
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
File: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft (raw, json)
Hash identifier: LnCDxP/Sbygzui6SFxdzR8W2MRDsmTN+DvelZ0BK25c=
Subject key identifier: 01:E3:18:8D:73:65:97:51:0E:0D:7D:B1:49:43:2E:13:39:C4:B2:C0
Authority key identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0
Certificate issuer: /CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
Certificate serial: 1BA0831EDD2B8B8DB27C5ED3E81B062AA28C4A2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:32:51 +0000
Manifest this update: Tue 02 Jun 2026 14:27:51 +0000
Manifest next update: Wed 03 Jun 2026 17:49:51 +0000
Files and hashes: 1: 47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl (hash: P+eot+SQPHNt4myg/q7oW237uIgMIM6a+mSRZ6TsGAs=)
2: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: rqI3PL8vwSW0P/PJNj65/4Uzquyhsko/Jx79Jej+5aU=)
3: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 5ruPZLXOx5EYeaSuNCjm5La9e7w8hzod2dtunu/cpyk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl
rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a0:83:1e:dd:2b:8b:8d:b2:7c:5e:d3:e8:1b:06:2a:a2:8c:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
Validity
Not Before: Jun 2 14:27:51 2026 GMT
Not After : Jun 3 17:49:51 2026 GMT
Subject: CN=01E3188D736597510E0D7DB149432E1339C4B2C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:66:f4:aa:0c:ff:57:ff:6d:6a:5b:f9:7c:
d2:69:c0:4d:b5:78:f7:95:53:3a:02:c3:35:76:4d:
e6:d5:93:3d:d9:fb:26:cc:44:e7:26:d2:52:4b:26:
7d:20:f9:6f:96:6c:a7:ed:52:ab:fc:f4:e1:b5:4e:
75:d2:71:3b:c9:c7:05:20:42:b4:2b:e8:37:ac:4e:
30:6c:a5:28:74:bf:83:82:ed:02:16:c8:2c:cf:43:
c3:80:cc:e2:cc:d4:30:1a:4a:56:3b:60:f3:d9:01:
22:b5:b5:5c:0f:b3:4e:24:05:51:fe:5e:98:14:50:
91:4a:eb:1c:94:25:d4:2d:15:b8:6b:42:02:f3:96:
45:0a:bc:5d:93:4e:00:94:5f:20:50:be:90:6a:9b:
92:69:52:6b:b5:19:ac:a1:ac:4e:c0:bf:64:1e:30:
19:fe:7e:5f:cc:e8:74:5a:70:e5:d6:8f:5b:c5:61:
bb:36:14:ed:66:f9:5b:24:db:ec:b6:60:94:56:7d:
4c:a5:c7:ab:cc:d6:54:71:58:d5:de:dd:ed:95:e0:
4f:ee:78:a0:5f:93:36:84:77:6f:56:4f:1b:0b:17:
7d:43:4b:34:e2:b6:39:d3:84:f2:ff:33:3e:02:01:
1e:62:28:41:49:d8:7b:fd:35:26:51:02:a1:d3:0a:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:18:8D:73:65:97:51:0E:0D:7D:B1:49:43:2E:13:39:C4:B2:C0
X509v3 Authority Key Identifier:
keyid:47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cc:75:41:cf:89:91:fa:0b:79:64:dc:cb:b6:f8:6f:30:b4:
9b:80:5f:ad:08:fe:2a:be:c0:30:10:08:67:e4:78:12:20:1c:
9c:62:f3:50:c6:53:73:73:98:5d:50:26:42:78:c4:14:44:93:
5b:38:b8:88:08:1d:b5:88:26:6b:f3:43:b7:54:fe:cf:1f:2e:
5f:ba:05:7d:ea:8c:2a:73:5c:0e:a3:72:0c:37:07:1c:62:0e:
05:b7:d3:08:05:99:2e:c6:42:07:bb:c5:32:04:0e:aa:47:3d:
83:07:38:65:db:b6:f7:c4:89:53:9d:af:96:d7:df:89:af:28:
29:48:ce:46:87:7b:4b:d8:d0:36:13:a0:db:6b:d7:09:b9:cb:
eb:b9:51:aa:19:ad:31:6a:f7:ff:75:00:ee:ba:8b:37:7b:74:
ce:b0:93:37:65:a6:a6:15:cb:5d:be:b0:40:03:50:45:1b:65:
65:73:89:e8:54:b0:b6:2d:85:85:51:16:88:ea:bb:9e:d5:e1:
91:d9:20:d0:ee:4c:db:75:4b:b4:86:7f:78:e9:82:1b:41:00:
71:5e:1a:c0:b9:2e:f5:50:d7:28:75:b7:80:4d:1f:5c:80:a6:
16:d0:26:6e:a1:2f:d1:65:c0:4f:b8:50:f0:12:77:55:38:9e:
4d:1a:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:44:39 2026 by rpki-client