
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
File: 47CBAD1A648715C5E867F1A2ED3558688608EE19.mft (raw, json)
Hash identifier: FeSI10U8K+L7erm8zKMPCSycfXlv6F7osrc+JBROmDE=
Subject key identifier: F6:02:5A:59:3C:27:C2:6E:22:95:0F:95:44:07:F3:C2:B6:E1:83:34
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial: 1B713DDFC8DDD0B8C0F7A7A93965F0ACFBA88915
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
Manifest number: 01C9
Signing time: Wed 15 Apr 2026 13:21:20 +0000
Manifest this update: Wed 15 Apr 2026 13:16:20 +0000
Manifest next update: Sat 18 Apr 2026 16:22:20 +0000
Files and hashes: 1: 47CBAD1A648715C5E867F1A2ED3558688608EE19.crl (hash: bSbT4cX7luUdWvpGWFtudo1So5d//ok/3IYQVko3nEU=)
2: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: PKnb33wVx3T5EIj08qJEeewWsRoc+8E1r+XSvHkuzAU=)
3: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: JSWMTyzUAT1PBLgLCyvKdMRN5cJxNgH9Z6eJ1gZTXFg=)
4: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: QGKtavih0+s5gXHFp46nHoGFZ6NC2NvnCwfjyI4NIwM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 16:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:71:3d:df:c8:dd:d0:b8:c0:f7:a7:a9:39:65:f0:ac:fb:a8:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Validity
Not Before: Apr 15 13:16:20 2026 GMT
Not After : Apr 18 16:22:20 2026 GMT
Subject: CN=F6025A593C27C26E22950F954407F3C2B6E18334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:1c:5e:64:8f:39:10:da:a1:23:19:02:49:
74:2f:8c:c8:18:51:34:b1:2f:fa:bd:55:2b:82:e7:
7c:95:19:13:dc:a2:2b:ec:1b:1d:95:62:6a:d4:c8:
e4:f3:0f:cb:55:3b:ed:d9:8e:3d:2c:19:03:14:b2:
75:bb:82:d5:0a:c2:36:4b:52:72:17:f6:bb:e3:c8:
fd:1e:74:c8:41:71:49:1b:7d:f2:f7:e2:8e:b7:f7:
db:f5:be:c7:bc:86:85:3c:55:96:d5:46:ae:9b:98:
07:c6:2a:7e:1c:b7:83:a5:3e:9f:30:65:1c:e2:ed:
25:bb:d1:d5:0d:21:51:f5:d6:c2:d9:80:de:93:10:
0b:52:f8:58:31:3f:21:4d:a5:27:a0:9b:6e:de:4a:
1c:c1:fe:4f:29:5c:22:32:7d:fb:d3:9c:54:18:87:
28:08:bf:ee:cc:94:82:9d:f0:f7:dc:72:c2:08:e6:
db:7e:16:61:05:c9:c4:0f:2a:c2:d9:16:6a:32:94:
f8:14:e4:81:a7:17:ef:13:6e:5f:1a:e0:3a:2c:02:
b2:6a:7c:03:c7:cf:da:26:5e:da:51:96:89:60:a8:
97:1b:27:52:0c:c6:48:96:05:53:a2:49:b1:ce:b8:
5c:8d:ec:78:2a:98:fa:10:79:af:92:af:d0:ac:d2:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:02:5A:59:3C:27:C2:6E:22:95:0F:95:44:07:F3:C2:B6:E1:83:34
X509v3 Authority Key Identifier:
keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5d:46:56:24:d1:81:78:99:9e:50:83:90:0e:9c:a9:77:f0:
e9:0e:f6:ae:79:18:7b:b7:95:40:8b:95:9c:50:00:7a:f8:04:
13:94:40:78:e3:06:4b:49:e6:18:76:98:08:6b:df:32:fd:e9:
af:92:27:3c:7b:56:21:56:99:7a:e6:05:50:b3:55:02:86:d2:
d8:db:b7:4e:95:94:95:b0:90:77:07:5c:7c:2c:d6:78:a3:e6:
8c:3f:76:5a:37:50:92:f9:76:d4:28:62:19:ba:b4:e7:07:94:
06:ed:dc:3a:1d:d6:77:55:42:80:3a:a2:53:b9:76:b6:de:0c:
2d:f3:c3:8a:04:78:ac:1f:48:a9:2c:05:b5:71:03:c5:0c:ab:
1a:f9:9b:91:4d:12:a9:8d:3e:59:25:65:c2:39:c6:f2:a2:c0:
32:01:59:44:17:46:ee:3a:87:54:25:70:a3:de:da:9f:06:02:
73:49:d4:e9:5b:a0:2d:ec:69:ca:66:b8:03:0b:b4:7f:01:33:
ff:06:dc:9b:2f:0d:9d:e9:ce:d8:35:fd:e2:b2:a6:f0:70:42:
92:5a:d5:56:ae:86:23:0c:8c:ed:79:4a:5a:e6:eb:79:f7:65:
74:47:e7:78:66:04:4a:0d:70:8d:cf:e3:e7:1a:68:32:31:ba:
93:ba:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:40 2026 by rpki-client