$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: mi/ckA12mKGIw31uEo8AvyxSZHeL+tV5tMcX3pVjmzg= Subject key identifier: 70:9D:0B:55:FE:76:33:D4:CD:77:BB:9D:5D:FC:31:B7:F0:E7:F9:61 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 32CCBF31C8476A84A41663C3CDFBC3F223101C23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 0512 Signing time: Sun 01 Mar 2026 20:51:10 +0000 Manifest this update: Sun 01 Mar 2026 20:46:10 +0000 Manifest next update: Thu 05 Mar 2026 04:49:10 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: zMmYvEQMzkDtac8wP+fz0N2Y050KMGXpgqkTkIMgzHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cc:bf:31:c8:47:6a:84:a4:16:63:c3:cd:fb:c3:f2:23:10:1c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Mar 1 20:46:10 2026 GMT Not After : Mar 5 04:49:10 2026 GMT Subject: CN=709D0B55FE7633D4CD77BB9D5DFC31B7F0E7F961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:be:87:06:8a:de:19:0f:b4:c8:3d:25:68:05: 86:35:b2:d5:0e:c5:c9:de:57:e1:76:b1:99:ac:01: de:79:5a:c4:a6:ef:71:f8:2d:8f:de:48:85:82:52: 37:1c:33:6b:33:5a:33:60:ac:12:61:1a:eb:99:2e: 06:21:66:66:17:67:56:11:80:b1:24:fc:32:82:a2: 72:a7:77:58:f4:3a:a8:4d:95:46:73:e3:ac:39:45: cd:65:d4:64:b2:1a:24:df:bc:78:45:a3:fd:65:e4: 97:05:6f:99:20:c9:d7:75:92:3a:b4:eb:32:fd:35: 99:e2:38:3d:19:38:ca:17:aa:37:d7:64:24:65:9d: 9f:ae:6a:85:f7:1e:df:a0:96:c1:77:97:69:0b:73: e0:f5:a0:b0:2e:25:da:9e:6d:6c:b0:93:34:0a:8e: 42:51:42:95:92:1d:f8:24:8d:62:36:3e:91:6f:55: 48:9c:85:e3:6e:74:9d:42:86:3f:76:42:d4:ec:8a: 63:a0:86:70:e6:ce:b6:57:ec:2c:f9:0f:b4:d8:97: 2b:a3:a7:9e:a2:c5:72:10:57:82:7d:90:ec:1b:7a: 0b:7b:c9:75:8b:75:e1:08:06:5d:5f:c4:c8:59:8a: 34:d6:1d:41:a5:a1:42:cb:5d:ce:4c:88:ad:b2:1f: cc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9D:0B:55:FE:76:33:D4:CD:77:BB:9D:5D:FC:31:B7:F0:E7:F9:61 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:94:2a:e4:99:30:3d:b9:b9:fe:67:aa:48:c9:50:92:56:a7: 16:0b:39:a5:e5:31:7f:6d:e9:82:aa:c4:4d:31:88:ec:2b:53: c1:17:7d:ae:1b:6b:f0:4b:d1:ac:ec:33:20:f0:38:64:0c:82: 50:a5:8a:fc:12:a9:3b:87:69:89:a1:4e:96:50:6f:e2:a7:12: 69:3e:0e:b2:c0:9b:b4:84:0e:e2:19:d3:4d:a3:90:e5:ba:49: e9:92:7a:40:77:6e:f2:47:60:83:93:2a:e6:13:c8:24:40:98: 11:f6:76:02:e8:1b:ab:f9:85:ad:3a:5c:34:49:5d:9f:aa:55: e8:92:0b:7b:c8:29:b1:42:15:05:8a:25:a7:fd:59:22:27:2e: 8f:83:f6:96:c1:8c:4f:86:2d:ef:85:5f:79:6a:4d:09:d9:35: b9:82:24:3a:48:0a:40:52:07:6f:94:16:ea:46:c2:8a:c3:16: f1:17:64:84:8d:ba:96:1b:45:30:22:26:89:a4:1e:a7:05:f4: 67:3d:48:f6:ed:4e:00:6d:f3:8a:4c:44:80:9c:1f:6b:c3:8a: b7:e1:5b:12:46:d0:cb:26:ef:02:3f:36:7e:7d:a2:ce:47:28: a0:20:da:23:cf:62:c8:f6:11:a4:fe:08:26:49:df:9d:68:bf: d7:44:db:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsy/MchHaoSkFmPDzfvD8iMQHCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNjAzMDEyMDQ2MTBaFw0yNjAzMDUwNDQ5MTBaMDMxMTAvBgNV BAMTKDcwOUQwQjU1RkU3NjMzRDRDRDc3QkI5RDVERkMzMUI3RjBFN0Y5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVvocGit4ZD7TIPSVoBYY1stUO xcneV+F2sZmsAd55WsSm73H4LY/eSIWCUjccM2szWjNgrBJhGuuZLgYhZmYXZ1YR gLEk/DKConKnd1j0OqhNlUZz46w5Rc1l1GSyGiTfvHhFo/1l5JcFb5kgydd1kjq0 6zL9NZniOD0ZOMoXqjfXZCRlnZ+uaoX3Ht+glsF3l2kLc+D1oLAuJdqebWywkzQK jkJRQpWSHfgkjWI2PpFvVUicheNudJ1Chj92QtTsimOghnDmzrZX7Cz5D7TYlyuj p56ixXIQV4J9kOwbegt7yXWLdeEIBl1fxMhZijTWHUGloULLXc5MiK2yH8wBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcJ0LVf52M9TNd7udXfwxt/Dn+WEwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuUKuSZMD25uf5nqkjJUJJWpxYLOaXlMX9t 6YKqxE0xiOwrU8EXfa4ba/BL0azsMyDwOGQMglClivwSqTuHaYmhTpZQb+KnEmk+ DrLAm7SEDuIZ002jkOW6SemSekB3bvJHYIOTKuYTyCRAmBH2dgLoG6v5ha06XDRJ XZ+qVeiSC3vIKbFCFQWKJaf9WSInLo+D9pbBjE+GLe+FX3lqTQnZNbmCJDpICkBS B2+UFupGworDFvEXZISNupYbRTAiJomkHqcF9Gc9SPbtTgBt84pMRICcH2vDirfh WxJG0Msm7wI/Nn59os5HKKAg2iPPYsj2EaT+CCZJ351ov9dE2/4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:22 2026 by rpki-client