$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json) Hash identifier: TxC1xm+usHYvOJJ1IMs4gyf7ZHhFhXRhYh4/YxV3yH4= Subject key identifier: A0:2F:A4:7F:3B:96:38:6E:AC:12:18:AA:51:1E:51:DF:94:A5:FE:AB Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93 Certificate serial: 69398AE5E1C4DB2BF7AA3249A28F2D9018166B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft Manifest number: E0 Signing time: Tue 24 Mar 2026 20:42:37 +0000 Manifest this update: Tue 24 Mar 2026 20:37:37 +0000 Manifest next update: Sat 28 Mar 2026 07:56:37 +0000 Files and hashes: 1: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: eWhqc+n1FFF5y9WNLsm47r9Vdd5+t+nTIuPQcwvPUSc=) 2: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:39:8a:e5:e1:c4:db:2b:f7:aa:32:49:a2:8f:2d:90:18:16:6b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93 Validity Not Before: Mar 24 20:37:37 2026 GMT Not After : Mar 28 07:56:37 2026 GMT Subject: CN=A02FA47F3B96386EAC1218AA511E51DF94A5FEAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:db:e9:ab:cd:5d:56:c4:5d:a3:b9:c5:e3:fe: 3e:35:09:92:2d:e7:a4:95:97:a9:28:e4:b2:3a:9b: 07:0b:65:06:f7:db:2e:c3:cd:18:74:24:68:c0:97: b2:2b:f9:d9:12:34:eb:55:f2:1d:e4:bc:ec:bb:c5: 3a:08:8b:08:41:2d:43:fa:4c:95:91:2d:7f:8c:80: 0d:ec:b5:98:fa:03:e4:4a:5a:8d:ec:67:3a:3b:69: 9d:9a:1d:ea:62:4c:54:c8:14:0b:a4:38:50:85:6b: 43:03:31:4c:3a:6a:1b:45:0c:f1:f8:82:31:ee:1b: 2b:da:5e:b8:94:37:65:4c:a1:e7:82:e7:a1:70:e9: fd:11:fe:61:43:3a:d5:34:27:53:91:c8:2b:19:c0: da:44:d5:35:94:11:b8:89:05:af:9b:87:70:95:3b: ca:57:9c:51:d7:7a:e9:74:dc:a5:44:c0:f5:07:92: 30:cf:d2:b5:72:a2:0a:44:13:b3:8b:f9:23:d2:aa: 53:a0:0e:f7:f9:62:7a:7d:02:22:ba:b8:7f:1d:ed: be:8c:f5:96:49:fd:4a:69:27:e7:83:0a:ee:fb:21: 84:d8:b4:98:95:a5:07:95:7b:95:93:19:44:4b:a7: 42:c2:21:3a:b0:32:2f:7f:c8:f9:a0:e7:47:2a:80: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2F:A4:7F:3B:96:38:6E:AC:12:18:AA:51:1E:51:DF:94:A5:FE:AB X509v3 Authority Key Identifier: keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1b:13:e9:e2:97:7a:69:45:28:e4:82:9e:85:9f:6a:cf:7b: 2a:4a:aa:6e:d2:ba:3b:6a:67:69:7e:85:22:d1:ff:6e:18:a3: b2:75:3f:61:f9:2a:c6:bf:5d:f5:59:94:35:be:43:fd:42:04: 97:b9:45:8d:20:0f:70:db:ce:98:67:55:a1:bf:f2:b3:04:69: 0e:db:ad:46:31:eb:d2:3f:cc:f9:de:0b:39:a0:65:b0:12:75: 2b:5a:e1:82:97:76:e3:48:12:9c:4a:ba:1a:9d:b2:c3:3a:19: 91:58:d4:4d:9c:88:bf:67:66:c4:de:ff:a2:87:35:83:bb:f6: 11:9a:86:5a:6c:d2:8f:0a:b9:c6:7b:3a:4d:99:8e:a2:81:1d: 1d:eb:78:a8:94:01:7d:7d:66:56:54:1f:dc:01:25:30:2b:98: 94:4d:60:86:e8:d8:52:57:8b:1e:d0:4b:db:2b:06:94:bd:d7: 53:46:fc:ef:64:e8:71:e6:7e:6d:32:86:da:2e:4b:0d:4c:45: 68:cc:a1:07:7d:cb:85:4a:af:48:bb:c5:54:30:c9:eb:89:0f: 54:fc:5b:a6:4c:20:a0:4b:54:4a:61:c3:f3:79:e3:34:b5:14: b2:62:61:d3:7b:1f:be:54:49:db:95:d6:a0:65:38:62:92:94: 75:9f:25:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTmK5eHE2yv3qjJJoo8tkBgWa38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4 RkIzM0U5MzAeFw0yNjAzMjQyMDM3MzdaFw0yNjAzMjgwNzU2MzdaMDMxMTAvBgNV BAMTKEEwMkZBNDdGM0I5NjM4NkVBQzEyMThBQTUxMUU1MURGOTRBNUZFQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2+mrzV1WxF2jucXj/j41CZIt 56SVl6ko5LI6mwcLZQb32y7DzRh0JGjAl7Ir+dkSNOtV8h3kvOy7xToIiwhBLUP6 TJWRLX+MgA3stZj6A+RKWo3sZzo7aZ2aHepiTFTIFAukOFCFa0MDMUw6ahtFDPH4 gjHuGyvaXriUN2VMoeeC56Fw6f0R/mFDOtU0J1ORyCsZwNpE1TWUEbiJBa+bh3CV O8pXnFHXeul03KVEwPUHkjDP0rVyogpEE7OL+SPSqlOgDvf5Ynp9AiK6uH8d7b6M 9ZZJ/UppJ+eDCu77IYTYtJiVpQeVe5WTGURLp0LCITqwMi9/yPmg50cqgN1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoC+kfzuWOG6sEhiqUR5R35Sl/qswHwYDVR0j BBgwFoAUR1cfA2aHW3NRskTSXLfoJY+zPpMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMC80NzU3MUYwMzY2 ODc1QjczNTFCMjQ0RDI1Q0I3RTgyNThGQjMzRTkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4RkIz M0U5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4 MjU4RkIzM0U5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEbE+nil3ppRSjkgp6Fn2rPeypKqm7Sujtq Z2l+hSLR/24Yo7J1P2H5Ksa/XfVZlDW+Q/1CBJe5RY0gD3DbzphnVaG/8rMEaQ7b rUYx69I/zPneCzmgZbASdSta4YKXduNIEpxKuhqdssM6GZFY1E2ciL9nZsTe/6KH NYO79hGahlps0o8KucZ7Ok2ZjqKBHR3reKiUAX19ZlZUH9wBJTArmJRNYIbo2FJX ix7QS9srBpS911NG/O9k6HHmfm0yhtouSw1MRWjMoQd9y4VKr0i7xVQwyeuJD1T8 W6ZMIKBLVEphw/N54zS1FLJiYdN7H75USduV1qBlOGKSlHWfJfA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:44:52 2026 by rpki-client