
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
File: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft (raw, json)
Hash identifier: NIS/IkAJp5R74e/TabIdUXAl8Zb09mVbePdaXE5rzms=
Subject key identifier: C3:98:3B:8F:92:1B:F3:DC:D9:4C:DF:20:C2:CA:1C:87:5B:B9:E3:B6
Authority key identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0
Certificate issuer: /CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
Certificate serial: 27A00AB4C179D5B57FE6498AA388BCFE2B0E0521
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:11:58 +0000
Manifest this update: Tue 12 May 2026 20:06:58 +0000
Manifest next update: Wed 13 May 2026 20:48:58 +0000
Files and hashes: 1: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl (hash: auEjy7GLg1epE3m4k07OGvo89ir0RUwsZ6tnO7v7+o0=)
2: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: rqI3PL8vwSW0P/PJNj65/4Uzquyhsko/Jx79Jej+5aU=)
3: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 5ruPZLXOx5EYeaSuNCjm5La9e7w8hzod2dtunu/cpyk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl
rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a0:0a:b4:c1:79:d5:b5:7f:e6:49:8a:a3:88:bc:fe:2b:0e:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
Validity
Not Before: May 12 20:06:58 2026 GMT
Not After : May 13 20:48:58 2026 GMT
Subject: CN=C3983B8F921BF3DCD94CDF20C2CA1C875BB9E3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:d8:ca:a9:52:c8:7e:4e:ac:55:4c:4f:85:
70:e2:3d:5c:9a:59:15:fc:64:b7:cf:78:f9:03:c0:
4b:05:8c:97:8e:69:2f:4d:81:9b:1d:d3:36:bc:5b:
a1:d6:ac:24:98:23:3d:16:4c:29:b6:84:bf:1e:a1:
5e:ae:e0:ae:c0:d8:36:86:59:73:b1:7a:87:59:28:
f1:90:fb:31:dd:03:8d:fa:1a:8a:06:a0:53:f6:dc:
e2:48:16:19:cb:c7:6e:68:ea:ad:c1:4a:af:f9:70:
cb:be:86:72:ec:3c:4c:df:a9:8e:6c:95:66:aa:01:
52:6c:74:40:13:f1:39:1f:4f:6a:79:a2:9c:9f:42:
5a:6c:46:d8:7a:e4:ed:ab:d4:a5:db:b9:68:8b:3d:
48:ec:51:70:9c:92:3f:47:46:79:da:c4:ff:46:68:
d7:aa:f3:78:aa:bf:e5:df:08:36:2a:03:36:7b:f1:
82:49:f5:33:3c:be:84:13:0a:16:80:a8:78:57:9e:
e6:37:6b:8d:8b:76:83:44:5d:8f:59:93:d7:ab:5d:
1d:a6:d4:34:2f:b4:ce:47:14:bd:ab:fb:44:d0:47:
f3:74:1b:2c:74:cd:ea:35:ab:b2:50:d7:15:c0:4a:
85:30:2d:77:24:e3:58:b5:13:37:4f:cc:56:ba:d5:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:98:3B:8F:92:1B:F3:DC:D9:4C:DF:20:C2:CA:1C:87:5B:B9:E3:B6
X509v3 Authority Key Identifier:
keyid:47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5e:81:87:07:e4:49:c4:fe:15:56:ec:d4:71:aa:a0:07:06:
12:30:fa:aa:0b:37:6b:c5:60:29:7d:0a:ff:ea:42:03:1f:4d:
84:c4:1d:46:2d:94:23:6e:66:e1:41:6b:fe:d6:94:48:c3:1f:
2a:cc:3c:04:c3:85:55:6f:a0:33:e7:13:06:33:da:4b:ff:f7:
b5:f7:a7:81:e1:d9:ae:61:b4:0d:a9:3f:58:67:e9:c7:24:da:
10:cd:f2:82:be:2e:33:89:aa:6b:7e:c4:5d:1a:6f:0c:f3:81:
2e:c7:af:a4:2c:5b:48:ae:b7:d1:fc:58:a5:eb:55:7a:83:f2:
fe:d6:04:ab:3c:f0:f0:a1:ea:cb:2d:ae:f4:ff:1e:b9:cb:8d:
0e:77:24:61:61:67:a2:60:f9:25:68:17:95:ac:4d:aa:89:a6:
43:88:30:3a:14:06:72:7a:df:86:c9:37:f8:8f:05:73:3f:64:
aa:67:66:55:be:a4:97:24:72:13:fb:93:b7:8c:de:b3:dd:f0:
f8:0c:30:d7:9b:f4:f4:61:84:e0:7a:fb:a8:5c:5f:a4:57:a7:
39:e1:0d:be:e7:1b:01:4e:47:50:1b:f6:11:46:ae:1b:3d:b1:
61:92:c4:77:68:e1:85:d5:8c:b1:03:e9:ef:f3:08:3d:1c:7e:
1a:4e:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:10 2026 by rpki-client