
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json)
Hash identifier: Us0UQk4pNRUg5LYC0xGddvb9e/PjT6+wH3K0fmySi3o=
Subject key identifier: DA:0C:E5:41:A2:FB:69:AD:80:F9:CC:19:44:EE:93:7D:2D:C0:FD:57
Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93
Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93
Certificate serial: 4B3EDC356308B43BD857CDE23AC5150053E69B6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
Manifest number: EC
Signing time: Mon 20 Apr 2026 21:42:41 +0000
Manifest this update: Mon 20 Apr 2026 21:37:41 +0000
Manifest next update: Fri 24 Apr 2026 02:59:41 +0000
Files and hashes: 1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=)
2: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: gOr6+0abywKPYDoikgoTVfRw2SRrvTv5ql40mFj2zE4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl
rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3e:dc:35:63:08:b4:3b:d8:57:cd:e2:3a:c5:15:00:53:e6:9b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93
Validity
Not Before: Apr 20 21:37:41 2026 GMT
Not After : Apr 24 02:59:41 2026 GMT
Subject: CN=DA0CE541A2FB69AD80F9CC1944EE937D2DC0FD57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:12:11:d8:46:8f:ed:fd:9f:78:fc:fe:56:
70:f1:a8:f7:e1:a4:95:2c:14:64:0c:46:87:7d:43:
31:a2:02:be:05:3b:fd:84:bd:2d:ba:af:3c:c4:47:
18:bc:ad:02:dc:e9:37:2b:83:0b:50:a5:dd:10:9f:
48:45:b7:49:8d:99:cd:36:c0:b9:c8:3b:ff:09:cd:
fd:19:67:eb:07:f1:88:5c:98:c2:f8:f6:0b:ed:2e:
70:4d:f5:0b:fe:3c:70:ac:18:c4:a9:77:a9:8c:b6:
31:ff:81:97:af:64:c7:a3:18:ec:36:32:c5:b7:dd:
8d:aa:a1:c1:b1:47:c6:5f:26:a8:c1:b7:b6:17:ff:
b5:79:4c:19:88:4d:26:fd:be:68:f6:e0:fb:b0:58:
e6:81:20:19:04:94:f6:13:fb:df:df:4c:7c:c0:2f:
71:18:b2:c1:f7:37:d1:34:a5:4c:bd:29:72:07:e9:
f8:8e:25:58:a3:1e:e6:0a:50:53:b5:2d:96:77:2b:
19:ab:b3:46:d0:7c:4e:25:5f:05:26:ef:a4:48:2e:
11:44:c0:86:90:24:80:fa:17:b7:9c:45:2e:79:89:
f7:0c:ee:5c:6e:93:ed:10:42:f1:36:2a:06:87:4d:
c6:fa:36:34:ec:7f:48:e2:b3:fc:e1:4c:da:08:c6:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:E5:41:A2:FB:69:AD:80:F9:CC:19:44:EE:93:7D:2D:C0:FD:57
X509v3 Authority Key Identifier:
keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:a7:f5:51:87:d2:d1:22:4e:c9:bd:01:bf:11:1e:a1:74:
75:30:25:09:a6:a0:0f:ab:2b:2a:e9:c4:82:d1:f8:ef:43:6f:
15:61:0c:a0:08:7d:36:af:1c:69:ed:7a:13:43:24:f9:ec:a9:
24:e1:06:55:b4:42:4f:0c:af:91:58:3e:7d:da:4c:dc:36:b8:
dd:7e:c2:1d:f7:a8:03:0f:d1:71:06:bc:f2:e0:b8:77:03:f8:
58:74:d9:1d:5d:c4:22:a5:dd:ec:c2:a0:18:f6:06:f1:31:16:
61:37:d3:88:f6:58:3b:e3:e8:57:08:46:03:ff:ac:de:18:bf:
9d:22:58:7e:f1:73:b4:e5:e3:58:b1:4d:39:a4:09:02:07:30:
ce:53:bf:11:74:cf:2a:bb:f9:31:1e:32:0c:43:4d:b7:b5:9b:
e7:6c:91:15:66:51:b5:03:87:bc:cb:c9:ab:5f:a2:98:74:1f:
fb:99:e0:a6:27:39:eb:a0:3b:a0:07:05:64:54:43:8b:6d:c2:
62:10:2f:0a:a2:35:bc:a8:44:2e:6e:cc:35:ef:fa:a4:e5:d2:
b8:9d:6b:82:47:08:0e:72:cb:d4:56:6b:48:9c:c2:cd:7d:a1:
af:57:10:34:c0:87:ba:4a:67:a1:91:4c:75:d2:bd:e3:96:f8:
6b:7b:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:55:17 2026 by rpki-client