:4b:52:c7:07:10:cb:4e:a3:47:ed: 90:37:fa:34:c5:cb:41:83:60:d6:01:35:c1:97:f3: 93:2c:35:34:41:ab:53:fe:cb:8f:ef:d2:e0:a4:4b: 9d:5c:03:ff:dd:5c:e2:e8:6d:18:02:19:8c:84:fb: 85:39:4b:6d:94:8d:3b:8f:1c:f1:de:d4:bf:df:a6: 87:dc:dc:fe:3f:90:7e:ee:97:93:6e:45:68:68:ba: 34:f6:03:6d:79:b5:b7:df:cb:bb:2c:9a:78:72:ab: ce:2d:52:7e:66:4a:4d:66:91:b1:6d:04:46:7d:f4: 05:f3:55:ec:11:c4:00:9a:b5:5a:e2:71:a4:f8:9a: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3D:0D:98:1F:B6:9F:A1:48:90:28:BC:59:BF:FB:26:7F:B7:0E:AF X509v3 Authority Key Identifier: keyid:A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:9f:b4:03:cd:5d:ea:8b:c3:3f:55:8e:d9:4a:b9:31:6e:6e: 2e:2f:2b:41:33:ea:74:96:78:52:45:4a:97:61:d7:3c:ea:fa: d9:41:7b:2f:f2:2f:1a:9b:17:56:92:60:96:22:91:7c:9a:19: a4:26:b2:08:8f:f6:f5:8c:34:1d:e8:b9:3e:9c:7d:1f:2f:b1: e6:92:fe:8d:0c:19:74:49:f7:6b:28:6c:ff:93:5b:17:13:be: 19:a9:d8:b1:ba:77:46:0b:b2:f8:79:9b:a3:b8:f8:02:95:dd: 68:11:70:71:22:17:36:cb:93:e5:32:37:d7:31:a5:ea:3c:9e: ef:ab:5f:81:07:4b:35:58:88:d6:65:93:59:75:b0:88:a9:b3: 84:41:66:42:4a:f5:1e:0c:3e:4a:ca:19:88:4d:33:07:7d:0b: 59:7c:63:0c:b3:9c:3f:1e:b8:40:fb:05:09:64:c1:73:03:2f: a2:b1:09:b8:c7:31:ee:70:5c:7a:0f:b8:da:ae:87:4b:42:b2: 7f:a0:bd:09:e4:c6:c1:ce:5d:95:e6:9b:20:8d:55:cd:d0:7c: a7:40:ce:24:4f:bb:e8:d7:4e:fa:e8:8d:e9:e0:6c:87:75:36: 18:a2:68:0a:86:20:73:5d:62:e3:eb:19:ad:82:b9:63:ad:eb: 15:7d:fa:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVo8WoTC2vun2058CHfHlhd10SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1QkNE NzkxODFBRDAeFw0yNjA2MTcwNTI5MzVaFw0yNjA2MTgwODM3MzVaMDMxMTAvBgNV BAMTKDU1M0QwRDk4MUZCNjlGQTE0ODkwMjhCQzU5QkZGQjI2N0ZCNzBFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpC1jciFes2/l866+S3EH8x1K sjEabp39LiKCcjOABdyaR80nOUjcO75iAbi8apaZqu2QOe1GjvumNZAYCUaMN8pp JsSQeksiS22yZ2rs5YUbq8f0q2hyHaCSdhovjNKsrdhfxlqt4izJ9VdeDqZ4ToV0 l5WyNnJn4xF5S1LHBxDLTqNH7ZA3+jTFy0GDYNYBNcGX85MsNTRBq1P+y4/v0uCk S51cA//dXOLobRgCGYyE+4U5S22UjTuPHPHe1L/fpofc3P4/kH7ul5NuRWhoujT2 A215tbffy7ssmnhyq84tUn5mSk1mkbFtBEZ99AXzVewRxACatVricaT4mkNLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVT0NmB+2n6FIkCi8Wb/7Jn+3Dq8wHwYDVR0j BBgwFoAUpHuz8uvP3cjKv77vngAVvNeRga0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgyM2Q3NGMtNWRiNi00YzJmLTg5ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJF QkNGRERDOENBQkZCRUVGOUUwMDE1QkNENzkxODFBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDdCQjNGMkVCQ0ZEREM4Q0FCRkJFRUY5RTAwMTVCQ0Q3OTE4 MUFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgyM2Q3NGMtNWRiNi00YzJmLTg5 ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1 QkNENzkxODFBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGftAPNXeqLwz9VjtlKuTFubi4vK0Ez6nSW eFJFSpdh1zzq+tlBey/yLxqbF1aSYJYikXyaGaQmsgiP9vWMNB3ouT6cfR8vseaS /o0MGXRJ92sobP+TWxcTvhmp2LG6d0YLsvh5m6O4+AKV3WgRcHEiFzbLk+UyN9cx peo8nu+rX4EHSzVYiNZlk1l1sIips4RBZkJK9R4MPkrKGYhNMwd9C1l8YwyznD8e uED7BQlkwXMDL6KxCbjHMe5wXHoPuNquh0tCsn+gvQnkxsHOXZXmmyCNVc3QfKdA ziRPu+jXTvrojengbId1NhiiaAqGIHNdYuPrGa2CuWOt6xV9+pU= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:45 2026 by rpki-client