
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
File: 47C0520954E7036D01276256DF53723219F2EDC8.mft (raw, json)
Hash identifier: 4pP11a26sX0m3PtVL/mQ4OJt3kFOJo3IynKf/aQOI+k=
Subject key identifier: EA:6B:84:FE:8E:F4:EC:6A:E7:90:CF:9D:F6:A6:AC:79:C6:47:B2:D4
Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8
Certificate issuer: /CN=47C0520954E7036D01276256DF53723219F2EDC8
Certificate serial: 016C6549CEDDE2E2A246126A0F5D753C4645FD06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 14:48:01 +0000
Manifest this update: Thu 23 Jul 2026 14:43:01 +0000
Manifest next update: Fri 24 Jul 2026 18:30:01 +0000
Files and hashes: 1: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=)
2: 47C0520954E7036D01276256DF53723219F2EDC8.crl (hash: jXGXSx+6hu6B2/SvjqOSeX+A1WbjIfbu3CemzmoC+TA=)
3: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: BaWAfcWmlaxL1WWaXjy2UfPAwdXpBP48cn9wbdt4S4k=)
4: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: 6NYVsKX5xsfwPEbXx8usYHTJLFAFT9/9ztiP0cssm8I=)
5: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: 1TpHsmaA1JQZU+qQGSvG+moVShwWiM39h2j2sMJO5Wk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl
rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6c:65:49:ce:dd:e2:e2:a2:46:12:6a:0f:5d:75:3c:46:45:fd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8
Validity
Not Before: Jul 23 14:43:01 2026 GMT
Not After : Jul 24 18:30:01 2026 GMT
Subject: CN=EA6B84FE8EF4EC6AE790CF9DF6A6AC79C647B2D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:25:ec:56:81:9f:76:26:d1:1f:ae:06:50:
99:40:dc:0b:e4:33:5b:2d:50:78:1f:ba:ed:9a:b8:
13:e0:57:6b:3e:b7:0b:00:2d:d6:53:5c:53:06:0e:
1d:82:b6:57:98:eb:55:e9:40:fe:83:7a:ca:a7:ba:
a0:2e:8c:de:ac:31:c9:9f:a0:a5:8c:3c:a6:a5:c9:
19:79:9e:c1:6b:42:ce:81:2b:9c:73:39:67:6b:74:
58:33:14:ce:5c:34:4b:d3:a2:05:47:bb:32:08:3d:
29:df:b5:cc:8f:ad:08:7f:21:7a:b1:76:69:bb:c7:
8e:5d:8c:2e:37:4a:77:2b:44:2a:86:14:65:60:2f:
73:ac:8e:e7:d5:16:6e:10:46:56:97:74:e9:63:66:
8a:72:22:c8:2a:b5:52:e8:4e:ac:e3:94:09:c6:0b:
32:94:39:c8:0f:65:40:51:2d:1d:97:a4:05:9c:37:
20:ec:e1:88:ea:c4:a1:36:52:0c:23:a5:2a:8e:46:
7c:f5:a9:19:d5:3d:2b:db:bd:74:1d:b1:57:34:49:
ab:66:40:d3:61:9f:c1:dc:c1:a0:d9:fa:3d:29:ad:
01:83:97:f1:ee:8d:fa:b0:0a:8d:62:d8:8a:ac:71:
f8:40:eb:d6:3e:0e:ce:d8:bf:f0:e1:86:1b:b5:1f:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:84:FE:8E:F4:EC:6A:E7:90:CF:9D:F6:A6:AC:79:C6:47:B2:D4
X509v3 Authority Key Identifier:
keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:55:15:50:f1:3d:1b:09:c3:a7:23:e6:5b:52:53:f2:9d:97:
0c:ac:75:5c:1e:50:87:0d:ff:49:08:86:f0:3f:83:52:82:25:
9b:7c:f7:b9:27:94:bc:82:2e:0c:2b:00:bc:ab:e5:05:63:76:
e2:90:ad:c8:bd:41:72:d3:83:52:f2:c8:ed:bb:2f:22:15:10:
b5:09:4a:a3:a2:78:62:90:67:cd:c0:e4:3f:a5:98:ca:58:2b:
8c:c0:46:5c:da:24:27:5e:ba:a1:dd:27:12:de:5d:d0:5e:14:
92:9f:f2:c3:49:b5:a0:61:f2:03:44:8a:f0:3d:ad:c2:df:fe:
0a:7d:e5:2b:bc:f6:7b:e1:73:2a:35:fe:52:f8:c8:f6:d2:c7:
18:9b:55:9d:f2:63:c2:c5:c7:45:53:38:e3:98:c8:98:c1:c3:
71:95:eb:f6:7d:83:f7:ab:ee:18:d1:99:72:36:f3:4f:c3:4d:
95:e4:b0:9e:42:37:b1:66:1b:e6:ba:55:47:0f:03:3d:38:1e:
2b:b0:96:7c:e2:f8:c6:1a:62:c0:a3:ac:e7:04:b3:32:88:e1:
51:47:99:f3:e8:a4:40:2a:d8:ee:83:3b:e3:99:af:69:40:dc:
12:9d:db:88:38:53:7a:27:1f:95:86:34:78:05:d4:d1:2a:f3:
ae:11:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:29 2026 by rpki-client