$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft File: 47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft (raw, json) Hash identifier: rwX9gRoj/o3XP8dtLruw/JtxBTjOJrd2W3oMqzuM8qc= Subject key identifier: F8:E2:E1:61:D1:E2:F6:92:BC:22:A9:5F:09:54:95:2C:E5:55:1B:F0 Authority key identifier: 47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30 Certificate issuer: /CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830 Certificate serial: 7D92A9FFF5D9B5B6D9DDA340CD10672C585FCB5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft Manifest number: F8 Signing time: Mon 02 Nov 2026 20:58:57 +0000 Manifest this update: Mon 02 Nov 2026 20:53:57 +0000 Manifest next update: Tue 03 Nov 2026 21:05:57 +0000 Files and hashes: 1: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: v/2zYMSXUTzSSW7I8Fu1z9fEt17y0q1g424KCA4tdns=) 2: 47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl (hash: VXBXF88djJejhZFhLj9vO8L+LkykGabXwkmfiiTNA7c=) 3: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: ZJiVItgKv8mzN8I1br1Yth+rPx8k2fE2ta0yCq6Q6Go=) 4: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: xZnHAYFbnEc0A3njrjnrHmJ+U6dJWxONqshnQ5yBO6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:92:a9:ff:f5:d9:b5:b6:d9:dd:a3:40:cd:10:67:2c:58:5f:cb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830 Validity Not Before: Nov 2 20:53:57 2026 GMT Not After : Nov 3 21:05:57 2026 GMT Subject: CN=F8E2E161D1E2F692BC22A95F0954952CE5551BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:2e:2c:b1:40:fb:9d:12:3b:b6:a5:3f:59: 70:26:1d:8e:6d:13:8d:0e:c5:7b:80:d0:ee:48:08: 16:ae:55:b6:46:c8:a5:72:50:76:0b:89:d2:cc:d0: b4:81:80:91:7b:7f:79:ea:d9:93:0f:da:e3:75:4d: 61:f5:cf:6a:6b:cc:fc:30:c3:98:6f:32:c2:7e:3c: 22:43:f2:e5:92:8f:42:d8:ac:6c:f4:98:3c:a3:5f: 9a:ce:08:4b:7a:71:85:58:45:e4:ad:a3:0c:ec:3e: bb:69:dd:78:0b:f4:2a:d9:d4:d1:1b:c4:f5:f8:fe: 01:6e:ba:26:1c:4c:0d:c7:12:b7:d8:40:d6:67:13: 92:66:4a:94:e1:17:6f:b8:ba:21:d3:81:f9:2c:68: fd:ca:fd:49:91:c0:c3:ec:3c:ba:68:d6:3c:c2:41: ee:80:91:7c:61:52:5e:e3:4a:5b:e8:79:f5:aa:95: 0c:95:8e:c7:94:23:54:51:d3:d2:49:73:49:2f:45: 72:bc:c7:e2:15:16:61:34:ef:c6:07:73:17:54:0b: 06:5c:0e:a6:25:36:74:f8:27:2c:02:e4:6e:a2:a3: 84:ea:45:2a:19:63:ba:41:05:5f:f4:5e:90:dd:88: c5:cb:67:27:06:53:fb:08:c6:78:91:09:14:fc:9f: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:E1:61:D1:E2:F6:92:BC:22:A9:5F:09:54:95:2C:E5:55:1B:F0 X509v3 Authority Key Identifier: keyid:47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:22:52:f1:2a:40:f7:42:4f:46:ef:5b:7e:d0:4a:46:d0:00: f8:e8:8e:b8:d7:f2:32:4f:2e:a5:e0:e9:cb:97:d6:11:53:dc: bb:f3:1b:64:b4:75:ff:89:cc:4d:62:63:52:ab:10:ca:ab:0e: b6:0d:a1:59:fd:23:c5:b9:f4:a9:80:5c:e1:92:84:e1:17:9c: 24:18:0b:58:d0:0e:57:6d:c9:5d:76:63:b4:2b:b6:8a:e3:77: a3:de:ac:50:5f:c0:2c:ed:25:42:99:82:7a:5f:07:70:37:88: e1:20:99:b9:eb:29:4b:02:ef:fe:fc:39:20:99:9c:9b:bd:9a: aa:31:94:99:30:a2:b8:74:30:7a:b7:81:1d:91:54:4f:96:e2: 5a:eb:cb:06:a8:7c:cb:5f:cb:ab:88:bd:87:df:f6:22:34:a9: e4:8e:b4:92:36:7d:36:6c:be:f9:38:93:fd:8d:6a:14:2a:df: 9e:53:82:19:7f:65:74:a5:cc:49:42:77:d7:4f:34:3f:d9:4b: 49:5b:6e:8a:d5:a7:c0:8c:08:ab:b3:29:2f:64:82:53:cf:11: 37:a7:4a:ae:a3:1f:ec:70:79:f5:de:f0:99:82:51:fa:47:39: e7:e1:21:6c:b6:c7:eb:60:81:a9:ee:9a:99:70:ab:6b:f5:2e: ec:75:2a:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZKp//XZtbbZ3aNAzRBnLFhfy10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJGODEw Qjc5MzgzMDAeFw0yNjExMDIyMDUzNTdaFw0yNjExMDMyMTA1NTdaMDMxMTAvBgNV BAMTKEY4RTJFMTYxRDFFMkY2OTJCQzIyQTk1RjA5NTQ5NTJDRTU1NTFCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguy4ssUD7nRI7tqU/WXAmHY5t E40OxXuA0O5ICBauVbZGyKVyUHYLidLM0LSBgJF7f3nq2ZMP2uN1TWH1z2przPww w5hvMsJ+PCJD8uWSj0LYrGz0mDyjX5rOCEt6cYVYReStowzsPrtp3XgL9CrZ1NEb xPX4/gFuuiYcTA3HErfYQNZnE5JmSpThF2+4uiHTgfksaP3K/UmRwMPsPLpo1jzC Qe6AkXxhUl7jSlvoefWqlQyVjseUI1RR09JJc0kvRXK8x+IVFmE078YHcxdUCwZc DqYlNnT4JywC5G6io4TqRSoZY7pBBV/0XpDdiMXLZycGU/sIxniRCRT8nznfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+OLhYdHi9pK8IqlfCVSVLOVVG/AwHwYDVR0j BBgwFoAUR+teBU2m+/8k2d7qpWcvgQt5ODAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGUzZjJlOWItMTA2OC00ZmE5LWJhMWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0 REE2RkJGRjI0RDlERUVBQTU2NzJGODEwQjc5MzgzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0VCNUUwNTREQTZGQkZGMjREOURFRUFBNTY3MkY4MTBCNzkz ODMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJG ODEwQjc5MzgzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUiUvEqQPdCT0bvW37QSkbQAPjojrjX8jJP LqXg6cuX1hFT3LvzG2S0df+JzE1iY1KrEMqrDrYNoVn9I8W59KmAXOGShOEXnCQY C1jQDldtyV12Y7Qrtorjd6PerFBfwCztJUKZgnpfB3A3iOEgmbnrKUsC7/78OSCZ nJu9mqoxlJkworh0MHq3gR2RVE+W4lrrywaofMtfy6uIvYff9iI0qeSOtJI2fTZs vvk4k/2NahQq355Tghl/ZXSlzElCd9dPND/ZS0lbborVp8CMCKuzKS9kglPPETen Sq6jH+xwefXe8JmCUfpHOefhIWy2x+tgganumplwq2v1Lux1Kgw= -----END CERTIFICATE-----Generated at Tue Nov 3 03:53:16 2026 by rpki-client