$ rpki-client -vvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: DvMbbC92sTHRk3cXPcfg/mRZFBYYVcv5j13UCrNzUgI= Subject key identifier: 01:A1:28:B5:2D:3D:81:E5:DA:FC:B1:36:78:30:90:96:97:47:82:82 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 2461A0F5C754A9716E0EA2E0A02306BF55BBB2FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:36:12 +0000 Manifest this update: Fri 24 Jul 2026 01:31:12 +0000 Manifest next update: Sat 25 Jul 2026 04:21:12 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 2: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) 3: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 4: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: SWH/b7wTHYu/+jGwROqv22n3FgoSJwurjmW+8IQJWi0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:61:a0:f5:c7:54:a9:71:6e:0e:a2:e0:a0:23:06:bf:55:bb:b2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Jul 24 01:31:12 2026 GMT Not After : Jul 25 04:21:12 2026 GMT Subject: CN=01A128B52D3D81E5DAFCB1367830909697478282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:6e:e5:1b:e8:3e:f8:c1:c9:af:19:c5:2b: 38:c4:d5:35:d1:9d:e2:eb:f7:78:dc:a3:6b:43:45: 5c:e7:3b:06:f0:35:0c:5a:df:fb:1d:7d:9d:2e:1e: 79:e8:97:f8:9c:e6:3b:3f:3c:52:db:d5:a6:9f:12: d8:0d:6d:1d:f7:85:ba:23:d6:6d:aa:44:ea:9e:03: ea:82:c4:0b:69:76:46:aa:e9:41:4e:e6:36:fe:1b: 7f:27:00:dd:cb:4e:77:e7:30:b2:60:3d:4c:ff:b0: 78:94:87:38:07:24:09:87:f7:2b:05:5a:22:02:27: 0f:50:b9:0a:88:1e:8b:a5:cd:a3:bc:68:c0:26:12: a8:62:cf:96:6d:a2:c1:5c:f1:93:f6:4c:f6:f0:cc: 5d:f3:6c:65:1f:39:d3:52:d0:d1:6d:6c:80:98:32: ea:ed:f9:fd:89:cb:92:7e:94:d2:79:f9:da:d6:47: a5:16:86:c8:8b:4f:b0:fb:19:e9:c0:80:6d:ba:cf: a9:58:64:9d:46:71:de:ce:dc:ea:e9:2b:f3:21:10: 77:3d:df:0f:22:c9:43:a2:c4:54:3a:fa:5d:23:83: bd:ef:30:21:69:15:f1:db:d1:fc:bb:03:b0:0b:ad: 4f:24:40:8b:74:15:8d:0a:b1:f9:34:72:b1:c4:31: d8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:28:B5:2D:3D:81:E5:DA:FC:B1:36:78:30:90:96:97:47:82:82 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5a:cb:ff:1b:ac:a8:1c:96:4b:c7:53:be:f9:77:84:21:e4: d3:a4:f2:95:62:c5:f3:59:6f:30:9d:52:96:47:e6:9f:c7:e6: 14:1d:be:bf:14:b0:ad:0c:5a:46:b1:6e:43:e7:54:3a:58:b7: 7b:50:67:06:8a:05:9e:c1:49:fd:8d:5a:e6:25:86:d9:26:26: 3f:f6:8a:48:31:5c:ca:46:32:ed:c1:ff:89:52:7a:a8:6e:16: ea:b3:76:bc:70:bc:86:4d:a5:de:46:a9:4b:b8:81:65:2a:49: ed:d2:49:a1:ac:e4:1d:2d:91:d2:34:fb:5e:9a:0f:a1:5e:57: 6c:ad:3f:52:19:25:06:fc:68:fd:4f:06:08:9a:46:a6:28:6e: 8c:01:37:b3:28:93:cc:90:a2:93:64:77:cb:7c:3b:4b:f7:b9: a2:58:c8:ea:89:93:c0:12:2c:f8:cc:4c:45:91:5b:30:d1:91: 7a:36:0f:3a:7e:f5:d2:16:fd:eb:16:5d:dc:ca:27:c4:95:d7: e4:a0:48:ee:98:6f:aa:9b:72:fc:55:ac:48:0b:76:6f:26:68: d1:7e:e9:70:0a:d3:6a:6c:ad:6b:28:6b:de:6f:97:55:df:9a: 6a:42:31:ec:ba:db:78:50:99:61:09:18:a9:8f:69:12:58:9a: 80:bb:75:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGGg9cdUqXFuDqLgoCMGv1W7svswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA3MjQwMTMxMTJaFw0yNjA3MjUwNDIxMTJaMDMxMTAvBgNV BAMTKDAxQTEyOEI1MkQzRDgxRTVEQUZDQjEzNjc4MzA5MDk2OTc0NzgyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vG7lG+g++MHJrxnFKzjE1TXR neLr93jco2tDRVznOwbwNQxa3/sdfZ0uHnnol/ic5js/PFLb1aafEtgNbR33hboj 1m2qROqeA+qCxAtpdkaq6UFO5jb+G38nAN3LTnfnMLJgPUz/sHiUhzgHJAmH9ysF WiICJw9QuQqIHoulzaO8aMAmEqhiz5ZtosFc8ZP2TPbwzF3zbGUfOdNS0NFtbICY Murt+f2Jy5J+lNJ5+drWR6UWhsiLT7D7GenAgG26z6lYZJ1Gcd7O3OrpK/MhEHc9 3w8iyUOixFQ6+l0jg73vMCFpFfHb0fy7A7ALrU8kQIt0FY0Ksfk0crHEMdhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAaEotS09geXa/LE2eDCQlpdHgoIwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJay/8brKgclkvHU775d4Qh5NOk8pVixfNZ bzCdUpZH5p/H5hQdvr8UsK0MWkaxbkPnVDpYt3tQZwaKBZ7BSf2NWuYlhtkmJj/2 ikgxXMpGMu3B/4lSeqhuFuqzdrxwvIZNpd5GqUu4gWUqSe3SSaGs5B0tkdI0+16a D6FeV2ytP1IZJQb8aP1PBgiaRqYobowBN7Mok8yQopNkd8t8O0v3uaJYyOqJk8AS LPjMTEWRWzDRkXo2Dzp+9dIW/esWXdzKJ8SV1+SgSO6Yb6qbcvxVrEgLdm8maNF+ 6XAK02psrWsoa95vl1XfmmpCMey623hQmWEJGKmPaRJYmoC7dTU= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:49 2026 by rpki-client