$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft File: 47C0520954E7036D01276256DF53723219F2EDC8.mft (raw, json) Hash identifier: e6cJHSE2DXDmLMF1izrZ/P99GyPeea5Vfsabv2vEQbM= Subject key identifier: 80:45:7D:F5:4A:AE:94:7C:85:8A:91:0C:65:6D:1D:04:6F:0A:7B:DB Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 Certificate issuer: /CN=47C0520954E7036D01276256DF53723219F2EDC8 Certificate serial: 7B19D8F411EB32822FD79002E392F2B65E629727 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:38:11 +0000 Manifest this update: Tue 16 Jun 2026 15:33:11 +0000 Manifest next update: Wed 17 Jun 2026 18:22:11 +0000 Files and hashes: 1: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: BaWAfcWmlaxL1WWaXjy2UfPAwdXpBP48cn9wbdt4S4k=) 2: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: 6NYVsKX5xsfwPEbXx8usYHTJLFAFT9/9ztiP0cssm8I=) 3: 47C0520954E7036D01276256DF53723219F2EDC8.crl (hash: dKTpl8QKkBw7Rv7vlqxgkK9FGh+xsRN0c4GR/rVhCog=) 4: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: 1TpHsmaA1JQZU+qQGSvG+moVShwWiM39h2j2sMJO5Wk=) 5: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:19:d8:f4:11:eb:32:82:2f:d7:90:02:e3:92:f2:b6:5e:62:97:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8 Validity Not Before: Jun 16 15:33:11 2026 GMT Not After : Jun 17 18:22:11 2026 GMT Subject: CN=80457DF54AAE947C858A910C656D1D046F0A7BDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:3b:cf:b6:57:2b:de:11:06:f3:13:8e:79: d7:08:4c:03:6d:fa:47:6e:bc:94:e4:05:f3:de:b9: e3:38:23:9f:6c:e4:3f:2f:af:9b:28:02:d2:1d:b1: bd:86:18:82:7c:7d:4f:49:a5:6a:3f:35:5e:d4:4c: e1:77:4c:d9:d2:5b:85:c6:3e:6a:a5:a7:62:fc:ee: fe:c4:f5:bc:6c:7a:89:ea:69:7b:c6:1f:db:22:f5: 88:28:bb:a0:26:c3:03:01:74:fa:5a:a7:e9:1f:99: 59:0d:10:07:78:95:31:4c:69:4c:e5:01:06:3a:66: fd:02:79:8c:8b:e4:c3:c9:c3:e8:3a:48:3f:79:7e: 6a:96:f5:19:ea:e4:58:2e:90:ac:eb:a4:43:60:cd: 88:0b:78:88:f9:0b:03:55:95:11:ec:d6:cb:57:fb: 01:94:ea:af:68:43:d1:b8:c7:c4:3c:f9:c3:17:df: bc:f2:97:d2:71:02:cf:1d:75:9e:fa:a7:4a:08:5a: cc:10:b6:04:0a:9c:3b:22:57:78:90:97:ae:85:6e: a5:a7:42:96:5d:bf:ec:e9:5b:89:cd:c7:dc:0d:06: 78:5e:3d:36:27:35:f8:20:09:2c:5f:47:97:5a:d1: d2:fe:d8:7c:82:0c:c2:ba:14:26:c8:dc:1a:26:46: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:45:7D:F5:4A:AE:94:7C:85:8A:91:0C:65:6D:1D:04:6F:0A:7B:DB X509v3 Authority Key Identifier: keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:99:34:1e:4f:12:13:75:9a:24:b5:b4:67:54:e4:75:23:35: b8:61:e2:83:2c:3e:6c:ef:79:ef:aa:8b:55:eb:59:83:10:d6: 73:74:47:ef:20:ae:e3:72:c4:53:00:d0:a5:30:fb:b4:a4:27: 62:a9:7d:dc:e5:d6:70:26:e0:89:c6:19:c8:88:37:e8:a8:d9: 9f:ae:9a:ab:f1:18:81:4e:c2:b3:e4:40:52:78:91:ef:c4:00: e9:39:6c:b5:b4:52:b8:c5:11:e8:d1:56:a7:a1:c4:5f:5c:c7: d9:34:49:a1:e8:d8:69:01:4c:ae:91:a0:2a:69:93:ae:d5:3a: 4b:49:29:9b:9a:36:8a:2d:a5:bd:08:53:60:84:2d:ba:75:47: 1f:17:29:86:bc:20:8f:68:f1:33:c5:e0:fa:a5:d8:7b:49:69: b5:20:63:1c:31:6a:93:b9:01:fa:c0:3f:dd:15:6e:97:48:d8: cc:55:e4:83:a5:9e:cf:ac:0b:ff:09:f9:dd:26:f4:1b:10:14: f3:cb:d1:bd:f1:fa:03:11:fd:dc:5d:76:8f:2f:82:f4:4f:18: 92:2c:33:1e:28:cc:31:38:0a:0b:c8:50:ac:ba:4b:08:cd:d0: 08:fc:e1:73:d4:61:d7:65:6f:5d:a2:78:ec:7e:78:f7:d8:ca: 35:fa:f3:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexnY9BHrMoIv15AC45Lytl5ilycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIx OUYyRURDODAeFw0yNjA2MTYxNTMzMTFaFw0yNjA2MTcxODIyMTFaMDMxMTAvBgNV BAMTKDgwNDU3REY1NEFBRTk0N0M4NThBOTEwQzY1NkQxRDA0NkYwQTdCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7DvPtlcr3hEG8xOOedcITANt +kduvJTkBfPeueM4I59s5D8vr5soAtIdsb2GGIJ8fU9JpWo/NV7UTOF3TNnSW4XG Pmqlp2L87v7E9bxseonqaXvGH9si9Ygou6AmwwMBdPpap+kfmVkNEAd4lTFMaUzl AQY6Zv0CeYyL5MPJw+g6SD95fmqW9Rnq5FgukKzrpENgzYgLeIj5CwNVlRHs1stX +wGU6q9oQ9G4x8Q8+cMX37zyl9JxAs8ddZ76p0oIWswQtgQKnDsiV3iQl66FbqWn QpZdv+zpW4nNx9wNBnhePTYnNfggCSxfR5da0dL+2HyCDMK6FCbI3BomRk5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgEV99UqulHyFipEMZW0dBG8Ke9swHwYDVR0j BBgwFoAUR8BSCVTnA20BJ2JW31NyMhny7cgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ3MGNjMzctMWZhNi00ZmEwLWE4OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1 NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIxOUYyRURDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0MwNTIwOTU0RTcwMzZEMDEyNzYyNTZERjUzNzIzMjE5RjJF REM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1Mzcy MzIxOUYyRURDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSZNB5PEhN1miS1tGdU5HUjNbhh4oMsPmzv ee+qi1XrWYMQ1nN0R+8gruNyxFMA0KUw+7SkJ2Kpfdzl1nAm4InGGciIN+io2Z+u mqvxGIFOwrPkQFJ4ke/EAOk5bLW0UrjFEejRVqehxF9cx9k0SaHo2GkBTK6RoCpp k67VOktJKZuaNootpb0IU2CELbp1Rx8XKYa8II9o8TPF4Pql2HtJabUgYxwxapO5 AfrAP90VbpdI2MxV5IOlns+sC/8J+d0m9BsQFPPL0b3x+gMR/dxddo8vgvRPGJIs Mx4ozDE4CgvIUKy6SwjN0Aj84XPUYddlb12ieOx+ePfYyjX68wI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:52 2026 by rpki-client