$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json) Hash identifier: FE6Sw7Imqy3hlbWjJi4UayHuvoYrGEeGVGH28HX6lRk= Subject key identifier: 09:DA:0B:8C:4F:26:33:3C:D4:ED:91:5A:40:2B:84:CF:40:7A:AF:BF Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Certificate serial: 2D83CD495A39386FAB911BFCA66AA1FF5BBB506D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft Manifest number: 052B Signing time: Mon 23 Mar 2026 22:01:13 +0000 Manifest this update: Mon 23 Mar 2026 21:56:13 +0000 Manifest next update: Fri 27 Mar 2026 06:22:13 +0000 Files and hashes: 1: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=) 2: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: K3VAkunlfMXZhC66cihtNjav6bWkythY+W5XelHKw0c=) 3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: W1EM8TKMaVAV6jXXbpVbI918S/VDeTTnBLSRi3ioC4k=) 4: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 06:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:83:cd:49:5a:39:38:6f:ab:91:1b:fc:a6:6a:a1:ff:5b:bb:50:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Validity Not Before: Mar 23 21:56:13 2026 GMT Not After : Mar 27 06:22:13 2026 GMT Subject: CN=09DA0B8C4F26333CD4ED915A402B84CF407AAFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:99:c6:b1:e5:d1:c4:3b:00:f9:e2:c7:ef:f8: 19:06:97:70:0f:29:bc:c3:67:4d:43:ed:f1:25:b2: 78:41:c6:8b:c9:0d:8b:a2:fc:03:5b:39:0b:7a:8b: 97:63:c8:52:67:47:01:f0:28:4a:f7:91:ad:e0:19: 93:3f:82:29:48:1e:10:a1:77:af:d3:21:d7:29:e2: 9d:43:26:02:d6:6e:76:39:1e:cd:64:90:6d:64:47: 7b:1e:ce:2f:8c:7f:6e:b9:e1:9e:e8:f2:c2:61:7f: 8f:b6:a5:e2:99:51:fd:16:f1:9b:db:f8:2d:e4:55: a4:9a:f1:de:de:9a:dc:4a:20:fe:6b:24:a7:4e:8c: 4a:35:5a:8d:dd:91:f1:c3:ec:a4:cb:cd:14:29:52: c7:4e:7f:d6:9a:b6:51:4b:8b:5e:aa:99:47:20:3b: bf:20:a3:a7:79:68:8f:fb:34:40:e0:22:07:0d:c0: 64:a9:a3:8b:3e:ec:43:e7:7b:2b:92:6e:ee:b5:44: 93:43:44:7f:c3:95:92:05:43:40:a1:18:48:29:9f: 3d:7f:3a:ad:33:bc:f4:35:fd:26:bc:76:58:83:47: a0:44:01:b4:e3:31:6c:ed:ab:79:56:b2:ba:39:7a: 0b:e6:6c:9c:b4:42:8f:cb:52:9f:b8:91:05:c0:55: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DA:0B:8C:4F:26:33:3C:D4:ED:91:5A:40:2B:84:CF:40:7A:AF:BF X509v3 Authority Key Identifier: keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:37:9a:df:d4:78:c7:f8:44:34:2a:b5:bc:d3:5d:92:6e:cc: 3f:df:38:3e:67:a6:ef:4f:f1:2a:cb:96:cb:f0:b3:7d:dd:72: c9:a9:17:62:c3:1c:dc:42:52:8f:94:9a:ab:de:0a:a7:2f:f4: 77:34:02:fe:de:bb:3a:4f:50:5a:9d:55:9a:a6:2c:ca:0e:86: c1:37:95:4a:b5:9d:82:31:1a:15:5b:6c:ba:61:e1:e3:0c:58: 87:ae:9c:86:1d:81:6f:c7:f6:52:73:9c:8d:f7:44:fb:25:36: 63:d3:ef:f1:d2:f3:b5:ea:1c:a6:52:c5:46:90:e6:f5:19:eb: ef:57:28:b6:30:3e:a2:8a:e6:b0:35:5d:be:e5:d6:14:b8:bf: 26:b1:a3:61:4c:c1:9e:f9:cb:5a:fb:f6:5d:a3:5b:d0:bf:cb: 75:88:51:b7:c4:d7:22:e2:47:71:67:b1:62:af:86:1a:5c:d7: 64:63:7b:3b:7a:2e:8c:84:d8:8f:70:0c:35:1b:47:52:7e:93: e0:c8:46:9d:a7:0f:ca:ea:76:c0:1f:5d:39:60:09:1a:86:46: e2:9c:92:1f:39:8f:7e:20:ba:74:84:78:be:76:ca:24:a6:79: 07:5d:56:d3:f1:3b:ee:dd:c8:f6:63:94:dd:5d:92:6b:16:87: 71:25:d4:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYPNSVo5OG+rkRv8pmqh/1u7UG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy NDE4N0Q1OTAeFw0yNjAzMjMyMTU2MTNaFw0yNjAzMjcwNjIyMTNaMDMxMTAvBgNV BAMTKDA5REEwQjhDNEYyNjMzM0NENEVEOTE1QTQwMkI4NENGNDA3QUFGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvmcax5dHEOwD54sfv+BkGl3AP KbzDZ01D7fElsnhBxovJDYui/ANbOQt6i5djyFJnRwHwKEr3ka3gGZM/gilIHhCh d6/TIdcp4p1DJgLWbnY5Hs1kkG1kR3sezi+Mf2654Z7o8sJhf4+2peKZUf0W8Zvb +C3kVaSa8d7emtxKIP5rJKdOjEo1Wo3dkfHD7KTLzRQpUsdOf9aatlFLi16qmUcg O78go6d5aI/7NEDgIgcNwGSpo4s+7EPneyuSbu61RJNDRH/DlZIFQ0ChGEgpnz1/ Oq0zvPQ1/Sa8dliDR6BEAbTjMWztq3lWsro5egvmbJy0Qo/LUp+4kQXAVQAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCdoLjE8mMzzU7ZFaQCuEz0B6r78wHwYDVR0j BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4 N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4 RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk3mt/UeMf4RDQqtbzTXZJuzD/fOD5npu9P 8SrLlsvws33dcsmpF2LDHNxCUo+UmqveCqcv9Hc0Av7euzpPUFqdVZqmLMoOhsE3 lUq1nYIxGhVbbLph4eMMWIeunIYdgW/H9lJznI33RPslNmPT7/HS87XqHKZSxUaQ 5vUZ6+9XKLYwPqKK5rA1Xb7l1hS4vyaxo2FMwZ75y1r79l2jW9C/y3WIUbfE1yLi R3FnsWKvhhpc12Rjezt6LoyE2I9wDDUbR1J+k+DIRp2nD8rqdsAfXTlgCRqGRuKc kh85j34gunSEeL52yiSmeQddVtPxO+7dyPZjlN1dkmsWh3El1CE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:06:06 2026 by rpki-client