
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
File: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft (raw, json)
Hash identifier: 9DySB5QjleUTaGOTZLSdu0cvcpCGZQrC/ubSRSeXOA0=
Subject key identifier: FA:C5:D6:BC:D6:34:F9:69:BB:7D:61:F2:4C:6D:B4:2F:18:AC:58:2B
Authority key identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0
Certificate issuer: /CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
Certificate serial: 28D6EFB5A776DD857F77AB9DACFCBF68E8DE6FD8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 02:49:18 +0000
Manifest this update: Tue 21 Jul 2026 02:44:18 +0000
Manifest next update: Wed 22 Jul 2026 03:02:18 +0000
Files and hashes: 1: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl (hash: afvmdAHRkRI+17ch82ZeYa0XNPbLmpkPxMISs4DNrso=)
2: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 5ruPZLXOx5EYeaSuNCjm5La9e7w8hzod2dtunu/cpyk=)
3: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: rqI3PL8vwSW0P/PJNj65/4Uzquyhsko/Jx79Jej+5aU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl
rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d6:ef:b5:a7:76:dd:85:7f:77:ab:9d:ac:fc:bf:68:e8:de:6f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
Validity
Not Before: Jul 21 02:44:18 2026 GMT
Not After : Jul 22 03:02:18 2026 GMT
Subject: CN=FAC5D6BCD634F969BB7D61F24C6DB42F18AC582B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:41:25:d6:9a:84:8f:56:32:58:c5:a7:b9:
b7:45:a4:17:ea:46:b2:0d:14:70:0a:fc:0e:81:2b:
b9:93:50:74:2f:e2:e3:c3:52:5c:69:a9:b0:c6:cb:
2c:38:0c:f1:94:94:e3:a7:75:03:70:5a:1b:62:2b:
71:7f:0f:0e:d6:4b:c4:cb:60:93:7b:4a:c8:dd:10:
13:c7:32:a4:f7:c8:28:39:82:58:ee:14:86:77:ca:
a7:67:ea:4e:67:b3:e5:ac:7f:90:ad:c6:6a:17:a2:
19:e0:2e:5c:ab:74:3f:54:c2:b5:4e:0c:51:d0:e0:
bd:b6:45:4b:fd:14:5b:11:09:da:3f:4c:ab:04:49:
7b:8e:d7:92:95:a0:f4:c3:cd:7a:a8:45:c8:fe:db:
46:9c:d2:3b:0f:0b:aa:38:5b:9b:72:dd:f4:f2:7d:
70:c2:9e:9c:8e:cb:4d:a5:c3:67:fd:bc:12:fb:42:
a9:17:fb:66:43:a6:1a:bc:bd:fb:3f:3d:05:96:e0:
d7:61:04:b9:5c:6c:93:39:b7:3a:36:7b:8f:5e:f1:
93:5a:6a:2d:1a:de:55:dd:69:66:53:6a:fe:00:3d:
6b:f6:ab:d6:40:e4:7a:ae:ec:09:67:21:2b:f6:e3:
18:ee:b4:01:b8:59:3c:4f:92:3c:90:66:04:e3:42:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C5:D6:BC:D6:34:F9:69:BB:7D:61:F2:4C:6D:B4:2F:18:AC:58:2B
X509v3 Authority Key Identifier:
keyid:47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:71:05:82:60:f9:77:c1:41:58:89:32:79:ff:15:2a:33:09:
6b:b5:71:a0:24:5b:67:f0:52:e6:f7:1d:4b:f9:86:26:6b:db:
1c:ba:b8:f1:05:b9:f8:f6:46:3c:9f:2b:4f:27:a2:a4:bb:b1:
9b:29:29:3f:0e:ea:9b:c3:58:1f:d2:5f:1f:09:be:eb:aa:71:
de:34:b6:2b:03:01:c6:6f:07:23:f4:6a:38:57:5d:1d:fa:fc:
2a:f1:e7:1d:f7:b9:1a:41:ee:61:fe:80:56:ea:72:8c:1e:25:
e2:53:9a:89:26:9c:eb:78:64:05:95:60:14:5f:ae:61:4a:46:
75:42:57:90:71:d0:d9:46:19:c7:1e:e7:d0:60:58:7b:c0:be:
ca:a5:c6:22:41:8e:67:67:ed:b8:81:67:92:38:63:5c:95:57:
d8:e1:6c:7f:55:3e:a8:31:75:9b:bb:d8:0d:3e:3d:a1:a7:00:
5d:7d:53:3e:16:a2:1b:3d:80:81:59:a0:21:32:f7:99:d7:d4:
e5:40:7c:c9:fc:12:7e:9c:cc:aa:f1:d0:8b:9f:16:a6:05:68:
9b:ef:e9:7d:6e:52:25:9a:6d:21:78:06:e0:fd:68:29:fd:9e:
ff:31:db:90:1a:a4:5e:7d:37:d3:b0:67:39:d6:87:5f:72:43:
bc:02:69:bc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKNbvtad23YV/d6udrPy/aOjeb9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdFQzg4NEQ1Rjc5MzU4MjNFMDc0RTZEQ0REMkIyQjc1
QUI0Q0JBMDAeFw0yNjA3MjEwMjQ0MThaFw0yNjA3MjIwMzAyMThaMDMxMTAvBgNV
BAMTKEZBQzVENkJDRDYzNEY5NjlCQjdENjFGMjRDNkRCNDJGMThBQzU4MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjbkEl1pqEj1YyWMWnubdFpBfq
RrINFHAK/A6BK7mTUHQv4uPDUlxpqbDGyyw4DPGUlOOndQNwWhtiK3F/Dw7WS8TL
YJN7SsjdEBPHMqT3yCg5gljuFIZ3yqdn6k5ns+Wsf5CtxmoXohngLlyrdD9UwrVO
DFHQ4L22RUv9FFsRCdo/TKsESXuO15KVoPTDzXqoRcj+20ac0jsPC6o4W5ty3fTy
fXDCnpyOy02lw2f9vBL7QqkX+2ZDphq8vfs/PQWW4NdhBLlcbJM5tzo2e49e8ZNa
ai0a3lXdaWZTav4APWv2q9ZA5Hqu7AlnISv24xjutAG4WTxPkjyQZgTjQg5XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+sXWvNY0+Wm7fWHyTG20LxisWCswHwYDVR0j
BBgwFoAUR+yITV95NYI+B05tzdKyt1q0y6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTYwOGEyZTItZjgxMC00NmU4LWE1YTEtNTZlYzVhMzVkMmFkLzAvNDdFQzg4NEQ1
Rjc5MzU4MjNFMDc0RTZEQ0REMkIyQjc1QUI0Q0JBMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80N0VDODg0RDVGNzkzNTgyM0UwNzRFNkRDREQyQjJCNzVBQjRD
QkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1
YTEtNTZlYzVhMzVkMmFkLzAvNDdFQzg4NEQ1Rjc5MzU4MjNFMDc0RTZEQ0REMkIy
Qjc1QUI0Q0JBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI9xBYJg+XfBQViJMnn/FSozCWu1caAkW2fw
Uub3HUv5hiZr2xy6uPEFufj2RjyfK08noqS7sZspKT8O6pvDWB/SXx8Jvuuqcd40
tisDAcZvByP0ajhXXR36/Crx5x33uRpB7mH+gFbqcoweJeJTmokmnOt4ZAWVYBRf
rmFKRnVCV5Bx0NlGGcce59BgWHvAvsqlxiJBjmdn7biBZ5I4Y1yVV9jhbH9VPqgx
dZu72A0+PaGnAF19Uz4Wohs9gIFZoCEy95nX1OVAfMn8En6czKrx0IufFqYFaJvv
6X1uUiWabSF4BuD9aCn9nv8x25AapF59N9OwZznWh19yQ7wCabw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:05 2026 by rpki-client