
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft
File: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft (raw, json)
Hash identifier: KaoYkq7Zu/SfTnsibjqxm5DpKKMgrwIPfdE0o9eISdE=
Subject key identifier: 23:18:54:5A:23:41:2F:C7:48:FE:69:4F:77:AD:AF:DA:E4:CA:C4:77
Authority key identifier: 47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F
Certificate issuer: /CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F
Certificate serial: 5C7A8451E95F00DD2D6256043095ECD792E9493A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 21:47:32 +0000
Manifest this update: Thu 24 Sep 2026 21:42:32 +0000
Manifest next update: Sat 26 Sep 2026 01:46:32 +0000
Files and hashes: 1: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl (hash: wTxLWUI/6/gY7hUmZUsgKR+Eld7mSkSNhqwoIsyMf0M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl
rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 01:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:7a:84:51:e9:5f:00:dd:2d:62:56:04:30:95:ec:d7:92:e9:49:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F
Validity
Not Before: Sep 24 21:42:32 2026 GMT
Not After : Sep 26 01:46:32 2026 GMT
Subject: CN=2318545A23412FC748FE694F77ADAFDAE4CAC477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:17:30:4b:38:b4:15:4f:ef:95:37:1e:ef:
3e:97:0c:69:f7:62:e6:a2:0e:c4:1f:5b:28:d2:90:
12:39:01:af:e1:cc:68:c8:b8:91:07:67:b9:c7:13:
55:9d:cc:a4:26:a4:53:97:6d:e7:22:b6:f3:87:25:
17:90:25:19:06:8c:25:20:21:c5:65:b6:c3:5c:9a:
85:66:2c:1d:60:11:d4:03:be:d5:03:bd:d5:64:53:
0c:fd:a3:9f:c6:da:b2:38:45:7b:74:d1:3c:61:dc:
5a:ad:fd:88:d8:cf:30:ca:74:88:86:d0:1b:b8:e3:
71:46:6b:13:89:69:96:cd:1c:93:44:f7:9c:f8:85:
e6:a5:21:26:50:5a:f3:26:a6:02:bf:9f:c7:f2:fc:
73:88:fd:de:ee:29:08:00:41:07:c7:78:9e:ff:1f:
45:7b:bf:89:54:02:ba:10:d0:36:77:82:f1:97:29:
b5:e9:fd:84:fb:06:7e:1e:94:68:e3:4e:c1:1a:53:
3f:82:7c:e7:03:f7:51:ba:05:b8:82:86:12:26:73:
7b:c4:63:7c:ac:14:38:00:ec:a6:96:0b:42:91:e6:
2c:26:9d:31:a7:4b:ba:f5:1b:cb:44:1a:2e:d3:7b:
ea:de:25:4f:38:42:dd:93:f2:01:a0:6a:cf:47:e3:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:54:5A:23:41:2F:C7:48:FE:69:4F:77:AD:AF:DA:E4:CA:C4:77
X509v3 Authority Key Identifier:
keyid:47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:58:b8:a2:54:13:bc:fc:2f:ab:3d:9d:68:02:b7:e1:c8:e5:
f2:4a:9a:cd:2b:f4:fe:93:4a:cc:48:73:db:44:4d:34:a5:3e:
ec:a4:83:06:f8:e1:52:21:26:c6:bf:ba:0e:1a:c0:f3:64:67:
59:73:04:b5:cf:84:07:54:01:d6:f6:62:23:f3:f3:17:e8:62:
2f:9c:0c:1d:3f:eb:a3:07:d4:38:05:92:7e:4e:ac:ca:1d:29:
61:4d:16:1b:f8:b3:a2:f8:49:d6:a4:4d:c6:81:e7:b6:34:cc:
1f:6a:4c:c6:25:f7:16:7e:71:c7:26:eb:68:08:26:3e:c2:d9:
dd:02:e0:f5:fb:47:9c:e4:9c:ba:9d:5f:52:9c:66:76:8a:60:
e8:f8:90:1e:4d:01:58:81:db:81:29:77:9c:ed:30:37:12:f1:
29:a2:33:9c:ae:f3:40:e2:62:86:ed:20:65:c4:d6:5a:26:39:
fc:26:ba:77:8b:32:24:8d:bf:39:89:18:b3:93:e1:4c:1c:aa:
bb:74:c5:57:b5:93:9f:ac:71:87:17:97:e1:da:79:dc:c8:bc:
70:d1:3f:7f:1a:6f:13:91:5f:6e:5f:0c:3d:5c:28:42:69:0c:
7a:1d:88:97:2e:6e:6e:75:b7:18:45:a2:b9:57:0f:e3:71:1f:
1f:d5:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:29:51 2026 by rpki-client