$ rpki-client -vvf rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft File: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft (raw, json) Hash identifier: 1bJF5VurlMLSX5/L1cbczoU8u/BzmUuRRQARs2njpfE= Subject key identifier: D6:8E:D4:7D:41:B0:DA:AF:AB:6B:8E:B3:98:5A:0E:62:CB:47:10:31 Authority key identifier: 47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F Certificate issuer: /CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F Certificate serial: 49A96A420351C8FBABC5C5A6ED454335F587BD8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:45:37 +0000 Manifest this update: Tue 16 Jun 2026 17:40:37 +0000 Manifest next update: Wed 17 Jun 2026 20:42:37 +0000 Files and hashes: 1: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl (hash: Dtw9ll7+nBLUSe/QdWyj/ZH/NK8KWjNuQITsvqcsY6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a9:6a:42:03:51:c8:fb:ab:c5:c5:a6:ed:45:43:35:f5:87:bd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F Validity Not Before: Jun 16 17:40:37 2026 GMT Not After : Jun 17 20:42:37 2026 GMT Subject: CN=D68ED47D41B0DAAFAB6B8EB3985A0E62CB471031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:d9:ef:88:1a:92:b6:a1:36:d3:b0:19:cb: ab:01:51:38:7f:a0:b1:a9:fa:29:e2:f0:b8:9a:21: 46:15:fb:9d:8d:90:e8:a9:bb:cd:ee:f9:16:7e:d8: b5:f6:c7:12:3d:f4:b2:98:da:b4:fb:02:e8:8f:82: a0:c1:34:17:0c:95:27:a1:f0:2d:e9:db:0f:3a:dd: 5c:a4:89:d5:f8:ab:9e:8f:d3:e9:b1:e6:5b:a9:e3: 61:b1:13:b8:5d:71:e2:bc:1c:3e:b9:c7:6d:3e:6f: a4:d1:d6:74:1e:6a:2c:9f:12:f0:68:78:b4:10:f4: 1a:b8:23:97:64:1c:a6:17:35:fe:dd:00:f5:7a:ce: d2:a2:77:33:6d:3d:59:8d:5b:8e:d5:30:73:19:11: 53:5c:18:36:5b:f5:0d:50:e8:09:2b:d2:c9:21:b8: af:fa:10:b9:db:3a:b7:c7:bc:60:fb:c3:57:3a:52: ce:7b:32:7c:ff:1d:1a:73:70:39:3f:7c:02:f3:60: 62:e7:9b:57:84:b2:16:dd:cb:d7:7f:4e:3f:07:e3: 56:7a:d2:5a:f7:ed:1e:cf:b2:b7:0d:7d:0f:c2:0f: 3f:22:be:5c:1a:6e:4d:83:e8:ec:80:66:53:b7:f5: 00:9a:f6:66:96:fb:8c:70:e3:68:00:98:b7:14:7c: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8E:D4:7D:41:B0:DA:AF:AB:6B:8E:B3:98:5A:0E:62:CB:47:10:31 X509v3 Authority Key Identifier: keyid:47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:7b:52:2a:80:7b:bb:47:77:c8:77:84:ab:6f:a1:10:4a:34: 75:c7:50:70:e7:11:c9:9d:35:7a:c9:f1:af:4c:1a:f2:a8:e5: b9:e0:f2:fa:1d:dc:48:05:25:3c:fa:fa:4e:8b:a4:bf:42:02: 63:83:28:51:d3:a1:a1:93:a9:73:3d:2f:48:7f:e4:0d:65:7a: f4:ff:a3:52:62:68:15:f7:93:8b:b9:73:f3:71:ea:fe:e7:0f: b0:c4:92:94:7a:00:82:b3:92:af:07:d3:62:74:2f:0f:55:98: e9:8b:9a:d8:4f:cf:86:3d:09:9a:34:f1:07:45:71:27:bd:7e: ba:3c:c6:24:ac:8c:bc:9a:83:6a:41:49:81:b3:4d:ae:61:ad: 72:4b:5d:c2:0e:f9:ef:c2:c9:8e:ac:4d:5e:1e:c7:7e:d9:bb: 8e:4e:6b:57:6c:d3:59:c3:b7:bc:f0:bb:94:32:42:d6:e0:5b: 2b:80:31:41:b2:f9:81:de:5d:d8:68:3f:aa:01:66:80:84:08: b2:e3:36:cc:7d:51:b4:ac:59:2f:da:3b:08:46:16:9d:9a:42: 3a:d4:9f:7c:19:82:d1:8e:07:55:73:59:5b:69:57:b6:38:5d: e6:80:cb:63:1a:f6:b4:60:83:88:09:47:bd:67:58:99:ca:34: 4a:07:1f:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSalqQgNRyPurxcWm7UVDNfWHvY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczODdDNUZFMThDQ0Q4RjU2QUUwOTNGQ0IwMDMxOUND NDE4RkM3RjAeFw0yNjA2MTYxNzQwMzdaFw0yNjA2MTcyMDQyMzdaMDMxMTAvBgNV BAMTKEQ2OEVENDdENDFCMERBQUZBQjZCOEVCMzk4NUEwRTYyQ0I0NzEwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPH9nviBqStqE207AZy6sBUTh/ oLGp+ini8LiaIUYV+52NkOipu83u+RZ+2LX2xxI99LKY2rT7AuiPgqDBNBcMlSeh 8C3p2w863VykidX4q56P0+mx5lup42GxE7hdceK8HD65x20+b6TR1nQeaiyfEvBo eLQQ9Bq4I5dkHKYXNf7dAPV6ztKidzNtPVmNW47VMHMZEVNcGDZb9Q1Q6Akr0skh uK/6ELnbOrfHvGD7w1c6Us57Mnz/HRpzcDk/fALzYGLnm1eEshbdy9d/Tj8H41Z6 0lr37R7PsrcNfQ/CDz8ivlwabk2D6OyAZlO39QCa9maW+4xw42gAmLcUfH8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1o7UfUGw2q+ra46zmFoOYstHEDEwHwYDVR0j BBgwFoAURzh8X+GMzY9Wrgk/ywAxnMQY/H8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmNDc3NjMtYjBlMC00ZDAxLWI2YzgtNjBlYTRjYTU2MGI0LzAvNDczODdDNUZF MThDQ0Q4RjU2QUUwOTNGQ0IwMDMxOUNDNDE4RkM3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzM4N0M1RkUxOENDRDhGNTZBRTA5M0ZDQjAwMzE5Q0M0MThG QzdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvNDczODdDNUZFMThDQ0Q4RjU2QUUwOTNGQ0IwMDMx OUNDNDE4RkM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKN7UiqAe7tHd8h3hKtvoRBKNHXHUHDnEcmd NXrJ8a9MGvKo5bng8vod3EgFJTz6+k6LpL9CAmODKFHToaGTqXM9L0h/5A1levT/ o1JiaBX3k4u5c/Nx6v7nD7DEkpR6AIKzkq8H02J0Lw9VmOmLmthPz4Y9CZo08QdF cSe9fro8xiSsjLyag2pBSYGzTa5hrXJLXcIO+e/CyY6sTV4ex37Zu45Oa1ds01nD t7zwu5QyQtbgWyuAMUGy+YHeXdhoP6oBZoCECLLjNsx9UbSsWS/aOwhGFp2aQjrU n3wZgtGOB1VzWVtpV7Y4XeaAy2Ma9rRgg4gJR71nWJnKNEoHH2E= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:21 2026 by rpki-client