
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json)
Hash identifier: LtO1JcyDO6X1C6WoqEZBQ9w2jj8gUo1+LFLzVZXE6hM=
Subject key identifier: EC:24:B7:BC:DE:0C:B0:5B:D5:94:11:74:02:1A:3E:56:F4:C8:7D:4C
Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Certificate serial: 44AA2F27AA6E06C7916732D9B9C4329F75DD3831
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
Manifest number: 0521
Signing time: Sat 28 Feb 2026 23:41:13 +0000
Manifest this update: Sat 28 Feb 2026 23:36:13 +0000
Manifest next update: Wed 04 Mar 2026 05:37:13 +0000
Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: R1Fog3PIYkRdHSnjK/oLoa8cnqwlAocyP32nQqARI54=)
2: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=)
3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: W1EM8TKMaVAV6jXXbpVbI918S/VDeTTnBLSRi3ioC4k=)
4: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 05:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:aa:2f:27:aa:6e:06:c7:91:67:32:d9:b9:c4:32:9f:75:dd:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Validity
Not Before: Feb 28 23:36:13 2026 GMT
Not After : Mar 4 05:37:13 2026 GMT
Subject: CN=EC24B7BCDE0CB05BD5941174021A3E56F4C87D4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:79:d0:6d:72:59:4d:3b:94:8e:b3:95:02:
99:5a:ad:0d:66:ea:7c:3d:e7:dc:63:df:6e:17:27:
5d:18:25:09:f7:a8:f4:24:b2:f2:da:50:7e:4d:fc:
98:0a:02:73:9d:20:27:f8:ab:c5:6a:2e:56:b5:a1:
4b:37:ac:78:49:5a:87:c3:0a:3c:6e:aa:5a:51:f5:
0d:be:48:4b:1e:76:7d:5d:b1:74:d9:b6:df:7f:90:
f6:91:13:5a:00:4c:0c:50:1e:dd:89:08:fa:e1:eb:
bd:e9:d6:4a:72:b8:14:bf:bd:cc:aa:fd:6e:bc:04:
9a:b5:69:ee:18:aa:b6:85:49:91:aa:b6:85:8a:b7:
5f:92:99:a2:27:d0:52:18:c5:a2:b8:1d:35:4f:cf:
f7:4d:e2:b0:dc:b9:19:ee:bb:75:22:3f:1b:06:09:
ff:9d:18:7a:0d:4e:b9:dd:5e:98:de:a7:c4:43:92:
54:ba:20:fb:40:95:73:65:18:c3:93:46:6e:f8:ca:
4f:36:e4:9d:7c:81:4d:02:30:12:ee:76:9b:bc:1d:
ef:8f:15:e4:95:f2:c0:b8:cc:35:0d:b0:53:3a:61:
4e:71:a4:5e:b0:d6:f8:cd:5b:68:d4:d5:c5:4f:9c:
da:8e:9c:ed:7f:8c:50:84:d9:99:af:c9:be:fb:2f:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:24:B7:BC:DE:0C:B0:5B:D5:94:11:74:02:1A:3E:56:F4:C8:7D:4C
X509v3 Authority Key Identifier:
keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:96:0d:56:9c:0f:88:1c:f8:46:39:ca:10:70:6d:0b:d8:
1b:f1:f9:02:7e:8b:4e:1a:75:d4:dc:86:d0:d7:7a:fe:5f:88:
1d:74:af:e2:0c:ca:6e:bf:a7:6a:f4:31:47:6a:b2:23:9b:c6:
7d:34:6a:4f:a9:45:34:f8:fd:ff:39:35:c5:3b:ca:44:bb:aa:
f2:3d:69:31:b8:c0:e9:1f:aa:ed:12:37:ab:14:91:24:b6:04:
ce:77:5d:01:b5:b1:db:ce:f3:6a:57:37:17:91:9e:0e:bd:a3:
e5:f7:a9:f3:ff:40:44:6d:f6:e9:2a:99:b7:d6:b1:f8:df:7e:
bd:9b:31:12:c8:60:05:5c:aa:53:b9:11:4a:5d:5b:e8:ec:64:
97:f0:5d:39:26:ef:05:1c:43:b5:82:06:ad:cb:ef:10:1c:40:
02:c4:c4:7d:ca:7f:a6:f9:9e:20:0a:2a:ea:44:f1:a3:02:31:
38:50:67:72:b9:da:12:c2:3b:bd:f1:15:a7:12:93:22:c0:f9:
a8:a1:fd:3e:20:9b:65:af:57:26:69:98:3b:c1:ae:06:ed:72:
4d:9b:e6:12:5f:6b:87:98:62:5a:ee:2e:d1:86:bc:97:51:aa:
c7:74:39:02:44:cd:4d:11:4e:bc:4b:21:39:91:5e:b7:60:31:
40:22:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:04 2026 by rpki-client