$ rpki-client -vvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: Kr4+xSqcmanl5XLXYIB4Xzbbsnw938yk7oB/d0SNcEw= Subject key identifier: 08:0A:65:6A:02:C1:32:E8:69:31:E8:DD:5E:A4:28:AD:0F:CA:21:A5 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 2E987D611F70FCBD9C6671729FB66D36E9726E4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 18:45:08 +0000 Manifest this update: Sun 02 Aug 2026 18:40:08 +0000 Manifest next update: Mon 03 Aug 2026 19:12:08 +0000 Files and hashes: 1: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: Upkyha01Gg2g7MB5TPcnhmib/9wSKWvDmW5bdnJ+XpI=) 2: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 3: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:98:7d:61:1f:70:fc:bd:9c:66:71:72:9f:b6:6d:36:e9:72:6e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Aug 2 18:40:08 2026 GMT Not After : Aug 3 19:12:08 2026 GMT Subject: CN=080A656A02C132E86931E8DD5EA428AD0FCA21A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:c0:3b:34:91:fa:5e:7c:65:cc:c8:82:fe: 80:a9:40:3b:91:2d:0f:5a:7d:ff:b1:6e:ce:cf:ce: 43:68:03:2f:3c:46:a8:f1:3d:6f:0a:19:be:2b:bd: 52:71:50:c1:43:af:ec:82:c1:77:96:50:ea:50:f6: 24:4c:b5:4b:d2:64:05:34:06:b6:34:eb:6c:62:b5: 8d:82:90:d6:35:75:e8:2b:f2:6e:0e:3a:00:a0:55: 7f:e3:d3:90:44:2e:c0:e3:e2:76:13:81:61:fb:04: 70:7f:8b:26:f8:70:24:86:9a:4a:3a:af:3e:7a:95: 5d:55:cd:42:58:77:15:9f:8f:cf:58:78:62:74:24: 02:fe:28:75:67:a9:17:06:df:af:cb:eb:c8:8a:fc: 6d:39:aa:d9:ea:91:68:4d:d8:e5:69:63:ba:26:af: a2:82:aa:ca:b0:9e:1d:fa:2c:d2:87:d8:39:07:56: cb:4b:84:d8:b4:ca:12:b7:25:dc:25:04:e0:be:8e: e8:c2:f3:5a:18:f0:51:77:9e:e0:49:6e:7c:c9:23: 83:51:cf:82:f9:38:f6:31:ef:85:9c:73:bc:d2:ad: 6d:28:1e:36:48:b2:cd:ca:1f:fc:f4:b7:16:51:c7: 26:e4:4b:9e:04:25:16:96:42:12:ea:7b:2d:73:e1: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0A:65:6A:02:C1:32:E8:69:31:E8:DD:5E:A4:28:AD:0F:CA:21:A5 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3a:25:99:a2:fd:4f:7f:11:f3:f4:89:47:66:4c:0b:94:76: e3:d9:8b:08:c8:3e:6c:68:50:a6:7f:98:f2:25:01:ff:97:d5: 92:4f:4a:ca:58:51:a0:e9:32:ce:14:2f:6b:7b:3a:64:56:a0: 09:c4:ad:b6:91:9d:e4:e0:ff:64:cf:b6:67:91:d8:7a:9b:39: fe:86:c9:e1:19:83:76:89:28:69:65:fb:27:14:03:0f:20:c3: 4c:c3:13:f9:0d:31:df:53:c7:cd:ac:57:28:f6:a0:02:d2:d0: 39:c2:62:c6:5b:1b:64:d4:4e:5e:36:06:b2:69:8e:33:79:af: a5:c5:46:08:0b:23:8e:7a:75:9f:22:7e:82:60:8e:8e:95:17: 01:27:d1:ae:d8:83:f7:ff:64:31:a6:ef:ea:fa:e8:6f:19:ed: f0:b2:2d:d3:a1:dc:5e:a6:5a:a1:5b:13:0b:1f:da:95:fe:18: aa:ab:cc:56:fa:ab:17:9b:3c:1e:5f:34:d7:c6:07:7b:75:f2: f3:cb:97:48:dc:f6:e5:70:1a:c4:b2:c4:a4:c5:5f:48:84:b2: 65:b2:0d:6e:70:bb:2f:ee:92:0e:71:ef:39:8c:72:60:a6:9f: 89:fb:54:1f:2f:da:a2:b4:4d:9b:f3:7b:67:49:ec:f7:65:61: 5f:b1:f0:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULph9YR9w/L2cZnFyn7ZtNulybk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA4MDIxODQwMDhaFw0yNjA4MDMxOTEyMDhaMDMxMTAvBgNV BAMTKDA4MEE2NTZBMDJDMTMyRTg2OTMxRThERDVFQTQyOEFEMEZDQTIxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AcA7NJH6XnxlzMiC/oCpQDuR LQ9aff+xbs7PzkNoAy88RqjxPW8KGb4rvVJxUMFDr+yCwXeWUOpQ9iRMtUvSZAU0 BrY062xitY2CkNY1degr8m4OOgCgVX/j05BELsDj4nYTgWH7BHB/iyb4cCSGmko6 rz56lV1VzUJYdxWfj89YeGJ0JAL+KHVnqRcG36/L68iK/G05qtnqkWhN2OVpY7om r6KCqsqwnh36LNKH2DkHVstLhNi0yhK3JdwlBOC+jujC81oY8FF3nuBJbnzJI4NR z4L5OPYx74Wcc7zSrW0oHjZIss3KH/z0txZRxybkS54EJRaWQhLqey1z4WxfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCAplagLBMuhpMejdXqQorQ/KIaUwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY6JZmi/U9/EfP0iUdmTAuUduPZiwjIPmxo UKZ/mPIlAf+X1ZJPSspYUaDpMs4UL2t7OmRWoAnErbaRneTg/2TPtmeR2HqbOf6G yeEZg3aJKGll+ycUAw8gw0zDE/kNMd9Tx82sVyj2oALS0DnCYsZbG2TUTl42BrJp jjN5r6XFRggLI456dZ8ifoJgjo6VFwEn0a7Yg/f/ZDGm7+r66G8Z7fCyLdOh3F6m WqFbEwsf2pX+GKqrzFb6qxebPB5fNNfGB3t18vPLl0jc9uVwGsSyxKTFX0iEsmWy DW5wuy/ukg5x7zmMcmCmn4n7VB8v2qK0TZvze2dJ7PdlYV+x8Lc= -----END CERTIFICATE-----Generated at Sun Aug 2 22:44:55 2026 by rpki-client