$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: zgx2SE4dpgh0/Lavs1G23OVvm6q1Jqxxge/xtAB4I5g= Subject key identifier: 62:50:EF:75:27:26:28:D3:68:10:86:8F:CB:F7:4E:88:D8:09:1C:47 Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 7BF87B75EDBAC347FE1F03645F144117EBCD405E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 026C Signing time: Wed 25 Mar 2026 17:31:43 +0000 Manifest this update: Wed 25 Mar 2026 17:26:43 +0000 Manifest next update: Sat 28 Mar 2026 20:16:43 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: lgYSDRfx+lGk/Bbqf3M35ecDzlOkbQA5FLY2PcMG+YU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f8:7b:75:ed:ba:c3:47:fe:1f:03:64:5f:14:41:17:eb:cd:40:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Mar 25 17:26:43 2026 GMT Not After : Mar 28 20:16:43 2026 GMT Subject: CN=6250EF75272628D36810868FCBF74E88D8091C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a1:e9:b0:12:ca:9c:67:c9:d8:1b:cc:47:d9: 45:04:09:54:0e:bd:7b:28:c1:fa:c9:2b:c0:2e:46: 79:ed:a0:84:38:77:d9:fc:31:14:3e:52:c7:d6:61: 82:be:d1:cf:6a:17:5a:52:11:23:ab:31:10:e7:63: 0e:2f:e7:b3:2a:17:94:82:25:1d:4b:e8:b5:e4:71: 3a:7c:52:00:d3:ac:f0:96:cb:89:bb:e4:8d:df:73: 95:c5:4d:e6:e6:c0:9c:dc:9f:5c:3c:f3:3e:32:78: a3:4e:0a:29:46:a2:28:44:c8:c1:ff:5d:f1:1e:61: e5:69:df:1e:1a:68:cf:4c:45:be:7f:3f:3c:cd:82: 40:73:26:4a:75:0d:08:b6:ea:9e:fb:01:10:cc:ac: a7:4f:2d:07:87:fe:f1:ce:3b:95:3f:f4:45:ec:1b: 2b:77:08:e1:72:22:71:16:3e:60:b4:54:16:60:e1: 13:12:55:81:d3:36:0e:d1:6e:82:d4:76:1b:38:97: 8e:8d:3a:a9:5d:04:eb:27:39:82:b2:54:72:c2:0a: 4c:c2:98:70:ea:1b:4f:20:06:28:0b:49:8d:0d:87: ff:24:48:69:21:c8:dd:7f:92:e7:be:59:ab:64:57: 76:48:da:d3:f9:66:75:21:e4:0e:62:03:fa:a8:f2: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:50:EF:75:27:26:28:D3:68:10:86:8F:CB:F7:4E:88:D8:09:1C:47 X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:81:18:4c:f5:de:f9:71:bb:eb:f2:5d:7b:77:5b:7a:78:a6: 0c:e2:9a:6d:f5:3f:b2:06:62:c9:71:2d:77:f0:9f:52:d6:0b: 96:54:ec:7e:33:ca:e3:39:c9:d3:aa:f1:0b:8f:68:c5:a7:6c: af:b5:da:a7:e3:da:2f:c2:1a:3f:63:d2:3e:31:2c:aa:57:7c: 0b:ba:b9:17:cf:f1:cf:cc:76:17:0b:31:b8:fc:a2:a2:fe:38: 37:9b:63:94:df:26:03:6b:91:d5:0c:c8:f5:af:3a:6d:b4:0a: 04:51:91:0e:08:71:8d:27:dc:b1:44:9a:e4:0c:eb:99:53:9d: 13:3d:9a:91:ee:e5:1c:36:92:b2:05:89:b8:ee:e3:36:2c:cc: e7:0e:f1:90:d5:62:b1:52:9c:2f:2a:01:1c:6e:b8:6b:53:44: 71:ab:3a:08:54:2b:71:84:a3:ca:db:c1:48:af:76:1a:1e:3e: aa:54:7b:4f:d5:01:79:a6:09:a2:b2:c4:01:c4:8c:90:c6:2e: 87:46:0c:ac:bf:ee:e4:74:88:38:b6:03:0e:a2:87:e2:cf:05: 89:7f:1b:d2:ec:ba:94:4b:5d:14:2c:e8:ff:49:d7:1b:46:5a: 80:23:49:38:e1:f7:3b:f2:6e:55:f7:e4:73:2a:82:78:89:53: 5f:d4:bb:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/h7de26w0f+HwNkXxRBF+vNQF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNjAzMjUxNzI2NDNaFw0yNjAzMjgyMDE2NDNaMDMxMTAvBgNV BAMTKDYyNTBFRjc1MjcyNjI4RDM2ODEwODY4RkNCRjc0RTg4RDgwOTFDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcoemwEsqcZ8nYG8xH2UUECVQO vXsowfrJK8AuRnntoIQ4d9n8MRQ+UsfWYYK+0c9qF1pSESOrMRDnYw4v57MqF5SC JR1L6LXkcTp8UgDTrPCWy4m75I3fc5XFTebmwJzcn1w88z4yeKNOCilGoihEyMH/ XfEeYeVp3x4aaM9MRb5/PzzNgkBzJkp1DQi26p77ARDMrKdPLQeH/vHOO5U/9EXs Gyt3COFyInEWPmC0VBZg4RMSVYHTNg7RboLUdhs4l46NOqldBOsnOYKyVHLCCkzC mHDqG08gBigLSY0Nh/8kSGkhyN1/kue+WatkV3ZI2tP5ZnUh5A5iA/qo8vnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYlDvdScmKNNoEIaPy/dOiNgJHEcwHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyBGEz13vlxu+vyXXt3W3p4pgzimm31P7IG YslxLXfwn1LWC5ZU7H4zyuM5ydOq8QuPaMWnbK+12qfj2i/CGj9j0j4xLKpXfAu6 uRfP8c/MdhcLMbj8oqL+ODebY5TfJgNrkdUMyPWvOm20CgRRkQ4IcY0n3LFEmuQM 65lTnRM9mpHu5Rw2krIFibju4zYszOcO8ZDVYrFSnC8qARxuuGtTRHGrOghUK3GE o8rbwUivdhoePqpUe0/VAXmmCaKyxAHEjJDGLodGDKy/7uR0iDi2Aw6ih+LPBYl/ G9LsupRLXRQs6P9J1xtGWoAjSTjh9zvyblX35HMqgniJU1/Uu7w= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:56 2026 by rpki-client