
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft
File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json)
Hash identifier: nfZMWZydaN421UWM72XQCXS+dGiIct3M013TSuc6HZo=
Subject key identifier: A5:92:9D:83:00:DF:23:CA:EC:4F:9C:DE:77:EB:DD:26:0D:A6:BE:A6
Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Certificate serial: 54F825F17EA12B9B1EA7BAB97B2078F7A41862CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft
Manifest number: 0261
Signing time: Sat 28 Feb 2026 01:21:39 +0000
Manifest this update: Sat 28 Feb 2026 01:16:39 +0000
Manifest next update: Tue 03 Mar 2026 12:42:39 +0000
Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: 5gARNpnzmz+Vm0JRn6jiJadRNKoj1a9oySSLHukfmg0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl
rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 12:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f8:25:f1:7e:a1:2b:9b:1e:a7:ba:b9:7b:20:78:f7:a4:18:62:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Validity
Not Before: Feb 28 01:16:39 2026 GMT
Not After : Mar 3 12:42:39 2026 GMT
Subject: CN=A5929D8300DF23CAEC4F9CDE77EBDD260DA6BEA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:ab:9a:64:66:d2:0a:30:14:d2:89:d1:05:
d3:bf:ba:a7:ff:88:b3:0a:fc:92:e8:08:e8:51:0c:
a6:78:2a:32:f2:56:b5:e9:60:ae:9a:c4:dd:91:b5:
d1:24:af:f9:9b:6c:c7:c2:f3:f5:96:0d:26:74:c5:
5c:c2:37:92:a8:8f:cf:34:c1:8e:19:03:02:19:14:
10:60:27:74:da:8e:a1:64:62:e8:8f:98:e9:a5:c6:
5d:e2:e4:5f:6c:25:60:e3:4e:f4:39:86:dc:e8:dc:
ce:58:1d:89:0d:d6:e5:ab:ac:df:97:de:9b:b8:ff:
8c:4e:e2:cf:66:12:84:7c:bc:43:70:0f:d4:84:33:
13:cb:f5:20:6e:d6:a2:7c:ce:a4:92:29:91:eb:17:
18:0a:76:d2:38:b6:b5:71:34:f5:78:48:5c:45:71:
11:1e:91:97:8b:25:05:3b:1d:cd:4f:25:88:a8:2e:
8a:21:92:d9:c9:15:4f:0e:a4:47:1c:5f:c2:a5:a8:
e7:5f:29:a3:41:4c:f7:b5:5b:e2:21:ee:1d:29:7a:
41:54:92:3e:6a:ee:91:4a:41:9d:ba:df:5b:dc:eb:
a2:3e:01:25:dc:65:7a:6b:b2:db:f5:36:55:3a:31:
7e:bf:f5:8d:b6:1c:ef:c5:5b:53:43:fe:91:73:4b:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:92:9D:83:00:DF:23:CA:EC:4F:9C:DE:77:EB:DD:26:0D:A6:BE:A6
X509v3 Authority Key Identifier:
keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7f:1d:7b:c5:d4:17:57:37:03:35:96:cd:75:4c:b2:db:4d:
9e:fe:50:e9:a7:de:a6:54:c0:0b:e7:28:3a:80:72:99:b4:19:
a8:53:4d:f7:37:ec:81:f8:e9:e5:0e:3a:c8:a3:2e:3f:2b:7b:
af:ec:c7:04:a1:f2:48:0e:55:60:ea:42:b1:b0:1d:04:5d:94:
56:52:00:e8:91:2f:c6:4e:3d:06:08:d7:55:d1:b3:c5:e0:c9:
e4:56:50:18:83:fa:c2:ac:de:08:50:3d:9e:55:48:04:75:f2:
d1:5a:db:6b:13:5e:23:bd:f3:c7:e1:5c:c1:68:22:e7:d9:4d:
6e:20:c5:c4:fb:e3:f8:c0:64:59:34:ec:4f:07:f7:88:87:be:
94:a8:5f:02:b5:a6:70:a9:64:d2:79:0e:6e:b5:bf:64:c4:90:
e1:26:01:d2:0d:ff:6e:05:fa:1d:9f:8c:ee:30:a2:04:c8:38:
6c:20:24:7a:d4:34:90:b9:9d:99:f1:93:d6:20:51:66:78:5c:
ce:08:97:b3:ab:49:7b:6c:a5:89:6f:56:d0:4e:3e:df:13:59:
4e:ad:e7:74:dc:5d:61:92:b7:e6:dc:f7:b2:29:df:fc:93:80:
1e:52:52:77:9c:16:be:ce:81:4b:c8:80:2f:3d:b1:19:95:24:
d8:db:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:18 2026 by rpki-client