
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json)
Hash identifier: QwbuN/MrplZj1fkDw3TBHAybQks9U4JOBhGIRCb4GGU=
Subject key identifier: E6:C7:06:11:82:61:75:6B:7D:C6:0C:CF:49:BF:92:BD:F6:5D:5F:32
Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93
Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93
Certificate serial: 5FC37FC6FE8E29A23FB26E951FBE2AF0FA4DEF3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
Manifest number: D8
Signing time: Sat 07 Mar 2026 12:42:35 +0000
Manifest this update: Sat 07 Mar 2026 12:37:35 +0000
Manifest next update: Tue 10 Mar 2026 14:13:35 +0000
Files and hashes: 1: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: KQM43bQlpvxHkfH5XC9W2/v4lrA7SSbfPBumEyQLDJI=)
2: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl
rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c3:7f:c6:fe:8e:29:a2:3f:b2:6e:95:1f:be:2a:f0:fa:4d:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93
Validity
Not Before: Mar 7 12:37:35 2026 GMT
Not After : Mar 10 14:13:35 2026 GMT
Subject: CN=E6C706118261756B7DC60CCF49BF92BDF65D5F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:67:f4:bd:20:2c:37:96:62:76:50:72:00:
5d:3f:a4:48:d8:58:05:00:47:bd:15:23:93:cb:5b:
27:68:89:ea:bd:9f:e3:e1:e8:50:33:c5:28:1a:74:
29:72:a9:e1:14:06:df:7f:1c:9d:ae:61:a9:43:45:
ed:c2:c3:d4:d6:2f:23:7a:5b:14:36:14:cc:6c:ad:
a5:30:56:01:9f:17:c9:d7:21:1f:5b:4d:f5:69:37:
ee:dd:fa:2b:bf:e9:cb:a5:15:71:3c:be:81:c6:36:
7b:41:41:ad:36:a4:05:2b:ea:94:ce:69:8e:d3:9d:
37:d3:d8:24:d7:ef:27:bc:85:b1:59:69:91:a3:b4:
4a:9f:fd:cb:bd:7f:37:73:a6:b6:c3:3d:26:35:4c:
1b:33:4c:dc:84:6a:3c:84:52:09:62:42:3b:84:93:
a1:b1:e2:6f:17:19:9c:e6:90:82:d6:b0:95:e5:dc:
a2:1c:44:6b:58:3a:32:f4:3e:04:27:23:4c:3d:89:
c1:7e:93:e5:fe:3e:fd:e9:15:97:d8:c7:d9:ed:74:
f5:9a:57:7a:4b:d5:84:46:34:0b:a3:69:79:6f:ce:
61:90:75:59:ce:88:73:e6:47:ae:97:7a:e1:dd:dc:
60:d5:f7:66:b7:2b:19:6d:92:b8:c0:ec:54:a5:86:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C7:06:11:82:61:75:6B:7D:C6:0C:CF:49:BF:92:BD:F6:5D:5F:32
X509v3 Authority Key Identifier:
keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c4:b8:b9:a3:ff:0d:f1:56:84:e4:27:4b:3c:55:e1:70:db:
11:71:c9:23:1e:94:1b:47:dc:9e:c9:1d:4f:75:9e:8e:e4:7e:
67:7f:00:da:31:45:4c:2a:51:77:20:77:f0:b2:22:bf:0e:83:
c9:d8:d4:8f:0b:92:21:ed:0b:84:39:85:3f:74:03:2d:c4:f5:
ea:92:96:d5:31:0a:9e:27:01:dd:a3:ab:27:e0:eb:12:b9:dc:
91:90:ec:12:3a:fc:b3:ef:a0:19:a5:79:b0:b5:17:91:b6:8a:
9f:3f:3a:79:5b:fb:1e:8c:0c:45:0e:7e:fb:83:65:a5:3a:56:
44:30:a3:8a:1f:72:7b:08:b4:d4:2f:47:34:f3:bd:30:f3:f9:
77:ad:d9:5f:be:f4:88:c5:9b:07:14:93:a2:ca:fc:4b:ef:56:
6c:3b:e8:7c:40:7b:3d:74:2e:79:94:b3:b0:3a:be:39:56:e8:
5b:f8:c3:93:ea:b9:f7:bf:fe:17:7b:ff:36:70:7d:39:5e:7c:
7f:f8:ff:17:c4:60:97:20:ac:d1:d0:ec:d2:d9:47:bf:47:6a:
3b:db:e8:ba:c8:f5:3f:a3:52:a1:e4:30:b0:b9:b3:c2:a7:c0:
dd:98:c4:f0:8b:61:5a:08:9c:29:22:96:ef:a4:e4:30:be:dc:
56:3c:b8:fe
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX8N/xv6OKaI/sm6VH74q8PpN7z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4
RkIzM0U5MzAeFw0yNjAzMDcxMjM3MzVaFw0yNjAzMTAxNDEzMzVaMDMxMTAvBgNV
BAMTKEU2QzcwNjExODI2MTc1NkI3REM2MENDRjQ5QkY5MkJERjY1RDVGMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4mf0vSAsN5ZidlByAF0/pEjY
WAUAR70VI5PLWydoieq9n+Ph6FAzxSgadClyqeEUBt9/HJ2uYalDRe3Cw9TWLyN6
WxQ2FMxsraUwVgGfF8nXIR9bTfVpN+7d+iu/6culFXE8voHGNntBQa02pAUr6pTO
aY7TnTfT2CTX7ye8hbFZaZGjtEqf/cu9fzdzprbDPSY1TBszTNyEajyEUgliQjuE
k6Gx4m8XGZzmkILWsJXl3KIcRGtYOjL0PgQnI0w9icF+k+X+Pv3pFZfYx9ntdPWa
V3pL1YRGNAujaXlvzmGQdVnOiHPmR66XeuHd3GDV92a3KxltkrjA7FSlhu4bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5scGEYJhdWt9xgzPSb+SvfZdXzIwHwYDVR0j
BBgwFoAUR1cfA2aHW3NRskTSXLfoJY+zPpMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMC80NzU3MUYwMzY2
ODc1QjczNTFCMjQ0RDI1Q0I3RTgyNThGQjMzRTkzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4RkIz
M0U5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0
NjAtZjEzNmI0NTUxZjhkLzAvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4
MjU4RkIzM0U5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEPEuLmj/w3xVoTkJ0s8VeFw2xFxySMelBtH
3J7JHU91no7kfmd/ANoxRUwqUXcgd/CyIr8Og8nY1I8LkiHtC4Q5hT90Ay3E9eqS
ltUxCp4nAd2jqyfg6xK53JGQ7BI6/LPvoBmlebC1F5G2ip8/Onlb+x6MDEUOfvuD
ZaU6VkQwo4ofcnsItNQvRzTzvTDz+Xet2V++9IjFmwcUk6LK/EvvVmw76HxAez10
LnmUs7A6vjlW6Fv4w5Pqufe//hd7/zZwfTlefH/4/xfEYJcgrNHQ7NLZR79Hajvb
6LrI9T+jUqHkMLC5s8KnwN2YxPCLYVoInCkilu+k5DC+3FY8uP4=
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:51:04 2026 by rpki-client