$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: vlGINRQcXxiY6qfkLGKO6wOq4dxN8yDNFv3GECxCpqc= Subject key identifier: 5C:8E:A7:F9:5D:24:0E:B2:0D:1E:16:E9:46:62:BA:99:CC:DE:49:85 Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 777C9D2EB0B53CCF45756EB8C88A01B0ABB45AF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 01E0 Signing time: Wed 18 Mar 2026 10:32:11 +0000 Manifest this update: Wed 18 Mar 2026 10:27:11 +0000 Manifest next update: Sat 21 Mar 2026 21:52:11 +0000 Files and hashes: 1: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: pdV+aN3I6dloLI2qkmzalOgfwKnlHe9DExCU7AJ1bj4=) 2: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: uK0tYoFKWzW2y8KltD3aqDC26oZ9pYtmSp1Jv/BCAoY=) 3: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: zg/T5xnwwnwUEUsPy5XtVw2ZjDAUNQWQJ/tAZ9/3whE=) 4: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: wgtqwaW/q6/6iiFZEkr1mrOJmIiiA3/QZmD2Fiv1Qhg=) 5: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) 6: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: dHVT1pPpYfkat8LYG0fIQg445W2VxpF/m4eXlcGf8/Q=) 7: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: v5qvmgh9eiTpdk3UEoQin8K5RQSDk24SVWpfNhiVRfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 21:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7c:9d:2e:b0:b5:3c:cf:45:75:6e:b8:c8:8a:01:b0:ab:b4:5a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Mar 18 10:27:11 2026 GMT Not After : Mar 21 21:52:11 2026 GMT Subject: CN=5C8EA7F95D240EB20D1E16E94662BA99CCDE4985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:65:ed:e3:07:2c:97:ab:48:3c:40:68:c1: ec:87:85:5f:d7:07:d8:8c:a3:49:36:49:44:68:e9: 3d:2e:cf:80:cf:7c:ea:9b:8f:b8:2d:b5:af:58:df: 94:52:c6:a6:89:33:2d:bf:09:24:d2:0d:62:e7:20: 17:62:9a:2f:12:20:73:84:3a:db:42:ee:50:3d:78: e7:fa:58:66:06:90:d5:36:c7:76:3f:74:37:10:07: fd:5a:45:82:6d:8f:30:e0:19:a5:f3:f6:0f:e1:a1: 04:ee:e3:d6:23:1f:e6:6e:c0:82:21:64:c5:56:30: ec:89:5c:7c:72:91:0c:37:d2:72:d6:bc:32:e9:2e: 5f:46:6c:6a:f4:a0:a4:68:f6:80:14:6f:59:0b:26: f0:32:e7:95:f3:3e:49:88:9a:3c:9c:b4:4e:de:64: 02:21:19:1a:b5:a9:4d:9d:19:ad:ef:ac:e6:8f:de: 04:49:fa:8b:db:8d:4a:60:de:2c:79:ec:78:4b:21: 54:89:2c:a4:83:ad:02:3a:e5:81:e2:0f:ae:6e:b5: 18:50:c3:25:87:01:d2:b3:eb:63:a8:53:d1:c5:2f: a0:f9:34:a0:3a:fd:d6:4e:1b:de:81:ff:95:49:5a: 20:89:61:39:70:9c:ee:81:ca:7c:ef:d4:00:db:36: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8E:A7:F9:5D:24:0E:B2:0D:1E:16:E9:46:62:BA:99:CC:DE:49:85 X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:56:f2:2a:5a:f4:ca:7a:83:87:5c:50:86:a2:1b:09:a6: d4:2c:a8:25:79:ff:a0:6c:ef:15:b1:16:da:15:68:00:b6:13: ce:3f:ec:0d:29:fb:46:28:47:0c:7f:9e:26:95:01:77:04:ce: 19:6d:ab:ff:54:a9:37:0f:b9:e5:ac:ad:a3:68:77:71:7c:5b: b8:1d:51:99:f5:35:c0:1f:ec:06:22:e8:55:4d:df:8b:25:38: 6d:0a:7f:4e:71:02:28:57:ad:d2:95:9b:d9:63:b5:da:a4:6b: a9:36:59:ef:6b:d1:83:fb:2c:c7:5b:82:8d:15:ef:60:a5:de: 97:3b:8c:bb:0c:9d:5d:60:e0:0a:2c:4f:5d:14:66:9c:47:45: 0f:46:d7:05:a8:b3:79:58:88:09:f8:6a:40:54:58:77:59:b2: c0:18:15:51:af:fa:4b:49:2c:b3:11:80:f7:73:fb:df:2c:86: 8a:15:fa:f0:5b:70:f8:33:83:f2:d1:f5:8b:83:e6:ce:ac:67: 1a:a0:3b:0a:1f:83:ac:9f:3c:44:bf:14:01:5f:2f:5f:25:02: 6a:d0:b6:d9:92:9f:59:4d:86:65:03:87:54:6c:32:9d:77:e3: fb:09:c9:0a:c7:f3:f6:8b:9d:55:bc:f6:64:2e:32:f5:bf:fb: a1:64:fa:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3ydLrC1PM9FdW64yIoBsKu0WvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNjAzMTgxMDI3MTFaFw0yNjAzMjEyMTUyMTFaMDMxMTAvBgNV BAMTKDVDOEVBN0Y5NUQyNDBFQjIwRDFFMTZFOTQ2NjJCQTk5Q0NERTQ5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDX2Xt4wcsl6tIPEBoweyHhV/X B9iMo0k2SURo6T0uz4DPfOqbj7gtta9Y35RSxqaJMy2/CSTSDWLnIBdimi8SIHOE OttC7lA9eOf6WGYGkNU2x3Y/dDcQB/1aRYJtjzDgGaXz9g/hoQTu49YjH+ZuwIIh ZMVWMOyJXHxykQw30nLWvDLpLl9GbGr0oKRo9oAUb1kLJvAy55XzPkmImjyctE7e ZAIhGRq1qU2dGa3vrOaP3gRJ+ovbjUpg3ix57HhLIVSJLKSDrQI65YHiD65utRhQ wyWHAdKz62OoU9HFL6D5NKA6/dZOG96B/5VJWiCJYTlwnO6Bynzv1ADbNg3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXI6n+V0kDrINHhbpRmK6mczeSYUwHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYFVvIqWvTKeoOHXFCGohsJptQsqCV5/6Bs 7xWxFtoVaAC2E84/7A0p+0YoRwx/niaVAXcEzhltq/9UqTcPueWsraNod3F8W7gd UZn1NcAf7AYi6FVN34slOG0Kf05xAihXrdKVm9ljtdqka6k2We9r0YP7LMdbgo0V 72Cl3pc7jLsMnV1g4AosT10UZpxHRQ9G1wWos3lYiAn4akBUWHdZssAYFVGv+ktJ LLMRgPdz+98shooV+vBbcPgzg/LR9YuD5s6sZxqgOwofg6yfPES/FAFfL18lAmrQ ttmSn1lNhmUDh1RsMp134/sJyQrH8/aLnVW89mQuMvW/+6Fk+uM= -----END CERTIFICATE-----Generated at Thu Mar 19 15:07:05 2026 by rpki-client