$ rpki-client -vvf repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft File: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft (raw, json) Hash identifier: wLX6vWyVCTqPkJ6Gi0ioViQR5Pv2j+bfWNR8zrbUEJo= Subject key identifier: D2:8F:86:70:F7:27:67:09:BC:A9:66:FB:5C:D4:7E:36:CF:1F:B2:5C Authority key identifier: 47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 Certificate issuer: /CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Certificate serial: 0FEBDF4EED3A47F94E83B6CB3597C7AF6658B14F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft Manifest number: 020A Signing time: Sun 01 Mar 2026 09:00:42 +0000 Manifest this update: Sun 01 Mar 2026 08:55:42 +0000 Manifest next update: Wed 04 Mar 2026 17:02:42 +0000 Files and hashes: 1: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl (hash: 2Dc2yQc6i9dZZQYTj0WJEfrARxQZyHGVUDUum6r0vdU=) 2: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: Co4oCqQgIJlqQAiLFlbpmiRGvqJo8VYFhlYbFw0DIow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:eb:df:4e:ed:3a:47:f9:4e:83:b6:cb:35:97:c7:af:66:58:b1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Validity Not Before: Mar 1 08:55:42 2026 GMT Not After : Mar 4 17:02:42 2026 GMT Subject: CN=D28F8670F7276709BCA966FB5CD47E36CF1FB25C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:e9:f0:dc:71:01:41:cf:8d:c0:24:70:b9: 26:f1:6a:f2:cd:43:0c:1f:08:94:5a:79:57:ec:62: 85:1a:5e:ff:8b:49:9a:ca:f6:b6:f2:ae:39:95:49: 63:db:eb:9a:52:6a:95:ba:0a:56:95:33:95:08:f2: be:0a:24:19:7a:f0:20:d6:4a:2f:e7:c1:36:42:1a: 1c:64:28:69:d0:ee:3a:0d:f0:7f:28:94:2e:82:4b: 8f:81:30:b4:41:0f:86:d7:29:0f:0a:88:92:a1:6c: aa:a2:b0:f6:a1:a1:dc:83:b9:ff:1c:e5:17:9b:e0: 5c:df:ca:41:e5:4e:8f:6a:d4:73:96:93:2d:d8:00: 3d:24:01:2b:a4:e4:62:15:1c:4f:2d:c8:d3:ca:1b: d7:eb:0c:01:80:12:be:90:67:52:ba:7b:55:c1:f5: 8e:a5:b6:64:a9:36:86:dc:90:5a:ce:01:0b:42:55: 92:04:d3:73:29:8c:84:24:60:5c:30:0b:f3:bd:4f: bc:4d:a1:0b:4c:8b:01:3f:95:82:61:40:16:d7:80: 3d:ef:57:d2:15:15:21:58:1a:2b:1b:35:b8:19:e7: 41:3b:10:cd:d6:74:39:11:90:bd:d9:40:77:45:4a: a3:79:b0:b6:ea:cd:b5:7f:cd:8a:78:13:55:a8:c5: 08:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8F:86:70:F7:27:67:09:BC:A9:66:FB:5C:D4:7E:36:CF:1F:B2:5C X509v3 Authority Key Identifier: keyid:47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b3:72:1b:34:74:90:80:0c:9d:b8:ed:ac:43:48:c3:f8:ce: 93:75:1f:9b:cc:43:2a:4d:6f:50:05:8f:37:72:24:a7:d5:e5: a9:a3:7a:dd:de:fa:e1:4c:66:33:08:ca:27:e1:34:88:1e:dd: 36:7e:a0:3f:61:66:0f:47:90:5d:b4:3a:7d:14:90:a0:d8:46: 0b:68:fe:96:08:48:ba:46:1f:9b:3b:03:da:36:76:02:ba:b5: 07:e6:36:39:62:a3:7c:b2:2f:01:35:72:eb:f4:22:3c:a0:1e: 79:36:a9:f8:a1:c4:1e:6e:33:86:72:d7:14:f8:bf:f4:94:02: 6d:8d:ba:45:51:03:16:1d:69:87:80:5a:67:d1:54:bd:27:9a: 4a:61:b3:01:ba:7f:42:a2:72:c9:9f:c7:15:10:a3:4a:0f:ec: 6a:65:d8:41:f7:17:86:43:11:7a:0f:b3:70:fa:20:ce:3e:dc: 2e:73:46:4d:08:ea:71:36:4d:be:85:68:53:99:79:a7:3c:2a: f2:10:8a:6c:4d:90:4f:4b:fc:2f:5b:b2:13:b1:e3:24:0d:8e: 2b:5b:0a:1b:1c:f1:fe:93:cf:b1:af:6f:57:f2:75:c6:ab:8e: ed:83:9b:b2:b9:a9:85:b0:f7:53:7a:04:b1:a0:b5:42:ee:5e: 8f:bc:ea:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+vfTu06R/lOg7bLNZfHr2ZYsU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0 ODkyNDI3NDAeFw0yNjAzMDEwODU1NDJaFw0yNjAzMDQxNzAyNDJaMDMxMTAvBgNV BAMTKEQyOEY4NjcwRjcyNzY3MDlCQ0E5NjZGQjVDRDQ3RTM2Q0YxRkIyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uenw3HEBQc+NwCRwuSbxavLN QwwfCJRaeVfsYoUaXv+LSZrK9rbyrjmVSWPb65pSapW6ClaVM5UI8r4KJBl68CDW Si/nwTZCGhxkKGnQ7joN8H8olC6CS4+BMLRBD4bXKQ8KiJKhbKqisPahodyDuf8c 5Reb4FzfykHlTo9q1HOWky3YAD0kASuk5GIVHE8tyNPKG9frDAGAEr6QZ1K6e1XB 9Y6ltmSpNobckFrOAQtCVZIE03MpjIQkYFwwC/O9T7xNoQtMiwE/lYJhQBbXgD3v V9IVFSFYGisbNbgZ50E7EM3WdDkRkL3ZQHdFSqN5sLbqzbV/zYp4E1WoxQijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0o+GcPcnZwm8qWb7XNR+Ns8fslwwHwYDVR0j BBgwFoAUR6nZmoUR985U+fceHvg+9UiSQnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i M2M5NzNkNS1mZTk0LTQwMGQtYmNiZi1mMjMzZThhYzU1MzcvMC80N0E5RDk5QTg1 MTFGN0NFNTRGOUY3MUUxRUY4M0VGNTQ4OTI0Mjc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0ODky NDI3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNF RjU0ODkyNDI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+zchs0dJCADJ247axDSMP4zpN1H5vMQypN b1AFjzdyJKfV5amjet3e+uFMZjMIyifhNIge3TZ+oD9hZg9HkF20On0UkKDYRgto /pYISLpGH5s7A9o2dgK6tQfmNjlio3yyLwE1cuv0IjygHnk2qfihxB5uM4Zy1xT4 v/SUAm2NukVRAxYdaYeAWmfRVL0nmkphswG6f0KicsmfxxUQo0oP7Gpl2EH3F4ZD EXoPs3D6IM4+3C5zRk0I6nE2Tb6FaFOZeac8KvIQimxNkE9L/C9bshOx4yQNjitb Chsc8f6Tz7Gvb1fydcarju2Dm7K5qYWw91N6BLGgtULuXo+86j0= -----END CERTIFICATE-----Generated at Mon Mar 2 21:12:05 2026 by rpki-client