$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json) Hash identifier: Jt/uooIrM5HcLXPdmpYjLuhFTy+u67Ysdyzai1/opd4= Subject key identifier: DE:68:B7:D4:20:64:FF:1A:DB:7E:E4:B4:FC:D7:79:97:7B:58:EF:66 Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Certificate serial: 78E65B04318957B3FAD47D4BDC0B99A1F5D6D829 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft Manifest number: 0535 Signing time: Thu 16 Apr 2026 08:01:13 +0000 Manifest this update: Thu 16 Apr 2026 07:56:13 +0000 Manifest next update: Sun 19 Apr 2026 19:38:13 +0000 Files and hashes: 1: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: W1EM8TKMaVAV6jXXbpVbI918S/VDeTTnBLSRi3ioC4k=) 2: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=) 3: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: ky+W8MWN1qjTW5NV1673NY9/UZ3NBoONN+sHPL0q73s=) 4: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e6:5b:04:31:89:57:b3:fa:d4:7d:4b:dc:0b:99:a1:f5:d6:d8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Validity Not Before: Apr 16 07:56:13 2026 GMT Not After : Apr 19 19:38:13 2026 GMT Subject: CN=DE68B7D42064FF1ADB7EE4B4FCD779977B58EF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:ce:1d:f7:b1:ad:3c:97:bf:36:dc:a5:ac: 21:d5:8c:a3:11:b0:4c:ee:a1:c3:27:34:d4:76:ca: 8e:94:84:11:39:77:67:71:f7:dc:56:cb:e1:83:37: ec:3b:cf:88:b3:74:f3:a8:ac:f9:f0:88:88:7d:51: 9f:1e:4f:69:d3:86:3f:88:9b:3d:12:5d:14:fa:e1: ba:f2:6f:99:f5:1f:a2:7e:28:d5:5e:de:a2:ed:10: 98:36:04:ed:2b:e6:37:ec:58:4e:62:e8:d7:b4:fd: 9d:d1:e0:6f:5b:2d:e4:3a:9d:c5:8e:b4:1a:17:fd: 6b:21:d2:41:f8:89:cb:0f:fa:fb:b2:4d:3d:38:6d: 90:7c:db:f8:e6:d5:66:75:1f:b2:4b:36:ef:7f:a2: aa:5d:42:3b:7c:a4:bf:a5:78:77:f3:e1:61:37:e8: fa:62:8c:7a:1a:f5:c3:9e:be:65:6f:4b:73:d7:8c: ed:01:c4:20:7f:f6:7a:8e:44:52:96:88:f2:1e:3f: 22:a9:4f:38:94:51:6a:e8:78:84:88:ea:66:b7:7d: d9:46:75:3c:ae:e9:65:41:cd:4f:7e:40:be:33:27: 5d:45:b6:9a:91:c1:2a:ce:5a:f8:56:5a:30:eb:57: 58:3c:79:75:f8:04:44:45:e7:24:9f:c8:d2:6c:ae: 41:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:B7:D4:20:64:FF:1A:DB:7E:E4:B4:FC:D7:79:97:7B:58:EF:66 X509v3 Authority Key Identifier: keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d3:9d:4f:92:a6:57:2f:3c:a7:32:ca:0e:c8:d8:00:f7:ba: e3:ff:16:d2:21:49:b9:67:1b:fd:45:e7:e7:a4:59:d9:0d:67: 0d:d4:b3:c4:4d:34:43:7b:13:84:3a:6e:c5:c5:57:24:9e:6f: f2:c4:ac:ea:78:c6:6f:fa:3a:a8:b0:50:37:1e:69:1b:a9:51: f4:56:22:78:99:0c:d8:be:f4:cb:94:ce:14:e9:28:aa:71:b2: f6:b5:6f:af:36:ab:54:ba:e1:47:97:3b:46:5a:8a:ac:f2:fa: 4b:0b:ac:c1:c7:4f:ce:ff:de:8f:2b:ee:75:7a:ee:df:b8:37: 87:63:5b:75:b7:ae:f0:7b:ff:1a:8c:ae:9c:61:3c:5e:64:97: 5a:2a:7d:41:d8:51:7b:49:e0:72:52:c8:6e:32:e2:fd:96:4f: e3:2d:f0:74:b1:9a:5a:b6:33:7c:ec:74:a8:80:1e:78:62:0e: f0:64:8f:f0:95:b8:56:c7:da:28:e0:e7:4e:80:4b:26:e0:f4: 00:6b:ed:27:34:75:d4:f1:98:f6:d3:fd:ca:4b:6a:d3:14:2f: 69:5d:70:2d:d1:de:6a:4f:85:39:21:43:2f:b5:f6:d5:40:a8: 30:f9:d9:0e:a5:ab:1c:ac:bf:f2:8e:f2:13:14:ab:68:7b:67: 1b:4c:9b:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOZbBDGJV7P61H1L3AuZofXW2CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy NDE4N0Q1OTAeFw0yNjA0MTYwNzU2MTNaFw0yNjA0MTkxOTM4MTNaMDMxMTAvBgNV BAMTKERFNjhCN0Q0MjA2NEZGMUFEQjdFRTRCNEZDRDc3OTk3N0I1OEVGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx784d97GtPJe/NtylrCHVjKMR sEzuocMnNNR2yo6UhBE5d2dx99xWy+GDN+w7z4izdPOorPnwiIh9UZ8eT2nThj+I mz0SXRT64bryb5n1H6J+KNVe3qLtEJg2BO0r5jfsWE5i6Ne0/Z3R4G9bLeQ6ncWO tBoX/Wsh0kH4icsP+vuyTT04bZB82/jm1WZ1H7JLNu9/oqpdQjt8pL+leHfz4WE3 6PpijHoa9cOevmVvS3PXjO0BxCB/9nqORFKWiPIePyKpTziUUWroeISI6ma3fdlG dTyu6WVBzU9+QL4zJ11FtpqRwSrOWvhWWjDrV1g8eXX4BERF5ySfyNJsrkHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3mi31CBk/xrbfuS0/Nd5l3tY72YwHwYDVR0j BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4 N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4 RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjTnU+SplcvPKcyyg7I2AD3uuP/FtIhSbln G/1F5+ekWdkNZw3Us8RNNEN7E4Q6bsXFVySeb/LErOp4xm/6OqiwUDceaRupUfRW IniZDNi+9MuUzhTpKKpxsva1b682q1S64UeXO0Zaiqzy+ksLrMHHT87/3o8r7nV6 7t+4N4djW3W3rvB7/xqMrpxhPF5kl1oqfUHYUXtJ4HJSyG4y4v2WT+Mt8HSxmlq2 M3zsdKiAHnhiDvBkj/CVuFbH2ijg506ASybg9ABr7Sc0ddTxmPbT/cpLatMUL2ld cC3R3mpPhTkhQy+19tVAqDD52Q6lqxysv/KO8hMUq2h7ZxtMm0A= -----END CERTIFICATE-----Generated at Fri Apr 17 13:12:52 2026 by rpki-client