$ rpki-client -vvf repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft File: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft (raw, json) Hash identifier: mqWDpawdy5llOZWYpeGmeYaHtZWjJDOrzE1VL0rbbxA= Subject key identifier: 5D:63:64:67:91:DB:D3:EA:47:62:02:55:9D:72:0B:66:C2:B5:16:E7 Authority key identifier: 47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 Certificate issuer: /CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Certificate serial: 6684F744C5B601DD77AE9CE26B6FCBBD4C84B41A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft Manifest number: 021F Signing time: Fri 17 Apr 2026 03:40:43 +0000 Manifest this update: Fri 17 Apr 2026 03:35:43 +0000 Manifest next update: Mon 20 Apr 2026 12:15:43 +0000 Files and hashes: 1: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: Co4oCqQgIJlqQAiLFlbpmiRGvqJo8VYFhlYbFw0DIow=) 2: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl (hash: tPLoZXthZTnVxTE7M57cJCcdflpmtEJAFZnLf68oQ+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:84:f7:44:c5:b6:01:dd:77:ae:9c:e2:6b:6f:cb:bd:4c:84:b4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Validity Not Before: Apr 17 03:35:43 2026 GMT Not After : Apr 20 12:15:43 2026 GMT Subject: CN=5D63646791DBD3EA476202559D720B66C2B516E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c9:84:71:76:b7:8a:6c:5a:f3:56:2d:61:d3: 54:42:e4:0f:5e:b4:f5:72:31:b7:93:e4:87:9f:7c: ce:28:5b:a3:9e:95:fa:60:4e:05:d1:aa:5d:01:ea: 55:e0:50:35:cf:7d:e8:be:dc:5e:91:3b:92:aa:c3: 91:82:dd:02:50:54:90:cd:c9:50:31:58:70:52:e0: a4:1b:ce:98:a9:df:b8:8e:10:34:c5:1e:5e:f0:e3: 66:24:3f:0d:b6:c0:15:56:63:93:26:ba:00:3f:a8: a0:2f:fd:c9:8e:d6:10:75:fe:b6:9b:38:ae:e5:23: eb:d8:3c:2a:41:8d:95:9e:57:1d:23:91:9e:18:1c: 70:06:bb:bc:48:aa:57:b4:7c:68:c1:0b:3f:f1:cf: 93:a2:c1:65:a2:ac:5b:3f:fe:2f:be:b7:05:c5:44: 78:a7:0a:15:6d:95:35:2c:5f:6c:19:9f:29:01:cc: d6:78:0b:7b:10:59:9b:af:26:c7:49:7e:93:c7:1a: b6:66:a0:d6:56:ac:51:14:e0:dc:33:c5:c6:f1:ef: 28:af:2a:41:b1:32:3b:37:75:55:a5:30:d5:7b:5d: 23:99:ef:c5:90:db:46:9a:cf:ca:00:80:bd:36:c3: 55:22:3e:b8:3f:8e:db:8d:40:8a:37:1e:1d:d4:0a: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:63:64:67:91:DB:D3:EA:47:62:02:55:9D:72:0B:66:C2:B5:16:E7 X509v3 Authority Key Identifier: keyid:47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:12:aa:c5:d2:2c:8d:d9:41:a5:38:80:c5:64:a4:c1:be:f6: 89:2d:46:b2:7b:ab:f1:28:c9:bb:28:46:cc:86:9a:da:a9:7e: 68:f3:7a:17:67:98:1d:7a:d6:18:c3:ee:f4:84:dd:4b:d0:83: b6:87:17:d1:89:07:62:d1:c4:50:72:69:9e:39:29:4f:e8:7e: 2a:77:de:1e:a8:f0:f3:a3:4a:26:12:c9:5e:81:f3:14:b2:41: 03:c0:48:4c:51:24:52:f1:b3:f6:80:39:b0:13:0d:94:64:d2: 35:06:18:2f:e7:0a:af:95:8e:dc:86:dc:bf:f9:4b:6a:79:8d: 04:63:e4:81:53:13:b0:ef:fc:f6:ec:dc:50:75:31:48:03:b3: db:01:9f:ce:d4:83:0d:fc:7d:c8:5e:9d:f3:c1:de:d0:76:36: 83:aa:78:10:ec:2f:83:a1:1b:57:11:38:65:0b:fa:e4:02:18: c3:1c:87:35:f2:93:24:15:ff:38:5b:98:a9:94:2f:d1:43:57: 1b:9d:99:3c:5e:85:d0:67:77:d0:74:94:0f:80:98:15:dc:96: b1:6a:dd:ef:bc:a9:20:19:d0:ff:b9:24:47:a9:6d:c2:a5:7b: 07:df:8b:0b:fe:4f:0b:c8:ea:83:f9:29:bb:d4:e2:61:27:b7: 01:4f:8a:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoT3RMW2Ad13rpzia2/LvUyEtBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0 ODkyNDI3NDAeFw0yNjA0MTcwMzM1NDNaFw0yNjA0MjAxMjE1NDNaMDMxMTAvBgNV BAMTKDVENjM2NDY3OTFEQkQzRUE0NzYyMDI1NTlENzIwQjY2QzJCNTE2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqyYRxdreKbFrzVi1h01RC5A9e tPVyMbeT5IeffM4oW6OelfpgTgXRql0B6lXgUDXPfei+3F6RO5Kqw5GC3QJQVJDN yVAxWHBS4KQbzpip37iOEDTFHl7w42YkPw22wBVWY5MmugA/qKAv/cmO1hB1/rab OK7lI+vYPCpBjZWeVx0jkZ4YHHAGu7xIqle0fGjBCz/xz5OiwWWirFs//i++twXF RHinChVtlTUsX2wZnykBzNZ4C3sQWZuvJsdJfpPHGrZmoNZWrFEU4Nwzxcbx7yiv KkGxMjs3dVWlMNV7XSOZ78WQ20aaz8oAgL02w1UiPrg/jtuNQIo3Hh3UCrKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWNkZ5Hb0+pHYgJVnXILZsK1FucwHwYDVR0j BBgwFoAUR6nZmoUR985U+fceHvg+9UiSQnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i M2M5NzNkNS1mZTk0LTQwMGQtYmNiZi1mMjMzZThhYzU1MzcvMC80N0E5RDk5QTg1 MTFGN0NFNTRGOUY3MUUxRUY4M0VGNTQ4OTI0Mjc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0ODky NDI3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNF RjU0ODkyNDI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkSqsXSLI3ZQaU4gMVkpMG+9oktRrJ7q/Eo ybsoRsyGmtqpfmjzehdnmB161hjD7vSE3UvQg7aHF9GJB2LRxFByaZ45KU/ofip3 3h6o8POjSiYSyV6B8xSyQQPASExRJFLxs/aAObATDZRk0jUGGC/nCq+VjtyG3L/5 S2p5jQRj5IFTE7Dv/Pbs3FB1MUgDs9sBn87Ugw38fchenfPB3tB2NoOqeBDsL4Oh G1cROGUL+uQCGMMchzXykyQV/zhbmKmUL9FDVxudmTxehdBnd9B0lA+AmBXclrFq 3e+8qSAZ0P+5JEepbcKlewffiwv+TwvI6oP5KbvU4mEntwFPiiE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:13:26 2026 by rpki-client