$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft File: 47C0520954E7036D01276256DF53723219F2EDC8.mft (raw, json) Hash identifier: VXUilHGcbPXNHO3FhQlXJo/wcUpHbv6riLYycyZWeXI= Subject key identifier: 21:54:54:45:B7:A3:75:7D:08:CB:2C:09:70:25:85:EB:78:BF:E8:B6 Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 Certificate issuer: /CN=47C0520954E7036D01276256DF53723219F2EDC8 Certificate serial: 234DCBE0FDCE20548BBFE265026007B96E456C67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 02:08:48 +0000 Manifest this update: Wed 23 Sep 2026 02:03:48 +0000 Manifest next update: Thu 24 Sep 2026 03:55:48 +0000 Files and hashes: 1: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: 1TpHsmaA1JQZU+qQGSvG+moVShwWiM39h2j2sMJO5Wk=) 2: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=) 3: 47C0520954E7036D01276256DF53723219F2EDC8.crl (hash: ZJtJSnNW6Ob3IbTHpP3SrLnmRQPjocjPH7EP1wJwQus=) 4: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: 6NYVsKX5xsfwPEbXx8usYHTJLFAFT9/9ztiP0cssm8I=) 5: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: BaWAfcWmlaxL1WWaXjy2UfPAwdXpBP48cn9wbdt4S4k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4d:cb:e0:fd:ce:20:54:8b:bf:e2:65:02:60:07:b9:6e:45:6c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8 Validity Not Before: Sep 23 02:03:48 2026 GMT Not After : Sep 24 03:55:48 2026 GMT Subject: CN=21545445B7A3757D08CB2C09702585EB78BFE8B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:9b:db:99:38:92:31:24:90:74:06:15:a1: 00:8f:1f:81:b2:db:9c:67:aa:d6:c6:ff:79:13:d2: 6a:70:28:b6:b0:28:2b:e5:22:ea:ba:81:04:aa:71: 1f:35:12:79:a1:c5:8a:d0:12:04:e1:3e:bb:f3:a1: 54:b2:fe:5b:66:84:9e:1e:33:f2:27:74:3e:3d:92: 84:a6:03:3c:83:07:0e:3f:0c:18:64:e9:52:07:f3: 69:28:c7:90:ad:6a:e2:f9:6d:e4:82:fc:09:49:47: 08:be:9a:a1:6a:ac:75:89:9f:74:b0:d6:7d:59:cb: 7b:37:bd:1e:88:5e:00:74:c4:36:4e:54:e9:af:0d: ed:a5:70:fa:2c:c8:97:bb:c7:33:63:ba:57:91:ee: 16:32:bc:c4:66:67:5a:32:be:44:9f:cd:e2:de:6c: 26:6a:04:dc:79:17:6d:b5:cd:ca:d8:47:18:aa:03: eb:09:01:a0:9b:e9:63:bd:6e:e0:cf:c1:c4:cd:ea: 5d:1c:25:0d:21:a5:90:36:b3:9f:04:3d:1a:0d:85: 61:da:e7:9e:74:75:2a:be:28:65:04:83:c5:1d:c6: 24:fc:73:a7:78:cf:b2:d6:7c:77:fc:73:d6:7a:41: 45:32:f7:42:77:b8:af:cd:be:89:c9:0f:19:38:e8: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:54:54:45:B7:A3:75:7D:08:CB:2C:09:70:25:85:EB:78:BF:E8:B6 X509v3 Authority Key Identifier: keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:36:e6:8d:53:10:0d:e8:2d:11:f3:c7:0d:89:7c:62:04:ba: b5:b1:85:14:77:c2:cf:b8:82:cf:27:7d:42:dc:b8:6f:03:33: 39:05:02:6e:50:b5:f9:ed:9d:83:29:3f:0d:46:a5:4c:d4:18: 4c:5b:25:66:73:25:46:76:52:29:7d:09:44:cd:c2:8b:63:0f: 5b:d1:bb:6a:b7:47:0e:15:3b:10:f9:8d:8e:65:12:d4:71:00: a5:84:37:ee:25:65:36:1d:66:73:8e:27:e7:72:18:c7:c4:23: 9b:1a:ce:4f:a0:fb:83:0c:45:c7:d4:0e:57:10:49:45:5f:47: 17:cb:96:b5:a9:46:65:9a:90:38:92:9a:ee:af:3b:fb:2b:4a: de:62:3d:41:5d:cf:5b:92:88:ab:07:47:48:97:d7:ad:1e:ba: ad:5e:e1:89:47:e2:ec:ef:32:2a:f7:ed:51:3b:32:59:1d:ba: 10:a5:ab:cb:36:58:3d:8e:c3:67:07:36:32:98:7b:b9:e3:44: 39:bb:ac:0a:2f:fd:22:77:60:60:c8:7d:77:b0:b5:1f:79:b0: f3:ee:c8:c4:33:5d:7a:c1:4b:ad:65:ac:5f:c0:d8:91:49:3e: 1c:01:17:6a:a3:fb:96:00:49:22:a5:8d:ea:29:df:a0:b8:ea: fa:e2:4e:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI03L4P3OIFSLv+JlAmAHuW5FbGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIx OUYyRURDODAeFw0yNjA5MjMwMjAzNDhaFw0yNjA5MjQwMzU1NDhaMDMxMTAvBgNV BAMTKDIxNTQ1NDQ1QjdBMzc1N0QwOENCMkMwOTcwMjU4NUVCNzhCRkU4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxpvbmTiSMSSQdAYVoQCPH4Gy 25xnqtbG/3kT0mpwKLawKCvlIuq6gQSqcR81EnmhxYrQEgThPrvzoVSy/ltmhJ4e M/IndD49koSmAzyDBw4/DBhk6VIH82kox5CtauL5beSC/AlJRwi+mqFqrHWJn3Sw 1n1Zy3s3vR6IXgB0xDZOVOmvDe2lcPosyJe7xzNjuleR7hYyvMRmZ1oyvkSfzeLe bCZqBNx5F221zcrYRxiqA+sJAaCb6WO9buDPwcTN6l0cJQ0hpZA2s58EPRoNhWHa 5550dSq+KGUEg8UdxiT8c6d4z7LWfHf8c9Z6QUUy90J3uK/NvonJDxk46B2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIVRURbejdX0IyywJcCWF63i/6LYwHwYDVR0j BBgwFoAUR8BSCVTnA20BJ2JW31NyMhny7cgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ3MGNjMzctMWZhNi00ZmEwLWE4OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1 NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIxOUYyRURDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0MwNTIwOTU0RTcwMzZEMDEyNzYyNTZERjUzNzIzMjE5RjJF REM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1Mzcy MzIxOUYyRURDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY25o1TEA3oLRHzxw2JfGIEurWxhRR3ws+4 gs8nfULcuG8DMzkFAm5QtfntnYMpPw1GpUzUGExbJWZzJUZ2Uil9CUTNwotjD1vR u2q3Rw4VOxD5jY5lEtRxAKWEN+4lZTYdZnOOJ+dyGMfEI5sazk+g+4MMRcfUDlcQ SUVfRxfLlrWpRmWakDiSmu6vO/srSt5iPUFdz1uSiKsHR0iX160euq1e4YlH4uzv Mir37VE7MlkduhClq8s2WD2Ow2cHNjKYe7njRDm7rAov/SJ3YGDIfXewtR95sPPu yMQzXXrBS61lrF/A2JFJPhwBF2qj+5YASSKljeop36C46vriTqc= -----END CERTIFICATE-----Generated at Wed Sep 23 21:01:51 2026 by rpki-client