$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: EY9e9+wnvpbuuc4g6uDcS/wxvdatp73OVX+4MhDLHD0= Subject key identifier: 58:0D:FD:D8:C2:DB:7D:CB:A5:10:1F:BD:D5:34:FB:1D:D0:9D:3B:2F Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 604CEA7AFC39B1EF7B41C46494DF2F2F6404786E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 02A6 Signing time: Fri 17 Apr 2026 02:12:31 +0000 Manifest this update: Fri 17 Apr 2026 02:07:31 +0000 Manifest next update: Mon 20 Apr 2026 03:55:31 +0000 Files and hashes: 1: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: it5Y8uFhllmL1qnw/+3j2vvqBc+psgWABpreLSlxm7g=) 2: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: GkgIUj3iLnoDBgSLwsXcxjcRmy20+p6SRzqI9r3pCJc=) 3: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: KdryargeIqiffwYupqsX1uiOw2sgJxDwDmYHhrfT8ZA=) 4: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: GqDgDYZHwoD6s9CHkugs2Z1R9R08+t73eMRbzWBmBRU=) 5: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: iktCkSO5hM+v7WmcJjH9NG23Te6EJ1TEl9RLBKTb1nA=) 6: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: dJ48+N7DnAPMlFVVdm79c3GqAaF0/rFXKq0WJY2Deco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4c:ea:7a:fc:39:b1:ef:7b:41:c4:64:94:df:2f:2f:64:04:78:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Apr 17 02:07:31 2026 GMT Not After : Apr 20 03:55:31 2026 GMT Subject: CN=580DFDD8C2DB7DCBA5101FBDD534FB1DD09D3B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:98:ca:65:82:e1:7b:2f:4c:65:07:53:74:e5: 7f:a5:01:44:0b:e1:df:f4:11:bf:0b:f6:6d:25:86: 2f:49:96:c7:e2:9a:a7:44:1f:23:cf:f7:fa:b7:6f: 23:ff:8b:c5:f3:e5:ab:d6:19:97:d9:62:15:26:0f: 64:d2:95:46:ee:9e:2d:d7:b8:b5:19:88:a0:c4:d2: 3f:28:85:84:2d:8d:07:f7:ad:e3:9c:79:f3:8f:58: 7a:d6:1b:ff:24:5f:99:74:85:82:eb:24:f6:b8:e2: b5:5f:ba:a7:26:3f:2f:9d:66:1c:06:5a:c0:d5:80: 51:89:bb:85:eb:51:ff:fa:e6:e5:cc:bd:52:6b:cd: 9d:f2:59:79:2d:94:d9:09:b2:8f:83:ab:fa:ba:29: 67:e4:2a:1e:a0:d2:45:9c:c5:03:ae:4c:53:51:b6: c1:d8:c3:ae:ff:cc:fc:51:46:4d:49:38:9a:38:87: 01:7c:f4:02:f1:5c:1c:b7:1c:a9:73:da:89:8d:4c: 66:be:b3:cc:cf:c6:6d:2a:bc:e7:48:bd:66:ab:ca: e4:0c:6e:0b:30:1d:4f:e0:aa:66:46:1e:e9:92:d3: 9a:17:44:a9:ef:97:87:f3:1b:15:9a:3a:99:56:fa: b6:a5:fd:4b:17:13:3e:4e:39:2b:44:32:fe:bd:54: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0D:FD:D8:C2:DB:7D:CB:A5:10:1F:BD:D5:34:FB:1D:D0:9D:3B:2F X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e8:84:23:1a:63:f6:63:09:0d:06:9d:c2:ec:6b:2d:03:79: 19:2e:0d:94:eb:dc:b1:99:6f:54:95:67:4e:4b:ea:a1:68:4f: a7:82:6f:d7:3b:78:94:e4:93:d6:cc:20:d4:22:aa:e4:ff:5d: 7f:15:0b:5c:86:e5:96:73:31:ac:b2:9a:7b:e5:76:af:12:5d: e9:d3:cc:a7:78:6d:45:2e:4b:3c:3d:c2:6b:90:4c:d9:9c:61: 1c:a7:8b:88:57:99:a5:80:ba:ed:13:b6:cd:46:2b:64:e5:71: 05:fe:de:bd:cd:a5:86:af:dc:d9:78:e5:02:37:67:81:9d:85: ee:0b:b6:e6:5f:eb:58:d5:8e:5d:61:fa:c9:95:81:df:8a:09: ef:fb:d7:22:c1:0b:02:40:91:62:7b:b5:33:20:ba:12:37:38: 9d:a3:a2:5a:cf:31:71:77:ef:22:d8:89:9d:ad:95:2f:8b:8c: f7:c2:56:3a:84:0c:2e:7e:fa:82:80:3c:8b:20:44:2b:dd:6b: 88:dc:21:16:41:ca:4f:6b:d4:59:29:40:1d:92:ee:cc:f1:7e: a0:ba:bd:82:42:e7:43:fc:36:d8:02:32:13:9f:b0:3d:49:d1: 53:b5:22:ea:f1:df:c1:8f:73:e3:00:9e:b5:c8:2f:6f:1c:25: a0:60:18:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEzqevw5se97QcRklN8vL2QEeG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNjA0MTcwMjA3MzFaFw0yNjA0MjAwMzU1MzFaMDMxMTAvBgNV BAMTKDU4MERGREQ4QzJEQjdEQ0JBNTEwMUZCREQ1MzRGQjFERDA5RDNCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhmMplguF7L0xlB1N05X+lAUQL 4d/0Eb8L9m0lhi9JlsfimqdEHyPP9/q3byP/i8Xz5avWGZfZYhUmD2TSlUbuni3X uLUZiKDE0j8ohYQtjQf3reOcefOPWHrWG/8kX5l0hYLrJPa44rVfuqcmPy+dZhwG WsDVgFGJu4XrUf/65uXMvVJrzZ3yWXktlNkJso+Dq/q6KWfkKh6g0kWcxQOuTFNR tsHYw67/zPxRRk1JOJo4hwF89ALxXBy3HKlz2omNTGa+s8zPxm0qvOdIvWaryuQM bgswHU/gqmZGHumS05oXRKnvl4fzGxWaOplW+ral/UsXEz5OOStEMv69VLolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWA392MLbfculEB+91TT7HdCdOy8wHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7ohCMaY/ZjCQ0GncLsay0DeRkuDZTr3LGZ b1SVZ05L6qFoT6eCb9c7eJTkk9bMINQiquT/XX8VC1yG5ZZzMayymnvldq8SXenT zKd4bUUuSzw9wmuQTNmcYRyni4hXmaWAuu0Tts1GK2TlcQX+3r3NpYav3Nl45QI3 Z4Gdhe4LtuZf61jVjl1h+smVgd+KCe/71yLBCwJAkWJ7tTMguhI3OJ2jolrPMXF3 7yLYiZ2tlS+LjPfCVjqEDC5++oKAPIsgRCvda4jcIRZByk9r1FkpQB2S7szxfqC6 vYJC50P8NtgCMhOfsD1J0VO1Iurx38GPc+MAnrXIL28cJaBgGKs= -----END CERTIFICATE-----Generated at Fri Apr 17 12:31:58 2026 by rpki-client