$ rpki-client -vvvf rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft File: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft (raw, json) Hash identifier: QvS7dG3Jn8LkfkWmdA/e0zgEdoH8Fkha7TxJJWS6MPg= Subject key identifier: C4:A1:FE:CD:95:AC:30:FD:7F:55:31:E7:71:CF:6A:99:A6:18:6D:88 Authority key identifier: 47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD Certificate issuer: /CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Certificate serial: 5AAF382FCC90C550A97E166724C4CA4628D4715D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:40:34 +0000 Manifest this update: Thu 17 Sep 2026 01:35:34 +0000 Manifest next update: Fri 18 Sep 2026 02:53:34 +0000 Files and hashes: 1: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: kRfaHJ2N6RhGHiT5hll7Up0lWEdAC2bJX7sPu7ER3zI=) 2: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: J5rFzctTdvsWCxrACKApiLNw+RzyxTeJMfGiTIwNC9g=) 3: 47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl (hash: dFkMdXreAd3SihmtjAUYoMxgtDOZO8xBV1RS49G3mDM=) 4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: XvVlZ672ghG2FtQOOKBCI6fwP4H4S1vwrzV5nTnnx7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:af:38:2f:cc:90:c5:50:a9:7e:16:67:24:c4:ca:46:28:d4:71:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47246E18CBFE4E17629D4D60B70BCF09534BA8FD Validity Not Before: Sep 17 01:35:34 2026 GMT Not After : Sep 18 02:53:34 2026 GMT Subject: CN=C4A1FECD95AC30FD7F5531E771CF6A99A6186D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:9c:82:58:e2:1b:8e:90:99:01:d2:93:d5: 6b:5d:c2:23:8a:94:52:a2:33:a3:31:eb:05:8b:51: 74:e4:a4:77:d2:74:e8:2f:3c:81:21:40:f5:72:9c: 79:0a:95:35:30:8f:8e:3f:5f:3b:fc:37:a6:28:60: 33:4b:78:62:bb:f6:ec:3c:e4:dd:71:aa:2a:7d:65: 6a:26:ec:ea:f5:04:62:f3:e4:9a:c8:97:a3:c6:6f: 22:ea:97:40:46:73:83:1e:3a:37:cc:bf:c1:ba:bd: 67:f8:76:cd:f4:18:e4:32:03:1e:25:18:88:0a:0e: e7:12:97:43:44:8d:30:05:03:a2:c2:34:f3:90:03: 37:69:d2:34:c0:38:77:46:45:5a:99:1c:48:ec:1b: 46:5e:6b:09:bf:cc:e1:b4:54:ea:ad:da:13:a1:38: 74:a5:de:54:0b:32:77:78:3e:01:87:4b:94:cb:7f: d2:f5:3a:8b:01:d1:ba:69:7f:1b:1f:a8:26:76:1c: c7:36:9b:41:78:5f:1a:2a:8a:7a:2d:29:fe:2c:0f: d9:23:8c:61:05:13:ba:32:39:50:57:02:61:b5:9f: 60:85:9b:90:2b:e0:c6:3c:53:02:cb:4b:26:10:78: 1a:65:3c:e2:a3:c0:1c:ae:6c:93:b4:da:fa:36:c5: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:FE:CD:95:AC:30:FD:7F:55:31:E7:71:CF:6A:99:A6:18:6D:88 X509v3 Authority Key Identifier: keyid:47:24:6E:18:CB:FE:4E:17:62:9D:4D:60:B7:0B:CF:09:53:4B:A8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/47246E18CBFE4E17629D4D60B70BCF09534BA8FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:09:bf:f0:a6:cf:70:d5:8f:3a:97:1a:a5:c4:6f:63:d3:32: 15:5e:c6:0d:0c:98:5f:71:3b:a7:67:90:61:e4:fe:72:f6:41: 2f:d3:d2:17:e0:36:e1:2d:1e:81:da:88:10:90:b0:6d:9b:13: cc:d8:4c:37:c4:0d:d6:b4:06:24:78:72:6b:2f:eb:0e:98:25: 10:41:ee:77:8b:44:92:67:7d:fb:88:14:f4:72:ff:26:e6:27: 1e:f1:e7:bd:ae:3d:c2:f6:10:16:7f:c5:db:6e:f0:5e:70:f0: 12:c5:27:37:53:93:2f:a5:e6:c1:60:1f:0d:31:26:c7:08:10: 0e:66:2a:29:93:4b:5b:d1:0b:88:0d:b2:15:29:79:a2:fd:d5: fa:0c:af:2a:c9:3d:e8:75:04:56:2d:45:f9:84:87:6b:4c:9d: e2:17:77:7a:b3:64:7f:79:ca:68:db:4a:da:17:6d:fe:83:1c: 79:42:12:50:ed:d8:e9:ae:8c:fd:4e:07:18:71:1f:d2:bd:4d: 01:b8:77:7c:50:51:80:93:de:c3:06:2a:75:38:f9:4d:98:32: 27:3f:72:23:3d:e7:e6:5a:e6:e3:b9:ef:0b:a7:43:4a:4e:4a: f0:14:66:29:6b:59:55:21:fe:22:76:ff:d0:7e:f9:bb:ce:64: ab:eb:98:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWq84L8yQxVCpfhZnJMTKRijUcV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1 MzRCQThGRDAeFw0yNjA5MTcwMTM1MzRaFw0yNjA5MTgwMjUzMzRaMDMxMTAvBgNV BAMTKEM0QTFGRUNEOTVBQzMwRkQ3RjU1MzFFNzcxQ0Y2QTk5QTYxODZEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaupyCWOIbjpCZAdKT1WtdwiOK lFKiM6Mx6wWLUXTkpHfSdOgvPIEhQPVynHkKlTUwj44/Xzv8N6YoYDNLeGK79uw8 5N1xqip9ZWom7Or1BGLz5JrIl6PGbyLql0BGc4MeOjfMv8G6vWf4ds30GOQyAx4l GIgKDucSl0NEjTAFA6LCNPOQAzdp0jTAOHdGRVqZHEjsG0Zeawm/zOG0VOqt2hOh OHSl3lQLMnd4PgGHS5TLf9L1OosB0bppfxsfqCZ2HMc2m0F4XxoqinotKf4sD9kj jGEFE7oyOVBXAmG1n2CFm5Ar4MY8UwLLSyYQeBplPOKjwByubJO02vo2xZhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxKH+zZWsMP1/VTHncc9qmaYYbYgwHwYDVR0j BBgwFoAURyRuGMv+ThdinU1gtwvPCVNLqP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3YjAxY2YtYjFjOS00NTBmLTg1NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThD QkZFNEUxNzYyOUQ0RDYwQjcwQkNGMDk1MzRCQThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzI0NkUxOENCRkU0RTE3NjI5RDRENjBCNzBCQ0YwOTUzNEJB OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvNDcyNDZFMThDQkZFNEUxNzYyOUQ0RDYwQjcwQkNG MDk1MzRCQThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgJv/Cmz3DVjzqXGqXEb2PTMhVexg0MmF9x O6dnkGHk/nL2QS/T0hfgNuEtHoHaiBCQsG2bE8zYTDfEDda0BiR4cmsv6w6YJRBB 7neLRJJnffuIFPRy/ybmJx7x572uPcL2EBZ/xdtu8F5w8BLFJzdTky+l5sFgHw0x JscIEA5mKimTS1vRC4gNshUpeaL91foMryrJPeh1BFYtRfmEh2tMneIXd3qzZH95 ymjbStoXbf6DHHlCElDt2OmujP1OBxhxH9K9TQG4d3xQUYCT3sMGKnU4+U2YMic/ ciM95+Za5uO57wunQ0pOSvAUZilrWVUh/iJ2/9B++bvOZKvrmGc= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:00 2026 by rpki-client