$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: 8bnjG2Ied9Kk7ViY4u3TNMW3Ug4EOgfgVWrS+NEcYtM= Subject key identifier: 5E:AE:45:BA:64:E7:45:46:C3:B1:22:23:ED:BD:96:2C:72:66:78:52 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 10C487451BB0C6667DE72E45965B2AD721970BEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 0527 Signing time: Sun 19 Apr 2026 03:51:08 +0000 Manifest this update: Sun 19 Apr 2026 03:46:08 +0000 Manifest next update: Wed 22 Apr 2026 06:28:08 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: fl3HehxTF/xgXs+85jz1vd1F5myRi9s7FR1lzBVkwLw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c4:87:45:1b:b0:c6:66:7d:e7:2e:45:96:5b:2a:d7:21:97:0b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Apr 19 03:46:08 2026 GMT Not After : Apr 22 06:28:08 2026 GMT Subject: CN=5EAE45BA64E74546C3B12223EDBD962C72667852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:47:36:8c:79:e5:d7:14:76:cd:ae:db:a9: 27:03:04:74:92:cf:80:9f:6d:6f:45:d4:dc:21:e4: 4f:64:58:33:72:a8:b0:dd:42:3e:33:7a:a8:fd:3c: 63:db:c7:e0:4a:4d:57:b2:67:00:85:e2:1c:ba:84: a2:04:06:96:c7:bb:0e:aa:5d:8b:c4:9a:40:a6:dc: d0:57:2b:1e:29:3b:b5:7b:72:60:0f:10:1d:6d:34: 51:ee:c8:d2:0f:18:72:99:04:ac:ed:44:6a:07:67: ea:9d:8a:9e:f7:be:ce:b3:77:9b:ea:57:18:00:83: 02:a7:b2:9d:8f:15:3f:a3:ed:4f:d3:78:c5:9e:df: 62:8b:fa:78:e7:23:90:4c:bb:71:9d:fc:17:06:c0: 3d:4c:70:59:32:02:3e:56:8b:72:51:83:34:c6:c9: 76:cc:33:ec:c7:52:20:a1:b7:73:38:42:9c:a1:31: aa:96:11:05:eb:1b:1c:09:9d:d7:c3:6e:37:bd:cb: 63:ee:30:87:ba:a2:4d:9e:4d:be:ce:b9:07:17:35: e2:cc:8a:4d:dc:5c:0c:7b:a4:fe:aa:63:82:b9:6f: a1:1c:96:be:3f:9e:12:03:a4:01:8e:ce:db:2e:99: ce:de:ca:64:61:f7:2d:f3:65:db:9e:3b:be:2d:60: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AE:45:BA:64:E7:45:46:C3:B1:22:23:ED:BD:96:2C:72:66:78:52 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:89:cd:5c:b1:fd:3d:96:ff:0e:33:f8:7e:d6:6d:87:92:4a: 10:29:38:32:7e:c5:55:17:0d:50:01:50:59:59:52:17:04:60: 7f:5c:91:7a:9a:64:d5:d7:78:97:20:a2:35:78:dc:de:36:48: a7:9b:8d:ef:0e:0a:88:6d:05:21:4a:17:90:e2:77:e0:dd:b5: 06:12:90:e7:eb:70:a0:c5:b4:2e:e3:ed:97:33:f2:2e:64:80: 80:32:08:75:22:32:9c:06:b0:a3:e6:ae:ad:71:d0:bd:40:56: 47:a5:af:0a:bc:e3:d2:43:11:b8:70:3b:d4:e5:86:9c:b9:51: 03:e5:3a:48:57:c7:87:d0:2a:15:17:62:ce:51:51:eb:20:4c: f0:18:81:e7:3e:50:5c:dd:b3:81:e4:a7:36:8c:28:6e:9b:7f: 2d:66:a7:54:0a:b6:43:91:08:32:11:9b:b7:69:a9:de:7c:14: 74:02:5a:c9:3d:56:89:fa:8f:27:e3:61:b3:ff:1d:56:5b:78: 6a:4b:95:cc:7b:b6:e0:d8:4c:25:80:78:78:a9:db:6e:ca:8d: 14:e3:72:4f:7d:0d:f7:8a:db:b4:bf:84:c5:b1:0e:97:a2:1b: 84:32:ea:6e:6d:34:62:9b:73:f8:ad:14:08:bf:e5:c5:44:fb: 19:34:e0:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMSHRRuwxmZ95y5Fllsq1yGXC+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNjA0MTkwMzQ2MDhaFw0yNjA0MjIwNjI4MDhaMDMxMTAvBgNV BAMTKDVFQUU0NUJBNjRFNzQ1NDZDM0IxMjIyM0VEQkQ5NjJDNzI2Njc4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHzkc2jHnl1xR2za7bqScDBHSS z4CfbW9F1Nwh5E9kWDNyqLDdQj4zeqj9PGPbx+BKTVeyZwCF4hy6hKIEBpbHuw6q XYvEmkCm3NBXKx4pO7V7cmAPEB1tNFHuyNIPGHKZBKztRGoHZ+qdip73vs6zd5vq VxgAgwKnsp2PFT+j7U/TeMWe32KL+njnI5BMu3Gd/BcGwD1McFkyAj5Wi3JRgzTG yXbMM+zHUiCht3M4QpyhMaqWEQXrGxwJndfDbje9y2PuMIe6ok2eTb7OuQcXNeLM ik3cXAx7pP6qY4K5b6Eclr4/nhIDpAGOztsumc7eymRh9y3zZdueO74tYCtbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXq5FumTnRUbDsSIj7b2WLHJmeFIwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmJzVyx/T2W/w4z+H7WbYeSShApODJ+xVUX DVABUFlZUhcEYH9ckXqaZNXXeJcgojV43N42SKebje8OCohtBSFKF5Did+DdtQYS kOfrcKDFtC7j7Zcz8i5kgIAyCHUiMpwGsKPmrq1x0L1AVkelrwq849JDEbhwO9Tl hpy5UQPlOkhXx4fQKhUXYs5RUesgTPAYgec+UFzds4HkpzaMKG6bfy1mp1QKtkOR CDIRm7dpqd58FHQCWsk9Von6jyfjYbP/HVZbeGpLlcx7tuDYTCWAeHip227KjRTj ck99DfeK27S/hMWxDpeiG4Qy6m5tNGKbc/itFAi/5cVE+xk04Ik= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:50 2026 by rpki-client