
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft
File: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft (raw, json)
Hash identifier: h2I/cLydNZKb/NtMALjlwsL4hTjBD3+Hqi/0ydTtxL8=
Subject key identifier: D4:F7:02:D3:6D:B8:A0:D5:F7:3D:95:15:94:CB:36:B4:E5:15:7F:0A
Authority key identifier: 47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F
Certificate issuer: /CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F
Certificate serial: 248E7C41B44CB7FAF25447D28ACC4D911985550D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 06:45:28 +0000
Manifest this update: Sun 20 Sep 2026 06:40:28 +0000
Manifest next update: Mon 21 Sep 2026 08:23:28 +0000
Files and hashes: 1: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl (hash: TbUfYVKnAsTCH+yuhYvVWYc9GkzVH9gXoNTxfE6QR+w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl
rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 08:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8e:7c:41:b4:4c:b7:fa:f2:54:47:d2:8a:cc:4d:91:19:85:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F
Validity
Not Before: Sep 20 06:40:28 2026 GMT
Not After : Sep 21 08:23:28 2026 GMT
Subject: CN=D4F702D36DB8A0D5F73D951594CB36B4E5157F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:68:62:d7:55:03:ef:47:fe:d0:56:63:14:
b1:b7:3c:31:81:b0:5b:f1:8b:4e:7a:19:c6:66:ca:
4b:8e:83:9f:4d:ee:f4:8b:93:9c:63:68:19:fe:57:
4a:6e:07:44:9a:b9:d9:54:52:52:32:9e:59:f7:bf:
9c:df:bb:56:34:af:4f:33:e6:c8:c3:84:24:42:95:
22:40:73:d5:29:f5:c4:0e:9d:c3:3c:94:2e:90:de:
f2:0f:3f:3d:b3:88:cf:a8:ff:c4:bb:17:44:93:01:
ef:0b:45:6c:33:12:40:78:5f:fa:b2:be:e1:9e:05:
42:1c:42:e3:6f:c3:d2:1e:d4:f3:a4:4d:50:61:e1:
fe:75:91:67:ac:6f:73:c5:35:b0:9c:96:8e:1a:67:
57:7e:4f:4c:5b:ef:ad:cd:9f:4b:ee:a5:18:94:8e:
ec:c6:88:b8:b5:a2:38:ee:d8:8b:2b:61:11:41:c1:
d9:ef:9c:4d:24:3e:6b:a6:4c:c0:28:4e:a8:6b:c6:
32:16:20:63:69:5e:c0:da:07:bc:19:d9:cc:b9:0c:
74:af:ee:97:3d:0a:b8:e0:90:aa:04:ff:bb:e2:23:
ac:a7:a4:69:cd:12:b9:cd:c7:00:5c:72:c6:e5:a4:
ac:30:5e:bd:a6:3a:43:9d:c9:8e:74:dc:0f:10:9e:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:02:D3:6D:B8:A0:D5:F7:3D:95:15:94:CB:36:B4:E5:15:7F:0A
X509v3 Authority Key Identifier:
keyid:47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7c:07:06:29:12:23:7b:bf:bf:e1:6f:b8:fa:25:1b:88:16:
be:ac:c7:49:c6:d6:dc:a8:21:3d:0a:91:fb:d5:69:cd:99:28:
ed:49:28:d9:04:36:1c:1d:d2:de:91:78:63:2a:c5:06:12:5d:
8b:41:f4:32:df:27:d7:ca:03:f8:a9:4d:ba:59:e2:04:da:33:
16:97:24:0e:35:04:21:a1:c9:ee:f3:cf:d3:09:9c:46:94:c2:
03:8c:4b:76:fd:27:35:5d:f2:25:58:3c:0d:b9:b1:54:81:17:
44:2b:b8:b7:f7:e9:ba:d9:dd:9a:2b:d3:55:b3:d7:89:2f:ba:
0d:ec:9b:5e:9e:84:d3:5f:3e:cd:5e:97:14:97:35:d8:6e:8b:
6b:50:0d:54:67:3b:d1:93:9a:69:33:49:3e:8c:86:6a:95:87:
03:ba:4f:cd:42:4f:1e:3f:b3:f7:1d:26:b1:19:fd:4d:46:83:
da:a1:d6:07:19:2c:3f:ac:c3:46:0e:ed:2f:d4:70:86:64:d4:
74:51:3d:ad:cd:67:7e:28:13:ab:03:93:c5:23:4a:c0:6e:6c:
1c:ef:75:d3:c9:9e:68:21:c4:fd:9c:c6:da:32:5c:cd:42:86:
f7:62:f3:eb:57:fc:3a:d8:e2:34:fd:6b:2d:a5:37:92:22:82:
03:2a:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:34:20 2026 by rpki-client