
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
File: 47C0520954E7036D01276256DF53723219F2EDC8.mft (raw, json)
Hash identifier: VgKYOrpqjJQEC7KvX/Zlludm6ul+yDwjE4bExrWyf7w=
Subject key identifier: F7:C4:86:04:51:03:77:1C:19:17:4C:07:0B:56:7A:60:A6:52:C6:E2
Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8
Certificate issuer: /CN=47C0520954E7036D01276256DF53723219F2EDC8
Certificate serial: 7395FF3E21CD284C0D2CDAF7BA73EB00ECFE13D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:03:12 +0000
Manifest this update: Tue 12 May 2026 06:58:12 +0000
Manifest next update: Wed 13 May 2026 10:40:12 +0000
Files and hashes: 1: 47C0520954E7036D01276256DF53723219F2EDC8.crl (hash: 2/8D7AX51qA5sHuhGFACuSHq9gAbX8m2oaurr3FVuxE=)
2: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: 6NYVsKX5xsfwPEbXx8usYHTJLFAFT9/9ztiP0cssm8I=)
3: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: 1TpHsmaA1JQZU+qQGSvG+moVShwWiM39h2j2sMJO5Wk=)
4: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=)
5: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: BaWAfcWmlaxL1WWaXjy2UfPAwdXpBP48cn9wbdt4S4k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl
rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:95:ff:3e:21:cd:28:4c:0d:2c:da:f7:ba:73:eb:00:ec:fe:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8
Validity
Not Before: May 12 06:58:12 2026 GMT
Not After : May 13 10:40:12 2026 GMT
Subject: CN=F7C486045103771C19174C070B567A60A652C6E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:b2:40:2d:8b:ef:7b:57:fa:7b:98:4a:4f:
bf:fe:7d:b0:35:b8:f4:5b:35:eb:c5:98:b0:e6:51:
be:00:b9:7a:ca:8f:61:9a:40:1f:68:77:2e:08:3e:
3d:13:53:80:bd:0e:4f:b3:44:45:96:21:53:d9:b0:
33:b4:ce:eb:2e:6c:9d:fb:8b:31:8c:74:c4:55:06:
90:8f:e3:4f:c7:f8:6c:62:90:83:cf:df:0d:17:a1:
1c:8d:ec:f5:b4:00:e8:f3:93:a5:94:0b:90:52:56:
ad:3d:89:f4:84:c1:20:cd:9d:b2:69:49:21:92:ac:
e4:34:ed:9d:5d:fa:6f:99:dc:78:37:56:ef:a7:68:
e9:5b:f7:9e:75:52:68:4f:e6:d0:a8:34:71:e1:5d:
bf:06:2a:78:69:28:21:c1:f6:42:50:cd:31:64:cf:
87:02:f0:5c:24:15:ef:16:19:43:9a:48:1d:d1:f0:
6f:32:2c:fd:5a:54:05:82:ed:a2:54:9f:10:31:a6:
3f:9e:04:75:ed:46:04:81:63:4a:cd:08:fd:e3:b6:
18:06:b2:28:e2:43:bb:e2:f9:72:37:dd:ee:9e:f4:
cf:05:d2:0f:0b:98:00:c5:a9:0f:47:8b:e9:f0:2a:
88:66:d0:22:0d:8c:65:6d:a0:ce:5e:20:0b:6a:b6:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:86:04:51:03:77:1C:19:17:4C:07:0B:56:7A:60:A6:52:C6:E2
X509v3 Authority Key Identifier:
keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ab:8f:9a:a0:96:ec:df:d6:9e:b0:12:79:ef:8e:01:10:c1:
e7:29:bb:11:af:96:23:4b:10:50:d0:aa:3e:b6:24:0a:88:76:
0f:64:27:2e:26:b7:18:ea:ec:c2:2a:5f:6f:a3:12:13:b6:fc:
9d:ff:af:53:48:b9:dd:43:4c:25:56:bc:80:e2:25:92:5b:ff:
8c:80:39:0c:0d:26:a0:89:4c:c3:46:f4:2f:67:dc:61:85:e3:
1c:32:7a:4d:b1:45:d3:c2:57:14:6b:73:52:7b:1f:9d:b2:99:
13:0c:b0:07:b3:f2:65:04:97:1a:bd:ce:44:d9:35:26:32:59:
69:93:03:96:4a:6c:08:ec:cd:16:09:0e:c8:4e:2a:32:8a:d8:
ab:15:39:20:71:49:72:4e:51:06:b6:db:6e:67:f2:de:e6:de:
23:f1:75:d0:bc:eb:c3:46:fe:0b:5c:8f:4c:c1:96:ba:27:f2:
0d:36:f2:fe:ff:42:aa:c6:b3:3f:ac:86:44:a9:d4:15:9d:d4:
73:e1:7c:93:43:81:e1:26:5f:d7:b4:56:6b:f4:bd:f5:3c:14:
62:98:d0:6b:76:48:d3:68:3d:a9:74:c1:7b:49:95:a1:ca:43:
ff:74:be:a2:ff:9e:c1:f9:bd:2d:c5:ab:e0:4a:c6:b0:a5:9b:
e7:5d:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:38 2026 by rpki-client