$ rpki-client -vvvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: HIeW214i22L1UAa8N2YNQDkJ/7jwUzadun2F7wWW97k= Subject key identifier: 1E:4B:D8:17:82:E7:60:CD:11:53:60:F5:DB:59:AD:DA:F8:AB:34:58 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 5EB1BE7FAFAC643608E6A6A74836B444FAEFD1E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 23:23:23 +0000 Manifest this update: Sat 14 Nov 2026 23:18:23 +0000 Manifest next update: Mon 16 Nov 2026 00:54:23 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 2: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 3: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: GDsGuGIEfLx7bl0sdpeosZJpZtrV8u4CrrC9MDtG8EU=) 4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b1:be:7f:af:ac:64:36:08:e6:a6:a7:48:36:b4:44:fa:ef:d1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Nov 14 23:18:23 2026 GMT Not After : Nov 16 00:54:23 2026 GMT Subject: CN=1E4BD81782E760CD115360F5DB59ADDAF8AB3458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:54:5c:7a:77:17:9b:ac:59:62:cd:44:97: 49:d2:bd:52:39:f2:36:9f:c9:ff:61:54:92:94:c1: ac:10:9c:19:e2:7c:1c:d1:fb:42:be:dd:99:e3:b6: cf:34:a6:11:c2:0d:69:ef:7a:d5:cc:5f:7f:ac:d9: 35:18:99:1c:d5:5a:26:9a:32:87:95:93:f9:54:f2: ec:f8:65:fb:f4:1c:bb:20:fb:4f:80:e0:07:78:eb: b3:59:9f:81:42:c9:86:2c:57:9b:56:6a:9e:6a:76: 2e:fd:87:c3:65:35:01:a8:77:dc:9a:9e:03:e3:9e: ce:67:0a:64:1e:52:60:c7:43:94:a7:61:be:4f:98: 9e:3d:d3:eb:1e:65:c5:0a:6c:29:32:ca:83:d6:5a: 8f:41:85:50:2a:b7:1f:38:6d:f5:15:f5:d2:65:a9: 25:0c:5a:2a:44:88:85:09:26:a6:7f:af:b9:e3:71: 99:9d:f1:b9:bc:2b:ae:cf:39:cb:64:c7:00:98:82: c0:0c:ba:7b:d4:c1:74:be:15:6a:7b:b4:cd:75:87: 45:62:67:36:a9:c8:a3:75:6f:37:06:c0:2c:28:07: da:6d:8c:c5:a9:c7:6d:56:ed:a8:7d:31:76:fd:84: cf:e3:2c:f8:4f:17:3c:c3:20:b9:01:be:ed:65:06: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4B:D8:17:82:E7:60:CD:11:53:60:F5:DB:59:AD:DA:F8:AB:34:58 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f4:84:a3:bf:f7:99:93:be:89:55:66:90:61:1d:31:85:cd: ed:0c:e3:1e:6f:b1:35:aa:df:0c:e6:0b:e3:87:26:f6:bc:b4: 39:18:7c:bc:04:75:83:a3:74:f4:93:c1:98:78:2a:70:77:10: 5f:3a:bc:f8:93:6a:be:34:b5:8b:28:48:c0:ea:75:fb:7d:50: 9c:df:29:b4:de:3c:dc:6c:42:be:ae:20:1c:8b:a6:d1:7a:fc: af:f1:33:7b:4d:4e:48:35:fd:53:b9:72:79:51:15:e8:75:2e: 38:33:56:ba:d3:ec:28:48:9e:ef:f7:92:81:3c:9c:f6:8f:ca: 34:82:a0:fd:f3:19:66:7b:66:a0:1f:13:be:be:51:47:78:2b: 61:fb:f3:40:e4:51:f6:e8:28:2e:53:4d:59:3a:8b:28:83:ea: f3:d5:7d:43:20:39:77:07:93:55:4f:85:98:ea:4a:9c:19:50: 69:e6:b0:73:bf:89:13:dc:40:95:32:8f:5d:df:41:8c:06:9b: 0c:05:07:3b:07:59:67:1f:bf:fe:56:d1:80:39:a3:d5:3d:a3: 8c:6d:f0:d2:92:eb:17:89:3b:5d:a8:6f:0a:b8:00:09:b6:d3: 15:18:ab:1f:0f:71:44:57:10:3b:ff:36:24:9e:eb:df:0e:6b: d3:4d:48:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrG+f6+sZDYI5qanSDa0RPrv0eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjExMTQyMzE4MjNaFw0yNjExMTYwMDU0MjNaMDMxMTAvBgNV BAMTKDFFNEJEODE3ODJFNzYwQ0QxMTUzNjBGNURCNTlBRERBRjhBQjM0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjFRcencXm6xZYs1El0nSvVI5 8jafyf9hVJKUwawQnBnifBzR+0K+3Znjts80phHCDWnvetXMX3+s2TUYmRzVWiaa MoeVk/lU8uz4Zfv0HLsg+0+A4Ad467NZn4FCyYYsV5tWap5qdi79h8NlNQGod9ya ngPjns5nCmQeUmDHQ5SnYb5PmJ490+seZcUKbCkyyoPWWo9BhVAqtx84bfUV9dJl qSUMWipEiIUJJqZ/r7njcZmd8bm8K67POctkxwCYgsAMunvUwXS+FWp7tM11h0Vi ZzapyKN1bzcGwCwoB9ptjMWpx21W7ah9MXb9hM/jLPhPFzzDILkBvu1lBiX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkvYF4LnYM0RU2D121mt2virNFgwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALL0hKO/95mTvolVZpBhHTGFze0M4x5vsTWq 3wzmC+OHJva8tDkYfLwEdYOjdPSTwZh4KnB3EF86vPiTar40tYsoSMDqdft9UJzf KbTePNxsQr6uIByLptF6/K/xM3tNTkg1/VO5cnlRFeh1LjgzVrrT7ChInu/3koE8 nPaPyjSCoP3zGWZ7ZqAfE76+UUd4K2H780DkUfboKC5TTVk6iyiD6vPVfUMgOXcH k1VPhZjqSpwZUGnmsHO/iRPcQJUyj13fQYwGmwwFBzsHWWcfv/5W0YA5o9U9o4xt 8NKS6xeJO12obwq4AAm20xUYqx8PcURXEDv/NiSe698Oa9NNSMc= -----END CERTIFICATE-----Generated at Sun Nov 15 11:55:11 2026 by rpki-client