$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft File: 47C0520954E7036D01276256DF53723219F2EDC8.mft (raw, json) Hash identifier: +QQXbDSOWbDkcszegXEFFMUetvNO33mFtZfd7BCNdGI= Subject key identifier: 14:EB:0A:BF:82:41:E8:DC:23:D7:3E:78:AB:F0:0E:A8:1A:74:D5:17 Authority key identifier: 47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 Certificate issuer: /CN=47C0520954E7036D01276256DF53723219F2EDC8 Certificate serial: 3FE24350F27304729B708F258768854EEA784807 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 13:04:23 +0000 Manifest this update: Mon 02 Nov 2026 12:59:23 +0000 Manifest next update: Tue 03 Nov 2026 14:03:23 +0000 Files and hashes: 1: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: 1TpHsmaA1JQZU+qQGSvG+moVShwWiM39h2j2sMJO5Wk=) 2: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: 6NYVsKX5xsfwPEbXx8usYHTJLFAFT9/9ztiP0cssm8I=) 3: 47C0520954E7036D01276256DF53723219F2EDC8.crl (hash: b+RY++qPmHVbDkGKglcCj/ys2WTD8ySwA1itXRVYhrU=) 4: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: s8bqhECIXkAJxts40iEri8kSn1VILtxMJjPuCOXLgvs=) 5: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: BaWAfcWmlaxL1WWaXjy2UfPAwdXpBP48cn9wbdt4S4k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e2:43:50:f2:73:04:72:9b:70:8f:25:87:68:85:4e:ea:78:48:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C0520954E7036D01276256DF53723219F2EDC8 Validity Not Before: Nov 2 12:59:23 2026 GMT Not After : Nov 3 14:03:23 2026 GMT Subject: CN=14EB0ABF8241E8DC23D73E78ABF00EA81A74D517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:10:00:30:d9:30:5f:ef:a2:6c:dd:19:03: b9:c9:04:49:5a:6e:4d:b3:60:b6:f2:e9:3a:f9:e0: 17:d5:30:82:d9:ef:82:b7:23:0d:26:ac:46:07:88: 09:a3:b3:a1:25:a2:83:fc:6b:1c:ee:d3:c1:ff:f5: 93:77:3c:e2:61:83:78:19:5b:89:78:36:57:94:27: 2e:c2:50:71:5f:03:03:ec:ca:4c:f6:64:8e:a1:37: 09:27:c1:3b:b1:6c:4a:17:39:ab:43:5d:1c:5b:5c: e2:05:b6:b0:e1:c0:c7:14:15:64:9a:44:72:73:e0: 20:ef:6e:04:79:e5:8b:b9:cf:3d:95:db:43:c4:79: ae:49:c2:44:5c:4e:4f:93:ec:83:b2:5f:53:22:30: 0f:a1:aa:bc:9f:dc:85:82:de:b3:d0:93:9a:65:d0: 88:bf:ae:18:e2:e5:d6:14:44:ac:50:27:b0:25:79: ad:3c:2a:df:bb:b3:c4:31:2b:4f:3c:56:42:2d:58: a1:e1:5a:6b:04:8f:0e:bf:74:90:30:36:06:15:51: 61:b1:f5:85:58:0f:9a:ef:08:0a:d5:6c:e8:89:c1: d4:af:6d:79:78:7c:7e:79:bb:12:cb:d1:6e:70:a2: 5d:e5:57:44:a3:1e:44:5b:2d:a0:5d:35:a2:e0:76: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EB:0A:BF:82:41:E8:DC:23:D7:3E:78:AB:F0:0E:A8:1A:74:D5:17 X509v3 Authority Key Identifier: keyid:47:C0:52:09:54:E7:03:6D:01:27:62:56:DF:53:72:32:19:F2:ED:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47C0520954E7036D01276256DF53723219F2EDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/47C0520954E7036D01276256DF53723219F2EDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:50:11:72:94:90:32:ce:76:ca:a6:0e:ec:d5:1d:a2:5a:b5: 40:c6:4d:ce:dc:29:4b:89:43:7f:d1:7a:1d:ea:b6:f3:72:64: e1:e9:ac:9c:89:76:6a:a9:68:d7:11:ab:97:2b:ee:a5:d3:89: 0a:7f:67:1d:45:49:76:bd:4a:3f:c3:5b:de:ae:6e:ee:a2:28: c0:71:f5:14:16:c2:6a:b9:ae:8e:a4:5f:63:ef:26:e6:b1:89: 09:83:9b:5b:da:b0:58:dc:c3:b6:03:11:23:7e:34:b3:94:5c: 5a:ea:74:a2:55:9c:69:66:1c:55:0a:bf:84:76:e2:d0:5e:60: ac:db:88:33:68:e0:3b:c6:34:c7:44:10:e4:b2:31:65:b8:2d: 58:0c:64:2f:8b:02:7a:f7:b9:59:50:20:90:73:95:5a:ef:a6: 44:f0:05:79:65:cb:d7:39:04:ef:96:04:db:cb:94:a3:c6:7d: b5:59:fb:3e:b4:17:f9:45:51:85:d6:0b:c6:85:f7:1d:76:a6: 89:e7:fa:52:71:78:03:6d:94:af:a3:37:82:5d:94:a6:33:9e: 99:5f:63:df:8d:eb:2b:90:95:90:6a:23:6b:49:23:79:4b:ed: 5e:92:5a:09:ff:f8:a5:3f:d0:1f:16:28:8b:f4:23:23:c5:ed: cd:22:30:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+JDUPJzBHKbcI8lh2iFTup4SAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIx OUYyRURDODAeFw0yNjExMDIxMjU5MjNaFw0yNjExMDMxNDAzMjNaMDMxMTAvBgNV BAMTKDE0RUIwQUJGODI0MUU4REMyM0Q3M0U3OEFCRjAwRUE4MUE3NEQ1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UBAAMNkwX++ibN0ZA7nJBEla bk2zYLby6Tr54BfVMILZ74K3Iw0mrEYHiAmjs6ElooP8axzu08H/9ZN3POJhg3gZ W4l4NleUJy7CUHFfAwPsykz2ZI6hNwknwTuxbEoXOatDXRxbXOIFtrDhwMcUFWSa RHJz4CDvbgR55Yu5zz2V20PEea5JwkRcTk+T7IOyX1MiMA+hqryf3IWC3rPQk5pl 0Ii/rhji5dYURKxQJ7Alea08Kt+7s8QxK088VkItWKHhWmsEjw6/dJAwNgYVUWGx 9YVYD5rvCArVbOiJwdSvbXl4fH55uxLL0W5wol3lV0SjHkRbLaBdNaLgdgnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOsKv4JB6Nwj1z54q/AOqBp01RcwHwYDVR0j BBgwFoAUR8BSCVTnA20BJ2JW31NyMhny7cgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ3MGNjMzctMWZhNi00ZmEwLWE4OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1 NEU3MDM2RDAxMjc2MjU2REY1MzcyMzIxOUYyRURDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80N0MwNTIwOTU0RTcwMzZEMDEyNzYyNTZERjUzNzIzMjE5RjJF REM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvNDdDMDUyMDk1NEU3MDM2RDAxMjc2MjU2REY1Mzcy MzIxOUYyRURDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpQEXKUkDLOdsqmDuzVHaJatUDGTc7cKUuJ Q3/Reh3qtvNyZOHprJyJdmqpaNcRq5cr7qXTiQp/Zx1FSXa9Sj/DW96ubu6iKMBx 9RQWwmq5ro6kX2PvJuaxiQmDm1vasFjcw7YDESN+NLOUXFrqdKJVnGlmHFUKv4R2 4tBeYKzbiDNo4DvGNMdEEOSyMWW4LVgMZC+LAnr3uVlQIJBzlVrvpkTwBXlly9c5 BO+WBNvLlKPGfbVZ+z60F/lFUYXWC8aF9x12ponn+lJxeANtlK+jN4JdlKYznplf Y9+N6yuQlZBqI2tJI3lL7V6SWgn/+KU/0B8WKIv0IyPF7c0iMDE= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:36 2026 by rpki-client