$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft File: 47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft (raw, json) Hash identifier: I1RumRMBbmkplcT47gzkjkNlcE2mrQXJUPZWn2oGE3w= Subject key identifier: D2:7E:AD:07:80:B7:7D:8D:C4:45:F9:58:24:32:A3:85:59:CD:36:80 Authority key identifier: 47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30 Certificate issuer: /CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830 Certificate serial: 27AB1ED00E3A5144916DF9D4235189CEAAE393F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 14:49:28 +0000 Manifest this update: Wed 23 Sep 2026 14:44:28 +0000 Manifest next update: Thu 24 Sep 2026 17:21:28 +0000 Files and hashes: 1: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: v/2zYMSXUTzSSW7I8Fu1z9fEt17y0q1g424KCA4tdns=) 2: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: ZJiVItgKv8mzN8I1br1Yth+rPx8k2fE2ta0yCq6Q6Go=) 3: 47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl (hash: emPtWhxJAKgJFmZlq3Y6kkAMjA8tk3gTlZL0vufpoQU=) 4: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: xZnHAYFbnEc0A3njrjnrHmJ+U6dJWxONqshnQ5yBO6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ab:1e:d0:0e:3a:51:44:91:6d:f9:d4:23:51:89:ce:aa:e3:93:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830 Validity Not Before: Sep 23 14:44:28 2026 GMT Not After : Sep 24 17:21:28 2026 GMT Subject: CN=D27EAD0780B77D8DC445F9582432A38559CD3680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:80:57:85:6a:a7:d4:de:80:4e:8e:17:04: cb:ef:5c:a0:74:d5:2f:4b:26:af:db:b0:f2:b2:4e: 67:c2:74:af:17:83:da:b1:c9:5b:84:d2:c9:c4:d6: 33:15:49:94:c1:56:40:a4:69:88:8e:01:82:fb:9e: 0a:42:02:d4:7a:6b:40:70:2f:dd:7c:bc:db:50:8b: f9:f7:94:35:f5:a2:eb:09:a5:79:2e:e1:07:0c:32: f0:cf:5c:57:31:fd:5d:39:59:51:04:ca:19:14:76: 43:31:6d:17:c9:d1:ad:e6:43:0b:c5:b0:cb:a7:8f: 74:f6:c0:0b:96:a4:84:0e:af:80:7f:6f:a9:9a:68: 43:25:03:b6:6e:bb:e0:86:88:df:34:d5:69:ff:b7: 19:ef:93:3a:8d:2d:88:6b:44:c9:3f:d6:e5:d6:75: 85:bd:3a:49:2e:c4:bd:2d:e4:78:2c:37:2e:46:7a: 44:e4:48:1a:05:03:a7:23:8d:e5:d0:39:30:ce:61: f5:51:2b:ba:f1:7c:67:2e:21:62:86:81:63:a5:d1: 84:b3:9c:7f:43:98:4c:68:9c:5f:b7:2f:74:b0:0f: 32:9b:f9:cb:e9:0b:50:7e:97:c7:48:20:ca:d0:3b: 10:2b:4b:84:10:c7:04:cf:46:c3:6f:56:07:aa:ef: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7E:AD:07:80:B7:7D:8D:C4:45:F9:58:24:32:A3:85:59:CD:36:80 X509v3 Authority Key Identifier: keyid:47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:85:c6:5b:09:48:90:14:d9:3f:2a:f8:69:80:41:89:b7:9c: d3:6a:31:89:fb:fe:6c:fe:8f:68:2d:c3:ad:33:72:a7:f4:da: 3f:65:2f:25:1d:a8:5a:f1:a0:3e:e1:1b:43:dc:68:01:34:3c: 4f:32:6f:91:63:38:4f:37:a5:4f:aa:cd:ea:2b:fb:80:0f:84: eb:d9:de:bc:f7:91:d2:86:e3:bf:d4:f0:d6:5a:ec:a9:2a:65: b1:6f:bb:42:4e:12:d5:9e:75:cc:38:22:3d:0f:44:23:03:95: b2:78:5b:14:d0:af:e7:a8:92:d1:37:89:28:38:92:e5:af:c6: 22:8a:4f:e9:bc:c4:36:81:f0:32:e4:32:08:0d:15:e2:05:8f: 29:91:49:32:57:aa:61:be:ce:1f:2a:c4:02:48:ed:72:9d:e1: 2e:4f:ba:a2:35:3c:99:8e:58:11:b2:3d:ef:35:93:54:93:1c: 09:a6:7c:61:a3:31:c1:5c:ed:fc:34:dd:9d:cd:db:12:3f:67: fa:ae:ba:5d:9f:45:4f:20:a3:ad:e6:8e:91:ad:8a:7f:67:c3: 6a:6f:8c:2d:7a:0d:52:aa:49:1b:48:b0:fd:49:0e:9f:eb:66: 6a:cf:43:a8:c8:7c:dc:8e:d4:1d:04:4f:75:01:e1:03:7f:fe: 15:62:e8:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6se0A46UUSRbfnUI1GJzqrjk/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJGODEw Qjc5MzgzMDAeFw0yNjA5MjMxNDQ0MjhaFw0yNjA5MjQxNzIxMjhaMDMxMTAvBgNV BAMTKEQyN0VBRDA3ODBCNzdEOERDNDQ1Rjk1ODI0MzJBMzg1NTlDRDM2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHG4BXhWqn1N6ATo4XBMvvXKB0 1S9LJq/bsPKyTmfCdK8Xg9qxyVuE0snE1jMVSZTBVkCkaYiOAYL7ngpCAtR6a0Bw L918vNtQi/n3lDX1ousJpXku4QcMMvDPXFcx/V05WVEEyhkUdkMxbRfJ0a3mQwvF sMunj3T2wAuWpIQOr4B/b6maaEMlA7Zuu+CGiN801Wn/txnvkzqNLYhrRMk/1uXW dYW9OkkuxL0t5HgsNy5GekTkSBoFA6cjjeXQOTDOYfVRK7rxfGcuIWKGgWOl0YSz nH9DmExonF+3L3SwDzKb+cvpC1B+l8dIIMrQOxArS4QQxwTPRsNvVgeq7x3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0n6tB4C3fY3ERflYJDKjhVnNNoAwHwYDVR0j BBgwFoAUR+teBU2m+/8k2d7qpWcvgQt5ODAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGUzZjJlOWItMTA2OC00ZmE5LWJhMWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0 REE2RkJGRjI0RDlERUVBQTU2NzJGODEwQjc5MzgzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0VCNUUwNTREQTZGQkZGMjREOURFRUFBNTY3MkY4MTBCNzkz ODMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJG ODEwQjc5MzgzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6FxlsJSJAU2T8q+GmAQYm3nNNqMYn7/mz+ j2gtw60zcqf02j9lLyUdqFrxoD7hG0PcaAE0PE8yb5FjOE83pU+qzeor+4APhOvZ 3rz3kdKG47/U8NZa7KkqZbFvu0JOEtWedcw4Ij0PRCMDlbJ4WxTQr+eoktE3iSg4 kuWvxiKKT+m8xDaB8DLkMggNFeIFjymRSTJXqmG+zh8qxAJI7XKd4S5PuqI1PJmO WBGyPe81k1STHAmmfGGjMcFc7fw03Z3N2xI/Z/quul2fRU8go63mjpGtin9nw2pv jC16DVKqSRtIsP1JDp/rZmrPQ6jIfNyO1B0ET3UB4QN//hVi6NU= -----END CERTIFICATE-----Generated at Thu Sep 24 00:40:35 2026 by rpki-client