$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft File: 47C0520954E7036D01276256DF53723219F2EDC8.mft (raw, json) Hash identifier: yPsiQ22GnXRKXqsNK5pckMdYwrJ4u0MYOF3TBKCfDbo= Subject key identifier: B0:17:1C:31:89:3E:13:C1:35:EC:48:0E:6F:77:0A:A6:42:68:87:F9 Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 Certificate issuer: /CN=47C0520954E7036D01276256DF53723219F2EDC8 Certificate serial: 4B5A6470DB03350589035DBD522A93219479736F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:50:16 +0000 Manifest this update: Tue 02 Jun 2026 20:45:16 +0000 Manifest next update: Wed 03 Jun 2026 21:10:16 +0000 Files and hashes: 1: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: 6NYVsKX5xsfwPEbXx8usYHTJLFAFT9/9ztiP0cssm8I=) 2: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=) 3: 47C0520954E7036D01276256DF53723219F2EDC8.crl (hash: Rx9L7Q2vOZkeSMNxuWof2o0npTqUdwvAyPizYCf1CAY=) 4: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: 1TpHsmaA1JQZU+qQGSvG+moVShwWiM39h2j2sMJO5Wk=) 5: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: BaWAfcWmlaxL1WWaXjy2UfPAwdXpBP48cn9wbdt4S4k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5a:64:70:db:03:35:05:89:03:5d:bd:52:2a:93:21:94:79:73:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8 Validity Not Before: Jun 2 20:45:16 2026 GMT Not After : Jun 3 21:10:16 2026 GMT Subject: CN=B0171C31893E13C135EC480E6F770AA6426887F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:fe:4c:04:79:3c:48:9a:c7:c0:7d:46:57: ee:78:22:c4:fc:04:a3:6d:04:78:4f:78:4c:e9:fd: ea:96:7a:40:2b:7a:bb:c1:0f:06:0e:89:20:5c:a2: 31:b9:0a:00:db:12:42:3b:fa:6b:f3:47:aa:08:5b: 0a:d8:a3:fa:1a:da:5f:42:06:0c:c4:ad:cc:af:00: c1:64:1d:d0:9d:70:a3:be:71:e1:98:14:a4:da:bc: 50:7e:26:2a:d8:b9:18:27:b5:a5:ff:61:d6:5b:92: ad:49:e6:75:3f:ce:cc:b2:af:31:0c:c4:35:d6:ba: 7a:5a:fe:c8:ac:26:ca:01:d1:02:76:51:0a:8d:f9: 43:68:47:a0:fd:55:f7:6f:f0:41:6d:3a:ee:fe:d8: 02:80:79:8b:ec:7c:6a:99:79:70:1f:7b:cf:05:82: 6e:5a:3b:a4:be:71:14:5b:84:84:83:b1:b4:df:33: a2:35:3b:39:69:30:55:02:53:d5:d6:bb:6a:8f:32: 11:90:0f:fc:0d:60:f4:d3:35:1a:02:f9:34:a5:0d: 01:dd:c9:2c:70:46:1d:86:97:3e:c9:19:e2:b8:fe: 1e:bc:76:03:f7:03:80:ed:d1:08:7a:32:d3:fe:59: e9:39:28:56:b7:0d:49:76:ce:ab:f6:0a:db:0f:30: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:17:1C:31:89:3E:13:C1:35:EC:48:0E:6F:77:0A:A6:42:68:87:F9 X509v3 Authority Key Identifier: keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:60:1a:dc:36:f7:d3:40:f2:3b:c0:6b:3e:79:15:92:53:25: 2e:be:be:13:e7:f5:f1:26:9e:d5:e7:e0:51:31:4c:2e:98:47: d4:91:02:ff:b7:48:d4:06:ef:d7:8f:60:29:53:c5:ec:d4:17: 85:a7:6b:ac:98:02:83:74:f5:83:3f:69:13:fd:4e:eb:e9:99: 88:3a:38:44:9d:54:82:ea:4d:b4:e6:4d:f9:be:8d:ce:de:4c: 7e:e1:52:bb:98:d1:6d:38:19:91:27:ef:86:a1:4d:94:3c:62: 25:81:2f:11:f4:cd:cb:08:9b:05:60:75:b4:e9:d2:56:c0:c6: a6:cf:b4:ce:40:fe:1a:0f:ca:f9:d9:b2:16:3a:28:3f:41:e9: e4:50:54:a3:f2:72:19:6e:18:d3:97:af:90:8c:02:51:6c:91: 10:3c:93:a6:a4:51:51:a5:99:d2:1b:f5:73:27:2d:6d:13:fc: 78:13:22:96:d2:0e:51:be:b7:3e:9a:57:a6:1d:e8:5b:71:31: fc:dd:a1:ac:7e:e4:5d:b3:99:a9:e1:3e:1b:25:7f:4d:18:46: 41:8d:77:49:76:46:49:54:ef:c6:26:2c:fb:0a:f3:ea:00:04: 95:3f:40:40:34:33:bd:da:51:e0:e0:23:44:7d:08:ca:2f:4d: 18:b1:99:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1pkcNsDNQWJA129UiqTIZR5c28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIx OUYyRURDODAeFw0yNjA2MDIyMDQ1MTZaFw0yNjA2MDMyMTEwMTZaMDMxMTAvBgNV BAMTKEIwMTcxQzMxODkzRTEzQzEzNUVDNDgwRTZGNzcwQUE2NDI2ODg3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPv5MBHk8SJrHwH1GV+54IsT8 BKNtBHhPeEzp/eqWekArervBDwYOiSBcojG5CgDbEkI7+mvzR6oIWwrYo/oa2l9C BgzErcyvAMFkHdCdcKO+ceGYFKTavFB+JirYuRgntaX/YdZbkq1J5nU/zsyyrzEM xDXWunpa/sisJsoB0QJ2UQqN+UNoR6D9Vfdv8EFtOu7+2AKAeYvsfGqZeXAfe88F gm5aO6S+cRRbhISDsbTfM6I1OzlpMFUCU9XWu2qPMhGQD/wNYPTTNRoC+TSlDQHd ySxwRh2Glz7JGeK4/h68dgP3A4Dt0Qh6MtP+Wek5KFa3DUl2zqv2CtsPMJ0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBccMYk+E8E17EgOb3cKpkJoh/kwHwYDVR0j BBgwFoAUR8BSCVTnA20BJ2JW31NyMhny7cgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ3MGNjMzctMWZhNi00ZmEwLWE4OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1 NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIxOUYyRURDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0MwNTIwOTU0RTcwMzZEMDEyNzYyNTZERjUzNzIzMjE5RjJF REM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1Mzcy MzIxOUYyRURDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZgGtw299NA8jvAaz55FZJTJS6+vhPn9fEm ntXn4FExTC6YR9SRAv+3SNQG79ePYClTxezUF4Wna6yYAoN09YM/aRP9TuvpmYg6 OESdVILqTbTmTfm+jc7eTH7hUruY0W04GZEn74ahTZQ8YiWBLxH0zcsImwVgdbTp 0lbAxqbPtM5A/hoPyvnZshY6KD9B6eRQVKPychluGNOXr5CMAlFskRA8k6akUVGl mdIb9XMnLW0T/HgTIpbSDlG+tz6aV6Yd6FtxMfzdoax+5F2zmanhPhslf00YRkGN d0l2RklU78YmLPsK8+oABJU/QEA0M73aUeDgI0R9CMovTRixmfg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:19 2026 by rpki-client