$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft File: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft (raw, json) Hash identifier: 1ZpjnRsL0+0bGkjZKEI2EWLCtYaue0kLGjAjrLUE0w4= Subject key identifier: 46:42:BE:15:1B:1E:69:D5:1C:70:63:84:10:EF:15:F9:CE:EA:2E:69 Authority key identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB Certificate issuer: /CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Certificate serial: 1F46578A44D9514934E40CF412E7809B80D26384 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 20:23:54 +0000 Manifest this update: Tue 16 Jun 2026 20:18:54 +0000 Manifest next update: Thu 18 Jun 2026 00:08:54 +0000 Files and hashes: 1: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl (hash: hiDjJYBLbGqvhlgQLzyUaJJJozPVTc5YqLFe7rx/UFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:46:57:8a:44:d9:51:49:34:e4:0c:f4:12:e7:80:9b:80:d2:63:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Validity Not Before: Jun 16 20:18:54 2026 GMT Not After : Jun 18 00:08:54 2026 GMT Subject: CN=4642BE151B1E69D51C70638410EF15F9CEEA2E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:05:01:40:30:50:cd:fa:be:39:a0:d9:a2:bf: 6b:f8:4f:ac:82:85:43:70:8c:e0:ae:78:c1:bc:d3: 9b:de:25:44:95:70:e2:55:c7:63:65:02:88:35:ae: 05:ac:e7:9a:d4:d9:73:00:63:eb:7c:b3:d9:48:30: 34:04:66:67:ca:df:f7:b8:04:23:af:ff:f6:b1:83: 47:45:d3:3b:8c:2b:7d:83:1e:5a:00:9d:09:17:d3: c6:66:46:06:4f:61:fe:22:33:7c:f4:e1:d6:f5:d2: bd:7d:ba:2f:33:5f:ae:9c:fc:1e:b6:37:27:95:da: 7c:41:a4:d8:54:7b:c2:dd:0b:65:9f:b7:c8:ee:ec: 19:38:a4:08:b1:73:b6:71:21:7e:ee:70:bf:d7:c6: 28:9c:bf:4b:7e:ff:8e:06:0e:b0:a3:be:76:41:f2: 00:86:82:85:3b:41:bd:53:81:1d:ec:57:ef:3a:d2: 23:a0:5c:5d:61:ab:84:4e:e8:82:9c:fa:7a:e9:57: b9:af:c4:8d:dd:bb:f0:68:f3:25:60:f4:8b:16:9b: ed:26:93:ca:38:d5:eb:dc:bb:f9:46:1e:80:9c:17: cd:88:43:5c:63:7f:31:21:26:d4:d5:68:8f:f6:e8: ad:fa:a1:e3:d9:7f:2b:5f:11:0e:61:7f:55:42:f8: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:42:BE:15:1B:1E:69:D5:1C:70:63:84:10:EF:15:F9:CE:EA:2E:69 X509v3 Authority Key Identifier: keyid:D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:88:d8:78:fe:b3:0e:12:93:48:33:a7:15:1c:09:63:88:e9: eb:44:86:e3:fe:10:4d:18:f5:68:e6:74:39:90:a8:74:80:75: 81:1e:cd:b5:fa:47:b8:26:29:b0:7b:ca:c9:d8:63:91:1e:a6: fb:07:10:2c:56:c8:fa:0a:d8:70:76:d5:6a:b9:3a:0c:a5:50: 1b:35:bb:3e:b3:ed:70:3f:e4:a1:cc:b7:6f:09:e7:c1:0c:b6: d1:ca:23:0a:9d:0b:4d:1a:76:a8:08:32:30:ff:70:50:e7:8a: 68:2f:dd:0e:f0:3d:dd:b9:96:d2:d6:11:89:3c:35:e9:02:0a: 03:44:c6:44:d8:23:9d:2e:d8:f3:56:fa:d6:96:79:e2:92:c6: da:45:07:57:ce:39:7a:5e:19:2c:ab:66:5a:44:0d:bb:cc:7a: 17:06:f4:02:76:46:da:b6:26:bd:83:50:36:79:67:00:48:3d: c5:93:aa:71:2c:7c:65:a6:f7:ea:ab:79:6e:8d:4c:1c:32:4a: 7e:a6:e0:6e:a1:d1:f8:9d:2d:70:64:cd:a0:32:9f:5a:5f:5c: 32:e6:5e:b1:14:4b:f3:d9:4e:e8:da:ec:50:ad:22:4e:5a:b0: f2:bc:4b:bd:49:8b:57:c3:6e:bb:60:da:6e:9f:a7:0f:11:72: 3f:de:7b:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0ZXikTZUUk05Az0EueAm4DSY4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQw MDEyRTRBQjAeFw0yNjA2MTYyMDE4NTRaFw0yNjA2MTgwMDA4NTRaMDMxMTAvBgNV BAMTKDQ2NDJCRTE1MUIxRTY5RDUxQzcwNjM4NDEwRUYxNUY5Q0VFQTJFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVBQFAMFDN+r45oNmiv2v4T6yC hUNwjOCueMG805veJUSVcOJVx2NlAog1rgWs55rU2XMAY+t8s9lIMDQEZmfK3/e4 BCOv//axg0dF0zuMK32DHloAnQkX08ZmRgZPYf4iM3z04db10r19ui8zX66c/B62 NyeV2nxBpNhUe8LdC2Wft8ju7Bk4pAixc7ZxIX7ucL/Xxiicv0t+/44GDrCjvnZB 8gCGgoU7Qb1TgR3sV+860iOgXF1hq4RO6IKc+nrpV7mvxI3du/Bo8yVg9IsWm+0m k8o41evcu/lGHoCcF82IQ1xjfzEhJtTVaI/26K36oePZfytfEQ5hf1VC+P4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURkK+FRseadUccGOEEO8V+c7qLmkwHwYDVR0j BBgwFoAU1HKlDH8RJvHZfo6YFkp8XQAS5KswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlNDYzNjUtNzRkMy00ZTYwLTk1MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3 RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQwMDEyRTRBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDcyQTUwQzdGMTEyNkYxRDk3RThFOTgxNjRBN0M1RDAwMTJF NEFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdD NUQwMDEyRTRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqI2Hj+sw4Sk0gzpxUcCWOI6etEhuP+EE0Y 9WjmdDmQqHSAdYEezbX6R7gmKbB7ysnYY5EepvsHECxWyPoK2HB21Wq5OgylUBs1 uz6z7XA/5KHMt28J58EMttHKIwqdC00adqgIMjD/cFDnimgv3Q7wPd25ltLWEYk8 NekCCgNExkTYI50u2PNW+taWeeKSxtpFB1fOOXpeGSyrZlpEDbvMehcG9AJ2Rtq2 Jr2DUDZ5ZwBIPcWTqnEsfGWm9+qreW6NTBwySn6m4G6h0fidLXBkzaAyn1pfXDLm XrEUS/PZTuja7FCtIk5asPK8S71Ji1fDbrtg2m6fpw8Rcj/ee2Y= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:25 2026 by rpki-client