$ rpki-client -vvvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: m3MllflTDf1YBn4vixzjdgGTAcEwqwG3B3G/sXQkhnU= Subject key identifier: 5B:7A:13:60:51:64:93:20:FF:B9:A4:96:48:BB:5C:89:D0:DF:75:D9 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 6AE646063527254BD36865B4CA01B49FA9CCD2A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:44:46 +0000 Manifest this update: Mon 21 Sep 2026 14:39:46 +0000 Manifest next update: Tue 22 Sep 2026 18:02:46 +0000 Files and hashes: 1: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 2: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) 3: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 4: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: 8ijcIXooMpW2VvNdthGahKxsH5si3BfcgnkUhe/Ug5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e6:46:06:35:27:25:4b:d3:68:65:b4:ca:01:b4:9f:a9:cc:d2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Sep 21 14:39:46 2026 GMT Not After : Sep 22 18:02:46 2026 GMT Subject: CN=5B7A136051649320FFB9A49648BB5C89D0DF75D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:9a:b8:63:29:4d:89:ce:b3:7b:69:16:0c: 82:ac:90:27:4d:58:54:4d:18:ef:15:6b:e5:1e:f4: 6e:d2:be:b0:69:21:8d:bf:3c:7c:cd:03:d2:0f:f1: a8:47:72:dc:74:cd:82:ed:a6:0b:ad:4a:93:d5:09: be:4a:af:82:03:b7:46:4e:7a:d9:c1:80:ce:c9:43: 67:0d:f8:d3:d5:d6:4c:ac:a0:8f:f0:d2:0e:60:46: 30:3b:44:3e:f4:64:d7:cd:98:dd:67:1e:60:bb:99: c2:77:4a:ea:5b:e5:9c:ba:cf:86:d5:aa:c8:f7:19: 4b:2a:66:63:39:53:f1:8f:54:81:07:fd:3a:0b:d3: 34:a3:db:73:53:e2:f9:34:b0:ad:02:d3:b9:1f:43: 32:f1:23:0c:64:2e:75:33:d6:5b:58:c2:bf:98:62: 53:2e:60:d1:19:9c:38:ae:9c:89:e3:33:11:a5:ef: 3a:27:07:47:e5:21:f1:69:94:8f:f8:10:fd:1f:6a: e1:60:62:3e:cf:27:9f:c6:b5:48:33:08:d7:82:3e: 76:8c:2a:38:6b:6f:d5:ed:f6:1a:0f:6f:37:9d:c5: a4:a9:4b:4b:06:0d:c2:e9:97:ee:46:47:3f:64:06: 29:22:87:fa:27:a3:44:a0:0c:c8:f1:82:e9:45:e3: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7A:13:60:51:64:93:20:FF:B9:A4:96:48:BB:5C:89:D0:DF:75:D9 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:24:85:13:63:1c:a5:6c:7d:99:8f:dd:eb:17:72:a6:eb:b6: 92:3f:c9:07:40:32:50:11:7b:15:4d:46:b1:08:98:25:cc:5d: 07:f4:e5:cc:86:2b:96:3b:ef:71:47:f2:5d:f4:c9:c2:bd:11: d0:3c:84:be:22:01:7c:3b:d2:12:ec:ec:fa:78:c0:a7:04:2e: 98:e3:84:31:f7:2f:a8:c8:21:14:ee:ed:a7:a9:21:a1:5a:bd: 52:d3:fd:4a:11:c7:be:57:cd:28:81:32:d5:6a:51:94:97:1e: dc:b3:60:01:8d:9e:ca:bb:c2:78:35:02:39:0b:e7:30:6c:ce: bf:f9:9d:fc:b4:9c:c9:58:fd:4c:54:ce:35:18:b9:32:05:11: 40:29:fe:77:ac:10:89:b9:59:da:e2:74:99:b3:44:ab:09:10: 28:af:12:e4:79:52:3d:ad:95:94:27:c7:31:50:1d:c2:30:52: 0c:66:67:24:0e:78:3a:ec:97:af:95:1f:4e:59:c0:13:98:20: 90:b6:a8:b7:f0:5d:f0:c1:9d:02:c8:25:55:43:5f:9a:71:da: 90:3c:f4:49:6c:51:8c:3f:f0:98:61:19:f9:f6:88:aa:88:3f: fe:d8:44:91:52:e6:1f:4b:b7:6f:22:a0:a1:28:dd:4b:ed:88: f1:25:49:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauZGBjUnJUvTaGW0ygG0n6nM0qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA5MjExNDM5NDZaFw0yNjA5MjIxODAyNDZaMDMxMTAvBgNV BAMTKDVCN0ExMzYwNTE2NDkzMjBGRkI5QTQ5NjQ4QkI1Qzg5RDBERjc1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQJq4YylNic6ze2kWDIKskCdN WFRNGO8Va+Ue9G7SvrBpIY2/PHzNA9IP8ahHctx0zYLtpgutSpPVCb5Kr4IDt0ZO etnBgM7JQ2cN+NPV1kysoI/w0g5gRjA7RD70ZNfNmN1nHmC7mcJ3Supb5Zy6z4bV qsj3GUsqZmM5U/GPVIEH/ToL0zSj23NT4vk0sK0C07kfQzLxIwxkLnUz1ltYwr+Y YlMuYNEZnDiunInjMxGl7zonB0flIfFplI/4EP0fauFgYj7PJ5/GtUgzCNeCPnaM Kjhrb9Xt9hoPbzedxaSpS0sGDcLpl+5GRz9kBikih/ono0SgDMjxgulF4+crAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW3oTYFFkkyD/uaSWSLtcidDfddkwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0khRNjHKVsfZmP3esXcqbrtpI/yQdAMlAR exVNRrEImCXMXQf05cyGK5Y773FH8l30ycK9EdA8hL4iAXw70hLs7Pp4wKcELpjj hDH3L6jIIRTu7aepIaFavVLT/UoRx75XzSiBMtVqUZSXHtyzYAGNnsq7wng1AjkL 5zBszr/5nfy0nMlY/UxUzjUYuTIFEUAp/nesEIm5WdridJmzRKsJECivEuR5Uj2t lZQnxzFQHcIwUgxmZyQOeDrsl6+VH05ZwBOYIJC2qLfwXfDBnQLIJVVDX5px2pA8 9ElsUYw/8JhhGfn2iKqIP/7YRJFS5h9Lt28ioKEo3UvtiPElSUM= -----END CERTIFICATE-----Generated at Mon Sep 21 17:43:07 2026 by rpki-client