$ rpki-client -vvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: kUIUJH84hetsluTGXYOSFhdX5i8BKETM0+AnnZ4WBMg= Subject key identifier: 7E:D9:39:85:A6:72:15:BF:0A:D3:CC:3A:94:62:87:1B:14:75:34:7B Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 2EF96F1E6F88D10DDDFFD6049914771B674AF600 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 09:06:43 +0000 Manifest this update: Wed 29 Jul 2026 09:01:43 +0000 Manifest next update: Thu 30 Jul 2026 11:00:43 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 2: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 3: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: NiKClCV+477d3jk+BOS6GNAUzCkcMTtMT2sLREB/q0A=) 4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f9:6f:1e:6f:88:d1:0d:dd:ff:d6:04:99:14:77:1b:67:4a:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Jul 29 09:01:43 2026 GMT Not After : Jul 30 11:00:43 2026 GMT Subject: CN=7ED93985A67215BF0AD3CC3A9462871B1475347B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:82:86:d4:a5:00:cd:6c:2c:1b:ea:cc:01: 76:0d:d8:ab:a5:78:19:d4:9c:6f:db:60:96:4d:81: fc:53:1d:f1:e1:ed:56:53:d9:53:18:c7:76:d2:2a: 3d:31:bc:e6:1d:57:16:6f:d3:a8:2f:e4:bc:2b:26: 84:79:85:4a:64:d1:aa:ff:7c:8e:fe:45:5d:c6:86: d3:7e:73:02:aa:6f:11:68:da:80:e5:89:fc:17:67: 0f:04:cc:35:98:43:b4:a5:5b:de:4a:e8:4a:7e:43: ef:aa:dd:03:51:06:43:e5:28:27:d4:7d:67:21:86: 3c:cf:65:d8:6a:23:a3:a4:71:7c:71:1d:d6:63:59: dd:72:39:24:47:ac:d5:38:ce:d8:11:77:3b:be:0b: b3:52:53:b5:e9:b4:31:55:ce:eb:dd:4c:d1:dc:60: 48:8f:03:da:f4:d9:36:f5:4a:86:65:2d:b1:85:0b: 91:39:05:d3:15:03:6d:51:61:e6:99:b5:40:b3:f7: bd:67:26:f0:c3:b8:0c:6d:2f:bb:a7:af:14:b2:3d: c9:8b:6f:d7:96:65:e2:ff:7e:fd:f2:fc:b9:13:57: bd:ed:9d:f9:01:87:c7:be:3f:f7:7a:dc:f3:30:dd: 40:cd:f0:ed:30:a6:e5:ad:ff:97:2a:ac:82:83:62: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D9:39:85:A6:72:15:BF:0A:D3:CC:3A:94:62:87:1B:14:75:34:7B X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:03:9f:96:7a:2f:a2:27:93:e9:7c:fa:fc:bc:94:01:19:b8: 2a:2f:20:2f:fc:f1:bc:f5:88:dd:72:b3:86:04:3e:d0:2d:42: f4:18:83:df:c1:6f:f3:f3:9c:8c:a9:c9:89:9d:f6:96:62:63: 99:35:25:7d:ca:31:19:92:a1:3e:00:65:e4:90:96:6c:5b:a6: 69:e5:00:f9:f3:57:8b:6d:0b:91:4e:c9:3c:8b:8b:ae:2a:a7: bc:c8:05:e5:77:e7:e9:37:b4:ed:79:f5:39:43:98:02:13:bc: 37:0d:96:e6:45:10:0a:1f:97:e8:e1:4f:5a:26:7d:eb:32:42: 72:97:3e:ea:fe:7c:3b:23:25:ca:f0:c0:03:1e:ab:1e:35:30: bd:f6:61:49:d5:84:2c:0f:8c:d7:b9:96:7c:e0:c4:e2:3b:11: d1:d8:8b:a9:36:40:70:82:6f:83:35:b1:fa:34:4b:d3:9d:bb: 32:a8:e8:1f:ba:41:7f:d2:6b:b1:75:51:1b:4e:48:cc:83:ac: bd:e9:df:cc:14:c5:d7:fb:55:87:60:6a:9c:0e:8a:71:ab:8c: b9:73:81:d8:9e:a5:6c:19:99:fc:10:d4:2c:28:7d:a0:93:a7: bb:be:78:07:45:d1:4e:26:89:b1:08:d4:a4:ed:36:ef:e1:fc: e9:61:6c:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvlvHm+I0Q3d/9YEmRR3G2dK9gAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA3MjkwOTAxNDNaFw0yNjA3MzAxMTAwNDNaMDMxMTAvBgNV BAMTKDdFRDkzOTg1QTY3MjE1QkYwQUQzQ0MzQTk0NjI4NzFCMTQ3NTM0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssIKG1KUAzWwsG+rMAXYN2Kul eBnUnG/bYJZNgfxTHfHh7VZT2VMYx3bSKj0xvOYdVxZv06gv5LwrJoR5hUpk0ar/ fI7+RV3GhtN+cwKqbxFo2oDlifwXZw8EzDWYQ7SlW95K6Ep+Q++q3QNRBkPlKCfU fWchhjzPZdhqI6OkcXxxHdZjWd1yOSRHrNU4ztgRdzu+C7NSU7XptDFVzuvdTNHc YEiPA9r02Tb1SoZlLbGFC5E5BdMVA21RYeaZtUCz971nJvDDuAxtL7unrxSyPcmL b9eWZeL/fv3y/LkTV73tnfkBh8e+P/d63PMw3UDN8O0wpuWt/5cqrIKDYhpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUftk5haZyFb8K08w6lGKHGxR1NHswHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANEDn5Z6L6Ink+l8+vy8lAEZuCovIC/88bz1 iN1ys4YEPtAtQvQYg9/Bb/PznIypyYmd9pZiY5k1JX3KMRmSoT4AZeSQlmxbpmnl APnzV4ttC5FOyTyLi64qp7zIBeV35+k3tO159TlDmAITvDcNluZFEAofl+jhT1om fesyQnKXPur+fDsjJcrwwAMeqx41ML32YUnVhCwPjNe5lnzgxOI7EdHYi6k2QHCC b4M1sfo0S9OduzKo6B+6QX/Sa7F1URtOSMyDrL3p38wUxdf7VYdgapwOinGrjLlz gdiepWwZmfwQ1CwofaCTp7u+eAdF0U4mibEI1KTtNu/h/OlhbPE= -----END CERTIFICATE-----Generated at Wed Jul 29 12:03:11 2026 by rpki-client