$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft File: 47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft (raw, json) Hash identifier: o5fOJIMMvq79bYLiXYbb8YdRmkFrBOJij5CI87FDbI0= Subject key identifier: 60:C5:1C:3A:15:D4:71:F9:69:B3:00:D1:E5:47:FD:8F:F6:AF:28:A7 Authority key identifier: 47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30 Certificate issuer: /CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830 Certificate serial: 30F73D46A2135DC1376413C9B2A32541E2B11763 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft Manifest number: BE Signing time: Sun 20 Sep 2026 14:35:08 +0000 Manifest this update: Sun 20 Sep 2026 14:30:08 +0000 Manifest next update: Mon 21 Sep 2026 16:13:08 +0000 Files and hashes: 1: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: ZJiVItgKv8mzN8I1br1Yth+rPx8k2fE2ta0yCq6Q6Go=) 2: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: v/2zYMSXUTzSSW7I8Fu1z9fEt17y0q1g424KCA4tdns=) 3: 47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl (hash: FoGuLAflIDps8uM/nSIrZBKlZCUmWyys7LftPTuVcX0=) 4: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: xZnHAYFbnEc0A3njrjnrHmJ+U6dJWxONqshnQ5yBO6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f7:3d:46:a2:13:5d:c1:37:64:13:c9:b2:a3:25:41:e2:b1:17:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830 Validity Not Before: Sep 20 14:30:08 2026 GMT Not After : Sep 21 16:13:08 2026 GMT Subject: CN=60C51C3A15D471F969B300D1E547FD8FF6AF28A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e8:87:ab:04:c4:65:33:f8:86:e1:f3:91:f6: cd:87:c6:ab:df:14:33:3d:5b:5f:38:e8:77:0a:fd: 8f:5a:04:22:6e:51:96:54:e6:c5:c3:12:40:bf:10: 9d:73:12:6b:54:44:6d:68:62:ac:7a:3d:50:53:f9: 6e:22:07:0d:21:12:e5:96:1f:78:f9:87:e7:0a:09: 93:89:7e:07:2d:a9:39:5c:ec:60:f8:be:6a:54:8d: 49:e6:3f:75:c0:58:16:d5:0f:40:2f:4e:de:6b:ac: 0b:ca:a8:5b:8e:9b:12:51:42:3b:6a:1b:7d:24:98: 53:7c:9b:dc:c8:0b:d8:ea:63:de:8a:62:64:d5:50: 23:3a:73:3d:9a:53:69:3d:83:2a:10:d2:79:a0:78: 5a:dc:e3:f3:41:88:b7:a9:5d:1f:ad:08:9b:73:0b: 1d:9a:7e:9d:f8:ab:c4:de:5d:9d:fb:f2:18:8b:87: 6a:8e:62:42:de:ac:72:f2:29:2b:b5:f5:21:ad:18: f6:dd:d9:64:00:b4:8a:77:fa:02:9e:ed:4b:ad:d2: 9e:84:5d:24:c6:e6:1f:34:ee:7b:7b:bf:f0:b5:fd: 59:42:38:0a:86:a7:d2:cf:72:86:75:b8:0a:a2:15: e5:34:17:d9:fa:1e:7f:76:ef:73:75:e6:db:c6:ea: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C5:1C:3A:15:D4:71:F9:69:B3:00:D1:E5:47:FD:8F:F6:AF:28:A7 X509v3 Authority Key Identifier: keyid:47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:31:3a:61:7e:49:74:c8:01:49:76:02:54:da:a1:83:47:82: 6f:59:1d:45:65:55:1f:5f:53:d4:d3:e9:f1:f1:85:26:b2:7d: 96:5f:f5:2d:f2:25:57:b2:e1:a8:59:6e:fe:f1:3a:c4:ff:ad: 3a:b5:6e:20:97:d9:c4:8f:e5:13:dc:85:e9:e4:bd:ea:4b:4b: 7b:9c:3b:7d:30:2f:41:57:13:45:a4:3b:b3:b3:5e:6d:92:68: 61:f4:a0:30:1e:85:a5:8b:e8:e1:6c:3b:d5:66:7c:f0:3a:c2: 9a:e5:64:1e:d2:21:f7:1d:89:20:66:88:4e:ea:19:0e:af:f6: d1:b1:fa:37:8c:c5:fb:d9:55:ee:53:22:6d:0e:f9:bb:c2:3e: 8f:f5:3f:75:cd:03:65:b8:de:ab:d2:de:35:db:0e:a2:69:80: c5:1a:a5:e5:32:d5:c4:2f:d1:7c:18:3d:85:27:de:74:5a:85: 97:c5:03:86:97:4f:8b:48:85:be:5b:0d:ed:9c:f6:fe:da:0e: 81:27:77:79:91:0e:c6:66:d3:f8:75:78:55:39:3d:f7:e1:0b: f4:c9:d8:c5:13:b0:37:94:33:38:83:f6:c3:1c:17:86:1b:a6: 3e:20:2e:38:c7:d4:22:9c:57:eb:89:18:6d:13:5c:86:a7:55: 49:41:0a:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPc9RqITXcE3ZBPJsqMlQeKxF2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJGODEw Qjc5MzgzMDAeFw0yNjA5MjAxNDMwMDhaFw0yNjA5MjExNjEzMDhaMDMxMTAvBgNV BAMTKDYwQzUxQzNBMTVENDcxRjk2OUIzMDBEMUU1NDdGRDhGRjZBRjI4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ6IerBMRlM/iG4fOR9s2Hxqvf FDM9W1846HcK/Y9aBCJuUZZU5sXDEkC/EJ1zEmtURG1oYqx6PVBT+W4iBw0hEuWW H3j5h+cKCZOJfgctqTlc7GD4vmpUjUnmP3XAWBbVD0AvTt5rrAvKqFuOmxJRQjtq G30kmFN8m9zIC9jqY96KYmTVUCM6cz2aU2k9gyoQ0nmgeFrc4/NBiLepXR+tCJtz Cx2afp34q8TeXZ378hiLh2qOYkLerHLyKSu19SGtGPbd2WQAtIp3+gKe7Uut0p6E XSTG5h807nt7v/C1/VlCOAqGp9LPcoZ1uAqiFeU0F9n6Hn9273N15tvG6rW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYMUcOhXUcflpswDR5Uf9j/avKKcwHwYDVR0j BBgwFoAUR+teBU2m+/8k2d7qpWcvgQt5ODAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGUzZjJlOWItMTA2OC00ZmE5LWJhMWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0 REE2RkJGRjI0RDlERUVBQTU2NzJGODEwQjc5MzgzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0VCNUUwNTREQTZGQkZGMjREOURFRUFBNTY3MkY4MTBCNzkz ODMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJG ODEwQjc5MzgzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8xOmF+SXTIAUl2AlTaoYNHgm9ZHUVlVR9f U9TT6fHxhSayfZZf9S3yJVey4ahZbv7xOsT/rTq1biCX2cSP5RPchenkvepLS3uc O30wL0FXE0WkO7OzXm2SaGH0oDAehaWL6OFsO9VmfPA6wprlZB7SIfcdiSBmiE7q GQ6v9tGx+jeMxfvZVe5TIm0O+bvCPo/1P3XNA2W43qvS3jXbDqJpgMUapeUy1cQv 0XwYPYUn3nRahZfFA4aXT4tIhb5bDe2c9v7aDoEnd3mRDsZm0/h1eFU5PffhC/TJ 2MUTsDeUMziD9sMcF4Ybpj4gLjjH1CKcV+uJGG0TXIanVUlBCtM= -----END CERTIFICATE-----Generated at Mon Sep 21 10:40:19 2026 by rpki-client