$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft File: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft (raw, json) Hash identifier: Wy6ZEgLaL4C0wgD9X3mL7H33nPs+hDk61uun1c2qGis= Subject key identifier: 25:6E:19:29:A8:70:9A:69:E5:75:9B:CC:A5:83:B3:F1:9C:08:98:D4 Authority key identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB Certificate issuer: /CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Certificate serial: 21A983D00084D18639B0E9F0963C83C9B9FB9B06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft Manifest number: DA Signing time: Wed 14 Oct 2026 01:22:04 +0000 Manifest this update: Wed 14 Oct 2026 01:17:04 +0000 Manifest next update: Thu 15 Oct 2026 03:17:04 +0000 Files and hashes: 1: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl (hash: LgxxocRqwYz5c6y3D/9xn5zM6WLeQZn1YyH6oa6+LEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 03:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a9:83:d0:00:84:d1:86:39:b0:e9:f0:96:3c:83:c9:b9:fb:9b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Validity Not Before: Oct 14 01:17:04 2026 GMT Not After : Oct 15 03:17:04 2026 GMT Subject: CN=256E1929A8709A69E5759BCCA583B3F19C0898D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:2e:c7:94:2a:d4:7c:4b:6f:c7:8a:ea:ba: 63:97:7e:2f:c4:d9:21:1b:70:05:df:8f:c5:9a:62: 56:b5:58:ab:ac:7e:06:47:0c:6e:62:b0:ce:9c:c9: 88:a4:37:b9:ce:fa:d4:4c:52:81:fd:12:fd:a4:a1: 79:66:ea:e5:c8:87:f9:d4:5e:17:87:7a:2e:8e:78: e7:1f:34:77:13:1c:2f:db:2d:fc:ef:6d:fe:7b:ec: 06:84:38:61:b4:75:7f:c5:6a:e7:7b:11:64:a0:5f: 23:66:9d:da:72:81:b0:77:69:85:48:b7:59:1f:3a: 25:fa:76:a1:90:22:20:01:c8:1c:e7:a5:4f:81:25: ca:8c:a3:34:61:e8:57:45:2a:09:06:37:bf:1d:5f: 3e:1d:7c:cb:63:da:04:fa:46:b1:9b:20:e8:35:45: 5f:d2:92:7b:df:40:cd:a9:a4:d9:34:c2:7e:7d:15: 46:d4:30:e2:78:c5:6e:9f:27:d2:c9:38:f5:18:94: 39:de:cd:2e:91:a4:28:5c:b7:c7:14:55:f2:e9:1b: 29:74:a4:63:5f:90:19:c0:83:df:dd:7d:2d:b3:2e: f5:a2:05:b2:c9:7b:c6:a3:da:8a:88:36:fd:2f:b1: 96:08:f6:6f:4d:e7:3a:d8:ed:a4:b6:51:14:d1:79: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6E:19:29:A8:70:9A:69:E5:75:9B:CC:A5:83:B3:F1:9C:08:98:D4 X509v3 Authority Key Identifier: keyid:D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8a:86:b0:3a:c1:59:bd:b0:57:27:9e:e5:c0:ca:7f:8b:a1: 7f:06:44:96:9e:79:bf:b4:13:68:62:ae:0a:98:45:c4:84:bc: 21:bb:4c:b3:ce:21:a4:51:31:dd:ff:53:cf:d1:ff:2e:a2:60: 3e:97:19:5b:a3:1e:ff:57:db:f1:15:d7:28:3e:fb:af:38:00: c5:d6:04:09:4f:42:60:3c:1a:a6:25:9f:ed:6e:35:10:d4:53: 07:6f:eb:12:f6:26:b1:42:2a:35:c6:f6:73:9c:93:b6:ea:29: 4d:71:83:bf:f7:1a:54:90:0c:97:f3:9c:bc:06:b2:ad:27:87: 15:e4:d5:14:2b:2f:d3:d2:cb:b3:36:13:0f:41:0c:e9:bc:44: b1:95:4b:8b:8c:52:f5:38:7c:b3:79:37:78:e2:44:43:0e:7a: df:99:9f:8c:5f:d7:a1:de:0f:2e:4f:91:28:e4:ba:52:b2:46: e6:3a:60:1d:e1:a4:ac:07:87:ff:24:6b:f4:7e:3c:90:bb:ef: a9:7d:13:ba:d3:6b:d0:ae:82:b5:0c:98:3f:2b:e3:cb:90:2f: 49:58:17:c8:eb:e0:2e:0a:21:f0:92:98:1c:fc:56:fa:b4:3a: 94:cf:e4:56:5f:ca:24:65:dc:59:58:e7:b5:ee:79:ee:3c:0e: 7f:c5:67:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIamD0ACE0YY5sOnwljyDybn7mwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQw MDEyRTRBQjAeFw0yNjEwMTQwMTE3MDRaFw0yNjEwMTUwMzE3MDRaMDMxMTAvBgNV BAMTKDI1NkUxOTI5QTg3MDlBNjlFNTc1OUJDQ0E1ODNCM0YxOUMwODk4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdUC7HlCrUfEtvx4rqumOXfi/E 2SEbcAXfj8WaYla1WKusfgZHDG5isM6cyYikN7nO+tRMUoH9Ev2koXlm6uXIh/nU XheHei6OeOcfNHcTHC/bLfzvbf577AaEOGG0dX/Faud7EWSgXyNmndpygbB3aYVI t1kfOiX6dqGQIiAByBznpU+BJcqMozRh6FdFKgkGN78dXz4dfMtj2gT6RrGbIOg1 RV/SknvfQM2ppNk0wn59FUbUMOJ4xW6fJ9LJOPUYlDnezS6RpChct8cUVfLpGyl0 pGNfkBnAg9/dfS2zLvWiBbLJe8aj2oqINv0vsZYI9m9N5zrY7aS2URTReZZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJW4ZKahwmmnldZvMpYOz8ZwImNQwHwYDVR0j BBgwFoAU1HKlDH8RJvHZfo6YFkp8XQAS5KswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlNDYzNjUtNzRkMy00ZTYwLTk1MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3 RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQwMDEyRTRBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDcyQTUwQzdGMTEyNkYxRDk3RThFOTgxNjRBN0M1RDAwMTJF NEFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdD NUQwMDEyRTRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeKhrA6wVm9sFcnnuXAyn+LoX8GRJaeeb+0 E2hirgqYRcSEvCG7TLPOIaRRMd3/U8/R/y6iYD6XGVujHv9X2/EV1yg++684AMXW BAlPQmA8GqYln+1uNRDUUwdv6xL2JrFCKjXG9nOck7bqKU1xg7/3GlSQDJfznLwG sq0nhxXk1RQrL9PSy7M2Ew9BDOm8RLGVS4uMUvU4fLN5N3jiREMOet+Zn4xf16He Dy5PkSjkulKyRuY6YB3hpKwHh/8ka/R+PJC776l9E7rTa9CugrUMmD8r48uQL0lY F8jr4C4KIfCSmBz8Vvq0OpTP5FZfyiRl3FlY57Xuee48Dn/FZ7g= -----END CERTIFICATE-----Generated at Wed Oct 14 10:34:32 2026 by rpki-client