$ rpki-client -vvf rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft File: 47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft (raw, json) Hash identifier: tBnPo2Zl3cPzxQ+ULemWjcuJB0MpQNdBhgnyxdwNlaE= Subject key identifier: AF:A7:BA:3F:FA:8C:9F:C8:58:71:E6:8E:38:56:DE:42:0C:25:EF:76 Authority key identifier: 47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30 Certificate issuer: /CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830 Certificate serial: 27F12C8DFDD11AF958DC741993B98BC116924E59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:29:18 +0000 Manifest this update: Tue 02 Jun 2026 23:24:18 +0000 Manifest next update: Thu 04 Jun 2026 01:53:18 +0000 Files and hashes: 1: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: xZnHAYFbnEc0A3njrjnrHmJ+U6dJWxONqshnQ5yBO6M=) 2: 47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl (hash: n+y52hms5xvjjLo1ssCKeu9JAr9VSGCP9RWv0kgcAUs=) 3: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: ZJiVItgKv8mzN8I1br1Yth+rPx8k2fE2ta0yCq6Q6Go=) 4: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: v/2zYMSXUTzSSW7I8Fu1z9fEt17y0q1g424KCA4tdns=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f1:2c:8d:fd:d1:1a:f9:58:dc:74:19:93:b9:8b:c1:16:92:4e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830 Validity Not Before: Jun 2 23:24:18 2026 GMT Not After : Jun 4 01:53:18 2026 GMT Subject: CN=AFA7BA3FFA8C9FC85871E68E3856DE420C25EF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:e2:bd:5d:ad:7b:4f:11:5d:be:3a:49:2f: 6d:bd:48:92:69:6f:ff:78:07:ae:86:a4:b2:5e:dc: 42:19:2f:bc:ba:1c:e7:04:43:bf:4d:e0:e8:be:dc: 19:5b:2a:fa:b3:74:cb:70:64:4f:75:a3:32:c9:2d: a9:b3:af:e6:3b:f8:e5:4d:b8:84:bb:8e:c5:6e:a0: df:2c:65:d8:13:de:5d:57:eb:18:74:b6:65:ab:0e: 04:cc:c9:1d:63:dc:52:37:d5:42:55:42:e3:44:44: e4:5d:3a:73:2c:ba:58:a8:9e:6f:a6:9f:9f:05:d2: 73:8c:7c:95:aa:1d:fc:19:62:fc:d3:43:e1:f9:80: 06:18:68:33:7c:90:36:5b:00:5b:e9:4c:66:50:8d: 3a:9f:cb:54:12:dc:24:5f:b4:72:89:cc:14:a5:51: c8:15:52:f9:18:63:4b:80:90:62:fc:1f:e8:93:b8: fa:e7:bd:4b:4e:62:02:9d:cc:c2:0c:1e:a0:82:74: 2a:e4:ec:12:d7:da:ba:77:1d:55:bc:21:55:d5:cb: 90:28:ec:94:a0:99:56:a7:c2:cc:9e:2d:07:f1:dc: 6b:68:a6:fa:82:40:f9:e3:bd:77:9a:cd:8c:d4:cd: e7:d3:52:2e:76:78:42:5f:38:83:f2:26:5a:e0:8c: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:BA:3F:FA:8C:9F:C8:58:71:E6:8E:38:56:DE:42:0C:25:EF:76 X509v3 Authority Key Identifier: keyid:47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5d:a4:8a:3c:e5:7c:28:65:26:ce:73:61:51:89:0a:a5:c8: 25:4a:d9:f0:63:b0:e9:1c:23:ff:55:d0:60:ce:85:47:87:e7: e3:35:5f:1c:30:0a:4d:1a:9d:e1:b9:f6:07:93:ec:8a:4c:e4: 69:9e:90:30:ce:57:6a:49:f1:85:d2:62:e0:23:0a:d4:34:bf: 18:0c:eb:b3:dc:aa:c8:85:28:35:14:7e:0a:1e:d9:e7:2a:cb: 29:c3:1f:0c:44:ab:e6:ba:82:d9:7a:e8:05:f9:8e:d9:a2:72: f6:8c:3b:d2:96:46:a3:a4:73:a9:24:bc:ca:0d:60:94:34:e0: ed:b1:69:ea:79:3d:f1:cd:43:54:09:39:af:8a:fd:d0:33:d3: 3e:be:3f:1d:8a:10:13:48:68:c2:b4:dd:66:ba:d4:1c:24:e8: d6:5f:2e:ed:4a:a8:47:22:cc:df:77:96:54:b5:23:df:c7:24: fb:02:fc:18:32:fb:14:01:ce:ed:0e:1c:33:27:66:65:9b:06: 83:67:9d:54:f2:66:50:6a:82:b8:00:7d:25:c3:7e:c9:d6:2a: 01:86:3b:81:46:2e:69:b8:5e:33:a3:58:dc:ad:75:7c:fb:da: e4:05:cf:a8:0e:17:61:df:a7:a6:75:61:a5:70:75:33:1a:c0: 6d:ae:fd:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/Esjf3RGvlY3HQZk7mLwRaSTlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJGODEw Qjc5MzgzMDAeFw0yNjA2MDIyMzI0MThaFw0yNjA2MDQwMTUzMThaMDMxMTAvBgNV BAMTKEFGQTdCQTNGRkE4QzlGQzg1ODcxRTY4RTM4NTZERTQyMEMyNUVGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0+K9Xa17TxFdvjpJL229SJJp b/94B66GpLJe3EIZL7y6HOcEQ79N4Oi+3BlbKvqzdMtwZE91ozLJLamzr+Y7+OVN uIS7jsVuoN8sZdgT3l1X6xh0tmWrDgTMyR1j3FI31UJVQuNERORdOnMsulionm+m n58F0nOMfJWqHfwZYvzTQ+H5gAYYaDN8kDZbAFvpTGZQjTqfy1QS3CRftHKJzBSl UcgVUvkYY0uAkGL8H+iTuPrnvUtOYgKdzMIMHqCCdCrk7BLX2rp3HVW8IVXVy5Ao 7JSgmVanwsyeLQfx3GtopvqCQPnjvXeazYzUzefTUi52eEJfOIPyJlrgjLadAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr6e6P/qMn8hYceaOOFbeQgwl73YwHwYDVR0j BBgwFoAUR+teBU2m+/8k2d7qpWcvgQt5ODAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGUzZjJlOWItMTA2OC00ZmE5LWJhMWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0 REE2RkJGRjI0RDlERUVBQTU2NzJGODEwQjc5MzgzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0VCNUUwNTREQTZGQkZGMjREOURFRUFBNTY3MkY4MTBCNzkz ODMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJG ODEwQjc5MzgzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENdpIo85XwoZSbOc2FRiQqlyCVK2fBjsOkc I/9V0GDOhUeH5+M1XxwwCk0aneG59geT7IpM5GmekDDOV2pJ8YXSYuAjCtQ0vxgM 67PcqsiFKDUUfgoe2ecqyynDHwxEq+a6gtl66AX5jtmicvaMO9KWRqOkc6kkvMoN YJQ04O2xaep5PfHNQ1QJOa+K/dAz0z6+Px2KEBNIaMK03Wa61Bwk6NZfLu1KqEci zN93llS1I9/HJPsC/Bgy+xQBzu0OHDMnZmWbBoNnnVTyZlBqgrgAfSXDfsnWKgGG O4FGLmm4XjOjWNytdXz72uQFz6gOF2Hfp6Z1YaVwdTMawG2u/TQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:19 2026 by rpki-client