$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft File: 477D71607466F25C429BF0826B9301DA69A81C15.mft (raw, json) Hash identifier: cRWKnGxrE1f4/FRhKVIgdcUIA2Km2O9C8Oov46IBWig= Subject key identifier: DD:27:50:A8:B3:9D:B6:2D:E8:FC:D6:01:B7:43:0C:ED:7B:5C:B0:66 Authority key identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 Certificate issuer: /CN=477D71607466F25C429BF0826B9301DA69A81C15 Certificate serial: 367CC40ED6F34138FE22EAA8B6AB0158EF5A6A60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft Manifest number: FA Signing time: Wed 04 Nov 2026 16:54:42 +0000 Manifest this update: Wed 04 Nov 2026 16:49:42 +0000 Manifest next update: Thu 05 Nov 2026 17:32:42 +0000 Files and hashes: 1: 477D71607466F25C429BF0826B9301DA69A81C15.crl (hash: +Mxs+ZuPWrvZZokNgWwa/DgXxnv6wPjR8NfGE+g5REA=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: L92at1VBLISZXeLgKyaGu6oCdPY8yBu9x3vzonWkuxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 17:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7c:c4:0e:d6:f3:41:38:fe:22:ea:a8:b6:ab:01:58:ef:5a:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477D71607466F25C429BF0826B9301DA69A81C15 Validity Not Before: Nov 4 16:49:42 2026 GMT Not After : Nov 5 17:32:42 2026 GMT Subject: CN=DD2750A8B39DB62DE8FCD601B7430CED7B5CB066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:61:67:73:51:89:99:9c:46:c0:68:59:4d: 2e:77:42:38:d6:9a:50:29:68:e8:4c:df:cc:ef:1d: f1:a0:4f:9a:d5:7c:60:0a:92:af:c3:df:53:0e:23: f6:ba:6e:07:06:8a:0a:0b:17:76:af:82:da:19:fb: c3:53:c5:2e:54:5f:a6:c9:5e:72:db:37:93:65:0f: 60:3e:0b:cc:89:3f:df:1e:33:20:bb:74:c4:11:73: 2c:83:6f:53:21:23:f0:44:f7:9b:07:0c:19:0a:2c: 40:d8:d4:c6:bb:8b:5b:76:9c:b8:56:2f:15:53:ab: ca:0c:cb:82:f5:1c:5a:ab:45:18:aa:ce:91:a6:8e: 1d:ac:bd:a5:d3:b2:06:6d:3c:e3:07:45:66:46:b9: 00:a6:f0:f1:65:a3:14:cc:d6:8b:5c:e9:9e:08:9b: 5e:4a:8d:48:ff:72:c2:32:a0:9c:86:25:1b:bd:df: 87:fb:0e:39:04:6b:99:3a:5b:d0:57:bf:d0:7c:aa: a4:bd:99:4d:bc:76:ff:dd:0c:77:85:aa:0a:6d:3b: 75:c0:f5:de:c7:44:a9:f1:2e:17:a9:cf:99:77:8c: ae:04:5e:04:f3:ce:fd:fa:41:6c:2b:a1:0e:09:1b: b2:bc:cd:99:22:c7:ba:e9:c5:1f:07:8a:70:84:98: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:27:50:A8:B3:9D:B6:2D:E8:FC:D6:01:B7:43:0C:ED:7B:5C:B0:66 X509v3 Authority Key Identifier: keyid:47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d4:56:53:b4:45:ce:fc:f4:b7:81:b4:c5:8a:b0:2e:ad:7b: 0a:b6:04:e1:1b:08:f1:b0:32:36:07:01:69:ce:0c:2b:99:90: 78:c2:0c:e0:f5:78:c4:bb:0b:26:e9:4a:e5:0d:63:5f:3c:ae: 62:74:f5:56:ea:54:0c:da:7e:a6:f6:dc:89:39:75:e6:be:c9: 01:b4:15:89:c8:03:1a:e6:46:83:54:4c:72:32:d3:fc:30:db: fd:ae:86:89:2a:b7:ae:0b:a6:18:46:9b:f0:b7:9d:a3:7a:4c: 75:be:71:e0:1c:ea:86:36:d1:4d:3e:7b:80:e1:93:20:6a:aa: fa:7a:e2:1e:e5:97:79:27:24:39:33:81:95:ec:d5:18:b7:56: 5b:9b:cd:c0:27:04:3f:33:66:d9:88:f9:ea:a4:50:e9:22:28: 44:20:26:a2:f8:db:e9:e6:7b:14:6c:1d:b6:0e:c3:70:c3:bc: 40:90:bf:d8:19:81:85:78:3a:9f:d9:7e:83:46:af:1d:30:5c: 7a:0c:0e:57:4a:d2:fd:c0:90:82:ee:cc:cb:f9:76:dc:69:2e: 36:4d:bf:32:8d:72:04:b1:fe:8c:5f:24:c8:26:f2:1e:43:01: a0:12:87:9f:e0:52:98:a7:25:90:51:56:84:e8:3d:a4:f9:3c: 99:46:ee:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnzEDtbzQTj+IuqotqsBWO9aamAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2 OUE4MUMxNTAeFw0yNjExMDQxNjQ5NDJaFw0yNjExMDUxNzMyNDJaMDMxMTAvBgNV BAMTKEREMjc1MEE4QjM5REI2MkRFOEZDRDYwMUI3NDMwQ0VEN0I1Q0IwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9mFnc1GJmZxGwGhZTS53QjjW mlApaOhM38zvHfGgT5rVfGAKkq/D31MOI/a6bgcGigoLF3avgtoZ+8NTxS5UX6bJ XnLbN5NlD2A+C8yJP98eMyC7dMQRcyyDb1MhI/BE95sHDBkKLEDY1Ma7i1t2nLhW LxVTq8oMy4L1HFqrRRiqzpGmjh2svaXTsgZtPOMHRWZGuQCm8PFloxTM1otc6Z4I m15KjUj/csIyoJyGJRu934f7DjkEa5k6W9BXv9B8qqS9mU28dv/dDHeFqgptO3XA 9d7HRKnxLhepz5l3jK4EXgTzzv36QWwroQ4JG7K8zZkix7rpxR8HinCEmB7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3SdQqLOdti3o/NYBt0MM7XtcsGYwHwYDVR0j BBgwFoAUR31xYHRm8lxCm/CCa5MB2mmoHBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1Y2ZiYTMtZTAxNy00ZThhLTlhYzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3 NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2OUE4MUMxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzdENzE2MDc0NjZGMjVDNDI5QkYwODI2QjkzMDFEQTY5QTgx QzE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAx REE2OUE4MUMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzUVlO0Rc789LeBtMWKsC6tewq2BOEbCPGw MjYHAWnODCuZkHjCDOD1eMS7CybpSuUNY188rmJ09VbqVAzafqb23Ik5dea+yQG0 FYnIAxrmRoNUTHIy0/ww2/2uhokqt64LphhGm/C3naN6THW+ceAc6oY20U0+e4Dh kyBqqvp64h7ll3knJDkzgZXs1Ri3VlubzcAnBD8zZtmI+eqkUOkiKEQgJqL42+nm exRsHbYOw3DDvECQv9gZgYV4Op/ZfoNGrx0wXHoMDldK0v3AkILuzMv5dtxpLjZN vzKNcgSx/oxfJMgm8h5DAaASh5/gUpinJZBRVoToPaT5PJlG7kI= -----END CERTIFICATE-----Generated at Thu Nov 5 08:08:03 2026 by rpki-client