$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: rl2JHTUR4QjyxDarIHxhJttSGJY/p9kaTk2aDJ+iiOo= Subject key identifier: B4:87:92:FF:9E:6A:7A:D8:EF:6A:EA:27:B5:2D:CB:EE:48:81:BF:70 Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 415840DDD8EAD70531147B28DA0C41A92B1FFC52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 0552 Signing time: Mon 02 Mar 2026 17:52:25 +0000 Manifest this update: Mon 02 Mar 2026 17:47:25 +0000 Manifest next update: Fri 06 Mar 2026 01:16:25 +0000 Files and hashes: 1: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: qImDYxy8Cj4IxuLiDnlTMw4b4DqF0CtYoKPPvsshatI=) 2: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) 3: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 01:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:58:40:dd:d8:ea:d7:05:31:14:7b:28:da:0c:41:a9:2b:1f:fc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Mar 2 17:47:25 2026 GMT Not After : Mar 6 01:16:25 2026 GMT Subject: CN=B48792FF9E6A7AD8EF6AEA27B52DCBEE4881BF70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:ba:b5:1f:1e:f5:dc:b4:c6:22:4b:4a:8d: 9a:28:13:45:6e:5b:5e:bb:62:df:08:4e:fc:07:fa: 9d:87:c1:28:ac:c4:2a:65:dd:ac:68:55:bd:bb:f7: b0:9e:75:03:a9:1b:7d:69:a1:cb:b0:1e:a1:db:51: a3:6d:9d:b9:b1:8f:d5:52:11:d7:65:e6:79:15:2e: 15:4e:a9:88:22:25:71:9f:33:bb:27:21:6d:b9:bb: 0a:da:f4:60:46:a6:d1:60:47:71:e4:35:a9:2d:b3: 6c:74:fa:ee:a8:a5:74:36:78:c9:55:b1:3f:95:25: e4:50:5a:0d:25:dd:c6:e6:3f:88:be:95:1d:84:c5: 53:24:2b:9b:05:39:80:15:4d:12:96:46:15:ea:58: 99:92:5e:b9:9a:47:5d:60:e5:d1:d5:ab:f3:7f:4c: 0f:45:c2:3c:22:73:f8:ba:ab:91:0c:c3:57:d4:c4: 9e:04:9a:ed:bc:80:0d:4f:7c:fd:66:e1:b3:48:01: 3a:65:3e:4b:57:ba:d7:41:6d:32:0c:5c:5a:59:88: 56:88:42:f3:84:0b:7f:f5:fe:b3:95:5d:bf:fb:b5: cf:7e:58:d3:b0:61:8b:60:b0:a2:e6:7c:e5:13:2b: 5e:5d:59:d8:28:d7:62:c7:e5:a8:2b:b0:5e:4d:15: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:87:92:FF:9E:6A:7A:D8:EF:6A:EA:27:B5:2D:CB:EE:48:81:BF:70 X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:27:9d:58:17:f8:a5:b4:e5:fa:81:4d:61:62:77:30:13:70: af:bc:4b:ed:d0:5f:48:48:bf:e6:78:f8:3c:d5:c3:53:0d:c9: 57:46:69:9a:e2:86:ec:5a:0a:c7:59:67:ee:a8:7a:67:1a:68: 1c:5d:8f:6e:d9:78:17:8c:f5:cc:92:57:7b:15:58:47:06:35: d5:c9:60:c1:69:8b:b6:c0:e9:24:e5:c9:e3:61:9c:55:90:29: 1f:d4:07:d6:55:66:0e:ee:b4:6d:f6:78:4f:8b:d9:0a:d0:99: 21:37:51:34:e1:d3:01:a8:9e:b4:d1:78:87:ba:8f:69:fa:0e: ea:dd:a9:b3:ac:98:b1:a5:b0:4c:12:40:cc:e7:08:14:ed:e3: a6:8e:86:28:62:b6:e3:57:ca:4c:fb:9f:e0:29:8c:22:d2:ec: bc:92:77:4d:cc:25:0a:80:67:3b:ed:fa:f3:dd:ef:a1:cb:3e: 9e:fe:cd:39:91:54:b6:c1:6c:09:f9:c2:39:06:b3:ba:36:ec: 44:57:c3:ef:9c:4f:c6:90:32:48:ec:03:d1:08:1c:23:ad:30: 71:41:a6:09:5c:8c:6c:7b:57:4e:e2:70:f4:7a:99:b5:6e:1c: 05:9f:7f:24:6c:c0:d1:c5:fa:9b:c0:cb:a3:85:ce:8c:ab:08: 6c:38:0c:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVhA3djq1wUxFHso2gxBqSsf/FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNjAzMDIxNzQ3MjVaFw0yNjAzMDYwMTE2MjVaMDMxMTAvBgNV BAMTKEI0ODc5MkZGOUU2QTdBRDhFRjZBRUEyN0I1MkRDQkVFNDg4MUJGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88Lq1Hx713LTGIktKjZooE0Vu W167Yt8ITvwH+p2HwSisxCpl3axoVb2797CedQOpG31pocuwHqHbUaNtnbmxj9VS Eddl5nkVLhVOqYgiJXGfM7snIW25uwra9GBGptFgR3HkNakts2x0+u6opXQ2eMlV sT+VJeRQWg0l3cbmP4i+lR2ExVMkK5sFOYAVTRKWRhXqWJmSXrmaR11g5dHVq/N/ TA9Fwjwic/i6q5EMw1fUxJ4Emu28gA1PfP1m4bNIATplPktXutdBbTIMXFpZiFaI QvOEC3/1/rOVXb/7tc9+WNOwYYtgsKLmfOUTK15dWdgo12LH5agrsF5NFacfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtIeS/55qetjvauontS3L7kiBv3AwHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQnnVgX+KW05fqBTWFidzATcK+8S+3QX0hI v+Z4+DzVw1MNyVdGaZrihuxaCsdZZ+6oemcaaBxdj27ZeBeM9cySV3sVWEcGNdXJ YMFpi7bA6STlyeNhnFWQKR/UB9ZVZg7utG32eE+L2QrQmSE3UTTh0wGonrTReIe6 j2n6DurdqbOsmLGlsEwSQMznCBTt46aOhihituNXykz7n+ApjCLS7LySd03MJQqA Zzvt+vPd76HLPp7+zTmRVLbBbAn5wjkGs7o27ERXw++cT8aQMkjsA9EIHCOtMHFB pglcjGx7V07icPR6mbVuHAWffyRswNHF+pvAy6OFzoyrCGw4DG4= -----END CERTIFICATE-----Generated at Wed Mar 4 15:39:50 2026 by rpki-client