$ rpki-client -vvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: W3xXc/bZdc5OrRHH2eeF8jdps3rJeJVk54iEkBVivvw= Subject key identifier: B2:37:E4:B0:0B:25:C3:30:2F:BC:8B:AA:E0:DE:28:A2:5A:F9:D6:68 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 7D654A1AE961266BB2F9D0CB9A2E72F548A08899 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:39:33 +0000 Manifest this update: Tue 12 May 2026 04:34:33 +0000 Manifest next update: Wed 13 May 2026 05:45:33 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) 2: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: LpBhwNsNkPajA6lixtXKTiI/ntpjX3fsrDUmIGacMPY=) 3: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 4: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:65:4a:1a:e9:61:26:6b:b2:f9:d0:cb:9a:2e:72:f5:48:a0:88:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: May 12 04:34:33 2026 GMT Not After : May 13 05:45:33 2026 GMT Subject: CN=B237E4B00B25C3302FBC8BAAE0DE28A25AF9D668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:5b:5c:02:4b:72:cd:f4:36:e8:45:7a:c1: c7:08:44:4b:2c:df:23:2f:63:9f:a3:b1:a9:45:5a: 5d:2f:7c:07:38:9a:b6:af:2f:d2:54:4c:58:fd:70: 4f:6c:de:13:24:c3:61:9b:4b:6e:b6:08:1a:2a:e3: 78:7a:bf:cd:41:33:4e:f7:91:83:72:2d:e4:dd:a9: e0:ac:69:51:6e:10:ce:59:a1:da:5d:9b:e8:15:65: d6:63:46:1c:4e:3a:84:f9:34:28:5f:c0:a2:cd:0f: 1a:dc:f2:be:f8:72:ed:0e:54:02:0c:8b:95:71:6b: 70:32:4a:4f:d8:13:0c:fa:12:f9:38:ef:c4:e6:54: b1:3b:0e:ec:81:8d:46:15:56:5a:c7:a1:bb:6f:7b: 99:73:d9:4b:a8:36:7c:46:09:c7:68:d2:df:6c:64: 83:cf:f9:d9:e3:a1:d9:a1:09:6e:3c:85:68:99:5d: f6:d7:67:60:98:f8:21:16:02:1a:1a:60:0c:2d:af: 2c:2d:9f:a1:78:5e:06:89:99:ed:78:c6:65:2f:e9: 10:04:6b:45:3e:47:3e:83:71:00:fa:df:a6:70:05: 0c:6c:85:1a:1f:cc:11:ba:e6:65:17:0c:ad:32:0c: 33:19:55:64:3a:9e:23:45:4f:46:d0:7b:54:7f:e5: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:37:E4:B0:0B:25:C3:30:2F:BC:8B:AA:E0:DE:28:A2:5A:F9:D6:68 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:bf:8b:29:62:0f:9f:ef:d0:14:25:ab:6e:71:bf:3c:21: 02:9b:b9:57:0e:0a:e6:f7:e7:37:e6:12:3a:82:72:da:cc:57: 0c:c8:3a:47:2c:44:76:eb:52:39:2a:3c:f4:64:71:26:1d:8b: 39:05:2d:32:c9:96:75:09:77:23:89:42:9d:54:ed:ef:cc:a4: 96:6e:e1:63:cf:63:89:41:2e:0a:fe:26:a6:57:3d:56:a6:a3: f7:c6:72:41:76:c3:08:98:68:f3:19:54:8d:10:b2:8f:97:8d: f8:50:bd:a8:f9:b9:61:b7:72:bc:c6:5d:a5:5c:c3:16:c7:81: ba:2f:3a:b1:91:00:5b:07:4b:df:5a:7f:ff:57:77:c3:3e:15: 70:35:09:32:c4:7d:7d:ea:5a:5d:93:64:4b:c1:ee:85:35:52: f5:02:be:91:b1:09:c5:d7:b1:56:cd:45:c7:5f:d0:2f:aa:3f: 9c:72:ef:75:2a:f9:9b:74:e7:0c:cc:76:df:89:1f:a6:98:fd: 65:57:fe:9a:57:4b:e6:29:76:49:d8:dc:5a:21:38:15:7e:27: 03:21:81:03:1b:9c:12:94:b3:d3:9f:b6:65:43:23:6c:4c:e1: 21:a3:11:07:14:73:4a:d3:e1:13:b2:c2:2d:1a:6b:eb:59:1d: cb:19:7e:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWVKGulhJmuy+dDLmi5y9UigiJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA1MTIwNDM0MzNaFw0yNjA1MTMwNTQ1MzNaMDMxMTAvBgNV BAMTKEIyMzdFNEIwMEIyNUMzMzAyRkJDOEJBQUUwREUyOEEyNUFGOUQ2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG51tcAktyzfQ26EV6wccIREss 3yMvY5+jsalFWl0vfAc4mravL9JUTFj9cE9s3hMkw2GbS262CBoq43h6v81BM073 kYNyLeTdqeCsaVFuEM5Zodpdm+gVZdZjRhxOOoT5NChfwKLNDxrc8r74cu0OVAIM i5Vxa3AySk/YEwz6Evk478TmVLE7DuyBjUYVVlrHobtve5lz2UuoNnxGCcdo0t9s ZIPP+dnjodmhCW48hWiZXfbXZ2CY+CEWAhoaYAwtrywtn6F4XgaJme14xmUv6RAE a0U+Rz6DcQD636ZwBQxshRofzBG65mUXDK0yDDMZVWQ6niNFT0bQe1R/5RitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsjfksAslwzAvvIuq4N4oolr51mgwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrWv4spYg+f79AUJatucb88IQKbuVcOCub3 5zfmEjqCctrMVwzIOkcsRHbrUjkqPPRkcSYdizkFLTLJlnUJdyOJQp1U7e/MpJZu 4WPPY4lBLgr+JqZXPVamo/fGckF2wwiYaPMZVI0Qso+XjfhQvaj5uWG3crzGXaVc wxbHgbovOrGRAFsHS99af/9Xd8M+FXA1CTLEfX3qWl2TZEvB7oU1UvUCvpGxCcXX sVbNRcdf0C+qP5xy73Uq+Zt05wzMdt+JH6aY/WVX/ppXS+YpdknY3FohOBV+JwMh gQMbnBKUs9OftmVDI2xM4SGjEQcUc0rT4ROywi0aa+tZHcsZfis= -----END CERTIFICATE-----Generated at Tue May 12 22:49:41 2026 by rpki-client