$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft File: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft (raw, json) Hash identifier: 2xznb32zXoSScKVDhzzjYbYszWY/j1kmESE6LfnBJYU= Subject key identifier: 77:04:66:8D:C0:F0:43:B9:64:A3:D9:F2:A4:05:FC:5C:D0:E3:FE:92 Authority key identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB Certificate issuer: /CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Certificate serial: 7154563FC9AEF415E875EB2DA6213601D2D42012 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 21:06:26 +0000 Manifest this update: Fri 19 Jun 2026 21:01:26 +0000 Manifest next update: Sun 21 Jun 2026 00:45:26 +0000 Files and hashes: 1: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl (hash: 1jX+IJdLbJ7EcIKFhiuBMJwwy1JsiEGkW0VWhERkFZg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:54:56:3f:c9:ae:f4:15:e8:75:eb:2d:a6:21:36:01:d2:d4:20:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Validity Not Before: Jun 19 21:01:26 2026 GMT Not After : Jun 21 00:45:26 2026 GMT Subject: CN=7704668DC0F043B964A3D9F2A405FC5CD0E3FE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:45:b8:40:b1:45:b7:c2:66:1c:ec:10:ef: f5:5d:ec:8d:f1:94:d7:ff:2d:65:f0:f7:33:0c:62: 4c:43:9d:b1:2f:98:f1:9f:ef:cb:c0:d0:23:f1:dc: 66:12:df:02:ad:c8:86:29:10:e2:e8:25:d3:d7:92: a2:8d:9c:fe:4f:a2:63:9d:03:44:7a:ef:9a:60:b9: 95:39:5d:6e:f9:e7:40:4b:9b:2e:e6:ac:60:22:5a: e8:f7:9e:b7:62:90:64:89:e1:27:22:7d:73:03:ca: 10:26:fb:2b:89:f3:07:ab:38:70:63:2b:28:91:d3: a2:74:8d:8f:7f:b9:cd:21:45:13:64:2e:f3:66:0d: fc:2d:19:f2:26:19:84:11:5c:97:3b:56:8d:3d:12: 0f:ac:8e:47:72:15:a0:94:c8:55:f0:d3:87:a0:d2: e0:d2:6b:32:a6:82:f6:a3:cf:e0:d4:d4:b4:88:f2: a5:9e:9d:91:2f:29:28:16:3f:3c:83:6d:17:b5:33: e0:d3:71:6e:d2:d6:91:96:fc:2b:eb:89:01:91:fb: 9c:28:df:83:7d:7e:4c:a0:c9:52:28:06:f4:83:05: ae:c6:71:3a:67:33:77:4b:33:2d:9a:45:a4:fd:c0: 2a:43:6e:11:c5:16:88:0a:86:eb:f4:52:f9:24:47: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:04:66:8D:C0:F0:43:B9:64:A3:D9:F2:A4:05:FC:5C:D0:E3:FE:92 X509v3 Authority Key Identifier: keyid:D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:18:72:7a:37:fb:8b:0a:96:8c:8f:84:e6:e4:ef:8c:28:11: 23:14:28:20:ec:10:41:6a:56:da:04:34:36:c2:5e:f0:df:a3: 22:35:55:66:9f:4f:82:c3:0f:85:8f:ed:e5:45:ac:10:31:3a: 33:ae:34:01:7d:f4:a7:fe:bc:04:33:d7:09:3d:c0:42:86:d3: ec:2a:96:d1:09:b4:57:6a:7e:43:3f:4f:9a:da:11:b8:58:80: 5c:e9:ae:67:64:58:dc:3d:fd:3f:75:03:74:85:a7:ac:1c:d3: 8a:d9:aa:47:a1:0d:53:bd:07:1a:c3:0b:e0:13:90:8f:ee:3d: f5:8c:cc:0d:78:d4:53:e9:e2:43:1a:c8:ce:c7:db:7b:a9:fb: b7:f3:25:4f:1a:c1:22:d6:fd:2f:fc:4e:a2:f2:6b:9b:1e:82: 3a:08:6b:b0:1c:9d:84:fb:dc:74:32:8e:d3:37:e4:a9:d7:b8: af:95:5f:16:63:04:62:ca:5d:76:6f:3f:3e:eb:c7:8d:ad:de: 1e:53:1c:f1:88:0d:3a:f9:83:38:2b:ab:eb:a6:ce:4d:c1:36: c0:39:48:6f:0b:30:e7:87:7e:1b:18:47:f7:a9:d8:42:9b:10: 39:65:88:4c:06:90:26:f2:72:4d:32:d8:3e:d4:14:2c:c1:bb: be:0f:ab:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVRWP8mu9BXodestpiE2AdLUIBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQw MDEyRTRBQjAeFw0yNjA2MTkyMTAxMjZaFw0yNjA2MjEwMDQ1MjZaMDMxMTAvBgNV BAMTKDc3MDQ2NjhEQzBGMDQzQjk2NEEzRDlGMkE0MDVGQzVDRDBFM0ZFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZi0W4QLFFt8JmHOwQ7/Vd7I3x lNf/LWXw9zMMYkxDnbEvmPGf78vA0CPx3GYS3wKtyIYpEOLoJdPXkqKNnP5PomOd A0R675pguZU5XW7550BLmy7mrGAiWuj3nrdikGSJ4ScifXMDyhAm+yuJ8werOHBj KyiR06J0jY9/uc0hRRNkLvNmDfwtGfImGYQRXJc7Vo09Eg+sjkdyFaCUyFXw04eg 0uDSazKmgvajz+DU1LSI8qWenZEvKSgWPzyDbRe1M+DTcW7S1pGW/CvriQGR+5wo 34N9fkygyVIoBvSDBa7GcTpnM3dLMy2aRaT9wCpDbhHFFogKhuv0UvkkR1bzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwRmjcDwQ7lko9nypAX8XNDj/pIwHwYDVR0j BBgwFoAU1HKlDH8RJvHZfo6YFkp8XQAS5KswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlNDYzNjUtNzRkMy00ZTYwLTk1MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3 RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQwMDEyRTRBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDcyQTUwQzdGMTEyNkYxRDk3RThFOTgxNjRBN0M1RDAwMTJF NEFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdD NUQwMDEyRTRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkYcno3+4sKloyPhObk74woESMUKCDsEEFq VtoENDbCXvDfoyI1VWafT4LDD4WP7eVFrBAxOjOuNAF99Kf+vAQz1wk9wEKG0+wq ltEJtFdqfkM/T5raEbhYgFzprmdkWNw9/T91A3SFp6wc04rZqkehDVO9BxrDC+AT kI/uPfWMzA141FPp4kMayM7H23up+7fzJU8awSLW/S/8TqLya5segjoIa7AcnYT7 3HQyjtM35KnXuK+VXxZjBGLKXXZvPz7rx42t3h5THPGIDTr5gzgrq+umzk3BNsA5 SG8LMOeHfhsYR/ep2EKbEDlliEwGkCbyck0y2D7UFCzBu74Pq70= -----END CERTIFICATE-----Generated at Sat Jun 20 09:01:31 2026 by rpki-client