$ rpki-client -vvf rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft File: 477D71607466F25C429BF0826B9301DA69A81C15.mft (raw, json) Hash identifier: IM1YFBv0jc8RJsvwKhQGh/Vh0nOMArG1VNCjtpvfrCI= Subject key identifier: 0A:FD:A8:EC:05:7A:D8:87:66:B1:4C:D9:12:01:3C:A5:85:B7:26:D9 Authority key identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 Certificate issuer: /CN=477D71607466F25C429BF0826B9301DA69A81C15 Certificate serial: 136C33793BAC2CC2D5C9FCB1115C7F27560E68B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:32:43 +0000 Manifest this update: Tue 21 Jul 2026 01:27:43 +0000 Manifest next update: Wed 22 Jul 2026 02:27:43 +0000 Files and hashes: 1: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: L92at1VBLISZXeLgKyaGu6oCdPY8yBu9x3vzonWkuxM=) 2: 477D71607466F25C429BF0826B9301DA69A81C15.crl (hash: N5ML+L+X4GxzOTBNxKqSj66XJxPXpM8fWt/LdEou9WI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6c:33:79:3b:ac:2c:c2:d5:c9:fc:b1:11:5c:7f:27:56:0e:68:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477D71607466F25C429BF0826B9301DA69A81C15 Validity Not Before: Jul 21 01:27:43 2026 GMT Not After : Jul 22 02:27:43 2026 GMT Subject: CN=0AFDA8EC057AD88766B14CD912013CA585B726D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:2d:dc:cd:3a:44:4c:76:5b:33:02:15:02: da:03:79:80:0d:38:d6:19:58:ca:bf:0a:b0:03:08: 28:7e:6d:d7:7c:e0:b7:5e:82:74:86:7e:5e:84:a4: b1:0c:88:24:f4:2c:9e:5a:c9:d5:b9:50:8d:37:9f: 71:44:3f:6e:08:c1:9c:c8:b7:be:ad:a1:04:ce:ce: 0d:bb:f3:41:0e:cb:11:9a:c3:99:d5:63:ce:76:87: 0e:f9:a5:78:b2:a9:db:76:4e:6b:15:c4:f4:74:7a: bf:b0:d1:92:54:40:42:4d:d1:0e:b9:a5:6c:4d:38: 26:05:11:5c:ac:f8:9d:66:2a:92:0b:dc:95:73:27: 92:ec:05:26:ea:5f:1c:a3:ea:f2:91:21:a1:79:db: a7:2e:29:20:b8:71:f0:94:de:47:f6:5e:04:63:cb: 7c:5f:98:36:56:da:7b:e1:18:20:d1:5f:6c:2c:a1: d7:04:88:e5:a2:05:a9:d1:cc:f1:ef:4a:26:af:bb: 2a:f8:76:93:47:10:f6:2f:f2:08:55:21:15:fd:c5: ef:15:b1:3e:ee:65:83:bf:6d:a7:e0:e0:ec:4f:22: d4:f8:b6:78:d2:e8:52:6d:3a:b3:e8:fd:01:d6:2d: 2d:c1:d2:e5:46:ac:84:fa:25:56:11:17:cb:73:a6: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FD:A8:EC:05:7A:D8:87:66:B1:4C:D9:12:01:3C:A5:85:B7:26:D9 X509v3 Authority Key Identifier: keyid:47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f4:31:f9:dd:e5:d4:a0:d9:26:8a:c3:b2:30:9c:47:89:ba: 63:29:c7:f6:97:21:7e:32:0d:ea:a4:33:1b:7c:fe:3b:7e:a0: 23:8f:19:29:9a:96:06:4b:37:dd:0b:12:de:bc:a9:31:7b:f3: 97:c4:26:8a:8e:4a:84:0f:d6:5b:0a:81:70:be:e2:38:80:a7: 3c:2c:9f:5d:fd:8a:79:ed:85:ce:31:98:83:53:65:9c:96:f5: d9:7d:d8:32:10:44:01:f2:d7:1f:c7:a9:61:09:7f:ac:60:fc: 14:19:5d:fa:35:34:10:a6:55:95:7a:22:75:53:96:92:1c:4f: 99:92:ac:af:49:d3:92:43:cb:95:e4:0e:9c:fc:89:52:a7:af: 2f:fc:6c:32:11:08:9a:69:b6:e9:c5:62:d1:2b:11:a6:ac:1a: f4:3d:17:e7:c0:7b:a5:12:af:a8:83:70:8c:30:c1:57:a7:2b: de:5f:6c:ee:38:0e:09:e6:9f:35:4f:72:63:58:48:d2:07:9a: c8:4a:1b:56:31:72:50:5d:cf:d0:fb:51:ef:87:2d:96:41:fb: fa:7b:fd:1d:f7:c5:1c:60:dd:16:65:30:3b:8e:e1:5e:57:cb: 67:cb:24:b2:e9:29:9d:4e:3a:00:fc:01:3c:9a:fe:cf:1f:38: ae:11:90:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2wzeTusLMLVyfyxEVx/J1YOaLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2 OUE4MUMxNTAeFw0yNjA3MjEwMTI3NDNaFw0yNjA3MjIwMjI3NDNaMDMxMTAvBgNV BAMTKDBBRkRBOEVDMDU3QUQ4ODc2NkIxNENEOTEyMDEzQ0E1ODVCNzI2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPS3czTpETHZbMwIVAtoDeYAN ONYZWMq/CrADCCh+bdd84LdegnSGfl6EpLEMiCT0LJ5aydW5UI03n3FEP24IwZzI t76toQTOzg2780EOyxGaw5nVY852hw75pXiyqdt2TmsVxPR0er+w0ZJUQEJN0Q65 pWxNOCYFEVys+J1mKpIL3JVzJ5LsBSbqXxyj6vKRIaF526cuKSC4cfCU3kf2XgRj y3xfmDZW2nvhGCDRX2wsodcEiOWiBanRzPHvSiavuyr4dpNHEPYv8ghVIRX9xe8V sT7uZYO/bafg4OxPItT4tnjS6FJtOrPo/QHWLS3B0uVGrIT6JVYRF8tzpg61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCv2o7AV62IdmsUzZEgE8pYW3JtkwHwYDVR0j BBgwFoAUR31xYHRm8lxCm/CCa5MB2mmoHBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1Y2ZiYTMtZTAxNy00ZThhLTlhYzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3 NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2OUE4MUMxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzdENzE2MDc0NjZGMjVDNDI5QkYwODI2QjkzMDFEQTY5QTgx QzE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAx REE2OUE4MUMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIv0Mfnd5dSg2SaKw7IwnEeJumMpx/aXIX4y DeqkMxt8/jt+oCOPGSmalgZLN90LEt68qTF785fEJoqOSoQP1lsKgXC+4jiApzws n139innthc4xmINTZZyW9dl92DIQRAHy1x/HqWEJf6xg/BQZXfo1NBCmVZV6InVT lpIcT5mSrK9J05JDy5XkDpz8iVKnry/8bDIRCJpptunFYtErEaasGvQ9F+fAe6US r6iDcIwwwVenK95fbO44DgnmnzVPcmNYSNIHmshKG1YxclBdz9D7Ue+HLZZB+/p7 /R33xRxg3RZlMDuO4V5Xy2fLJLLpKZ1OOgD8ATya/s8fOK4RkPA= -----END CERTIFICATE-----Generated at Tue Jul 21 08:24:12 2026 by rpki-client