$ rpki-client -vvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: o/plpKmVvCxr0xybvfF3ezfGGlyPO7aeDy2ylY899a0= Subject key identifier: D0:73:44:12:43:B9:48:1C:35:7F:38:F3:2C:82:91:8C:85:F6:54:56 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 3A7DA932285F4A1F3EAD0CC92BC8D8A5BE1445EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 12:34:56 +0000 Manifest this update: Sat 13 Jun 2026 12:29:56 +0000 Manifest next update: Sun 14 Jun 2026 14:29:56 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 2: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 3: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: kguV4ujRwiR0IIhIxmqxSLqonn9YaluBGwCpBHBWg9A=) 4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7d:a9:32:28:5f:4a:1f:3e:ad:0c:c9:2b:c8:d8:a5:be:14:45:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Jun 13 12:29:56 2026 GMT Not After : Jun 14 14:29:56 2026 GMT Subject: CN=D073441243B9481C357F38F32C82918C85F65456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:61:28:b0:38:39:ae:10:c3:5f:ab:7d:a0: 86:c7:c7:e2:03:26:d9:5f:80:63:b2:84:4c:e6:b2: ea:05:dc:99:aa:72:dd:db:42:1c:13:02:31:92:dd: 8e:20:dd:dc:cc:18:7c:54:d7:83:6b:0a:5f:23:51: f2:b2:d6:59:0b:d5:77:b3:7a:b5:b1:2a:db:30:2e: 1e:1d:5f:07:85:4f:8c:30:9b:5c:f8:1c:a8:67:bb: cd:cd:7c:c2:36:62:39:45:a4:6d:9b:c2:53:79:86: 8b:c5:86:f5:6c:ec:25:cf:6b:32:22:eb:49:2b:cf: ee:65:c8:6a:33:01:fe:1a:91:d8:bb:9b:d7:bc:c2: 3d:af:90:54:ad:12:17:1f:2f:80:9f:c4:08:9f:85: 18:1c:8f:dc:42:4a:32:39:f7:2f:fe:6a:e7:ea:0a: 0e:c4:62:4c:ed:59:45:64:42:14:35:bf:c5:5e:4a: 6b:d6:f0:5d:33:9a:bf:6b:a2:0a:c7:a7:9a:08:0a: 0f:9b:62:8b:14:7b:44:a9:c5:60:b2:c0:0a:5f:30: 62:16:0a:fa:e2:5e:cb:b1:63:88:78:e3:40:16:f9: a2:6f:5f:95:f1:6e:d1:9f:00:09:3a:ce:52:f4:ed: 7f:eb:67:36:42:8b:1d:b1:7c:2a:24:23:b5:7b:ec: 54:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:73:44:12:43:B9:48:1C:35:7F:38:F3:2C:82:91:8C:85:F6:54:56 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:71:60:65:3d:70:e8:b7:43:30:59:16:47:4c:1e:6e:d7:5c: fd:f5:61:ee:b0:dc:52:c8:c2:11:fe:00:ad:aa:04:a2:46:dd: f0:45:3c:95:f4:2c:2f:c1:08:1a:92:a4:c1:78:82:85:ab:a6: 21:fa:15:e3:9b:46:e3:06:9a:84:96:5f:42:bd:01:cd:e8:f1: de:95:b1:46:aa:42:fb:09:04:1d:27:8e:00:4a:05:36:ba:7f: 45:d2:72:de:bb:34:35:d8:d7:54:24:06:4b:1b:2b:9b:c1:a3: 17:88:53:8f:aa:fa:95:41:08:c9:e9:cf:a4:75:46:ab:67:e8: 81:da:cf:31:e7:2d:84:8c:51:f0:55:27:9b:aa:b2:41:d4:07: 13:71:e1:be:a1:cb:f6:c6:1b:fb:39:c4:6a:f4:c2:41:c5:bd: da:d9:77:08:a3:b1:4c:46:0a:30:ba:61:2e:9b:a7:6e:fd:37: 9f:6f:68:37:5d:8a:75:b7:56:e3:0c:4d:ef:0d:94:df:72:29: 35:0d:27:69:69:7d:ca:31:d8:e9:bd:0e:a7:32:8f:72:cf:ac: e2:cb:ee:6d:45:8f:b0:66:41:37:62:e7:f3:a1:09:7a:76:0c: 3d:e7:18:5d:9f:66:d3:3e:72:97:59:4e:92:f8:95:81:38:91: a5:a4:8d:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOn2pMihfSh8+rQzJK8jYpb4URe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA2MTMxMjI5NTZaFw0yNjA2MTQxNDI5NTZaMDMxMTAvBgNV BAMTKEQwNzM0NDEyNDNCOTQ4MUMzNTdGMzhGMzJDODI5MThDODVGNjU0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZmEosDg5rhDDX6t9oIbHx+ID JtlfgGOyhEzmsuoF3Jmqct3bQhwTAjGS3Y4g3dzMGHxU14NrCl8jUfKy1lkL1Xez erWxKtswLh4dXweFT4wwm1z4HKhnu83NfMI2YjlFpG2bwlN5hovFhvVs7CXPazIi 60krz+5lyGozAf4akdi7m9e8wj2vkFStEhcfL4CfxAifhRgcj9xCSjI59y/+aufq Cg7EYkztWUVkQhQ1v8VeSmvW8F0zmr9rogrHp5oICg+bYosUe0SpxWCywApfMGIW CvriXsuxY4h440AW+aJvX5XxbtGfAAk6zlL07X/rZzZCix2xfCokI7V77FSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0HNEEkO5SBw1fzjzLIKRjIX2VFYwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABxYGU9cOi3QzBZFkdMHm7XXP31Ye6w3FLI whH+AK2qBKJG3fBFPJX0LC/BCBqSpMF4goWrpiH6FeObRuMGmoSWX0K9Ac3o8d6V sUaqQvsJBB0njgBKBTa6f0XSct67NDXY11QkBksbK5vBoxeIU4+q+pVBCMnpz6R1 Rqtn6IHazzHnLYSMUfBVJ5uqskHUBxNx4b6hy/bGG/s5xGr0wkHFvdrZdwijsUxG CjC6YS6bp279N59vaDddinW3VuMMTe8NlN9yKTUNJ2lpfcox2Om9Dqcyj3LPrOLL 7m1Fj7BmQTdi5/OhCXp2DD3nGF2fZtM+cpdZTpL4lYE4kaWkjbc= -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:18 2026 by rpki-client