$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: 4sN9YfSvNB9iRYVNsTxe8SLvjtKX86v3N3ePbD4ZiWs= Subject key identifier: 9D:BE:6E:92:5B:86:49:AD:CE:59:03:11:24:BB:CC:11:5A:26:39:1C Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 2FC467D8444CDB7605212807807A4059181F8CDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 023D Signing time: Tue 24 Mar 2026 16:41:03 +0000 Manifest this update: Tue 24 Mar 2026 16:36:03 +0000 Manifest next update: Sat 28 Mar 2026 03:21:03 +0000 Files and hashes: 1: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: Zq1sG+RCNcZJwe0uB0KpChtYeRR/2ash5pFpkRZWqqQ=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: YpgQnQU5lvkeRKFK74g+rncTHe8QCPlhwaAIMSjOHQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c4:67:d8:44:4c:db:76:05:21:28:07:80:7a:40:59:18:1f:8c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Mar 24 16:36:03 2026 GMT Not After : Mar 28 03:21:03 2026 GMT Subject: CN=9DBE6E925B8649ADCE59031124BBCC115A26391C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:15:38:40:40:22:1b:3a:82:78:e8:0e:d7: c9:11:35:68:55:24:35:82:4e:f0:65:0a:2a:7f:2d: 84:48:73:a8:3c:b4:41:68:4e:50:2a:be:07:a5:fd: f4:a9:b2:38:90:fe:9d:f5:42:bf:28:9d:af:1e:75: b9:e3:46:ff:bb:1a:dc:fc:04:f1:b3:7c:25:10:22: ae:2b:ba:81:35:3b:74:3b:23:64:3b:2e:32:68:ff: 52:3b:f4:b1:a2:86:b3:18:21:66:6d:67:64:a6:dc: 9e:fe:f4:25:dd:fa:6b:45:db:91:be:a4:fc:06:44: ea:37:43:f0:87:84:34:8d:e3:29:29:fd:fe:5c:57: 2e:04:6a:0d:84:1c:0b:03:ec:44:90:e7:af:0b:ee: 00:61:b4:ae:b3:ff:36:c3:40:ba:55:49:bd:17:80: 53:e2:8d:6d:ea:84:c0:d2:8d:d1:93:49:4a:26:7d: 48:95:f0:59:56:60:fd:5f:95:b2:91:60:f5:0b:16: 16:f2:98:a1:97:d3:f0:64:7f:da:df:82:d1:ec:6b: 03:af:26:8f:57:bb:1a:1c:a7:20:5e:2b:24:c8:4f: a9:e7:eb:c5:cd:68:99:0d:8e:91:5c:c0:ed:9e:4c: 14:72:f6:6d:0b:15:05:97:bb:8a:96:6b:3c:ae:3a: 66:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BE:6E:92:5B:86:49:AD:CE:59:03:11:24:BB:CC:11:5A:26:39:1C X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:25:b8:bc:b8:42:9c:13:2e:9a:e7:81:53:91:bb:6f:d8:01: a1:dd:cd:25:d6:5b:d3:2a:84:e1:96:33:ca:f3:7e:39:63:6c: ad:ee:4a:be:28:86:7e:34:72:70:4d:5b:16:a1:8d:45:f4:2f: 6b:a1:be:24:4f:78:09:04:d2:f4:cd:f5:0a:2f:8e:4b:40:bd: 33:7f:34:1e:b7:04:ba:85:d4:72:79:da:fd:3d:09:ff:49:3e: ff:67:df:ff:5f:c6:97:88:d8:96:00:f2:2c:23:37:9f:7f:b1: e0:f2:44:fc:c1:bf:2d:9f:f6:ba:c2:5d:cb:83:67:48:d8:19: 7f:3e:0d:d6:71:ed:d5:9e:15:e6:7c:ba:d3:83:5c:c5:07:3c: 78:fb:41:32:69:77:d6:e9:e7:c8:e7:e5:f7:48:46:34:e0:95: 0b:ef:9a:76:0a:63:09:26:e6:23:ec:45:c3:7c:40:5b:23:3a: 4d:4b:5f:e2:84:10:ea:17:08:d2:3e:28:fa:f3:65:1d:83:cc: ef:d8:21:d7:09:59:14:a9:37:e2:6e:a8:58:b3:cc:7d:51:91: 11:c8:10:e3:e4:3b:7c:d1:40:fa:1c:f6:70:84:f2:45:9e:64: 06:c5:cc:61:83:93:62:c1:bc:38:6c:44:90:1d:6a:d3:ad:19: ad:33:1c:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8Rn2ERM23YFISgHgHpAWRgfjN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNjAzMjQxNjM2MDNaFw0yNjAzMjgwMzIxMDNaMDMxMTAvBgNV BAMTKDlEQkU2RTkyNUI4NjQ5QURDRTU5MDMxMTI0QkJDQzExNUEyNjM5MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+exU4QEAiGzqCeOgO18kRNWhV JDWCTvBlCip/LYRIc6g8tEFoTlAqvgel/fSpsjiQ/p31Qr8ona8edbnjRv+7Gtz8 BPGzfCUQIq4ruoE1O3Q7I2Q7LjJo/1I79LGihrMYIWZtZ2Sm3J7+9CXd+mtF25G+ pPwGROo3Q/CHhDSN4ykp/f5cVy4Eag2EHAsD7ESQ568L7gBhtK6z/zbDQLpVSb0X gFPijW3qhMDSjdGTSUomfUiV8FlWYP1flbKRYPULFhbymKGX0/Bkf9rfgtHsawOv Jo9XuxocpyBeKyTIT6nn68XNaJkNjpFcwO2eTBRy9m0LFQWXu4qWazyuOmbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnb5ukluGSa3OWQMRJLvMEVomORwwHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkluLy4QpwTLprngVORu2/YAaHdzSXWW9Mq hOGWM8rzfjljbK3uSr4ohn40cnBNWxahjUX0L2uhviRPeAkE0vTN9QovjktAvTN/ NB63BLqF1HJ52v09Cf9JPv9n3/9fxpeI2JYA8iwjN59/seDyRPzBvy2f9rrCXcuD Z0jYGX8+DdZx7dWeFeZ8utODXMUHPHj7QTJpd9bp58jn5fdIRjTglQvvmnYKYwkm 5iPsRcN8QFsjOk1LX+KEEOoXCNI+KPrzZR2DzO/YIdcJWRSpN+JuqFizzH1RkRHI EOPkO3zRQPoc9nCE8kWeZAbFzGGDk2LBvDhsRJAdatOtGa0zHEE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:33 2026 by rpki-client