$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: eglejwfJxKMlJ0Y/9A2kP1wCHIrypBtJGaWqQuUkzCE= Subject key identifier: C8:2F:58:34:8A:E4:DF:72:22:0A:90:BB:38:3E:5A:88:2E:70:A9:9C Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 3B3EA1C4B2DE1A7FE08CFA763FA1EE475D89D96C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 01E3 Signing time: Wed 25 Mar 2026 11:22:14 +0000 Manifest this update: Wed 25 Mar 2026 11:17:14 +0000 Manifest next update: Sat 28 Mar 2026 13:02:14 +0000 Files and hashes: 1: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: v5qvmgh9eiTpdk3UEoQin8K5RQSDk24SVWpfNhiVRfU=) 2: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: uK0tYoFKWzW2y8KltD3aqDC26oZ9pYtmSp1Jv/BCAoY=) 3: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: u7UJeNgrm4upbGgYbdPNvzZpMVoxpQJDl7XyWxswyls=) 4: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: dHVT1pPpYfkat8LYG0fIQg445W2VxpF/m4eXlcGf8/Q=) 5: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: pdV+aN3I6dloLI2qkmzalOgfwKnlHe9DExCU7AJ1bj4=) 6: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) 7: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: wgtqwaW/q6/6iiFZEkr1mrOJmIiiA3/QZmD2Fiv1Qhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3e:a1:c4:b2:de:1a:7f:e0:8c:fa:76:3f:a1:ee:47:5d:89:d9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Mar 25 11:17:14 2026 GMT Not After : Mar 28 13:02:14 2026 GMT Subject: CN=C82F58348AE4DF72220A90BB383E5A882E70A99C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:3d:99:65:d4:9b:a5:b7:3c:09:27:fa:c2: 9b:14:d9:6b:3d:d2:ca:0b:b1:1d:2a:da:0f:3b:c9: 8d:d5:88:7f:88:50:81:82:d0:c5:76:f8:27:47:3e: b4:58:be:64:e2:1f:d5:53:5b:15:1b:83:59:55:2d: b8:71:db:7e:ec:aa:61:52:eb:cc:de:2f:40:c2:03: b1:76:69:27:fd:21:8b:13:7f:df:d3:35:1d:cf:6b: b6:fe:e1:f2:bd:4e:5f:5c:d1:86:34:08:a9:8f:89: ea:4d:cd:23:26:ac:fa:30:aa:96:fb:a9:0c:31:54: ef:89:97:4b:95:a9:6c:47:6e:d9:01:6c:39:ab:3c: 69:20:3c:3b:d5:69:19:5d:dd:12:cd:59:6d:d5:96: 3d:fd:d9:34:2f:a6:18:bd:90:97:f2:5f:cb:fe:70: 08:f4:dc:2d:b2:5d:f8:77:0b:75:fe:82:eb:7d:bb: a6:71:9e:17:ff:43:e4:f0:40:11:06:56:d4:0e:af: 22:2a:9a:72:e1:2b:79:e1:b5:32:d4:8d:ec:a0:6f: b4:05:cd:d9:f4:10:69:a1:23:da:82:e9:3f:3b:58: 04:e2:6b:f0:f8:0d:08:82:b5:fb:bc:59:32:b5:07: 84:77:bf:f9:56:9e:93:62:dc:f1:ed:b9:f7:b2:ac: 39:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2F:58:34:8A:E4:DF:72:22:0A:90:BB:38:3E:5A:88:2E:70:A9:9C X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fa:e1:26:33:00:4a:54:de:68:88:ff:00:a9:d6:be:54:83: 0d:b5:84:71:09:2d:73:59:78:1e:ba:c8:8c:72:ad:44:36:d9: 6e:1c:ef:58:46:cc:28:f5:31:91:6f:ff:1b:2e:58:78:5e:81: 24:e8:d0:ef:f2:5b:b4:74:11:c7:56:38:bb:ca:da:d2:67:72: fc:83:5d:65:db:9d:40:69:bb:4e:ed:98:46:62:7f:de:31:1b: e2:8c:78:8d:b3:19:cd:77:1c:3d:1b:c1:90:06:4d:1b:18:93: 84:f2:45:97:9c:78:c1:49:71:8d:03:cf:25:2d:f7:51:14:19: 11:ab:1e:de:bd:50:59:a7:e1:a6:02:4f:54:00:b2:c2:80:3c: f5:6b:99:ff:79:ab:12:06:88:e2:71:71:1a:69:bb:3d:49:37: d2:8a:b5:85:78:6c:66:8b:e8:9d:c4:99:3d:31:d4:1e:01:36: 64:69:1a:54:14:8a:9e:da:e7:66:c8:44:1e:0c:b0:e9:c1:90: c1:84:f3:3f:43:55:a5:ce:1d:f4:bb:27:96:4b:05:48:79:7a: 31:ed:96:da:7b:e5:1e:25:03:a4:24:bf:dc:85:0e:ff:e3:ab: 47:34:f8:cf:b7:ff:40:9b:88:0d:8f:9a:7b:6a:53:1d:46:b9: 49:e2:0f:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOz6hxLLeGn/gjPp2P6HuR12J2WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNjAzMjUxMTE3MTRaFw0yNjAzMjgxMzAyMTRaMDMxMTAvBgNV BAMTKEM4MkY1ODM0OEFFNERGNzIyMjBBOTBCQjM4M0U1QTg4MkU3MEE5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqj2ZZdSbpbc8CSf6wpsU2Ws9 0soLsR0q2g87yY3ViH+IUIGC0MV2+CdHPrRYvmTiH9VTWxUbg1lVLbhx237sqmFS 68zeL0DCA7F2aSf9IYsTf9/TNR3Pa7b+4fK9Tl9c0YY0CKmPiepNzSMmrPowqpb7 qQwxVO+Jl0uVqWxHbtkBbDmrPGkgPDvVaRld3RLNWW3Vlj392TQvphi9kJfyX8v+ cAj03C2yXfh3C3X+gut9u6Zxnhf/Q+TwQBEGVtQOryIqmnLhK3nhtTLUjeygb7QF zdn0EGmhI9qC6T87WATia/D4DQiCtfu8WTK1B4R3v/lWnpNi3PHtufeyrDmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyC9YNIrk33IiCpC7OD5aiC5wqZwwHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz64SYzAEpU3miI/wCp1r5Ugw21hHEJLXNZ eB66yIxyrUQ22W4c71hGzCj1MZFv/xsuWHhegSTo0O/yW7R0EcdWOLvK2tJncvyD XWXbnUBpu07tmEZif94xG+KMeI2zGc13HD0bwZAGTRsYk4TyRZeceMFJcY0DzyUt 91EUGRGrHt69UFmn4aYCT1QAssKAPPVrmf95qxIGiOJxcRppuz1JN9KKtYV4bGaL 6J3EmT0x1B4BNmRpGlQUip7a52bIRB4MsOnBkMGE8z9DVaXOHfS7J5ZLBUh5ejHt ltp75R4lA6Qkv9yFDv/jq0c0+M+3/0CbiA2PmntqUx1GuUniDwA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:18 2026 by rpki-client