$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft File: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft (raw, json) Hash identifier: 2xC5Phkj8hlVyWScYJXUzhnWwtpytxpI6f9EVwDeso8= Subject key identifier: 35:1C:00:37:82:F1:F3:65:03:A3:DA:D2:9B:6D:18:55:D3:C8:83:9A Authority key identifier: 47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F Certificate issuer: /CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F Certificate serial: 65592B562421189362B2E58D48FE04CEC06BE21E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:05:15 +0000 Manifest this update: Wed 16 Sep 2026 17:00:15 +0000 Manifest next update: Thu 17 Sep 2026 17:26:15 +0000 Files and hashes: 1: 47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl (hash: R8+0i2Yad9sNS8CHZmWGwqnkp0sRilPeLGvvfpf8UbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:59:2b:56:24:21:18:93:62:b2:e5:8d:48:fe:04:ce:c0:6b:e2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47387C5FE18CCD8F56AE093FCB00319CC418FC7F Validity Not Before: Sep 16 17:00:15 2026 GMT Not After : Sep 17 17:26:15 2026 GMT Subject: CN=351C003782F1F36503A3DAD29B6D1855D3C8839A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:6b:70:03:b9:fb:1d:8b:15:9b:56:e9:1b: eb:87:85:80:5a:2e:b4:9d:35:40:dc:2d:ba:e4:51: f3:a9:b0:2d:2b:86:db:68:48:d3:37:65:24:a9:0e: 63:cc:14:7a:3f:ca:05:e2:c7:f7:63:1d:68:04:97: 7e:cb:6d:f8:72:2e:b1:76:e6:2f:34:37:d4:eb:49: 39:f9:d3:c6:1c:98:2a:ef:2a:5d:08:35:71:74:b6: d9:92:fc:4e:c6:01:89:4e:c5:4c:43:df:bf:92:6f: 4a:1e:7c:20:59:a8:ba:f9:6e:55:60:0b:61:e1:f5: f9:3f:f7:5f:69:b7:e1:c9:2d:fd:0e:80:c4:b3:93: 15:c0:6b:9b:68:ab:a0:1a:33:07:08:78:cc:f7:e4: ad:bc:9c:82:43:a1:01:d6:27:8b:36:12:bd:a3:6f: 82:68:75:31:82:ab:d3:ec:60:ed:9c:83:d5:69:a9: 65:dc:41:67:1f:ad:ba:d6:ed:a7:87:60:59:08:cc: c3:58:bc:dc:52:ac:cd:93:d0:89:88:46:71:ba:19: 47:df:51:ca:70:7c:a0:ed:7a:fe:cf:c6:cb:63:28: 17:89:1c:21:7e:26:5c:5c:7e:71:87:8a:b9:6a:6d: 66:99:a1:53:b1:2e:1d:86:bb:32:d9:a9:5f:82:9f: f7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1C:00:37:82:F1:F3:65:03:A3:DA:D2:9B:6D:18:55:D3:C8:83:9A X509v3 Authority Key Identifier: keyid:47:38:7C:5F:E1:8C:CD:8F:56:AE:09:3F:CB:00:31:9C:C4:18:FC:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/47387C5FE18CCD8F56AE093FCB00319CC418FC7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:6e:96:ac:9f:ef:53:7c:d4:6d:aa:e8:b0:a1:f4:a2:fa:92: e6:ba:10:bf:7f:bf:9e:9f:85:67:2d:a2:52:45:11:d5:56:4b: 4a:13:84:91:a2:b3:74:dd:92:53:9a:d0:c5:3d:d5:eb:22:19: ed:52:9b:c3:4d:5f:bb:9f:a3:49:21:2d:cf:d7:e2:34:a8:70: 66:85:6c:50:40:eb:f9:7e:0d:c5:12:f2:c9:ff:da:99:e2:5d: a2:3a:1f:8f:56:12:e5:8d:33:9e:78:44:14:26:e3:e9:b6:a1: 26:df:23:8c:fe:d7:ae:9d:a1:f7:ed:89:90:58:7d:47:26:fb: 3a:6e:56:c3:7c:28:46:e7:94:dd:5b:a9:06:58:4e:a0:ef:34: d0:33:2a:b8:46:26:1a:2c:34:c4:41:59:e4:d7:2a:94:db:89: 7e:50:17:d5:13:a2:af:68:37:53:36:68:12:5c:5c:ea:2f:01: 59:d6:06:7f:84:00:82:32:34:3e:bb:ca:4d:3c:c2:bd:7b:6f: 1d:4b:6f:51:1a:d3:af:0f:64:36:35:38:f7:40:5a:e3:1c:6b: 24:b9:b6:07:37:40:73:04:9a:73:6a:c4:57:01:1d:54:b1:20: e0:ef:03:ae:6e:5d:3a:2e:b0:bb:59:39:ed:d8:8d:0f:60:9d: 4b:2c:42:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVkrViQhGJNisuWNSP4EzsBr4h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczODdDNUZFMThDQ0Q4RjU2QUUwOTNGQ0IwMDMxOUND NDE4RkM3RjAeFw0yNjA5MTYxNzAwMTVaFw0yNjA5MTcxNzI2MTVaMDMxMTAvBgNV BAMTKDM1MUMwMDM3ODJGMUYzNjUwM0EzREFEMjlCNkQxODU1RDNDODgzOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDP2twA7n7HYsVm1bpG+uHhYBa LrSdNUDcLbrkUfOpsC0rhttoSNM3ZSSpDmPMFHo/ygXix/djHWgEl37LbfhyLrF2 5i80N9TrSTn508YcmCrvKl0INXF0ttmS/E7GAYlOxUxD37+Sb0oefCBZqLr5blVg C2Hh9fk/919pt+HJLf0OgMSzkxXAa5toq6AaMwcIeMz35K28nIJDoQHWJ4s2Er2j b4JodTGCq9PsYO2cg9VpqWXcQWcfrbrW7aeHYFkIzMNYvNxSrM2T0ImIRnG6GUff UcpwfKDtev7PxstjKBeJHCF+JlxcfnGHirlqbWaZoVOxLh2GuzLZqV+Cn/erAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRwAN4Lx82UDo9rSm20YVdPIg5owHwYDVR0j BBgwFoAURzh8X+GMzY9Wrgk/ywAxnMQY/H8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmNDc3NjMtYjBlMC00ZDAxLWI2YzgtNjBlYTRjYTU2MGI0LzAvNDczODdDNUZF MThDQ0Q4RjU2QUUwOTNGQ0IwMDMxOUNDNDE4RkM3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzM4N0M1RkUxOENDRDhGNTZBRTA5M0ZDQjAwMzE5Q0M0MThG QzdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvNDczODdDNUZFMThDQ0Q4RjU2QUUwOTNGQ0IwMDMx OUNDNDE4RkM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNulqyf71N81G2q6LCh9KL6kua6EL9/v56f hWctolJFEdVWS0oThJGis3TdklOa0MU91esiGe1Sm8NNX7ufo0khLc/X4jSocGaF bFBA6/l+DcUS8sn/2pniXaI6H49WEuWNM554RBQm4+m2oSbfI4z+166dofftiZBY fUcm+zpuVsN8KEbnlN1bqQZYTqDvNNAzKrhGJhosNMRBWeTXKpTbiX5QF9UToq9o N1M2aBJcXOovAVnWBn+EAIIyND67yk08wr17bx1Lb1Ea068PZDY1OPdAWuMcayS5 tgc3QHMEmnNqxFcBHVSxIODvA65uXTousLtZOe3YjQ9gnUssQgY= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:53 2026 by rpki-client