$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft File: 47C0520954E7036D01276256DF53723219F2EDC8.mft (raw, json) Hash identifier: 1ExzDTdIY6ZaoQayLhCFza/IDmwvObqSnToBjrPMWhg= Subject key identifier: CD:58:3A:04:13:7A:03:32:FE:F1:24:93:C8:7E:3C:CB:52:B7:C4:05 Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 Certificate issuer: /CN=47C0520954E7036D01276256DF53723219F2EDC8 Certificate serial: 21899D2BF3F845F2B65B96A0A8536763218692D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft Manifest number: BE Signing time: Sun 20 Sep 2026 17:02:57 +0000 Manifest this update: Sun 20 Sep 2026 16:57:57 +0000 Manifest next update: Mon 21 Sep 2026 20:33:57 +0000 Files and hashes: 1: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=) 2: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: BaWAfcWmlaxL1WWaXjy2UfPAwdXpBP48cn9wbdt4S4k=) 3: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: 6NYVsKX5xsfwPEbXx8usYHTJLFAFT9/9ztiP0cssm8I=) 4: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: 1TpHsmaA1JQZU+qQGSvG+moVShwWiM39h2j2sMJO5Wk=) 5: 47C0520954E7036D01276256DF53723219F2EDC8.crl (hash: MzRbmiUAqLTSPciOIydE4r34E0Sfks/V2QPMx3gqzu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:89:9d:2b:f3:f8:45:f2:b6:5b:96:a0:a8:53:67:63:21:86:92:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8 Validity Not Before: Sep 20 16:57:57 2026 GMT Not After : Sep 21 20:33:57 2026 GMT Subject: CN=CD583A04137A0332FEF12493C87E3CCB52B7C405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:be:68:86:f5:d1:27:7a:32:11:af:c0:57:0b: 5d:52:fd:04:6a:e9:9f:16:a4:1e:da:a6:1f:7a:fe: 5a:85:41:47:42:ae:3a:0e:c1:d4:fa:ef:e3:eb:5c: 3d:11:9d:36:64:bd:b9:bb:2a:48:be:0a:44:41:25: dc:b3:ee:70:ec:61:6f:32:34:81:64:8f:81:c1:51: 87:38:aa:fb:5f:a2:fd:5a:90:55:45:6f:f3:a6:8d: 30:ac:5f:be:43:ff:36:3f:68:52:54:df:f1:51:b6: 94:1c:c4:8d:fb:e1:98:7f:db:c6:36:7d:1f:d0:e7: 49:bf:de:45:15:13:8e:78:24:b4:7f:aa:a5:2f:2e: f7:fa:45:7b:a2:60:29:b3:66:bf:fa:2f:5a:58:04: cb:c7:0d:17:b9:e5:94:97:fa:64:01:6a:23:06:1a: 17:5e:d6:be:bb:dc:0e:58:e8:c4:49:96:0e:13:b0: 4c:fa:66:ce:ad:c1:44:e8:e9:30:bd:1d:3a:0e:cf: d9:b8:2d:6e:3d:7c:b1:a6:03:9c:cd:49:05:f6:93: 41:0a:46:9b:32:ed:2a:cd:6d:9b:2d:ba:05:12:53: 07:59:b6:04:2c:02:ee:b6:07:ec:75:64:48:14:55: ad:74:9d:70:27:c9:5c:f8:fc:0c:07:76:9c:2c:71: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:58:3A:04:13:7A:03:32:FE:F1:24:93:C8:7E:3C:CB:52:B7:C4:05 X509v3 Authority Key Identifier: keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:06:88:d8:18:e3:03:1f:44:c0:7d:fc:c0:03:49:71:9e:4a: 46:db:93:ca:83:0d:a0:b7:6e:71:81:b4:2a:b9:ee:1e:31:c9: b4:4b:c0:81:40:c3:6c:aa:8a:8c:0c:e1:80:e1:53:44:93:85: 3e:85:5a:ab:7e:fa:bf:89:a6:d7:9f:61:91:ff:c7:1e:f7:07: a0:94:92:42:cd:dd:64:82:cc:c7:62:ec:07:26:55:54:cd:c1: 3e:bf:62:3b:1c:b0:fd:3b:e3:bf:6b:6f:1b:db:e1:d3:3a:05: f7:17:f4:1f:ab:ab:dd:07:34:cc:df:f0:6a:9f:c1:40:ed:cb: c5:fc:d5:d1:73:08:4c:d8:58:ec:08:12:25:38:f7:b4:b5:18: e8:1a:00:2d:13:37:0d:1f:33:94:24:b4:e6:b7:a5:2f:85:5c: b1:7e:ff:b2:b6:4c:10:d3:2f:21:9e:3e:4e:92:5f:bb:a6:b2: 61:7a:92:d3:16:e2:0a:fc:9d:9e:84:37:82:8f:6c:33:b7:25: 09:36:6a:db:f8:cf:57:52:83:60:9e:c6:c0:f5:d8:70:76:73: 3d:c8:ff:bc:3f:5d:8c:95:27:c7:a9:16:de:a3:c2:29:91:e1: 2a:7b:51:fd:ca:2e:02:9c:f6:fa:9f:83:67:3e:08:b6:ac:aa: 45:f9:7f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYmdK/P4RfK2W5agqFNnYyGGktMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIx OUYyRURDODAeFw0yNjA5MjAxNjU3NTdaFw0yNjA5MjEyMDMzNTdaMDMxMTAvBgNV BAMTKENENTgzQTA0MTM3QTAzMzJGRUYxMjQ5M0M4N0UzQ0NCNTJCN0M0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3vmiG9dEnejIRr8BXC11S/QRq 6Z8WpB7aph96/lqFQUdCrjoOwdT67+PrXD0RnTZkvbm7Kki+CkRBJdyz7nDsYW8y NIFkj4HBUYc4qvtfov1akFVFb/OmjTCsX75D/zY/aFJU3/FRtpQcxI374Zh/28Y2 fR/Q50m/3kUVE454JLR/qqUvLvf6RXuiYCmzZr/6L1pYBMvHDRe55ZSX+mQBaiMG Ghde1r673A5Y6MRJlg4TsEz6Zs6twUTo6TC9HToOz9m4LW49fLGmA5zNSQX2k0EK Rpsy7SrNbZstugUSUwdZtgQsAu62B+x1ZEgUVa10nXAnyVz4/AwHdpwscc8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVg6BBN6AzL+8SSTyH48y1K3xAUwHwYDVR0j BBgwFoAUR8BSCVTnA20BJ2JW31NyMhny7cgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ3MGNjMzctMWZhNi00ZmEwLWE4OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1 NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIxOUYyRURDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0MwNTIwOTU0RTcwMzZEMDEyNzYyNTZERjUzNzIzMjE5RjJF REM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1Mzcy MzIxOUYyRURDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgGiNgY4wMfRMB9/MADSXGeSkbbk8qDDaC3 bnGBtCq57h4xybRLwIFAw2yqiowM4YDhU0SThT6FWqt++r+JptefYZH/xx73B6CU kkLN3WSCzMdi7AcmVVTNwT6/YjscsP07479rbxvb4dM6BfcX9B+rq90HNMzf8Gqf wUDty8X81dFzCEzYWOwIEiU497S1GOgaAC0TNw0fM5QktOa3pS+FXLF+/7K2TBDT LyGePk6SX7umsmF6ktMW4gr8nZ6EN4KPbDO3JQk2atv4z1dSg2CexsD12HB2cz3I /7w/XYyVJ8epFt6jwimR4Sp7Uf3KLgKc9vqfg2c+CLasqkX5fyQ= -----END CERTIFICATE-----Generated at Mon Sep 21 07:22:21 2026 by rpki-client