$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft File: 47C0520954E7036D01276256DF53723219F2EDC8.mft (raw, json) Hash identifier: bo/wENYQmVYYTfikfhw6hT0wK6SK83YyfHHdqSK7EuY= Subject key identifier: 82:34:A5:86:91:C9:B4:02:E2:27:53:7B:74:0B:D1:24:3F:25:7B:47 Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 Certificate issuer: /CN=47C0520954E7036D01276256DF53723219F2EDC8 Certificate serial: 7D8B38BFB88BE0F9CB591C8BB390A48BD7556534 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:54:58 +0000 Manifest this update: Mon 20 Jul 2026 14:49:58 +0000 Manifest next update: Tue 21 Jul 2026 18:31:58 +0000 Files and hashes: 1: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: 6NYVsKX5xsfwPEbXx8usYHTJLFAFT9/9ztiP0cssm8I=) 2: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=) 3: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: BaWAfcWmlaxL1WWaXjy2UfPAwdXpBP48cn9wbdt4S4k=) 4: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: 1TpHsmaA1JQZU+qQGSvG+moVShwWiM39h2j2sMJO5Wk=) 5: 47C0520954E7036D01276256DF53723219F2EDC8.crl (hash: stmB/YJ2X24X0jRu+ASFtuB44KrS5TzD0Mt0qd9rfZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8b:38:bf:b8:8b:e0:f9:cb:59:1c:8b:b3:90:a4:8b:d7:55:65:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8 Validity Not Before: Jul 20 14:49:58 2026 GMT Not After : Jul 21 18:31:58 2026 GMT Subject: CN=8234A58691C9B402E227537B740BD1243F257B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:d6:a6:93:cf:7e:d7:57:d6:5b:11:4d:aa: 9f:56:d6:ee:8a:48:93:5a:2e:b0:68:68:39:ac:77: 9e:c0:34:0f:ac:97:5f:d6:97:d1:3f:7f:ae:36:d6: e0:57:a4:13:51:14:c2:d9:59:bf:66:07:e1:cf:1a: b9:0d:af:39:db:4b:a1:a3:98:b1:90:8a:12:96:3c: aa:62:d8:30:de:bd:64:cb:b6:7d:10:4f:20:bb:28: 37:0b:79:14:61:36:d9:32:f7:73:1d:4d:61:c6:9b: e5:dd:59:b9:91:6f:c1:50:ed:ba:47:38:31:ab:c3: c4:89:8e:51:f2:3b:07:f9:69:75:d9:bc:fc:0d:bc: 74:75:19:cd:30:b5:53:a9:a0:35:b5:10:67:f8:31: 3a:50:bb:ed:27:6e:0c:0b:0a:80:b2:51:7c:82:bf: 02:2a:12:aa:30:e9:f7:80:ba:14:96:7c:2f:7b:25: 4c:44:cc:11:4b:3e:3d:3c:1c:b5:50:98:b6:db:59: 2e:0e:64:c9:be:4f:ea:39:98:89:c9:57:8a:b6:76: f2:c6:27:bb:a3:b3:52:3b:e3:ef:aa:f0:b2:60:ae: ec:db:e9:d1:af:c4:2e:e0:83:52:9b:af:38:ba:11: 91:51:a9:c7:d7:c3:c1:bb:98:48:1e:6f:3b:d6:df: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:34:A5:86:91:C9:B4:02:E2:27:53:7B:74:0B:D1:24:3F:25:7B:47 X509v3 Authority Key Identifier: keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:26:e5:f5:fb:6c:3a:fc:c2:b7:b6:69:4f:0d:86:8e:30:78: ab:c6:41:58:26:d9:86:7c:f1:53:3a:67:2b:c6:9c:b2:7a:4d: 36:56:79:a2:da:78:65:e5:26:7d:fb:65:fb:d1:67:d7:4c:7b: 5f:21:4e:9d:89:6e:86:18:a2:92:f9:a1:28:3f:d1:da:87:3d: 1e:07:5a:d7:37:f1:8f:54:28:b1:a7:38:ea:a3:2f:a6:4c:a4: 68:86:15:2f:c1:04:48:8e:8f:0b:6e:60:f5:50:c7:ae:c5:ca: d9:a9:fe:cb:3c:b7:40:a2:06:40:5a:e8:20:c1:81:49:c2:91: dc:17:f2:63:4a:26:e5:f1:1c:78:c3:9d:21:d1:9e:c7:cc:7a: 0f:82:31:3e:60:52:f8:69:21:8f:aa:c6:d0:ea:f2:e8:ec:99: 47:ab:13:bb:80:f3:ee:bd:53:67:38:96:f5:f6:4e:d0:87:e1: 26:65:d4:af:bd:56:55:e7:44:cb:c7:f2:ee:b9:27:51:cf:8f: 83:c5:11:2a:b8:82:0f:f1:96:3c:20:82:55:81:21:c8:70:75: 8c:85:90:43:74:e5:5c:01:7f:cb:5e:53:db:4c:d5:68:ce:b7: b9:40:e3:32:34:45:eb:0e:89:b8:1c:1e:21:3c:a9:52:1e:58: 26:71:df:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYs4v7iL4PnLWRyLs5Cki9dVZTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIx OUYyRURDODAeFw0yNjA3MjAxNDQ5NThaFw0yNjA3MjExODMxNThaMDMxMTAvBgNV BAMTKDgyMzRBNTg2OTFDOUI0MDJFMjI3NTM3Qjc0MEJEMTI0M0YyNTdCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PNamk89+11fWWxFNqp9W1u6K SJNaLrBoaDmsd57ANA+sl1/Wl9E/f6421uBXpBNRFMLZWb9mB+HPGrkNrznbS6Gj mLGQihKWPKpi2DDevWTLtn0QTyC7KDcLeRRhNtky93MdTWHGm+XdWbmRb8FQ7bpH ODGrw8SJjlHyOwf5aXXZvPwNvHR1Gc0wtVOpoDW1EGf4MTpQu+0nbgwLCoCyUXyC vwIqEqow6feAuhSWfC97JUxEzBFLPj08HLVQmLbbWS4OZMm+T+o5mInJV4q2dvLG J7ujs1I74++q8LJgruzb6dGvxC7gg1Kbrzi6EZFRqcfXw8G7mEgebzvW3xBfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgjSlhpHJtALiJ1N7dAvRJD8le0cwHwYDVR0j BBgwFoAUR8BSCVTnA20BJ2JW31NyMhny7cgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ3MGNjMzctMWZhNi00ZmEwLWE4OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1 NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIxOUYyRURDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0MwNTIwOTU0RTcwMzZEMDEyNzYyNTZERjUzNzIzMjE5RjJF REM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1Mzcy MzIxOUYyRURDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYm5fX7bDr8wre2aU8Nho4weKvGQVgm2YZ8 8VM6ZyvGnLJ6TTZWeaLaeGXlJn37ZfvRZ9dMe18hTp2JboYYopL5oSg/0dqHPR4H Wtc38Y9UKLGnOOqjL6ZMpGiGFS/BBEiOjwtuYPVQx67Fytmp/ss8t0CiBkBa6CDB gUnCkdwX8mNKJuXxHHjDnSHRnsfMeg+CMT5gUvhpIY+qxtDq8ujsmUerE7uA8+69 U2c4lvX2TtCH4SZl1K+9VlXnRMvH8u65J1HPj4PFESq4gg/xljwgglWBIchwdYyF kEN05VwBf8teU9tM1WjOt7lA4zI0ResOibgcHiE8qVIeWCZx3wg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:19 2026 by rpki-client