$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: UNsALlG/o6CLgHjgy67lXWtniFtzUfFRdCeonchiSGc= Subject key identifier: 29:55:92:6E:C1:F0:D7:95:F0:C9:69:CA:B3:03:5F:36:0D:3B:3A:2C Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 14AB5C7DE435FD94E77A71E6E1B0BD68BC79C9FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 01ED Signing time: Thu 16 Apr 2026 14:22:18 +0000 Manifest this update: Thu 16 Apr 2026 14:17:18 +0000 Manifest next update: Mon 20 Apr 2026 00:39:18 +0000 Files and hashes: 1: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: uK0tYoFKWzW2y8KltD3aqDC26oZ9pYtmSp1Jv/BCAoY=) 2: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) 3: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: pdV+aN3I6dloLI2qkmzalOgfwKnlHe9DExCU7AJ1bj4=) 4: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: v5qvmgh9eiTpdk3UEoQin8K5RQSDk24SVWpfNhiVRfU=) 5: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: YcvLh67n7e3217p/ohm5Z9fx0zB5uGfIn0uiDiqYNwY=) 6: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: wgtqwaW/q6/6iiFZEkr1mrOJmIiiA3/QZmD2Fiv1Qhg=) 7: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: dHVT1pPpYfkat8LYG0fIQg445W2VxpF/m4eXlcGf8/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ab:5c:7d:e4:35:fd:94:e7:7a:71:e6:e1:b0:bd:68:bc:79:c9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Apr 16 14:17:18 2026 GMT Not After : Apr 20 00:39:18 2026 GMT Subject: CN=2955926EC1F0D795F0C969CAB3035F360D3B3A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:15:0e:8d:b2:4a:03:dd:d7:f2:45:7a:6b: 10:fc:5b:7e:6f:fa:75:b0:db:df:76:b2:26:20:ce: 16:6b:a1:70:46:0e:8b:1e:bc:90:44:cb:03:d1:96: 01:95:0f:fc:dd:f6:f5:73:2e:7c:17:96:30:de:9c: e0:81:47:a8:58:0a:c0:75:0a:a0:db:27:e5:75:8d: ea:cb:dc:31:bf:ea:06:f9:6c:93:3d:46:52:df:9e: b2:c0:98:81:92:c2:66:96:c2:d0:7b:0a:0e:e2:76: 06:04:41:cc:73:43:ab:e1:f3:5d:16:76:d3:c1:0d: e0:1c:4b:86:71:22:2b:07:bf:1f:00:59:a4:fc:ae: cf:e2:ae:88:ac:6c:09:cc:1e:a2:07:f3:6e:6e:36: 7a:14:53:42:a5:ad:3e:89:a5:3f:f1:4d:c0:ee:80: 6d:7e:46:56:02:a8:7d:21:1a:c3:ee:f2:3c:ec:8f: b3:f6:99:01:63:47:59:13:a0:cb:a9:ec:a4:f7:00: 3d:0d:0c:02:69:bd:e7:58:af:70:c5:23:4f:8a:13: 3e:0e:9e:0f:cc:f0:bc:b3:e9:5e:30:18:32:07:00: 39:49:18:9f:2b:43:d0:0c:19:b6:b0:60:9f:93:17: 98:aa:1e:32:32:13:8d:e2:93:5b:c1:09:6d:20:a1: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:55:92:6E:C1:F0:D7:95:F0:C9:69:CA:B3:03:5F:36:0D:3B:3A:2C X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:86:b1:37:b7:f5:1b:19:b8:b5:f8:2d:32:13:99:20:c4:d7: 59:51:4a:47:fb:53:e9:f7:a0:a2:e1:9b:b5:56:bb:22:0b:00: 48:76:6b:6a:6d:ea:bf:e9:9c:e9:fc:c1:25:20:5d:e9:13:09: 11:2b:97:ed:7e:bc:03:ab:8f:bf:39:82:84:01:dd:12:f3:38: 0c:08:f0:84:76:b3:b9:db:b5:f0:ac:03:63:1b:ac:6d:74:19: b2:9c:e7:b0:60:9c:29:d5:cf:a3:68:9a:17:41:ed:e6:aa:e6: 69:8b:92:7d:5b:20:3a:6c:01:8e:19:26:26:7d:d0:fe:bb:a6: 21:9b:7d:a8:b4:6b:b1:98:54:21:d0:bb:c2:af:d3:3e:b5:c7: a7:52:6f:e9:bd:b4:82:48:1b:26:0a:0f:b5:b1:55:41:c8:27: 97:d4:f8:04:39:b9:b8:4c:ff:31:b9:18:02:24:d9:fa:b9:5f: 62:34:ee:47:c3:5d:5a:31:58:04:a1:4d:85:0d:95:83:c7:c4: 2f:9e:52:61:b8:02:26:76:1a:14:f7:ea:85:69:f7:97:3c:25: 9e:5a:f2:1c:ea:1c:33:65:49:3f:9d:8a:36:38:23:64:ab:61: 56:20:c1:46:39:55:4c:c4:15:47:d5:1b:3f:fc:5b:c7:ec:b0: 94:07:c6:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKtcfeQ1/ZTnenHm4bC9aLx5yf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNjA0MTYxNDE3MThaFw0yNjA0MjAwMDM5MThaMDMxMTAvBgNV BAMTKDI5NTU5MjZFQzFGMEQ3OTVGMEM5NjlDQUIzMDM1RjM2MEQzQjNBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvhUOjbJKA93X8kV6axD8W35v +nWw2992siYgzhZroXBGDosevJBEywPRlgGVD/zd9vVzLnwXljDenOCBR6hYCsB1 CqDbJ+V1jerL3DG/6gb5bJM9RlLfnrLAmIGSwmaWwtB7Cg7idgYEQcxzQ6vh810W dtPBDeAcS4ZxIisHvx8AWaT8rs/iroisbAnMHqIH825uNnoUU0KlrT6JpT/xTcDu gG1+RlYCqH0hGsPu8jzsj7P2mQFjR1kToMup7KT3AD0NDAJpvedYr3DFI0+KEz4O ng/M8Lyz6V4wGDIHADlJGJ8rQ9AMGbawYJ+TF5iqHjIyE43ik1vBCW0goRZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKVWSbsHw15XwyWnKswNfNg07OiwwHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeGsTe39RsZuLX4LTITmSDE11lRSkf7U+n3 oKLhm7VWuyILAEh2a2pt6r/pnOn8wSUgXekTCRErl+1+vAOrj785goQB3RLzOAwI 8IR2s7nbtfCsA2MbrG10GbKc57BgnCnVz6NomhdB7eaq5mmLkn1bIDpsAY4ZJiZ9 0P67piGbfai0a7GYVCHQu8Kv0z61x6dSb+m9tIJIGyYKD7WxVUHIJ5fU+AQ5ubhM /zG5GAIk2fq5X2I07kfDXVoxWAShTYUNlYPHxC+eUmG4AiZ2GhT36oVp95c8JZ5a 8hzqHDNlST+dijY4I2SrYVYgwUY5VUzEFUfVGz/8W8fssJQHxig= -----END CERTIFICATE-----Generated at Sat Apr 18 01:29:23 2026 by rpki-client