$ rpki-client -vvf rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft File: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft (raw, json) Hash identifier: XX4iYaAgL6JUyzODwDBGkFA2R83fV+HhvHX3jhjtMSY= Subject key identifier: 5A:CF:B0:B3:67:01:9C:DF:A1:A0:01:F9:33:82:D4:6F:62:46:02:3F Authority key identifier: A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD Certificate issuer: /CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Certificate serial: 5A75BDBF3F5DEE4600F2F49C9D58CFF7AECB10AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:18:45 +0000 Manifest this update: Sat 20 Jun 2026 03:13:45 +0000 Manifest next update: Sun 21 Jun 2026 06:50:45 +0000 Files and hashes: 1: A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl (hash: 0nYcaLpEZGGxO/idg/Hc5RQbx1XR/KnmBh2LJn3Zwdg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:75:bd:bf:3f:5d:ee:46:00:f2:f4:9c:9d:58:cf:f7:ae:cb:10:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD Validity Not Before: Jun 20 03:13:45 2026 GMT Not After : Jun 21 06:50:45 2026 GMT Subject: CN=5ACFB0B367019CDFA1A001F93382D46F6246023F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:51:35:11:f8:de:06:cc:d1:af:81:e2:d6: 16:ca:e2:51:a9:f1:59:bf:9f:c0:14:0c:b6:74:63: ff:08:b5:7e:db:48:9d:3f:df:fe:5b:8a:ed:0e:44: ed:e8:1f:06:cf:90:04:bb:d8:a4:da:01:a4:93:ec: 86:f2:a6:25:06:28:1e:55:68:60:55:b4:97:aa:b4: 12:83:0d:a6:6e:e8:ce:05:16:ba:52:83:16:fa:dc: d4:c1:8f:fc:3b:c1:13:37:ad:a4:b1:c5:05:c7:b0: f4:b0:5b:d5:4b:b2:01:f6:7f:16:24:4a:4f:50:5d: 68:64:d6:42:4a:a2:4f:f2:66:65:db:61:f4:a5:27: c7:d6:d8:56:31:06:73:68:31:ec:ef:d1:6b:46:a6: b3:9f:36:f7:d0:5f:31:33:e8:12:8a:d2:c2:d0:63: 2a:43:06:8b:62:ed:1c:c2:21:ce:21:5a:06:a2:6a: bf:ec:f0:ac:79:b2:b7:09:0f:ef:b9:72:13:25:26: 90:6b:b0:19:31:c1:0d:7f:02:aa:2e:4e:d3:b6:a9: f8:ca:ab:4c:eb:a6:09:4c:31:dc:d4:b9:d2:9c:2d: f9:c1:5a:45:4e:94:b0:6d:24:47:3c:4d:aa:71:de: ea:cf:b3:aa:ce:e8:eb:fc:b6:f9:e5:f7:2b:29:32: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CF:B0:B3:67:01:9C:DF:A1:A0:01:F9:33:82:D4:6F:62:46:02:3F X509v3 Authority Key Identifier: keyid:A4:7B:B3:F2:EB:CF:DD:C8:CA:BF:BE:EF:9E:00:15:BC:D7:91:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d823d74c-5db6-4c2f-8989-9c58bb8e0283/0/A47BB3F2EBCFDDC8CABFBEEF9E0015BCD79181AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9c:0d:af:59:dc:2b:1a:a8:82:da:9e:fd:e5:33:3c:c9:fa: c7:c8:4f:cb:6f:29:b9:64:4a:c9:a3:b6:d3:12:06:3c:5e:4d: 05:b2:cd:de:42:b4:1c:c0:9a:d8:d4:6c:b8:be:b8:d9:18:d4: 35:91:7c:09:a2:c6:74:f4:83:82:19:b9:1b:03:04:53:b8:3d: 8f:4c:37:83:b7:14:c8:19:a8:f5:9f:63:09:2a:1e:81:60:e0: 99:0d:67:66:46:e0:c1:e5:51:e0:07:7e:b2:9c:c8:db:c0:da: 24:7d:73:5d:1c:cc:f7:c9:d8:86:44:fb:99:bc:d1:5d:0b:49: 1a:88:95:a7:30:73:6b:b4:49:f0:c7:c6:c2:ba:f1:d0:eb:7b: b6:a5:c8:23:5f:e2:70:96:80:95:21:81:6b:03:76:9b:dc:ae: b1:20:1b:c0:5b:76:ad:67:2d:de:9d:c6:37:36:10:ec:a0:57: 24:c2:cf:79:9c:20:1d:4c:20:4e:82:cc:3a:b3:d5:e7:00:c9: fa:5d:63:41:57:8a:79:09:0c:60:fc:96:09:60:57:f2:60:a8: bf:1b:b4:6c:ce:86:49:7d:dc:6e:98:42:d4:21:b7:d8:a3:22: 7b:d0:00:3c:1e:13:7c:2a:f9:9a:30:92:f0:c8:5f:a4:d2:29: 60:29:ef:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnW9vz9d7kYA8vScnVjP967LEKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1QkNE NzkxODFBRDAeFw0yNjA2MjAwMzEzNDVaFw0yNjA2MjEwNjUwNDVaMDMxMTAvBgNV BAMTKDVBQ0ZCMEIzNjcwMTlDREZBMUEwMDFGOTMzODJENDZGNjI0NjAyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYylE1EfjeBszRr4Hi1hbK4lGp 8Vm/n8AUDLZ0Y/8ItX7bSJ0/3/5biu0ORO3oHwbPkAS72KTaAaST7IbypiUGKB5V aGBVtJeqtBKDDaZu6M4FFrpSgxb63NTBj/w7wRM3raSxxQXHsPSwW9VLsgH2fxYk Sk9QXWhk1kJKok/yZmXbYfSlJ8fW2FYxBnNoMezv0WtGprOfNvfQXzEz6BKK0sLQ YypDBoti7RzCIc4hWgaiar/s8Kx5srcJD++5chMlJpBrsBkxwQ1/AqouTtO2qfjK q0zrpglMMdzUudKcLfnBWkVOlLBtJEc8Tapx3urPs6rO6Ov8tvnl9yspMox9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWs+ws2cBnN+hoAH5M4LUb2JGAj8wHwYDVR0j BBgwFoAUpHuz8uvP3cjKv77vngAVvNeRga0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgyM2Q3NGMtNWRiNi00YzJmLTg5ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJF QkNGRERDOENBQkZCRUVGOUUwMDE1QkNENzkxODFBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDdCQjNGMkVCQ0ZEREM4Q0FCRkJFRUY5RTAwMTVCQ0Q3OTE4 MUFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgyM2Q3NGMtNWRiNi00YzJmLTg5 ODktOWM1OGJiOGUwMjgzLzAvQTQ3QkIzRjJFQkNGRERDOENBQkZCRUVGOUUwMDE1 QkNENzkxODFBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOcDa9Z3CsaqILanv3lMzzJ+sfIT8tvKblk SsmjttMSBjxeTQWyzd5CtBzAmtjUbLi+uNkY1DWRfAmixnT0g4IZuRsDBFO4PY9M N4O3FMgZqPWfYwkqHoFg4JkNZ2ZG4MHlUeAHfrKcyNvA2iR9c10czPfJ2IZE+5m8 0V0LSRqIlacwc2u0SfDHxsK68dDre7alyCNf4nCWgJUhgWsDdpvcrrEgG8Bbdq1n Ld6dxjc2EOygVyTCz3mcIB1MIE6CzDqz1ecAyfpdY0FXinkJDGD8lglgV/JgqL8b tGzOhkl93G6YQtQht9ijInvQADweE3wq+ZowkvDIX6TSKWAp7wY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:12 2026 by rpki-client