$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft File: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft (raw, json) Hash identifier: A14xik0Li41IndykCHp8pd3RRcg368u/a/0uqlT8pxk= Subject key identifier: A6:83:F3:D6:20:87:5F:4C:31:12:60:E0:48:06:C4:3A:53:53:95:09 Authority key identifier: A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD Certificate issuer: /CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Certificate serial: 04650BFA59CF0DA9EBD48056DBCBF7AA83AEE9E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:07:52 +0000 Manifest this update: Mon 21 Sep 2026 01:02:52 +0000 Manifest next update: Tue 22 Sep 2026 02:01:52 +0000 Files and hashes: 1: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl (hash: GODf14h6JHlbMVHHsM4yEsb8FULQSYJmf8EPa9kQZmE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:65:0b:fa:59:cf:0d:a9:eb:d4:80:56:db:cb:f7:aa:83:ae:e9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Validity Not Before: Sep 21 01:02:52 2026 GMT Not After : Sep 22 02:01:52 2026 GMT Subject: CN=A683F3D620875F4C311260E04806C43A53539509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:da:cd:8a:79:37:0c:71:7a:41:ed:05:f7: 27:1e:5c:ed:b4:bb:b9:f8:ab:e2:40:d4:72:b0:eb: e3:da:54:00:35:0d:2f:03:70:90:0f:ff:3d:39:ed: ca:50:61:b4:e6:02:0d:ef:45:cc:6b:11:2d:1e:85: d4:d7:50:ea:5f:8d:43:f9:66:19:f7:4a:b8:63:11: 05:25:08:ae:0d:ae:b1:d7:03:36:c0:6e:16:59:08: 65:36:7f:d4:5e:27:d8:ff:6e:45:96:d7:c5:3d:2c: f1:51:f0:88:de:48:43:4f:dc:a5:bd:f7:88:03:0a: 12:c2:be:62:34:73:7b:94:cc:bd:f6:85:f1:57:ef: 3e:3b:d3:47:db:55:6f:96:03:fd:f6:89:e8:cf:33: a4:37:b2:86:dc:07:a1:a3:dd:50:6d:0e:31:c4:b8: 72:a9:c5:ac:5c:68:84:f4:7b:ca:99:31:88:99:03: 81:ce:76:75:52:53:6a:45:91:19:4e:52:33:88:fb: 11:24:da:d3:96:ee:4a:23:28:02:9b:6a:eb:e0:9b: ff:15:02:36:b1:e0:90:4e:4a:b1:7d:ba:e1:39:16: 42:f7:46:ee:3e:bf:4d:3a:23:9c:c8:72:d8:b0:8a: d8:8d:32:b3:93:db:b1:31:41:47:8f:e1:57:88:53: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:83:F3:D6:20:87:5F:4C:31:12:60:E0:48:06:C4:3A:53:53:95:09 X509v3 Authority Key Identifier: keyid:A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:06:53:62:72:d7:74:15:a4:d2:97:be:d3:9d:8e:a7:d5:93: 0f:72:eb:46:f3:3f:46:c3:b1:e1:e0:d0:0c:4d:0a:e0:10:5c: ba:5c:cf:84:e5:b1:eb:ce:5b:4c:62:19:ae:2f:a8:c0:1c:ef: 4c:f4:7f:b6:12:fe:2b:ba:1c:10:4c:26:0a:55:cf:11:37:84: e9:9c:a9:50:79:5b:85:ca:d3:e8:71:a0:34:45:07:fe:8a:48: b7:5d:89:b2:21:14:be:04:f1:f3:44:50:5c:e1:4b:24:b1:63: a1:4f:12:31:84:fa:b1:c0:0a:6c:c5:6f:75:66:3c:9f:93:28: 69:92:4e:49:6c:81:6e:ff:47:e8:16:6c:41:eb:12:cc:b1:54: 01:3e:90:e5:4d:48:f8:bf:3e:d7:30:6a:4f:ff:ec:89:14:b1: 28:e3:93:47:fd:88:22:0b:b6:70:a0:7f:0b:d5:a9:fa:f3:0a: e8:3e:16:ef:99:06:23:dd:d2:57:3e:05:6d:8c:94:e8:f9:d6: 83:46:e0:fa:50:b5:74:fa:ce:a5:68:32:66:5e:03:f2:a8:1f: f2:1a:af:06:c2:e0:76:23:81:3e:36:5e:18:66:95:78:3e:68: db:5d:6c:b0:67:ce:01:ad:79:98:ce:d0:2a:da:83:c8:c9:14: 66:1d:1d:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBGUL+lnPDanr1IBW28v3qoOu6eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1QkNE NzkxODFBRDAeFw0yNjA5MjEwMTAyNTJaFw0yNjA5MjIwMjAxNTJaMDMxMTAvBgNV BAMTKEE2ODNGM0Q2MjA4NzVGNEMzMTEyNjBFMDQ4MDZDNDNBNTM1Mzk1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsedrNink3DHF6Qe0F9yceXO20 u7n4q+JA1HKw6+PaVAA1DS8DcJAP/z057cpQYbTmAg3vRcxrES0ehdTXUOpfjUP5 Zhn3SrhjEQUlCK4NrrHXAzbAbhZZCGU2f9ReJ9j/bkWW18U9LPFR8IjeSENP3KW9 94gDChLCvmI0c3uUzL32hfFX7z4700fbVW+WA/32iejPM6Q3sobcB6Gj3VBtDjHE uHKpxaxcaIT0e8qZMYiZA4HOdnVSU2pFkRlOUjOI+xEk2tOW7kojKAKbauvgm/8V Ajax4JBOSrF9uuE5FkL3Ru4+v006I5zIctiwitiNMrOT27ExQUeP4VeIU4yjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpoPz1iCHX0wxEmDgSAbEOlNTlQkwHwYDVR0j BBgwFoAUpHuz8uvP3cjKv77vngAVvNeRga0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgyM2Q3NGMtNWRiNi00YzJmLTg5ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJF QkNGRERDOENBQkZCRUVGOUUwMDE1QkNENzkxODFBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDdCQjNGMkVCQ0ZEREM4Q0FCRkJFRUY5RTAwMTVCQ0Q3OTE4 MUFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgyM2Q3NGMtNWRiNi00YzJmLTg5 ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1 QkNENzkxODFBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcGU2Jy13QVpNKXvtOdjqfVkw9y60bzP0bD seHg0AxNCuAQXLpcz4TlsevOW0xiGa4vqMAc70z0f7YS/iu6HBBMJgpVzxE3hOmc qVB5W4XK0+hxoDRFB/6KSLddibIhFL4E8fNEUFzhSySxY6FPEjGE+rHACmzFb3Vm PJ+TKGmSTklsgW7/R+gWbEHrEsyxVAE+kOVNSPi/Ptcwak//7IkUsSjjk0f9iCIL tnCgfwvVqfrzCug+Fu+ZBiPd0lc+BW2MlOj51oNG4PpQtXT6zqVoMmZeA/KoH/Ia rwbC4HYjgT42XhhmlXg+aNtdbLBnzgGteZjO0Crag8jJFGYdHQI= -----END CERTIFICATE-----Generated at Mon Sep 21 10:55:22 2026 by rpki-client