$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft File: 47CBAD1A648715C5E867F1A2ED3558688608EE19.mft (raw, json) Hash identifier: DNSs9BBsCiDaH31VFh2h92Y5tMdXwZJmM4j9gRBlydU= Subject key identifier: B9:52:4F:00:84:29:CD:95:61:BB:FC:AB:D2:06:3D:40:8C:60:18:C1 Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Certificate serial: 478C2CFC07AB027E606F33E6BA16380E37885401 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft Manifest number: 01BF Signing time: Tue 24 Mar 2026 14:51:20 +0000 Manifest this update: Tue 24 Mar 2026 14:46:20 +0000 Manifest next update: Fri 27 Mar 2026 17:21:20 +0000 Files and hashes: 1: 47CBAD1A648715C5E867F1A2ED3558688608EE19.crl (hash: 0Oz2Rt6JUN4ysELJBDGCfHyJkIXptNS6g+2e1zvAK5U=) 2: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: +ck2E10dFd5/OEf+e40wX7Ntpp2HW/ZWwaXbGUuqd1Q=) 3: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: zg3C7UqiFNjk6v4cmaqyG4vvOgQ3amedsyfg+VEOO70=) 4: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: 1a16GMwOcOCsjYtXlZLoq81/WntEbXylQSYsmM31kuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8c:2c:fc:07:ab:02:7e:60:6f:33:e6:ba:16:38:0e:37:88:54:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Validity Not Before: Mar 24 14:46:20 2026 GMT Not After : Mar 27 17:21:20 2026 GMT Subject: CN=B9524F008429CD9561BBFCABD2063D408C6018C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:5f:c6:e9:b0:f8:95:86:2b:7b:11:d7:2e: da:e5:c5:c6:c7:1a:0e:99:0c:52:62:58:f3:59:c0: 08:fe:64:82:20:03:d2:c1:90:d4:fb:15:6d:78:03: 45:04:bd:fe:9b:45:1a:22:17:a2:bd:9f:82:27:33: 38:e5:3f:b2:0d:a1:e2:13:ad:1d:6e:c9:44:ee:c8: 70:4d:45:32:58:65:a4:76:de:75:1f:fc:18:7c:ed: b9:b1:06:fd:49:59:94:4d:95:c3:df:67:21:78:f2: e4:b3:ca:f4:80:31:c4:a6:4b:bb:08:8d:ac:ea:c3: a6:83:5b:fa:99:e7:ef:c0:7e:47:11:bb:31:b5:67: 38:b7:c3:1d:94:13:7e:a8:5c:a9:69:3b:82:08:e1: 82:bf:e2:bd:65:69:fa:80:bf:7e:91:ed:80:5c:37: 49:18:c7:b6:e3:6a:1b:2d:6f:ce:7e:19:3d:d4:eb: c3:c1:32:87:61:57:7c:6c:51:0b:e5:1f:bb:3f:b6: 29:6c:25:58:41:aa:2a:5d:ab:c8:05:d8:47:9b:e3: 35:a4:62:a6:b2:98:e6:28:24:d7:53:75:5b:ae:e9: ce:c9:60:cf:8f:1b:ad:5f:3b:91:62:7f:40:b9:b7: 0d:7d:7f:a5:7c:c4:70:9d:5d:84:3d:8d:8c:8a:00: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:4F:00:84:29:CD:95:61:BB:FC:AB:D2:06:3D:40:8C:60:18:C1 X509v3 Authority Key Identifier: keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2a:b0:30:2c:c8:a3:1c:22:1a:68:49:ff:bf:43:0b:ec:27: f7:1c:c3:b2:43:d9:5c:35:c3:a6:7e:7d:8a:d7:5e:0f:26:e6: 0e:54:89:72:84:70:dd:42:25:f9:d0:5d:a4:0e:dc:b7:1c:ef: f6:09:a4:d4:5e:a6:f3:42:e3:21:af:a4:a9:17:bb:24:cf:d4: d2:2b:cc:00:1b:23:1f:52:86:41:7d:01:6d:12:81:dd:41:d7: 02:f4:dc:96:66:eb:e5:d9:6e:bf:48:61:7b:2a:19:c6:3c:07: bc:6f:07:59:63:65:2a:c7:3f:41:94:3e:1f:71:46:04:e4:52: 48:78:1b:06:cd:18:e0:ba:52:b3:1a:5a:74:d4:63:38:33:24: 57:17:83:be:db:c5:a0:72:60:9c:8b:8e:4b:e1:74:b9:0c:37: 30:f8:2b:de:3c:8a:d9:25:9b:73:1e:0c:7a:e1:0c:0c:c1:7b: 1e:82:bc:57:9d:c0:71:d6:c4:6c:28:7d:fd:40:01:6c:d0:8a: c8:03:07:ee:20:40:49:c7:d8:6e:68:14:d4:84:83:f4:84:5d: 40:8e:ff:b7:c1:dc:4e:18:58:b6:ee:2c:50:41:cd:22:fe:f6: d2:e1:d3:9b:80:27:47:f3:d4:da:e1:48:c7:14:d3:ec:bd:d8: 45:51:2d:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4ws/AerAn5gbzPmuhY4DjeIVAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4 NjA4RUUxOTAeFw0yNjAzMjQxNDQ2MjBaFw0yNjAzMjcxNzIxMjBaMDMxMTAvBgNV BAMTKEI5NTI0RjAwODQyOUNEOTU2MUJCRkNBQkQyMDYzRDQwOEM2MDE4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVV/G6bD4lYYrexHXLtrlxcbH Gg6ZDFJiWPNZwAj+ZIIgA9LBkNT7FW14A0UEvf6bRRoiF6K9n4InMzjlP7INoeIT rR1uyUTuyHBNRTJYZaR23nUf/Bh87bmxBv1JWZRNlcPfZyF48uSzyvSAMcSmS7sI jazqw6aDW/qZ5+/AfkcRuzG1Zzi3wx2UE36oXKlpO4II4YK/4r1lafqAv36R7YBc N0kYx7bjahstb85+GT3U68PBModhV3xsUQvlH7s/tilsJVhBqipdq8gF2Eeb4zWk YqaymOYoJNdTdVuu6c7JYM+PG61fO5Fif0C5tw19f6V8xHCdXYQ9jYyKAL0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVJPAIQpzZVhu/yr0gY9QIxgGMEwHwYDVR0j BBgwFoAUR8utGmSHFcXoZ/Gi7TVYaIYI7hkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDk1NjUwNS1kNmIzLTQzZGMtOTA3MC1kNGRiZGI3Y2Y5NjMvMC80N0NCQUQxQTY0 ODcxNUM1RTg2N0YxQTJFRDM1NTg2ODg2MDhFRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4NjA4 RUUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ5NTY1MDUtZDZiMy00M2RjLTkw NzAtZDRkYmRiN2NmOTYzLzAvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4 Njg4NjA4RUUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMqsDAsyKMcIhpoSf+/QwvsJ/ccw7JD2Vw1 w6Z+fYrXXg8m5g5UiXKEcN1CJfnQXaQO3Lcc7/YJpNRepvNC4yGvpKkXuyTP1NIr zAAbIx9ShkF9AW0Sgd1B1wL03JZm6+XZbr9IYXsqGcY8B7xvB1ljZSrHP0GUPh9x RgTkUkh4GwbNGOC6UrMaWnTUYzgzJFcXg77bxaByYJyLjkvhdLkMNzD4K948itkl m3MeDHrhDAzBex6CvFedwHHWxGwoff1AAWzQisgDB+4gQEnH2G5oFNSEg/SEXUCO /7fB3E4YWLbuLFBBzSL+9tLh05uAJ0fz1NrhSMcU0+y92EVRLb8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:17 2026 by rpki-client