$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft File: 477D71607466F25C429BF0826B9301DA69A81C15.mft (raw, json) Hash identifier: If9HwCB29znKYFyrd7bPsxoeTKsJN+hPB4dc098+lBs= Subject key identifier: BA:D5:1C:3E:76:10:E0:C4:DB:71:A1:D2:01:17:5C:B4:C9:D4:15:D8 Authority key identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 Certificate issuer: /CN=477D71607466F25C429BF0826B9301DA69A81C15 Certificate serial: 096BF2D5B4C8632E981D3AFADEE1BEE270AD90B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:48:33 +0000 Manifest this update: Wed 16 Sep 2026 19:43:33 +0000 Manifest next update: Thu 17 Sep 2026 20:46:33 +0000 Files and hashes: 1: 477D71607466F25C429BF0826B9301DA69A81C15.crl (hash: thX/wL/pagtNlqfW0J0+h73htlL+ye7mN0Awv4AhVbc=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: L92at1VBLISZXeLgKyaGu6oCdPY8yBu9x3vzonWkuxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6b:f2:d5:b4:c8:63:2e:98:1d:3a:fa:de:e1:be:e2:70:ad:90:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477D71607466F25C429BF0826B9301DA69A81C15 Validity Not Before: Sep 16 19:43:33 2026 GMT Not After : Sep 17 20:46:33 2026 GMT Subject: CN=BAD51C3E7610E0C4DB71A1D201175CB4C9D415D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:eb:35:84:b0:95:4f:9a:de:5e:77:5a:52: b1:98:d0:30:ff:5c:61:31:e5:54:34:35:5d:d6:3a: cb:43:12:2d:35:4e:1a:e7:20:93:62:ca:fb:fb:1f: 7c:61:cf:83:d2:80:42:aa:1c:c5:b1:3e:19:b9:1b: 96:ce:9e:ae:54:7f:b5:55:3e:4b:bb:f9:4c:6c:60: 5d:71:c5:72:2e:be:50:e7:b9:a1:91:88:4d:18:1f: 51:16:56:84:95:28:89:40:6f:10:dd:66:d7:0d:22: ea:ea:a5:9b:88:de:e6:55:50:34:ff:53:f4:4a:53: fc:4f:a7:f0:f1:9c:e1:80:25:72:47:5e:a6:8b:1a: 02:79:b0:27:eb:7f:7a:33:8b:87:0d:95:5f:36:c1: 99:9e:0c:12:89:09:b3:e7:43:43:a6:85:32:5e:88: e3:9e:28:ba:4c:1a:5f:b9:3b:9d:d3:ab:67:72:c2: 14:2e:2d:67:d5:36:b4:4a:a5:ef:67:ff:5d:4b:d0: e6:e0:0a:4d:77:43:a6:8e:e6:31:b8:fb:18:1e:54: cb:c1:ea:83:30:44:1a:9a:04:4c:d3:85:77:d2:47: 9a:17:7d:2b:4e:6d:a5:71:1c:7d:08:08:10:ac:fe: 28:3f:65:57:4e:31:b0:4c:6d:df:5b:15:91:72:2c: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D5:1C:3E:76:10:E0:C4:DB:71:A1:D2:01:17:5C:B4:C9:D4:15:D8 X509v3 Authority Key Identifier: keyid:47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:c9:35:0c:07:cc:0a:05:d3:54:e8:d9:2e:b8:43:c0:bb:a8: bd:38:e9:55:ab:d9:c0:88:9b:44:e0:67:05:cf:5c:32:45:59: b7:29:f4:99:6b:31:00:33:00:ad:eb:36:1a:d3:a7:9f:d5:73: 59:a2:06:81:11:d8:a4:63:85:7c:c6:11:40:f3:82:1f:87:43: 11:1a:d9:b5:9e:2d:76:a7:ba:63:6a:7b:46:7a:f0:91:d1:26: 63:9c:a2:6a:16:2e:92:3c:e4:60:a1:3a:ba:ca:7d:27:d5:b9: 8f:2d:53:45:69:e4:41:a8:e5:bd:50:d2:2e:49:3f:e6:9a:72: ea:f1:47:63:09:85:4b:22:ea:7f:43:c1:4c:ad:01:b9:69:5f: a3:31:56:33:03:23:2e:48:ac:00:13:1c:b3:5d:7b:b1:ec:a7: 70:49:2e:a6:d8:57:0d:f0:63:8e:97:7a:e7:aa:34:67:a3:67: 47:2d:23:bc:de:58:89:d9:d1:d8:81:94:37:2b:6e:01:fe:97: 92:16:c3:a7:31:43:6d:0e:19:e6:85:c1:65:94:f3:4c:84:87: 91:18:08:4f:97:5d:c9:fe:01:f5:5c:40:b0:a7:cd:21:2a:10: 78:d8:9c:1e:ef:fc:64:e0:9b:72:fa:72:6d:fa:a6:1e:43:21: 22:fb:73:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWvy1bTIYy6YHTr63uG+4nCtkLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2 OUE4MUMxNTAeFw0yNjA5MTYxOTQzMzNaFw0yNjA5MTcyMDQ2MzNaMDMxMTAvBgNV BAMTKEJBRDUxQzNFNzYxMEUwQzREQjcxQTFEMjAxMTc1Q0I0QzlENDE1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbOs1hLCVT5reXndaUrGY0DD/ XGEx5VQ0NV3WOstDEi01ThrnIJNiyvv7H3xhz4PSgEKqHMWxPhm5G5bOnq5Uf7VV Pku7+UxsYF1xxXIuvlDnuaGRiE0YH1EWVoSVKIlAbxDdZtcNIurqpZuI3uZVUDT/ U/RKU/xPp/DxnOGAJXJHXqaLGgJ5sCfrf3ozi4cNlV82wZmeDBKJCbPnQ0OmhTJe iOOeKLpMGl+5O53Tq2dywhQuLWfVNrRKpe9n/11L0ObgCk13Q6aO5jG4+xgeVMvB 6oMwRBqaBEzThXfSR5oXfStObaVxHH0ICBCs/ig/ZVdOMbBMbd9bFZFyLL0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutUcPnYQ4MTbcaHSARdctMnUFdgwHwYDVR0j BBgwFoAUR31xYHRm8lxCm/CCa5MB2mmoHBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWY1Y2ZiYTMtZTAxNy00ZThhLTlhYzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3 NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2OUE4MUMxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzdENzE2MDc0NjZGMjVDNDI5QkYwODI2QjkzMDFEQTY5QTgx QzE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAx REE2OUE4MUMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3JNQwHzAoF01To2S64Q8C7qL046VWr2cCI m0TgZwXPXDJFWbcp9JlrMQAzAK3rNhrTp5/Vc1miBoER2KRjhXzGEUDzgh+HQxEa 2bWeLXanumNqe0Z68JHRJmOcomoWLpI85GChOrrKfSfVuY8tU0Vp5EGo5b1Q0i5J P+aacurxR2MJhUsi6n9DwUytAblpX6MxVjMDIy5IrAATHLNde7Hsp3BJLqbYVw3w Y46XeueqNGejZ0ctI7zeWInZ0diBlDcrbgH+l5IWw6cxQ20OGeaFwWWU80yEh5EY CE+XXcn+AfVcQLCnzSEqEHjYnB7v/GTgm3L6cm36ph5DISL7c9k= -----END CERTIFICATE-----Generated at Thu Sep 17 13:49:15 2026 by rpki-client