$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft File: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft (raw, json) Hash identifier: tP2MIUrkCp3oveeQ/7o+WlFuCv8xgLtaQF/gHnp7ywc= Subject key identifier: AC:10:B5:82:91:A2:BE:4B:66:19:C7:77:BD:C6:FC:03:07:BF:51:EC Authority key identifier: A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD Certificate issuer: /CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Certificate serial: 779BD631E3E5E959790EA3ED318293AF7B8FF4D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:14:53 +0000 Manifest this update: Thu 17 Sep 2026 05:09:53 +0000 Manifest next update: Fri 18 Sep 2026 08:44:53 +0000 Files and hashes: 1: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl (hash: Dy9kGwLVNTYm9r1MlyjbdP9AUMiQays7D/let4JXDgI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9b:d6:31:e3:e5:e9:59:79:0e:a3:ed:31:82:93:af:7b:8f:f4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Validity Not Before: Sep 17 05:09:53 2026 GMT Not After : Sep 18 08:44:53 2026 GMT Subject: CN=AC10B58291A2BE4B6619C777BDC6FC0307BF51EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b6:76:97:56:37:ac:5b:ad:ea:47:bd:f3:7f: f4:dc:5f:ee:72:8e:16:c4:1c:38:ca:28:df:a3:e9: 48:76:07:75:f1:55:ab:4b:c2:69:7a:79:b1:27:2a: 73:01:ba:f2:e4:8e:f0:ac:8e:2b:3f:14:91:38:97: 1a:6a:90:e3:74:19:73:04:cf:34:19:69:01:35:57: 6f:d9:c5:ce:7b:5e:48:e1:79:d3:32:d7:bf:5e:81: b5:e8:da:e2:32:54:4d:1c:83:7d:99:68:8f:d1:fa: b7:be:b2:52:e6:9d:6b:b2:b9:2f:01:9d:6a:d7:79: c6:a2:67:b5:81:5a:9c:9d:94:ec:d1:d7:b5:58:2f: 29:a7:50:50:33:30:4d:b9:b7:a4:79:8d:0d:59:b2: bd:c3:7b:94:ad:8a:ff:12:23:d3:03:c0:d9:22:0f: b8:0d:bd:36:0d:75:64:5c:9c:1b:7d:c7:58:55:2d: fe:4d:14:55:e0:4d:84:60:d4:ad:17:8f:a0:05:53: e0:09:c4:75:84:cc:a5:16:0e:e4:81:65:ca:ab:0f: ed:4a:71:4c:7e:c8:93:6d:b3:8e:ea:fc:c0:92:6e: 4f:8c:ed:e5:5c:cd:0d:9f:ab:88:6c:56:06:c9:d9: b9:78:83:e5:03:a4:cd:bf:66:85:89:01:68:58:b3: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:10:B5:82:91:A2:BE:4B:66:19:C7:77:BD:C6:FC:03:07:BF:51:EC X509v3 Authority Key Identifier: keyid:A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b0:e1:ec:51:fe:d1:8c:45:c3:05:a5:92:a1:40:4b:99:45: 3c:e0:b1:55:07:e8:91:ff:fe:1a:9b:82:7b:63:e7:68:ca:08: c3:45:e4:ac:f6:e2:9e:7a:b8:8c:fd:ae:e4:e1:86:80:72:bc: b0:de:c3:14:4b:80:fa:36:6e:98:fc:dc:b0:e5:c4:3e:51:1e: 46:2c:16:69:84:68:a2:91:af:ea:c1:ec:31:c0:0e:ce:a2:39: 3c:cd:2e:c6:33:81:f2:4f:8c:09:6e:13:13:b4:b0:5c:6b:95: 54:9b:0a:a5:dc:09:e5:0e:c8:9c:bf:7f:6f:51:00:7b:f4:5c: 16:b3:7c:e1:5d:6c:0a:30:4a:c0:50:64:45:86:90:e6:6b:81: e2:78:cc:67:d6:92:f6:5c:f5:58:c3:6e:ae:51:64:9c:d3:50: fa:9a:70:16:54:af:70:25:4c:66:0a:01:bd:e2:ae:90:5c:2d: 0a:60:84:09:cf:2d:11:8d:a0:69:6e:b7:6e:b5:68:6f:06:9d: 7d:75:84:83:dc:72:65:75:8a:12:e0:73:cd:7d:2f:7c:e9:5f: 29:59:70:a6:1d:13:e9:bb:e2:24:00:1f:02:86:b6:fc:fd:ff: 5f:d9:df:a7:37:d1:ce:d1:ec:92:0c:77:4d:95:66:72:1f:e1: b1:45:8b:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5vWMePl6Vl5DqPtMYKTr3uP9NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1QkNE NzkxODFBRDAeFw0yNjA5MTcwNTA5NTNaFw0yNjA5MTgwODQ0NTNaMDMxMTAvBgNV BAMTKEFDMTBCNTgyOTFBMkJFNEI2NjE5Qzc3N0JEQzZGQzAzMDdCRjUxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDetnaXVjesW63qR73zf/TcX+5y jhbEHDjKKN+j6Uh2B3XxVatLwml6ebEnKnMBuvLkjvCsjis/FJE4lxpqkON0GXME zzQZaQE1V2/Zxc57XkjhedMy179egbXo2uIyVE0cg32ZaI/R+re+slLmnWuyuS8B nWrXecaiZ7WBWpydlOzR17VYLymnUFAzME25t6R5jQ1Zsr3De5Stiv8SI9MDwNki D7gNvTYNdWRcnBt9x1hVLf5NFFXgTYRg1K0Xj6AFU+AJxHWEzKUWDuSBZcqrD+1K cUx+yJNts47q/MCSbk+M7eVczQ2fq4hsVgbJ2bl4g+UDpM2/ZoWJAWhYs1sVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrBC1gpGivktmGcd3vcb8Awe/UewwHwYDVR0j BBgwFoAUpHuz8uvP3cjKv77vngAVvNeRga0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgyM2Q3NGMtNWRiNi00YzJmLTg5ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJF QkNGRERDOENBQkZCRUVGOUUwMDE1QkNENzkxODFBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDdCQjNGMkVCQ0ZEREM4Q0FCRkJFRUY5RTAwMTVCQ0Q3OTE4 MUFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgyM2Q3NGMtNWRiNi00YzJmLTg5 ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1 QkNENzkxODFBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHew4exR/tGMRcMFpZKhQEuZRTzgsVUH6JH/ /hqbgntj52jKCMNF5Kz24p56uIz9ruThhoByvLDewxRLgPo2bpj83LDlxD5RHkYs FmmEaKKRr+rB7DHADs6iOTzNLsYzgfJPjAluExO0sFxrlVSbCqXcCeUOyJy/f29R AHv0XBazfOFdbAowSsBQZEWGkOZrgeJ4zGfWkvZc9VjDbq5RZJzTUPqacBZUr3Al TGYKAb3irpBcLQpghAnPLRGNoGlut261aG8GnX11hIPccmV1ihLgc819L3zpXylZ cKYdE+m74iQAHwKGtvz9/1/Z36c30c7R7JIMd02VZnIf4bFFiws= -----END CERTIFICATE-----Generated at Thu Sep 17 13:55:59 2026 by rpki-client