$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft File: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft (raw, json) Hash identifier: lWKRjkK7PZxfJdjOp1X8eUV13tsLAcvnAl6uyn+johU= Subject key identifier: EE:DE:B0:C5:CC:AC:20:0E:AB:01:48:C7:B7:AC:B5:94:BC:5A:3A:C8 Authority key identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0 Certificate issuer: /CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0 Certificate serial: 273BCDEE1C718A3681B9AB8374BE868538FF6883 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 06:08:05 +0000 Manifest this update: Fri 25 Sep 2026 06:03:05 +0000 Manifest next update: Sat 26 Sep 2026 09:07:05 +0000 Files and hashes: 1: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl (hash: xcBIr+ZMMSEt1yTu4CVEyTE6tQrbQjnhVKGc0mlckF0=) 2: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: rqI3PL8vwSW0P/PJNj65/4Uzquyhsko/Jx79Jej+5aU=) 3: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 5ruPZLXOx5EYeaSuNCjm5La9e7w8hzod2dtunu/cpyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3b:cd:ee:1c:71:8a:36:81:b9:ab:83:74:be:86:85:38:ff:68:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0 Validity Not Before: Sep 25 06:03:05 2026 GMT Not After : Sep 26 09:07:05 2026 GMT Subject: CN=EEDEB0C5CCAC200EAB0148C7B7ACB594BC5A3AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:10:86:99:12:fd:f1:f4:5e:5b:95:10:1b: a8:d7:95:0d:58:83:a0:20:df:32:51:d3:c9:7a:58: b2:53:f8:3a:c1:05:11:9c:a1:e0:a0:4a:d2:98:26: 29:8a:ee:32:62:49:fa:2a:3f:ce:1a:fa:f4:ca:9a: 82:76:1b:03:a9:db:5c:90:be:bb:cd:1a:a8:26:2d: 47:3f:e5:f7:ba:eb:f7:44:d7:36:0c:6b:7c:da:84: 6f:cd:6d:06:28:d1:8b:d3:b3:0f:82:09:34:f0:b7: c9:c8:96:11:ae:06:ee:0d:6c:3c:48:fd:18:f4:03: 9f:af:69:43:57:3e:b4:de:3c:54:f4:a5:b2:34:41: 07:ef:29:10:d9:39:9c:09:ff:ec:14:f4:77:7b:29: 45:90:bf:f5:93:28:fd:c0:f1:77:c7:7c:38:9c:4e: 2d:6b:35:42:3d:85:8b:3c:ce:93:d3:cc:16:8e:81: a8:96:1a:a9:b9:a1:41:0b:b7:bb:2d:e3:01:e4:95: ad:36:f5:a2:5a:2a:2c:c4:c3:03:8e:32:9b:62:9f: e3:3d:1c:22:36:90:c9:7c:91:ff:a5:39:be:af:41: 9c:11:90:7c:76:fc:45:9e:5e:66:d3:ef:0e:8d:03: 68:ad:90:b9:31:29:a9:37:1c:74:fe:19:ae:4f:65: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DE:B0:C5:CC:AC:20:0E:AB:01:48:C7:B7:AC:B5:94:BC:5A:3A:C8 X509v3 Authority Key Identifier: keyid:47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:78:85:b6:4e:28:8c:6a:ee:9e:0d:45:9f:f4:78:40:25:53: d2:61:ec:0a:3a:f6:88:2c:8b:3f:9f:84:2d:08:69:7f:04:5d: 79:44:79:b5:17:28:d7:8c:d9:c1:07:9b:9a:30:f8:30:76:10: fb:38:ff:3c:e1:98:03:84:17:e6:d7:4e:23:4c:7d:b9:6a:6a: e3:a6:fe:fc:de:5f:02:75:9e:3c:71:95:ba:eb:09:bf:5c:e1: 85:99:cf:b8:1c:f8:33:4c:49:9c:39:b2:b9:29:1d:65:5f:90: 5f:3b:12:38:10:6a:86:c2:88:74:66:0c:3c:ca:36:5d:19:79: e8:7d:9a:a8:ba:e9:5a:99:e2:4a:5c:38:35:dc:7b:75:50:09: 0b:d7:63:02:a0:67:77:cb:79:44:b5:49:6f:b0:17:76:5f:4b: 55:53:20:a0:ad:4a:db:8e:1c:07:90:54:d1:07:78:07:a6:a4: 95:4d:c6:82:5d:d7:b3:f7:8c:c6:dd:f8:c5:5b:cc:20:67:cf: e4:a3:8a:ab:79:e7:66:7c:82:a2:08:40:e9:4f:c9:3a:fb:97: 99:d5:64:5a:d4:6e:aa:f3:30:21:96:e2:76:e3:fa:0d:e4:f6: 22:b1:4b:04:08:e0:d2:a1:36:59:99:16:49:68:de:fe:62:cc: 96:ad:a5:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzvN7hxxijaBuauDdL6GhTj/aIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFQzg4NEQ1Rjc5MzU4MjNFMDc0RTZEQ0REMkIyQjc1 QUI0Q0JBMDAeFw0yNjA5MjUwNjAzMDVaFw0yNjA5MjYwOTA3MDVaMDMxMTAvBgNV BAMTKEVFREVCMEM1Q0NBQzIwMEVBQjAxNDhDN0I3QUNCNTk0QkM1QTNBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2exCGmRL98fReW5UQG6jXlQ1Y g6Ag3zJR08l6WLJT+DrBBRGcoeCgStKYJimK7jJiSfoqP84a+vTKmoJ2GwOp21yQ vrvNGqgmLUc/5fe66/dE1zYMa3zahG/NbQYo0YvTsw+CCTTwt8nIlhGuBu4NbDxI /Rj0A5+vaUNXPrTePFT0pbI0QQfvKRDZOZwJ/+wU9Hd7KUWQv/WTKP3A8XfHfDic Ti1rNUI9hYs8zpPTzBaOgaiWGqm5oUELt7st4wHkla029aJaKizEwwOOMptin+M9 HCI2kMl8kf+lOb6vQZwRkHx2/EWeXmbT7w6NA2itkLkxKak3HHT+Ga5PZczpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7t6wxcysIA6rAUjHt6y1lLxaOsgwHwYDVR0j BBgwFoAUR+yITV95NYI+B05tzdKyt1q0y6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYwOGEyZTItZjgxMC00NmU4LWE1YTEtNTZlYzVhMzVkMmFkLzAvNDdFQzg4NEQ1 Rjc5MzU4MjNFMDc0RTZEQ0REMkIyQjc1QUI0Q0JBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0VDODg0RDVGNzkzNTgyM0UwNzRFNkRDREQyQjJCNzVBQjRD QkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvNDdFQzg4NEQ1Rjc5MzU4MjNFMDc0RTZEQ0REMkIy Qjc1QUI0Q0JBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF4hbZOKIxq7p4NRZ/0eEAlU9Jh7Ao69ogs iz+fhC0IaX8EXXlEebUXKNeM2cEHm5ow+DB2EPs4/zzhmAOEF+bXTiNMfblqauOm /vzeXwJ1njxxlbrrCb9c4YWZz7gc+DNMSZw5srkpHWVfkF87EjgQaobCiHRmDDzK Nl0Zeeh9mqi66VqZ4kpcODXce3VQCQvXYwKgZ3fLeUS1SW+wF3ZfS1VTIKCtStuO HAeQVNEHeAempJVNxoJd17P3jMbd+MVbzCBnz+Sjiqt552Z8gqIIQOlPyTr7l5nV ZFrUbqrzMCGW4nbj+g3k9iKxSwQI4NKhNlmZFklo3v5izJatpUg= -----END CERTIFICATE-----Generated at Fri Sep 25 13:05:02 2026 by rpki-client