$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: 1of0CgArKUAuQYw+plcudlaxP0yobjDgXDfLH/5uThI= Subject key identifier: 81:CC:7F:60:17:EC:98:F9:A5:1E:73:AB:4D:87:AB:A3:4F:D0:EB:98 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 64A4829C3F8B78DF285BDFCB147D503D21B2B082 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 051C Signing time: Tue 24 Mar 2026 18:31:08 +0000 Manifest this update: Tue 24 Mar 2026 18:26:08 +0000 Manifest next update: Sat 28 Mar 2026 05:46:08 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: KeJUfo6QZp2cQm0NyBoQvwLSsLtlm6dbS3p37qTcGc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a4:82:9c:3f:8b:78:df:28:5b:df:cb:14:7d:50:3d:21:b2:b0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Mar 24 18:26:08 2026 GMT Not After : Mar 28 05:46:08 2026 GMT Subject: CN=81CC7F6017EC98F9A51E73AB4D87ABA34FD0EB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8d:90:98:30:3b:75:0c:23:64:ae:80:f8:60: e3:0c:61:e7:c8:d3:85:b9:10:52:31:46:22:72:f8: 90:1d:e9:93:3a:d2:72:8b:a2:aa:61:b2:c3:49:91: e7:8d:30:14:5b:7f:e7:0d:67:ac:a2:e6:e6:56:d0: 20:c5:e1:20:85:3b:ee:fb:28:64:a4:9b:0f:c8:39: 8b:ee:b0:27:dc:e3:6a:f8:00:d3:0b:24:bd:64:85: 20:78:56:c8:67:d2:31:51:60:c5:44:0b:1a:69:33: b4:cd:70:b6:4f:4d:41:59:7f:5b:61:ec:65:38:98: 22:40:a3:9f:ec:ed:27:69:aa:72:50:91:ea:c8:59: 17:d1:b5:f8:44:d4:7f:6d:22:d6:24:46:d4:cc:a2: 68:bd:db:0a:8e:8b:1f:06:a1:56:a3:15:a4:cd:e9: 8b:cf:13:98:95:68:89:2c:b0:d7:e1:ab:a0:75:fd: 84:fc:b5:84:f9:5b:e4:4f:05:b9:dd:92:ed:20:fa: a3:f9:42:f0:25:37:56:63:01:f6:c9:45:c8:c5:04: 79:10:02:7a:7d:22:37:ef:1c:e3:4d:d4:2d:a1:8d: 6f:c4:ca:73:08:a8:e8:e1:77:93:e7:4b:da:a2:44: e5:d5:01:87:80:0d:69:f6:ac:46:77:35:c9:4b:94: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CC:7F:60:17:EC:98:F9:A5:1E:73:AB:4D:87:AB:A3:4F:D0:EB:98 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:4a:18:1e:6a:bb:81:04:65:3f:25:79:37:7a:f6:f1:e9:4c: a3:9f:44:5a:95:68:09:99:88:98:d8:61:ef:a5:04:a0:27:c0: e8:b6:e9:3f:b8:d5:be:52:99:2c:93:bf:8b:67:76:8e:d8:30: 7e:3a:a1:90:2c:9d:cb:60:ac:5c:56:6e:7c:27:c7:fa:fd:0f: ee:f4:ab:d4:aa:d0:2f:50:56:a4:76:92:c9:cb:19:e6:51:2d: 83:40:21:d6:bf:2c:3f:d2:02:4b:2c:a3:97:c6:d0:5a:b0:93: d0:c3:7b:35:48:8a:27:32:f7:b7:22:35:ed:8b:ec:d6:06:00: 5e:22:e4:45:ed:f6:4b:c6:c5:40:62:cc:e5:14:0b:cc:4d:24: 9b:22:47:47:8b:d3:10:70:e2:fd:26:65:a5:d9:74:6c:0b:f2: dd:2c:0e:79:9e:0c:21:88:a1:d7:65:c0:76:1e:9e:f3:41:6e: a1:4a:5a:4c:82:bf:b7:d8:33:08:81:cc:e0:0c:7e:69:3c:87: 44:52:c6:f4:66:37:ef:c3:6b:da:cb:dd:ed:59:be:c5:ec:96: 4a:85:f0:2a:ef:56:3c:ea:17:ce:03:94:4f:d0:3d:7f:f9:eb: 54:20:c4:26:dd:29:23:d2:5f:f8:a7:38:de:ab:5b:e7:91:23: 39:3b:a3:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKSCnD+LeN8oW9/LFH1QPSGysIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNjAzMjQxODI2MDhaFw0yNjAzMjgwNTQ2MDhaMDMxMTAvBgNV BAMTKDgxQ0M3RjYwMTdFQzk4RjlBNTFFNzNBQjREODdBQkEzNEZEMEVCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4jZCYMDt1DCNkroD4YOMMYefI 04W5EFIxRiJy+JAd6ZM60nKLoqphssNJkeeNMBRbf+cNZ6yi5uZW0CDF4SCFO+77 KGSkmw/IOYvusCfc42r4ANMLJL1khSB4Vshn0jFRYMVECxppM7TNcLZPTUFZf1th 7GU4mCJAo5/s7SdpqnJQkerIWRfRtfhE1H9tItYkRtTMomi92wqOix8GoVajFaTN 6YvPE5iVaIkssNfhq6B1/YT8tYT5W+RPBbndku0g+qP5QvAlN1ZjAfbJRcjFBHkQ Anp9IjfvHONN1C2hjW/EynMIqOjhd5PnS9qiROXVAYeADWn2rEZ3NclLlPULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgcx/YBfsmPmlHnOrTYero0/Q65gwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVKGB5qu4EEZT8leTd69vHpTKOfRFqVaAmZ iJjYYe+lBKAnwOi26T+41b5SmSyTv4tndo7YMH46oZAsnctgrFxWbnwnx/r9D+70 q9Sq0C9QVqR2ksnLGeZRLYNAIda/LD/SAksso5fG0Fqwk9DDezVIiicy97ciNe2L 7NYGAF4i5EXt9kvGxUBizOUUC8xNJJsiR0eL0xBw4v0mZaXZdGwL8t0sDnmeDCGI oddlwHYenvNBbqFKWkyCv7fYMwiBzOAMfmk8h0RSxvRmN+/Da9rL3e1ZvsXslkqF 8CrvVjzqF84DlE/QPX/561QgxCbdKSPSX/inON6rW+eRIzk7o8I= -----END CERTIFICATE-----Generated at Fri Mar 27 05:08:10 2026 by rpki-client