$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: YbntHo49y38Pl0RhgHJJbZwS1LhaRG7/dB6CmkJG2Rc= Subject key identifier: 69:ED:E9:A9:B3:01:F2:D9:94:99:96:EC:E0:80:63:D8:61:CC:E1:4E Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 5E10E390014CB633AC5BFF8901B883B401D92848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: 016E Signing time: Fri 17 Apr 2026 15:32:26 +0000 Manifest this update: Fri 17 Apr 2026 15:27:26 +0000 Manifest next update: Mon 20 Apr 2026 18:46:26 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: qI9Hgd2CN9p2dqD4ugdXfuHENGHTBsIyxWM0zh16s7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:10:e3:90:01:4c:b6:33:ac:5b:ff:89:01:b8:83:b4:01:d9:28:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Apr 17 15:27:26 2026 GMT Not After : Apr 20 18:46:26 2026 GMT Subject: CN=69EDE9A9B301F2D9949996ECE08063D861CCE14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:de:ca:d5:ee:c9:84:03:c7:dd:73:a8:c8: 75:72:b6:f0:24:1e:01:f3:30:e4:ad:aa:4e:06:46: e2:fb:c8:e0:9e:57:b5:65:61:3c:57:5a:d3:8d:d4: a7:d5:30:54:e2:74:c9:46:ae:c2:64:bb:e3:83:59: a2:65:c8:f2:f4:55:9d:cf:1d:c4:5e:6b:b4:e4:19: dc:92:69:e9:b4:6a:12:c9:fe:1e:47:0f:d4:e8:e2: fe:ce:9d:56:5f:b8:69:a0:e0:c0:9a:eb:06:48:5d: 82:03:33:91:f0:e0:cf:6d:35:e4:c0:fc:bc:a4:c1: be:4b:b9:23:bc:f7:6b:80:bd:5a:50:e9:28:5f:4d: 2a:bb:10:2d:3d:b3:4a:f3:0f:00:8d:aa:7b:da:81: 36:74:50:96:b0:09:6d:a9:6b:1b:69:c7:e5:1e:12: 29:29:41:c4:52:45:fd:66:85:cb:ce:72:6c:4b:76: a5:77:53:b2:b2:64:59:bc:a0:a4:93:00:96:05:d1: 2b:43:16:17:2c:00:b7:34:45:b6:6a:4c:df:23:2a: 06:2f:c8:30:b2:5d:1d:8d:4f:77:30:e9:2e:9d:bc: 3e:d7:25:b8:d7:f3:d6:98:23:a9:c3:aa:af:1d:b7: 1f:98:a6:d4:7f:1c:8c:94:f5:e4:3f:06:e2:d7:d1: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:ED:E9:A9:B3:01:F2:D9:94:99:96:EC:E0:80:63:D8:61:CC:E1:4E X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:02:08:73:d8:13:8c:f3:59:e6:d0:39:0d:be:2e:73:00:2f: 02:89:96:36:73:4c:f8:12:88:de:82:f5:1c:44:ba:22:5f:43: 79:5b:51:03:07:91:0b:f3:f8:73:61:47:9e:e8:b2:72:74:e1: 2b:a1:17:70:9c:bf:c7:fa:b8:51:79:fd:6d:8e:0e:6a:b4:7b: 09:1a:91:47:9f:19:cf:60:a8:03:8d:8d:ab:36:e3:37:50:4a: 12:1c:70:0c:2b:d9:c8:1d:3b:97:11:50:03:73:a5:3c:2d:20: e5:00:10:cc:3f:99:2b:36:a9:fb:0f:44:93:17:ee:1b:25:05: 1b:ca:31:72:33:f6:8e:48:35:64:2f:cb:79:2d:89:b8:9f:00: 26:51:80:f0:45:d1:41:7e:ec:62:5b:23:be:10:db:25:f1:8f: 14:cf:96:74:7a:15:8b:f4:96:4c:35:05:c7:27:e5:87:33:16: a1:44:25:52:df:3d:a2:3f:c0:61:09:fe:c2:b6:9c:c2:ff:15: ad:f3:9c:17:13:76:dc:b0:8a:e6:63:6f:7f:df:32:ab:2c:70: 9c:4b:a4:14:04:45:4b:31:46:f2:49:0b:60:e2:aa:b4:1b:22: b0:ec:a3:8a:60:22:b4:f5:6c:69:e7:6d:43:a2:6f:a6:a9:4b: 75:79:20:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhDjkAFMtjOsW/+JAbiDtAHZKEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNjA0MTcxNTI3MjZaFw0yNjA0MjAxODQ2MjZaMDMxMTAvBgNV BAMTKDY5RURFOUE5QjMwMUYyRDk5NDk5OTZFQ0UwODA2M0Q4NjFDQ0UxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4t7K1e7JhAPH3XOoyHVytvAk HgHzMOStqk4GRuL7yOCeV7VlYTxXWtON1KfVMFTidMlGrsJku+ODWaJlyPL0VZ3P HcRea7TkGdySaem0ahLJ/h5HD9To4v7OnVZfuGmg4MCa6wZIXYIDM5Hw4M9tNeTA /Lykwb5LuSO892uAvVpQ6ShfTSq7EC09s0rzDwCNqnvagTZ0UJawCW2paxtpx+Ue EikpQcRSRf1mhcvOcmxLdqV3U7KyZFm8oKSTAJYF0StDFhcsALc0RbZqTN8jKgYv yDCyXR2NT3cw6S6dvD7XJbjX89aYI6nDqq8dtx+YptR/HIyU9eQ/BuLX0dsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUae3pqbMB8tmUmZbs4IBj2GHM4U4wHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUCCHPYE4zzWebQOQ2+LnMALwKJljZzTPgS iN6C9RxEuiJfQ3lbUQMHkQvz+HNhR57osnJ04SuhF3Ccv8f6uFF5/W2ODmq0ewka kUefGc9gqAONjas24zdQShIccAwr2cgdO5cRUANzpTwtIOUAEMw/mSs2qfsPRJMX 7hslBRvKMXIz9o5INWQvy3ktibifACZRgPBF0UF+7GJbI74Q2yXxjxTPlnR6FYv0 lkw1Bccn5YczFqFEJVLfPaI/wGEJ/sK2nML/Fa3znBcTdtywiuZjb3/fMqsscJxL pBQERUsxRvJJC2DiqrQbIrDso4pgIrT1bGnnbUOib6apS3V5IPw= -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:24 2026 by rpki-client