$ rpki-client -vvf rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft File: 477D71607466F25C429BF0826B9301DA69A81C15.mft (raw, json) Hash identifier: ffq/1Rf+RJWttkXpPrNfcqkQuBmU0qXf0xw/5AOpzNE= Subject key identifier: A9:1E:72:D9:E5:FB:77:7C:0A:9B:9F:A1:2D:B6:C4:21:93:6D:D8:43 Authority key identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 Certificate issuer: /CN=477D71607466F25C429BF0826B9301DA69A81C15 Certificate serial: 676A0963372D1A51F2287FB639625926A7CD5AA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:56:33 +0000 Manifest this update: Tue 02 Jun 2026 17:51:33 +0000 Manifest next update: Wed 03 Jun 2026 20:07:33 +0000 Files and hashes: 1: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: L92at1VBLISZXeLgKyaGu6oCdPY8yBu9x3vzonWkuxM=) 2: 477D71607466F25C429BF0826B9301DA69A81C15.crl (hash: iMAJqPICer9If9P4Wsl1QgBFlzFWCPkkGz2puOXxN7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6a:09:63:37:2d:1a:51:f2:28:7f:b6:39:62:59:26:a7:cd:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477D71607466F25C429BF0826B9301DA69A81C15 Validity Not Before: Jun 2 17:51:33 2026 GMT Not After : Jun 3 20:07:33 2026 GMT Subject: CN=A91E72D9E5FB777C0A9B9FA12DB6C421936DD843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:cd:47:16:f9:4d:35:ab:e0:40:20:ef:8c: 51:49:15:84:a1:15:12:8c:f0:35:ce:b2:61:eb:01: 48:8b:a7:27:0c:e6:7a:26:60:4e:9e:95:52:26:92: a0:7a:c2:69:93:6b:1c:b4:d6:66:a8:97:c2:67:b5: e0:7a:ff:bd:6c:d1:20:93:68:a7:0d:32:c4:f0:e0: 66:71:c4:b8:13:27:c0:33:56:56:c2:8a:90:e4:f4: f4:e6:14:fa:ce:1b:d0:4a:7e:54:59:24:ff:09:bc: 4b:1b:e1:dc:56:6b:ae:b9:a8:6b:c4:24:98:5f:a8: 11:29:a3:ae:46:5d:9d:be:8b:6b:33:9b:d1:38:da: 04:95:de:6c:61:d1:df:17:bb:50:6a:3c:b9:b8:b9: 7c:a6:a4:ef:1b:4c:2d:79:e3:49:14:56:e6:e4:7e: db:84:73:a4:f2:d8:0e:22:3f:4f:d2:af:54:43:53: 17:77:79:34:8b:01:7d:7c:cc:bf:e2:0e:72:d7:f2: 1e:68:a7:49:db:1e:fe:7c:2d:f8:64:f6:32:2f:85: 28:a5:27:9b:d6:ae:0e:c1:9e:ca:f5:32:d8:c5:38: df:d2:29:a3:ba:ed:83:07:05:66:e5:81:0a:f2:73: 1b:e4:e4:39:96:78:4e:25:9b:03:99:13:c5:ef:5e: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1E:72:D9:E5:FB:77:7C:0A:9B:9F:A1:2D:B6:C4:21:93:6D:D8:43 X509v3 Authority Key Identifier: keyid:47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b0:b9:b0:99:8d:4b:d1:de:2b:fd:58:fc:c4:b2:3b:d5:17: 3e:d4:2f:f0:73:3b:53:2f:3a:35:30:1a:f3:fb:4e:f1:c0:98: 3e:bd:f0:3e:7e:b1:15:e7:d2:cb:a4:dc:52:02:2d:80:f5:74: a8:57:4f:5b:c2:38:4b:2a:67:0f:7e:a7:72:6f:ef:21:d6:59: 85:41:42:b3:3d:5d:a0:47:18:af:75:17:7a:94:4f:c1:2a:52: 17:81:6d:f8:fd:79:61:dc:45:01:7f:4d:b7:d0:49:a0:0d:c0: 43:de:50:f9:49:10:09:7d:dd:02:57:a5:b4:5c:ab:be:5f:b1: 9b:85:48:11:26:3a:e2:93:18:f8:31:88:33:0c:91:33:91:dd: c3:fd:45:04:68:56:66:9b:84:dc:68:04:b8:d9:e6:bc:92:5c: 0a:c6:6c:4d:83:0f:0d:ef:64:7f:74:ab:72:bb:c3:12:7d:06: 68:30:a9:27:b3:76:7c:60:8e:f4:31:79:5c:a9:52:17:e8:a6: 4c:16:3c:68:62:12:bb:bd:37:f1:77:45:e4:51:58:63:29:6f: b0:4e:a1:4c:71:ff:1b:78:74:0a:be:0a:ba:2b:65:a9:fa:f1: 06:39:4e:71:c6:33:ef:da:2b:83:39:69:eb:06:cd:94:49:04: a4:be:5d:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2oJYzctGlHyKH+2OWJZJqfNWqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2 OUE4MUMxNTAeFw0yNjA2MDIxNzUxMzNaFw0yNjA2MDMyMDA3MzNaMDMxMTAvBgNV BAMTKEE5MUU3MkQ5RTVGQjc3N0MwQTlCOUZBMTJEQjZDNDIxOTM2REQ4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1z81HFvlNNavgQCDvjFFJFYSh FRKM8DXOsmHrAUiLpycM5nomYE6elVImkqB6wmmTaxy01maol8JnteB6/71s0SCT aKcNMsTw4GZxxLgTJ8AzVlbCipDk9PTmFPrOG9BKflRZJP8JvEsb4dxWa665qGvE JJhfqBEpo65GXZ2+i2szm9E42gSV3mxh0d8Xu1BqPLm4uXympO8bTC1540kUVubk ftuEc6Ty2A4iP0/Sr1RDUxd3eTSLAX18zL/iDnLX8h5op0nbHv58Lfhk9jIvhSil J5vWrg7Bnsr1MtjFON/SKaO67YMHBWblgQrycxvk5DmWeE4lmwOZE8XvXsiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqR5y2eX7d3wKm5+hLbbEIZNt2EMwHwYDVR0j BBgwFoAUR31xYHRm8lxCm/CCa5MB2mmoHBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1Y2ZiYTMtZTAxNy00ZThhLTlhYzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3 NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2OUE4MUMxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzdENzE2MDc0NjZGMjVDNDI5QkYwODI2QjkzMDFEQTY5QTgx QzE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAx REE2OUE4MUMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuwubCZjUvR3iv9WPzEsjvVFz7UL/BzO1Mv OjUwGvP7TvHAmD698D5+sRXn0suk3FICLYD1dKhXT1vCOEsqZw9+p3Jv7yHWWYVB QrM9XaBHGK91F3qUT8EqUheBbfj9eWHcRQF/TbfQSaANwEPeUPlJEAl93QJXpbRc q75fsZuFSBEmOuKTGPgxiDMMkTOR3cP9RQRoVmabhNxoBLjZ5rySXArGbE2DDw3v ZH90q3K7wxJ9BmgwqSezdnxgjvQxeVypUhfopkwWPGhiEru9N/F3ReRRWGMpb7BO oUxx/xt4dAq+CrorZan68QY5TnHGM+/aK4M5aesGzZRJBKS+XYA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:05 2026 by rpki-client