$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json) Hash identifier: nMxZOtruxAtIwpI655r9x+WV8GNzjvNLaOT9KZ+dcgk= Subject key identifier: 48:EC:22:03:86:8A:4D:C3:A2:DA:E9:AC:7F:1C:02:95:D0:06:DA:5B Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Certificate serial: 6CAA5B254C1E63B1FB466132175DF40749DFE72C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft Manifest number: 02C4 Signing time: Thu 26 Mar 2026 06:00:52 +0000 Manifest this update: Thu 26 Mar 2026 05:55:52 +0000 Manifest next update: Sun 29 Mar 2026 10:12:52 +0000 Files and hashes: 1: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 3PkfuBqgUsXvYP/cBasxl1kYosVT98po9pZBDusnWb4=) 2: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: a6CsWlWkmj83jynEATzTrhTw0HRS5RMNrO1vIzTj00w=) 3: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: 7eJhfA1U72MfmI6Gl9X8Bc7KFQEL+NhfB3ZqMIqrEaA=) 4: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: kunQ1kMqm5dCsvOsI1+HGGCtiZ5NKsilDdmi0e2JkQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:aa:5b:25:4c:1e:63:b1:fb:46:61:32:17:5d:f4:07:49:df:e7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Validity Not Before: Mar 26 05:55:52 2026 GMT Not After : Mar 29 10:12:52 2026 GMT Subject: CN=48EC2203868A4DC3A2DAE9AC7F1C0295D006DA5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:4e:66:a5:34:f5:1a:02:8a:61:78:88:d6: ba:5d:64:8c:7f:84:0b:15:db:f0:b9:12:0b:48:9f: c9:93:74:1a:cb:86:49:a2:ba:a6:41:53:9d:8e:36: a0:2e:f8:58:fb:b0:c9:ec:e5:7c:ba:57:cc:80:eb: 3a:a0:bf:0f:7c:a2:bd:b5:69:2d:01:28:6b:23:39: 7a:a5:a5:69:b9:ba:96:74:1c:e8:4c:66:0b:9a:d1: 85:7b:b9:88:68:9c:f0:96:f8:e0:44:0a:03:f4:23: 74:b2:36:04:a0:08:31:5c:a4:5f:d4:f9:72:04:d5: 37:4f:38:cd:9a:4d:82:fc:9f:f5:b2:32:93:73:2f: cc:d5:de:3a:01:af:da:0f:fd:67:48:a0:57:6d:73: c1:3b:95:24:d2:4e:b5:2c:3f:59:2f:3e:26:e5:28: 66:a2:75:d0:0b:40:ae:27:55:1a:3c:c5:a8:92:f7: f4:76:4d:52:a0:21:06:86:39:89:52:2e:c9:a4:91: 3e:20:6b:2b:d7:bf:c2:12:01:e4:bf:a0:64:71:7f: 6f:b4:b5:1f:d4:6f:01:5c:77:de:c7:c2:10:f2:50: c4:c4:e6:dc:64:af:c1:81:d6:cd:50:11:97:39:94: bd:f8:a8:43:ef:87:86:85:81:b1:38:6e:88:57:8a: b8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EC:22:03:86:8A:4D:C3:A2:DA:E9:AC:7F:1C:02:95:D0:06:DA:5B X509v3 Authority Key Identifier: keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1d:fe:91:92:0b:52:7a:35:8d:75:a0:9a:73:bb:f0:ab:0c: 03:b7:72:84:56:65:5b:b6:7b:68:b2:af:9a:f4:55:ba:e6:2c: 88:b5:5e:8a:32:40:db:48:38:8f:56:68:64:1e:9e:90:ef:aa: fb:12:2f:b0:8f:7f:04:5b:d7:c0:15:77:da:ca:32:fa:8c:b3: 83:d2:e4:6e:d5:f2:f6:c7:b6:73:63:e8:92:72:4c:c4:b2:db: e5:8e:ac:be:fc:76:86:4b:0d:72:0d:5d:13:e3:7d:8c:3d:3e: b1:65:b8:1a:d8:0f:51:f4:2a:a0:4e:11:94:5d:93:ac:a4:89: 11:3a:94:3e:08:ae:87:7a:36:32:1e:b9:3d:c4:91:75:53:36: 5c:4a:3e:5b:a0:33:56:be:9d:4f:de:74:84:c6:e2:45:f3:9c: 0b:f0:79:5c:a4:88:29:ed:6d:b0:c1:ab:48:95:44:5e:a3:04: 79:a7:99:5a:b1:8a:32:30:69:c7:27:ba:11:04:b9:be:56:e4: ba:f8:89:82:e0:e4:28:12:c1:ac:e9:dc:23:de:83:d1:06:20: 3e:02:b4:1c:d0:31:7f:ac:0d:9e:2e:54:d7:1b:d7:30:5b:dc: f0:60:cc:88:a2:ea:71:d8:7e:a8:2f:73:c1:1f:75:31:c3:6a: 67:f3:0d:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKpbJUweY7H7RmEyF130B0nf5ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5 NDc5OUFBNjAeFw0yNjAzMjYwNTU1NTJaFw0yNjAzMjkxMDEyNTJaMDMxMTAvBgNV BAMTKDQ4RUMyMjAzODY4QTREQzNBMkRBRTlBQzdGMUMwMjk1RDAwNkRBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0r05mpTT1GgKKYXiI1rpdZIx/ hAsV2/C5EgtIn8mTdBrLhkmiuqZBU52ONqAu+Fj7sMns5Xy6V8yA6zqgvw98or21 aS0BKGsjOXqlpWm5upZ0HOhMZgua0YV7uYhonPCW+OBECgP0I3SyNgSgCDFcpF/U +XIE1TdPOM2aTYL8n/WyMpNzL8zV3joBr9oP/WdIoFdtc8E7lSTSTrUsP1kvPibl KGaiddALQK4nVRo8xaiS9/R2TVKgIQaGOYlSLsmkkT4gayvXv8ISAeS/oGRxf2+0 tR/UbwFcd97HwhDyUMTE5txkr8GB1s1QEZc5lL34qEPvh4aFgbE4bohXirgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOwiA4aKTcOi2umsfxwCldAG2lswHwYDVR0j BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3 ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5 OUFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI4MWJjZWEtYjcwZi00Mzc0LTky NGItYjZjNzc4MTA5ODM3LzAvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0 QUU5NDc5OUFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAd/pGSC1J6NY11oJpzu/CrDAO3coRWZVu2 e2iyr5r0VbrmLIi1XooyQNtIOI9WaGQenpDvqvsSL7CPfwRb18AVd9rKMvqMs4PS 5G7V8vbHtnNj6JJyTMSy2+WOrL78doZLDXINXRPjfYw9PrFluBrYD1H0KqBOEZRd k6ykiRE6lD4Irod6NjIeuT3EkXVTNlxKPlugM1a+nU/edITG4kXznAvweVykiCnt bbDBq0iVRF6jBHmnmVqxijIwaccnuhEEub5W5Lr4iYLg5CgSwazp3CPeg9EGID4C tBzQMX+sDZ4uVNcb1zBb3PBgzIii6nHYfqgvc8EfdTHDamfzDWU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:23 2026 by rpki-client