$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: 10YEWNhu9H8oHWZ6lAYAR0ls09S6+ugRreIYLkaA8dw= Subject key identifier: FF:53:B3:03:72:35:73:11:F1:F5:A3:44:0B:D5:6C:42:AF:AB:98:DB Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 0900BCD19203FFC9A05C38F5EBF6ADF34E30D514 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: 0164 Signing time: Thu 26 Mar 2026 01:32:22 +0000 Manifest this update: Thu 26 Mar 2026 01:27:22 +0000 Manifest next update: Sun 29 Mar 2026 05:13:22 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: qsD9oGu8iKmSdmDwjd1Gc9E+cG6Pb5EXlHq1VUh8S48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:00:bc:d1:92:03:ff:c9:a0:5c:38:f5:eb:f6:ad:f3:4e:30:d5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Mar 26 01:27:22 2026 GMT Not After : Mar 29 05:13:22 2026 GMT Subject: CN=FF53B30372357311F1F5A3440BD56C42AFAB98DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:15:18:e0:6b:3a:ab:61:1d:7c:fb:fa:3e:d8: 96:f6:0e:2f:79:10:7a:7f:32:a9:51:3e:3d:b7:64: 0b:16:13:67:70:c5:a6:c6:c0:55:3c:54:1d:7c:bc: 6f:e7:a1:19:bf:65:a1:a3:10:62:b1:77:d8:e2:86: 3b:54:ce:aa:2e:b9:80:5f:86:cd:70:ff:a8:4e:e5: 20:18:64:74:3b:2a:08:ad:fe:9f:5e:35:58:3e:d2: de:50:bf:38:da:a8:ee:95:d5:4a:0e:de:ad:21:c3: 42:7b:dd:06:92:45:98:ce:31:a5:cd:81:22:fa:3a: fb:55:2b:dd:d7:12:f1:b0:24:0a:ae:7c:8a:92:c9: 72:bd:8d:99:c0:31:f6:c8:38:1a:78:ce:16:9a:12: be:96:7e:33:c9:42:95:4d:d5:07:c4:d2:05:1f:79: 22:f2:a3:3b:49:09:9c:22:bd:e9:c7:24:01:88:f6: 1a:11:87:08:9b:fa:b6:a4:e6:f6:4b:02:9f:85:db: ec:41:c9:0d:e7:8e:67:da:e5:76:89:5c:26:03:28: 66:0a:3c:93:43:63:a0:f5:58:67:a4:b5:db:f1:8e: 88:12:ef:bb:e8:c1:48:7b:21:b6:2d:76:1b:1e:b4: 20:dd:f0:a3:de:ca:41:47:43:c3:82:b7:c4:67:48: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:53:B3:03:72:35:73:11:F1:F5:A3:44:0B:D5:6C:42:AF:AB:98:DB X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0f:c9:4d:36:66:ff:c6:76:ae:57:3b:bf:44:a8:a2:7e:1c: f0:15:cf:eb:9e:29:a0:30:6d:3e:84:48:c3:77:fd:e8:6a:82: 90:a2:df:ac:48:0f:7c:cc:86:68:91:09:16:e0:b9:08:f0:6f: 3d:63:e9:61:15:dc:25:d6:54:96:17:d3:f0:40:ad:d1:c9:13: 0b:1b:91:39:1e:03:be:8f:92:9f:ed:ba:18:01:bc:4c:53:a8: 5b:b0:36:02:16:93:97:b0:92:09:b3:70:0a:3e:05:3a:61:2a: 1a:28:02:04:c3:53:ec:35:99:12:13:0b:f2:47:47:72:e0:c6: 08:27:18:e3:d2:60:11:27:93:31:fd:1c:e6:92:0c:b4:e2:8f: 27:a6:b9:a4:4f:c5:9e:06:cb:12:d1:55:55:ff:83:fc:09:7d: 46:80:5c:81:d0:e3:e6:5e:d9:6d:73:1a:ee:0a:d2:23:b0:46: 4e:5a:9f:d8:68:ea:a7:40:a1:61:fa:7a:bb:16:fa:01:ee:7d: 68:01:b2:1b:17:80:9d:7f:35:1c:8d:5e:09:88:39:76:2c:01: 2c:0e:29:a8:1f:e9:9d:7d:26:97:50:66:cf:40:f9:f7:ea:41: 08:1f:4c:2b:a4:88:09:56:10:c5:2c:87:d7:26:26:8f:56:e5: f0:92:90:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQC80ZID/8mgXDj16/at804w1RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNjAzMjYwMTI3MjJaFw0yNjAzMjkwNTEzMjJaMDMxMTAvBgNV BAMTKEZGNTNCMzAzNzIzNTczMTFGMUY1QTM0NDBCRDU2QzQyQUZBQjk4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFRjgazqrYR18+/o+2Jb2Di95 EHp/MqlRPj23ZAsWE2dwxabGwFU8VB18vG/noRm/ZaGjEGKxd9jihjtUzqouuYBf hs1w/6hO5SAYZHQ7Kgit/p9eNVg+0t5QvzjaqO6V1UoO3q0hw0J73QaSRZjOMaXN gSL6OvtVK93XEvGwJAqufIqSyXK9jZnAMfbIOBp4zhaaEr6WfjPJQpVN1QfE0gUf eSLyoztJCZwivenHJAGI9hoRhwib+rak5vZLAp+F2+xByQ3njmfa5XaJXCYDKGYK PJNDY6D1WGektdvxjogS77vowUh7IbYtdhsetCDd8KPeykFHQ8OCt8RnSD4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/1OzA3I1cxHx9aNEC9VsQq+rmNswHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8PyU02Zv/Gdq5XO79EqKJ+HPAVz+ueKaAw bT6ESMN3/ehqgpCi36xID3zMhmiRCRbguQjwbz1j6WEV3CXWVJYX0/BArdHJEwsb kTkeA76Pkp/tuhgBvExTqFuwNgIWk5ewkgmzcAo+BTphKhooAgTDU+w1mRITC/JH R3LgxggnGOPSYBEnkzH9HOaSDLTijyemuaRPxZ4GyxLRVVX/g/wJfUaAXIHQ4+Ze 2W1zGu4K0iOwRk5an9ho6qdAoWH6ersW+gHufWgBshsXgJ1/NRyNXgmIOXYsASwO Kagf6Z19JpdQZs9A+ffqQQgfTCukiAlWEMUsh9cmJo9W5fCSkPo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:36:57 2026 by rpki-client