$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft File: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft (raw, json) Hash identifier: /bnVl20K+VEL92rE8VuSbUnx/1iXAgMRgUvf6tvUebQ= Subject key identifier: B6:57:D9:10:05:7B:13:54:31:6A:0A:D9:53:BB:95:54:5D:A0:71:CB Authority key identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0 Certificate issuer: /CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0 Certificate serial: 30FCFDABC454B96290B9D263DF54A7E2AA1EDC81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:41:10 +0000 Manifest this update: Mon 21 Sep 2026 15:36:10 +0000 Manifest next update: Tue 22 Sep 2026 18:39:10 +0000 Files and hashes: 1: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 5ruPZLXOx5EYeaSuNCjm5La9e7w8hzod2dtunu/cpyk=) 2: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: rqI3PL8vwSW0P/PJNj65/4Uzquyhsko/Jx79Jej+5aU=) 3: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl (hash: yjqAh8DYODiB3j1Mf6l+y5uv9N4DVUNTcSpGpd33u9g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fc:fd:ab:c4:54:b9:62:90:b9:d2:63:df:54:a7:e2:aa:1e:dc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0 Validity Not Before: Sep 21 15:36:10 2026 GMT Not After : Sep 22 18:39:10 2026 GMT Subject: CN=B657D910057B1354316A0AD953BB95545DA071CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:49:18:45:8d:52:ad:1b:28:d1:e0:7d:94: 11:aa:74:2c:85:27:87:06:be:ff:48:cf:ae:b2:b3: 7f:cc:b3:f0:0a:50:4f:06:20:9a:2d:f3:d2:e9:64: 2b:0f:ad:38:01:69:3b:83:45:e3:3c:88:c3:74:e6: 99:d0:27:32:52:70:2a:b2:fa:5b:39:b6:36:d3:64: dc:36:a0:9b:5d:4e:30:af:d3:16:fe:23:cf:47:33: ab:ce:a2:bc:4b:a7:24:22:a6:e6:b6:d8:de:fd:d0: 2f:8c:5e:45:cb:43:45:3c:25:df:f6:7b:6e:db:bd: ff:b4:2c:a1:89:7d:ee:cc:25:a1:33:77:c7:fa:7f: 80:6f:b7:f2:dc:ef:50:8c:74:52:a3:66:10:5a:5a: 88:bf:f6:35:bb:65:b6:6d:20:73:f6:b8:fb:57:42: cb:fe:58:2d:56:18:06:b9:9e:a5:d4:8c:85:51:c8: 3c:7e:02:5b:58:1c:a4:00:ae:28:7e:6b:ba:f9:48: 7e:d1:dc:54:a7:f8:39:12:f2:3e:11:6a:30:e0:a4: 6d:e3:67:45:4a:86:3d:c8:0e:e5:a6:00:88:4c:1d: ec:31:72:54:36:a7:bb:ab:aa:94:f4:5b:02:54:e9: fe:85:6a:8e:b7:95:77:62:e8:71:7f:af:5f:81:0f: 87:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:57:D9:10:05:7B:13:54:31:6A:0A:D9:53:BB:95:54:5D:A0:71:CB X509v3 Authority Key Identifier: keyid:47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ce:43:34:f9:0a:e3:f5:4f:2e:72:47:93:96:8a:f9:7f:59: 6b:b2:29:29:00:4f:d7:0b:16:4c:66:c9:fb:f7:cc:e7:c4:fc: 2a:03:33:cb:e8:e9:1e:4e:a2:63:75:43:26:ee:39:82:93:82: 74:6c:af:9b:15:a4:0d:a5:88:c8:4d:c0:6d:68:45:a6:7b:7d: 2d:e9:fa:af:0d:76:2e:16:82:22:29:6f:da:05:17:0b:24:3e: f8:28:c9:94:65:de:6c:72:a3:ed:1b:83:f3:b3:31:5d:e8:2c: 1b:0c:5d:71:84:62:8e:92:d3:83:56:3a:b5:b2:b2:39:23:cb: c9:ed:85:05:9f:98:99:b0:2e:d4:4c:54:33:4c:97:a0:a6:ba: 29:af:5e:d8:8e:c1:7b:94:7a:57:f4:10:34:3b:98:4e:ee:16: 00:b2:9b:27:9b:08:4c:0f:b8:b0:d8:4c:82:26:fc:01:d2:3a: f9:9b:95:b6:0d:5e:d6:a2:9a:ff:81:9e:80:7c:9d:e4:a2:de: 4f:f4:3d:0f:2b:e6:0e:d3:2c:dc:15:db:8e:26:2d:9a:58:73: b5:74:68:47:f6:26:0a:d1:68:cd:0e:f8:49:11:7b:95:3d:1e: 65:b3:d2:a5:73:6b:e9:29:e0:00:bb:0d:c9:ed:aa:7f:08:59: 7f:ea:b8:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPz9q8RUuWKQudJj31Sn4qoe3IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFQzg4NEQ1Rjc5MzU4MjNFMDc0RTZEQ0REMkIyQjc1 QUI0Q0JBMDAeFw0yNjA5MjExNTM2MTBaFw0yNjA5MjIxODM5MTBaMDMxMTAvBgNV BAMTKEI2NTdEOTEwMDU3QjEzNTQzMTZBMEFEOTUzQkI5NTU0NURBMDcxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/EkYRY1SrRso0eB9lBGqdCyF J4cGvv9Iz66ys3/Ms/AKUE8GIJot89LpZCsPrTgBaTuDReM8iMN05pnQJzJScCqy +ls5tjbTZNw2oJtdTjCv0xb+I89HM6vOorxLpyQipua22N790C+MXkXLQ0U8Jd/2 e27bvf+0LKGJfe7MJaEzd8f6f4Bvt/Lc71CMdFKjZhBaWoi/9jW7ZbZtIHP2uPtX Qsv+WC1WGAa5nqXUjIVRyDx+AltYHKQArih+a7r5SH7R3FSn+DkS8j4RajDgpG3j Z0VKhj3IDuWmAIhMHewxclQ2p7urqpT0WwJU6f6Fao63lXdi6HF/r1+BD4fzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtlfZEAV7E1QxagrZU7uVVF2gccswHwYDVR0j BBgwFoAUR+yITV95NYI+B05tzdKyt1q0y6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYwOGEyZTItZjgxMC00NmU4LWE1YTEtNTZlYzVhMzVkMmFkLzAvNDdFQzg4NEQ1 Rjc5MzU4MjNFMDc0RTZEQ0REMkIyQjc1QUI0Q0JBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0VDODg0RDVGNzkzNTgyM0UwNzRFNkRDREQyQjJCNzVBQjRD QkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvNDdFQzg4NEQ1Rjc5MzU4MjNFMDc0RTZEQ0REMkIy Qjc1QUI0Q0JBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzOQzT5CuP1Ty5yR5OWivl/WWuyKSkAT9cL Fkxmyfv3zOfE/CoDM8vo6R5OomN1QybuOYKTgnRsr5sVpA2liMhNwG1oRaZ7fS3p +q8Ndi4WgiIpb9oFFwskPvgoyZRl3mxyo+0bg/OzMV3oLBsMXXGEYo6S04NWOrWy sjkjy8nthQWfmJmwLtRMVDNMl6CmuimvXtiOwXuUelf0EDQ7mE7uFgCymyebCEwP uLDYTIIm/AHSOvmblbYNXtaimv+BnoB8neSi3k/0PQ8r5g7TLNwV244mLZpYc7V0 aEf2JgrRaM0O+EkRe5U9HmWz0qVza+kp4AC7Dcntqn8IWX/quDk= -----END CERTIFICATE-----Generated at Tue Sep 22 09:42:54 2026 by rpki-client