$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft File: 476A27F6557241F0C8B13CD6474412B065E838A1.mft (raw, json) Hash identifier: ULNMtup5dbEUNmImvg1USAXeLf7T9GVNk0xL9QTkf3Y= Subject key identifier: 5E:31:2F:D6:E3:E6:CA:51:E5:17:19:4B:15:92:BE:E3:02:59:CB:18 Authority key identifier: 47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1 Certificate issuer: /CN=476A27F6557241F0C8B13CD6474412B065E838A1 Certificate serial: 0370A92E19B1153EDCD894D133A27E4B730CBC34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:08:48 +0000 Manifest this update: Tue 02 Jun 2026 11:03:48 +0000 Manifest next update: Wed 03 Jun 2026 13:53:48 +0000 Files and hashes: 1: 476A27F6557241F0C8B13CD6474412B065E838A1.crl (hash: /tFB8yXE7h/x6PrE38oxmtcwGC3oi2g+2HHOa5zc8BY=) 2: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: OYr7fPU7LqGA/4X0nRg4WLnhKqVCaQ39UeYK0Ag4/eg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:70:a9:2e:19:b1:15:3e:dc:d8:94:d1:33:a2:7e:4b:73:0c:bc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=476A27F6557241F0C8B13CD6474412B065E838A1 Validity Not Before: Jun 2 11:03:48 2026 GMT Not After : Jun 3 13:53:48 2026 GMT Subject: CN=5E312FD6E3E6CA51E517194B1592BEE30259CB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:1e:45:3d:f6:14:d7:ed:78:22:16:1e:3e: cf:46:50:09:4d:02:3e:e4:07:77:67:76:a2:6e:2c: 67:d7:b9:22:b6:15:fb:c9:00:60:16:f7:55:5f:97: e1:f7:1e:db:e5:fe:80:52:1a:f9:53:9e:a4:14:6a: 7e:10:7a:31:32:93:58:53:19:2d:2f:53:9f:ca:74: c0:48:61:40:b1:43:a2:b2:a2:03:58:c4:18:00:5e: fb:d6:8e:d0:70:d7:b9:55:d2:d9:4a:f9:57:e6:fd: 61:96:f0:27:74:2e:de:ed:3e:8d:f9:f9:45:e9:e7: eb:23:b1:2b:5b:2b:c5:14:4d:1c:0e:02:c0:3e:db: a5:90:8b:df:65:af:ac:af:fa:3f:9e:88:51:0c:f4: 70:36:f6:9a:7e:02:2c:18:b4:09:a4:19:60:17:76: 47:76:69:b4:51:3f:f9:bc:29:7b:49:af:24:20:1d: 8f:5f:7c:0d:e6:71:94:81:97:c3:e9:38:e6:96:0a: b2:6c:ad:e8:f8:89:95:35:e1:6c:fc:5b:60:c4:a4: 07:85:49:57:4d:7f:9f:dd:c0:b5:3b:6a:5f:f5:1f: 7b:42:36:20:68:20:39:f2:42:10:a1:96:88:d2:bc: 89:35:2b:6a:be:29:9c:65:10:81:a8:c3:06:14:94: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:31:2F:D6:E3:E6:CA:51:E5:17:19:4B:15:92:BE:E3:02:59:CB:18 X509v3 Authority Key Identifier: keyid:47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:68:27:a7:d0:c5:ce:fd:72:17:31:a1:be:bc:3e:91:16:4b: 9d:8f:f1:9d:4e:68:98:c5:41:8a:7e:62:ed:cc:dd:59:18:a0: f8:91:dc:47:27:5f:bc:e4:be:44:c6:af:d2:98:33:72:b5:0d: f6:94:35:8e:12:09:01:44:b4:35:fc:bb:7d:68:fc:9f:06:09: 49:25:b3:00:c8:48:01:45:6d:df:70:e5:0b:55:13:3d:03:7d: 41:0f:b6:9f:cf:da:d7:59:d5:2a:03:6f:c2:d3:38:44:f9:b5: ac:0e:a2:12:70:8a:02:ed:e0:01:48:d5:6f:17:0c:c1:e8:3a: 75:c0:8e:64:1a:be:af:91:b1:94:12:69:cd:23:11:f9:b6:29: 00:e0:12:59:f2:c5:4e:01:d9:1f:22:cd:01:80:43:34:28:90: de:c2:0d:2b:b3:d0:d0:cd:93:9a:19:af:11:3c:b9:cf:05:79: 28:c5:79:30:c1:06:09:6c:b0:05:e3:f1:3a:90:27:dc:3c:32: 69:11:3d:c2:4e:ad:fa:49:87:b2:4c:83:27:58:9a:9f:3e:8c: 49:72:41:4f:8e:a1:b8:61:f1:f9:00:2d:32:21:80:d8:68:8b: bd:f5:f2:49:92:99:f9:d1:26:e5:fa:ad:41:e8:d7:d7:1c:88: cb:6d:0f:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3CpLhmxFT7c2JTRM6J+S3MMvDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2QTI3RjY1NTcyNDFGMEM4QjEzQ0Q2NDc0NDEyQjA2 NUU4MzhBMTAeFw0yNjA2MDIxMTAzNDhaFw0yNjA2MDMxMzUzNDhaMDMxMTAvBgNV BAMTKDVFMzEyRkQ2RTNFNkNBNTFFNTE3MTk0QjE1OTJCRUUzMDI1OUNCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvx5FPfYU1+14IhYePs9GUAlN Aj7kB3dndqJuLGfXuSK2FfvJAGAW91Vfl+H3Htvl/oBSGvlTnqQUan4QejEyk1hT GS0vU5/KdMBIYUCxQ6KyogNYxBgAXvvWjtBw17lV0tlK+Vfm/WGW8Cd0Lt7tPo35 +UXp5+sjsStbK8UUTRwOAsA+26WQi99lr6yv+j+eiFEM9HA29pp+AiwYtAmkGWAX dkd2abRRP/m8KXtJryQgHY9ffA3mcZSBl8PpOOaWCrJsrej4iZU14Wz8W2DEpAeF SVdNf5/dwLU7al/1H3tCNiBoIDnyQhChlojSvIk1K2q+KZxlEIGowwYUlHh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXjEv1uPmylHlFxlLFZK+4wJZyxgwHwYDVR0j BBgwFoAUR2on9lVyQfDIsTzWR0QSsGXoOKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGVkMjhkZTgtMzBhMS00OTMyLWI1MzktMjIzOGJhNzU5MzBhLzAvNDc2QTI3RjY1 NTcyNDFGMEM4QjEzQ0Q2NDc0NDEyQjA2NUU4MzhBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzZBMjdGNjU1NzI0MUYwQzhCMTNDRDY0NzQ0MTJCMDY1RTgz OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1 MzktMjIzOGJhNzU5MzBhLzAvNDc2QTI3RjY1NTcyNDFGMEM4QjEzQ0Q2NDc0NDEy QjA2NUU4MzhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVoJ6fQxc79chcxob68PpEWS52P8Z1OaJjF QYp+Yu3M3VkYoPiR3EcnX7zkvkTGr9KYM3K1DfaUNY4SCQFEtDX8u31o/J8GCUkl swDISAFFbd9w5QtVEz0DfUEPtp/P2tdZ1SoDb8LTOET5tawOohJwigLt4AFI1W8X DMHoOnXAjmQavq+RsZQSac0jEfm2KQDgElnyxU4B2R8izQGAQzQokN7CDSuz0NDN k5oZrxE8uc8FeSjFeTDBBglssAXj8TqQJ9w8MmkRPcJOrfpJh7JMgydYmp8+jEly QU+Oobhh8fkALTIhgNhoi7318kmSmfnRJuX6rUHo19cciMttD9k= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:14 2026 by rpki-client