$ rpki-client -vvvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: FlFxno8WebFNXGRRDj1ifQt/JQW2QJiaCO0rk2NxHQY= Subject key identifier: 24:E3:B6:1F:CD:77:BE:7E:40:17:30:4D:D8:94:3D:9B:04:86:78:12 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 50D6D3E09FCD88029FCED1EA30A1856065E66375 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 05:27:45 +0000 Manifest this update: Wed 23 Sep 2026 05:22:45 +0000 Manifest next update: Thu 24 Sep 2026 08:35:45 +0000 Files and hashes: 1: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 2: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 3: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) 4: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: PxBv3M6niJk+QH5ZswWb+vzKFaQ+wZbp3dtXQphCePE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d6:d3:e0:9f:cd:88:02:9f:ce:d1:ea:30:a1:85:60:65:e6:63:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Sep 23 05:22:45 2026 GMT Not After : Sep 24 08:35:45 2026 GMT Subject: CN=24E3B61FCD77BE7E4017304DD8943D9B04867812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7f:f3:ad:a4:4c:a4:d8:fc:29:60:64:eb:1d: 61:44:75:cf:1e:0d:1b:db:0d:cc:d7:1b:83:3f:09: 7a:e8:0e:17:20:a8:0c:7a:6f:36:0b:17:55:c3:f6: ff:82:73:84:b3:f2:76:d8:d0:fe:b6:99:ef:ae:00: 73:d2:e5:32:5e:f2:21:0c:05:5e:58:a3:da:a5:7f: f1:22:62:27:96:5f:8f:2c:94:8c:58:ec:f7:e3:f5: a9:16:d8:a1:de:85:17:82:47:8d:f1:57:03:7a:4d: 1d:ec:8c:7f:49:1c:30:4a:e8:18:f3:1a:3d:c5:f0: 88:8f:f6:36:4a:74:c1:60:8b:a4:03:30:b1:be:27: 1a:e2:43:34:9b:f8:bf:ff:1b:9b:ea:4e:57:a6:30: db:d2:8b:b3:7b:f6:86:81:68:80:1b:04:bb:3d:85: 1a:24:e6:4f:00:68:18:94:e2:e4:18:05:e8:20:66: fc:2a:4d:34:39:c7:40:32:de:9b:f6:d2:0d:ea:24: 00:42:b1:91:21:d1:a4:90:b5:3f:fc:ac:3f:49:72: af:5d:ff:37:7a:ba:50:f5:b1:3b:6d:8d:bb:f7:39: a1:63:30:93:35:36:34:a3:f7:f6:89:4b:37:ae:30: f6:a1:f5:f4:e9:a2:db:44:9e:40:cd:6d:02:4e:a1: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E3:B6:1F:CD:77:BE:7E:40:17:30:4D:D8:94:3D:9B:04:86:78:12 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e4:55:53:e0:32:e4:83:5e:4e:92:05:30:ac:03:f5:f6:7a: a5:d9:43:f2:9b:6a:31:9b:3b:5f:64:20:9c:23:81:36:62:0e: db:40:98:58:e9:d2:d1:64:42:17:25:44:e6:e7:3e:31:c7:52: c2:36:b0:68:b1:b2:ea:71:60:37:27:2e:ed:70:04:15:bd:01: c8:a5:86:cb:ee:2b:94:e4:eb:10:1d:ec:38:c6:1b:68:d3:cf: 0f:ab:5f:8e:c7:b6:32:1c:9c:af:87:d7:09:a6:cb:f8:3b:3e: 44:53:92:1b:77:56:ee:92:5a:ca:d9:2e:e1:cb:71:0a:1b:52: 66:9c:bf:47:8b:4d:11:b6:64:1b:ba:3b:ce:1b:12:b1:f5:c1: 9b:8f:43:d8:ca:69:1f:fe:a4:16:9b:9a:5d:59:24:90:0d:9d: bc:ad:45:99:fc:41:42:bd:0e:e1:55:3b:a3:2d:0f:40:b6:af: 09:d0:c6:4e:1c:f2:74:d4:bc:95:be:32:a4:98:f9:69:31:a5: 0b:b2:95:7f:c5:3b:5b:d5:52:00:77:3a:cd:55:a6:1a:d5:12: a2:f2:3d:17:09:fe:df:9d:b9:18:35:69:e2:33:3f:56:38:05: 4a:81:31:fe:9d:b4:c6:d4:ec:46:f2:84:4c:2e:ee:44:2c:04: d3:a5:ee:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNbT4J/NiAKfztHqMKGFYGXmY3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA5MjMwNTIyNDVaFw0yNjA5MjQwODM1NDVaMDMxMTAvBgNV BAMTKDI0RTNCNjFGQ0Q3N0JFN0U0MDE3MzA0REQ4OTQzRDlCMDQ4Njc4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDff/OtpEyk2PwpYGTrHWFEdc8e DRvbDczXG4M/CXroDhcgqAx6bzYLF1XD9v+Cc4Sz8nbY0P62me+uAHPS5TJe8iEM BV5Yo9qlf/EiYieWX48slIxY7Pfj9akW2KHehReCR43xVwN6TR3sjH9JHDBK6Bjz Gj3F8IiP9jZKdMFgi6QDMLG+JxriQzSb+L//G5vqTlemMNvSi7N79oaBaIAbBLs9 hRok5k8AaBiU4uQYBeggZvwqTTQ5x0Ay3pv20g3qJABCsZEh0aSQtT/8rD9Jcq9d /zd6ulD1sTttjbv3OaFjMJM1NjSj9/aJSzeuMPah9fTpottEnkDNbQJOocPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJOO2H813vn5AFzBN2JQ9mwSGeBIwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbkVVPgMuSDXk6SBTCsA/X2eqXZQ/KbajGb O19kIJwjgTZiDttAmFjp0tFkQhclRObnPjHHUsI2sGixsupxYDcnLu1wBBW9Acil hsvuK5Tk6xAd7DjGG2jTzw+rX47HtjIcnK+H1wmmy/g7PkRTkht3Vu6SWsrZLuHL cQobUmacv0eLTRG2ZBu6O84bErH1wZuPQ9jKaR/+pBabml1ZJJANnbytRZn8QUK9 DuFVO6MtD0C2rwnQxk4c8nTUvJW+MqSY+WkxpQuylX/FO1vVUgB3Os1VphrVEqLy PRcJ/t+duRg1aeIzP1Y4BUqBMf6dtMbU7EbyhEwu7kQsBNOl7ko= -----END CERTIFICATE-----Generated at Wed Sep 23 22:24:17 2026 by rpki-client