$ rpki-client -vvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: x4bHdyiOVm2ChF0+tMv4ULzRvuH04Y7FkIP1nxdMesw= Subject key identifier: 0B:BE:53:AD:71:C2:E6:BA:45:EE:F4:D2:DD:61:16:E8:5F:D6:25:A6 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 2A7AED9FB3FA76C566FF4E86F379D9F9471C99F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 12:16:55 +0000 Manifest this update: Thu 18 Jun 2026 12:11:55 +0000 Manifest next update: Fri 19 Jun 2026 13:58:55 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 2: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) 3: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 4: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: rTizcblA6zBURW8doZxEB8AAPC+rLwyITBDGTIoOEIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7a:ed:9f:b3:fa:76:c5:66:ff:4e:86:f3:79:d9:f9:47:1c:99:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Jun 18 12:11:55 2026 GMT Not After : Jun 19 13:58:55 2026 GMT Subject: CN=0BBE53AD71C2E6BA45EEF4D2DD6116E85FD625A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:fc:4a:fc:eb:fd:52:27:c9:1a:20:06:82: a0:fb:88:6d:07:6a:9c:32:d3:a9:d5:e2:6e:b1:1b: 40:f0:77:b2:62:66:b5:06:62:d7:17:98:60:7a:15: e2:0e:7f:88:de:be:d0:13:e5:ec:2c:2e:8d:57:43: 3b:08:73:b3:05:3e:3a:85:4a:4f:e1:8b:87:4f:30: e1:d9:0e:c9:af:0e:4d:5a:b7:bc:b0:40:2b:84:1e: 84:44:68:c0:7c:45:2e:d2:dd:6d:23:0e:45:87:6b: 73:af:85:f9:53:e1:33:a2:c6:ba:bc:c6:07:34:8b: f9:29:76:c3:4b:6a:99:dd:6a:a5:21:66:10:fb:0f: 77:34:88:48:05:fc:fe:f2:34:39:01:e4:11:df:7a: b9:06:b9:26:b4:5e:48:ad:67:68:cf:02:fc:c0:df: b5:19:7b:db:37:66:f3:5a:47:57:97:5e:8e:78:05: ff:61:5e:8e:8b:88:be:dc:a6:a2:cc:3b:ac:50:08: b9:79:d7:34:77:b9:87:64:de:09:10:9d:88:40:e2: f8:5c:65:f7:19:b1:14:7b:6f:49:7e:c5:ea:37:89: c7:a6:82:12:eb:42:de:1f:6b:27:78:7f:fd:01:c1: 4c:4d:ce:7e:cb:2a:da:53:77:24:b6:a7:c0:da:ce: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BE:53:AD:71:C2:E6:BA:45:EE:F4:D2:DD:61:16:E8:5F:D6:25:A6 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:01:cb:3e:ae:4b:02:d6:3f:71:fb:50:1b:84:95:39:94:b7: 72:25:c9:8f:9c:78:52:02:d2:4c:9e:8a:39:ec:b7:6d:c5:1c: d9:5e:49:3b:f7:e7:dd:60:5b:d6:03:77:a1:dd:51:29:1a:37: 7d:ee:92:09:ff:04:6a:32:ba:72:af:fd:2c:c7:d5:87:38:77: c7:27:31:8f:55:d7:6c:65:58:21:72:c7:7c:c0:f8:91:27:26: 2e:2e:86:0c:2d:8d:ae:a6:03:e0:1c:a5:55:cb:11:b2:1a:99: f1:9a:58:b1:32:2d:fc:a4:3b:01:3a:a5:4f:fd:9e:a7:6f:58: a8:80:97:40:5b:23:01:47:22:75:b6:35:c9:b0:8f:fb:43:f0: a6:a8:19:8e:42:df:8d:1f:88:d4:ba:d3:e2:15:de:46:45:0e: b3:67:74:1b:29:f4:b8:fc:8e:cf:e7:77:96:4b:ea:9a:46:f3: dd:f4:74:c4:d7:07:51:02:d9:3a:94:9a:9c:59:01:bc:a7:e2: a0:61:ea:8e:a4:d2:63:61:19:fe:11:2a:a9:35:8d:c8:8a:c6: 4b:27:f8:51:2b:e0:2a:50:59:aa:78:8c:a9:71:98:a0:19:d1: 97:9c:cd:32:00:b2:d7:b7:e6:34:4b:f7:c2:cc:ca:c1:e9:4b: bf:10:64:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKnrtn7P6dsVm/06G83nZ+UccmfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA2MTgxMjExNTVaFw0yNjA2MTkxMzU4NTVaMDMxMTAvBgNV BAMTKDBCQkU1M0FENzFDMkU2QkE0NUVFRjREMkRENjExNkU4NUZENjI1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2k/xK/Ov9UifJGiAGgqD7iG0H apwy06nV4m6xG0Dwd7JiZrUGYtcXmGB6FeIOf4jevtAT5ewsLo1XQzsIc7MFPjqF Sk/hi4dPMOHZDsmvDk1at7ywQCuEHoREaMB8RS7S3W0jDkWHa3OvhflT4TOixrq8 xgc0i/kpdsNLapndaqUhZhD7D3c0iEgF/P7yNDkB5BHferkGuSa0XkitZ2jPAvzA 37UZe9s3ZvNaR1eXXo54Bf9hXo6LiL7cpqLMO6xQCLl51zR3uYdk3gkQnYhA4vhc ZfcZsRR7b0l+xeo3icemghLrQt4fayd4f/0BwUxNzn7LKtpTdyS2p8DaznsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC75TrXHC5rpF7vTS3WEW6F/WJaYwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0Byz6uSwLWP3H7UBuElTmUt3IlyY+ceFIC 0kyeijnst23FHNleSTv3591gW9YDd6HdUSkaN33ukgn/BGoyunKv/SzH1Yc4d8cn MY9V12xlWCFyx3zA+JEnJi4uhgwtja6mA+AcpVXLEbIamfGaWLEyLfykOwE6pU/9 nqdvWKiAl0BbIwFHInW2Ncmwj/tD8KaoGY5C340fiNS60+IV3kZFDrNndBsp9Lj8 js/nd5ZL6ppG8930dMTXB1EC2TqUmpxZAbyn4qBh6o6k0mNhGf4RKqk1jciKxksn +FEr4CpQWap4jKlxmKAZ0ZeczTIAste35jRL98LMysHpS78QZJM= -----END CERTIFICATE-----Generated at Thu Jun 18 19:09:17 2026 by rpki-client