$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: a5kGoCtJeqvT+uM2GLcHFE16rVttnLfYiyTOchJDuXU= Subject key identifier: 84:9A:F3:DE:7F:C1:D4:04:5A:92:57:E0:EC:30:43:23:04:81:42:C2 Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 2C574EF1B76BD45556B34E0D559837BA706ACB08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: 0159 Signing time: Sun 01 Mar 2026 05:44:02 +0000 Manifest this update: Sun 01 Mar 2026 05:39:02 +0000 Manifest next update: Wed 04 Mar 2026 16:57:02 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: kaxjtAgIKF38mepgeav/+29ASWaYTNy3daJ46LmoPfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:57:4e:f1:b7:6b:d4:55:56:b3:4e:0d:55:98:37:ba:70:6a:cb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Mar 1 05:39:02 2026 GMT Not After : Mar 4 16:57:02 2026 GMT Subject: CN=849AF3DE7FC1D4045A9257E0EC304323048142C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:c0:59:e8:cc:e5:4e:25:06:67:5b:28:e1: 06:23:b1:fb:60:3d:1e:53:9c:3f:2b:e8:89:8a:45: 1d:f8:c4:82:2c:00:e1:79:c8:d8:fa:d2:ea:39:fc: d4:4f:c7:c7:ce:a3:41:5d:2a:a5:16:47:17:0b:56: 69:a8:37:e6:19:d7:80:0f:94:77:66:9d:57:ca:9a: ec:83:bc:aa:b1:49:d4:44:28:66:52:e8:71:5e:c4: 28:26:1d:45:61:bf:ea:96:8a:32:69:97:03:fe:a3: 53:31:25:ec:7b:dc:34:df:21:db:65:ea:7b:93:5d: be:9e:ef:4b:d3:2d:c9:45:da:28:fd:41:1b:94:38: 1c:0c:3d:8b:09:43:3b:d8:d0:5f:09:58:ef:ca:7b: c4:05:0d:9f:b5:b6:da:48:44:cf:c3:67:09:bf:85: 46:98:57:18:63:53:46:10:cc:73:b0:a6:41:96:ef: aa:c6:15:27:50:75:2d:2a:23:a4:e4:a0:2d:d0:a3: c2:2d:9e:80:9f:ff:fc:bd:dd:76:cf:7b:4c:57:d0: 1f:a6:aa:e4:9c:79:9e:ae:3a:6b:44:61:f2:b4:e0: 08:e1:01:8a:86:21:ef:f8:3e:b4:3c:31:a6:4e:76: 21:97:b5:ac:ba:11:6f:5a:e2:f8:8c:88:87:08:2f: e8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9A:F3:DE:7F:C1:D4:04:5A:92:57:E0:EC:30:43:23:04:81:42:C2 X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:05:26:47:b1:00:04:fd:a1:df:57:b0:50:10:d6:54:9a:43: a4:75:24:8a:0a:75:e5:b7:bc:66:dd:39:a1:96:19:b6:b5:91: 4d:e6:e4:84:02:6f:ca:47:06:f4:46:06:14:46:23:ac:c3:04: 14:ad:0d:50:a2:08:99:b6:af:cb:0c:9b:87:6c:1a:66:9a:1f: 08:a6:4e:3c:f1:7a:32:80:ef:87:c8:18:93:35:50:34:c1:5e: c5:b5:c1:24:b4:c4:66:06:1a:80:47:76:5f:a8:64:94:b3:e0: d4:34:5b:cf:5b:60:fa:1d:cf:21:08:94:3b:ab:a2:d0:a9:3d: 4b:68:c8:29:1b:80:7f:32:74:2d:b1:8d:c5:a7:70:83:c4:3f: 5f:8d:b7:aa:00:fa:cd:0a:1d:53:dc:43:e5:58:55:49:91:07: 28:18:31:16:75:21:e3:ff:c5:3e:71:61:a0:86:07:f4:32:98: 08:a5:38:4c:43:52:fb:bc:4d:90:af:a5:3f:a6:8f:91:7d:d3: e0:fb:90:86:2c:2d:28:02:32:95:a6:cd:e3:8e:79:da:37:80: 6a:e9:6b:7f:fe:96:9d:05:1f:8f:e6:e2:86:ed:f7:e2:12:c1: 2d:9d:88:cf:3e:2a:27:02:9a:42:b4:f8:c4:9b:a3:0f:7b:f2: 9a:e4:70:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFdO8bdr1FVWs04NVZg3unBqywgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNjAzMDEwNTM5MDJaFw0yNjAzMDQxNjU3MDJaMDMxMTAvBgNV BAMTKDg0OUFGM0RFN0ZDMUQ0MDQ1QTkyNTdFMEVDMzA0MzIzMDQ4MTQyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnL8BZ6MzlTiUGZ1so4QYjsftg PR5TnD8r6ImKRR34xIIsAOF5yNj60uo5/NRPx8fOo0FdKqUWRxcLVmmoN+YZ14AP lHdmnVfKmuyDvKqxSdREKGZS6HFexCgmHUVhv+qWijJplwP+o1MxJex73DTfIdtl 6nuTXb6e70vTLclF2ij9QRuUOBwMPYsJQzvY0F8JWO/Ke8QFDZ+1ttpIRM/DZwm/ hUaYVxhjU0YQzHOwpkGW76rGFSdQdS0qI6TkoC3Qo8ItnoCf//y93XbPe0xX0B+m quSceZ6uOmtEYfK04AjhAYqGIe/4PrQ8MaZOdiGXtay6EW9a4viMiIcIL+jNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJrz3n/B1ARaklfg7DBDIwSBQsIwHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUFJkexAAT9od9XsFAQ1lSaQ6R1JIoKdeW3 vGbdOaGWGba1kU3m5IQCb8pHBvRGBhRGI6zDBBStDVCiCJm2r8sMm4dsGmaaHwim TjzxejKA74fIGJM1UDTBXsW1wSS0xGYGGoBHdl+oZJSz4NQ0W89bYPodzyEIlDur otCpPUtoyCkbgH8ydC2xjcWncIPEP1+Nt6oA+s0KHVPcQ+VYVUmRBygYMRZ1IeP/ xT5xYaCGB/QymAilOExDUvu8TZCvpT+mj5F90+D7kIYsLSgCMpWmzeOOedo3gGrp a3/+lp0FH4/m4obt9+ISwS2diM8+KicCmkK0+MSbow978prkcEM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:48 2026 by rpki-client