$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft File: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft (raw, json) Hash identifier: /WxpOd78wT+RziW+pgyCeiZUSAaaa0XxFTxq1LowIuc= Subject key identifier: 23:95:4E:7C:2A:24:9B:E8:5C:3E:81:9D:7C:27:A4:A6:A6:35:B9:C6 Authority key identifier: D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB Certificate issuer: /CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Certificate serial: 3B2233FEB148A7A48464EA84975A17E1D8EDA33A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 22:26:43 +0000 Manifest this update: Wed 16 Sep 2026 22:21:43 +0000 Manifest next update: Fri 18 Sep 2026 02:02:43 +0000 Files and hashes: 1: D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl (hash: i50BqfEP2J4r6QG5hGxTO8ZCZHKV5XHX5dxMeC8/rkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:22:33:fe:b1:48:a7:a4:84:64:ea:84:97:5a:17:e1:d8:ed:a3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472A50C7F1126F1D97E8E98164A7C5D0012E4AB Validity Not Before: Sep 16 22:21:43 2026 GMT Not After : Sep 18 02:02:43 2026 GMT Subject: CN=23954E7C2A249BE85C3E819D7C27A4A6A635B9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:a3:f8:59:bb:41:b9:5d:d7:b8:39:65:65: 44:3e:46:cc:4c:78:17:a5:c2:da:e6:de:8e:ba:3a: 5c:09:6e:60:01:ed:01:a3:0b:be:de:48:6f:9e:b4: ee:2d:3a:ee:39:9a:67:a6:44:46:b9:dc:87:17:86: f4:86:63:78:37:04:1d:c5:cc:b4:6b:1b:ef:0d:d2: 93:ff:3a:03:e4:3c:6d:c4:72:00:08:5f:e9:9c:33: 7d:b2:a8:67:76:74:07:17:72:6c:27:12:57:c6:2e: 97:08:12:c7:9f:61:b8:cb:b2:56:65:8b:84:9c:c7: 7c:66:d4:f5:a7:c3:af:e5:57:ba:47:83:52:aa:ab: b7:32:86:f0:42:fe:4a:da:0f:03:2e:62:44:f2:ce: 89:68:a4:28:ce:bf:d7:2a:a7:08:77:0b:3b:59:3e: 4f:1c:23:49:e4:24:3c:00:7b:43:39:f0:3a:9d:3f: 4f:d9:9b:53:dc:77:4a:89:02:23:a6:45:39:d3:cd: 35:fa:39:38:5a:b6:67:56:7e:5f:42:10:bb:2f:e8: 64:37:e1:3b:20:19:30:80:33:3c:ed:2a:c2:f4:ce: 90:ce:21:a9:c8:6b:82:c7:99:e8:28:1f:55:45:08: aa:fb:f7:18:97:ed:15:75:64:16:de:5b:3f:2a:80: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:95:4E:7C:2A:24:9B:E8:5C:3E:81:9D:7C:27:A4:A6:A6:35:B9:C6 X509v3 Authority Key Identifier: keyid:D4:72:A5:0C:7F:11:26:F1:D9:7E:8E:98:16:4A:7C:5D:00:12:E4:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/D472A50C7F1126F1D97E8E98164A7C5D0012E4AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0e:1d:87:08:da:8e:2e:47:99:f7:b4:88:b4:65:cc:5d:20: ac:20:f1:1b:2e:8b:40:db:4f:e7:61:d1:ee:87:8b:ed:dc:15: ae:b7:03:93:f0:b3:3f:77:cb:6a:19:e1:f1:24:bf:b2:a1:36: 85:0b:60:73:10:c8:29:9b:f6:24:f6:7d:70:30:56:10:95:ac: 8f:cd:91:72:55:44:31:a5:0a:41:4d:78:d6:5c:f4:c5:33:e3: 1e:35:8f:95:70:52:2b:38:df:d6:a7:9a:fc:43:7c:8e:86:84: 51:fa:7c:0b:d2:a7:91:a8:08:10:10:64:68:f3:14:93:3c:06: 28:3a:0e:70:8e:fd:0e:e7:a8:7a:ca:c4:f6:84:4b:43:0d:7f: 4d:42:7f:91:b3:62:d8:bd:49:c3:e2:91:02:e7:2d:2d:93:d6: 6d:19:76:8f:98:8d:f6:59:8c:99:32:74:67:33:d4:49:42:30: 9e:86:a3:4c:e2:dc:2f:bc:d7:f4:24:28:01:75:ae:6c:d3:55: 8f:d5:a8:52:59:2e:9d:31:5d:08:45:90:65:a8:bf:8b:fb:80: eb:cb:44:fb:89:06:91:63:db:7f:6d:54:b2:83:bd:20:bd:34: 2a:4f:e6:08:d2:be:68:a8:f9:45:a2:30:87:62:84:f0:fc:d1: aa:4f:8e:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyIz/rFIp6SEZOqEl1oX4djtozowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQw MDEyRTRBQjAeFw0yNjA5MTYyMjIxNDNaFw0yNjA5MTgwMjAyNDNaMDMxMTAvBgNV BAMTKDIzOTU0RTdDMkEyNDlCRTg1QzNFODE5RDdDMjdBNEE2QTYzNUI5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZEaP4WbtBuV3XuDllZUQ+RsxM eBelwtrm3o66OlwJbmAB7QGjC77eSG+etO4tOu45mmemREa53IcXhvSGY3g3BB3F zLRrG+8N0pP/OgPkPG3EcgAIX+mcM32yqGd2dAcXcmwnElfGLpcIEsefYbjLslZl i4Scx3xm1PWnw6/lV7pHg1Kqq7cyhvBC/kraDwMuYkTyzolopCjOv9cqpwh3CztZ Pk8cI0nkJDwAe0M58DqdP0/Zm1Pcd0qJAiOmRTnTzTX6OThatmdWfl9CELsv6GQ3 4TsgGTCAMzztKsL0zpDOIanIa4LHmegoH1VFCKr79xiX7RV1ZBbeWz8qgErNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI5VOfCokm+hcPoGdfCekpqY1ucYwHwYDVR0j BBgwFoAU1HKlDH8RJvHZfo6YFkp8XQAS5KswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFlNDYzNjUtNzRkMy00ZTYwLTk1MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3 RjExMjZGMUQ5N0U4RTk4MTY0QTdDNUQwMDEyRTRBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENDcyQTUwQzdGMTEyNkYxRDk3RThFOTgxNjRBN0M1RDAwMTJF NEFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvRDQ3MkE1MEM3RjExMjZGMUQ5N0U4RTk4MTY0QTdD NUQwMDEyRTRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYOHYcI2o4uR5n3tIi0ZcxdIKwg8Rsui0Db T+dh0e6Hi+3cFa63A5Pwsz93y2oZ4fEkv7KhNoULYHMQyCmb9iT2fXAwVhCVrI/N kXJVRDGlCkFNeNZc9MUz4x41j5VwUis439anmvxDfI6GhFH6fAvSp5GoCBAQZGjz FJM8Big6DnCO/Q7nqHrKxPaES0MNf01Cf5GzYti9ScPikQLnLS2T1m0Zdo+YjfZZ jJkydGcz1ElCMJ6Go0zi3C+81/QkKAF1rmzTVY/VqFJZLp0xXQhFkGWov4v7gOvL RPuJBpFj239tVLKDvSC9NCpP5gjSvmio+UWiMIdihPD80apPjvs= -----END CERTIFICATE-----Generated at Thu Sep 17 11:33:00 2026 by rpki-client