$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json) Hash identifier: vz9a/xgrDGVoXIsnPTQOsfv7m3tCgPJcVus6Ps8NPhI= Subject key identifier: 81:B8:F0:42:EE:79:53:19:78:13:58:0F:86:33:1B:9D:AA:42:5E:BB Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Certificate serial: 1D7D53AD2E46DC74B8C57CD73395D98C1EFE5167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft Manifest number: 04EC Signing time: Sun 02 Nov 2025 14:11:02 +0000 Manifest this update: Sun 02 Nov 2025 14:06:02 +0000 Manifest next update: Thu 06 Nov 2025 00:03:02 +0000 Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: OMBN8bjWVSCtC0KIo7hXqq9LSQgLAiFObgESLGc2Wss=) 2: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=) 3: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=) 4: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7d:53:ad:2e:46:dc:74:b8:c5:7c:d7:33:95:d9:8c:1e:fe:51:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Validity Not Before: Nov 2 14:06:02 2025 GMT Not After : Nov 6 00:03:02 2025 GMT Subject: CN=81B8F042EE7953197813580F86331B9DAA425EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:98:68:0e:8f:f3:30:3a:00:9f:29:03:ed: 24:ea:79:fd:7e:a4:fa:5f:4d:f3:cc:7e:82:21:6a: ce:99:62:d0:e5:e9:3e:87:a7:56:36:6b:cf:36:e5: d3:d4:12:d0:d0:68:53:64:b7:3e:bd:eb:c3:ee:4a: ac:14:21:98:7c:54:cc:c0:5a:22:44:aa:36:c0:0a: d0:b0:c4:d1:05:03:b3:1a:da:67:dd:6f:22:36:00: ca:68:99:36:85:86:89:fc:95:c1:e3:b5:0a:f5:81: 4b:e5:2d:32:db:93:5d:24:21:2c:87:a1:b7:da:76: 28:78:ab:35:09:a7:dc:cc:cc:d1:cf:6d:76:93:d2: a5:5e:a5:e6:5f:95:f6:12:37:69:d7:c4:1b:02:0a: 29:ce:7c:26:6a:41:68:e3:9f:12:a4:58:f2:3e:ca: d2:f3:85:39:cd:bb:b3:2a:16:44:88:23:a5:ec:51: eb:d5:d2:53:c8:7a:00:26:11:2e:ac:71:7c:d6:80: 48:75:32:2f:c7:39:ba:7f:fe:f8:4a:b2:8d:2b:f4: ff:cc:3f:9d:d8:7f:87:e9:2a:c4:8b:68:63:87:d0: 68:42:6b:3c:25:6e:ce:8b:3d:2f:4c:ee:da:51:4f: f2:6d:93:9c:b8:ba:3d:fe:fa:e5:1c:12:e9:3e:fd: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B8:F0:42:EE:79:53:19:78:13:58:0F:86:33:1B:9D:AA:42:5E:BB X509v3 Authority Key Identifier: keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bf:ca:6a:a1:85:c4:6e:67:c3:9c:4a:57:ae:6b:9f:95:dc: f6:40:77:3b:f2:eb:43:f7:01:2a:89:63:3a:00:fa:54:de:6c: b2:fc:a4:f5:06:40:63:d8:99:ac:b8:7e:50:ca:31:71:2d:7f: 1f:33:97:bc:e3:b3:27:d0:e8:81:14:31:ec:0c:13:70:9c:54: 93:65:77:5b:68:7c:b5:9d:77:5f:02:d0:4b:18:ae:e1:f4:0d: b5:f7:3c:cf:59:43:fe:4b:60:dc:45:3d:2f:9c:5c:35:33:f9: 84:59:7f:e4:58:d1:dc:55:5c:75:c5:8c:26:61:ef:91:a5:1e: 8d:1f:66:6e:52:7b:80:fa:d3:6c:df:8b:7d:f3:e6:16:42:8d: 77:ce:b3:be:d3:d6:a7:3a:1e:f3:91:fa:ec:98:5c:8b:57:5c: ae:74:95:84:c6:46:6b:58:8e:41:b8:a6:90:65:cc:92:66:b2: 23:1e:40:5b:88:f2:85:84:ec:15:a6:2a:28:81:20:cb:04:8d: 79:bb:74:1d:b4:86:0b:e0:08:31:24:6a:77:5c:8f:74:04:e4: b1:46:9b:cf:8d:a1:75:d4:71:89:4b:96:f7:b1:06:78:b6:f7: 5a:dc:b8:a8:89:d2:73:00:1d:4f:81:8e:9f:4a:c3:53:46:fe: 9a:69:c1:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHX1TrS5G3HS4xXzXM5XZjB7+UWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy NDE4N0Q1OTAeFw0yNTExMDIxNDA2MDJaFw0yNTExMDYwMDAzMDJaMDMxMTAvBgNV BAMTKDgxQjhGMDQyRUU3OTUzMTk3ODEzNTgwRjg2MzMxQjlEQUE0MjVFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+H5hoDo/zMDoAnykD7STqef1+ pPpfTfPMfoIhas6ZYtDl6T6Hp1Y2a8825dPUEtDQaFNktz6968PuSqwUIZh8VMzA WiJEqjbACtCwxNEFA7Ma2mfdbyI2AMpomTaFhon8lcHjtQr1gUvlLTLbk10kISyH obfadih4qzUJp9zMzNHPbXaT0qVepeZflfYSN2nXxBsCCinOfCZqQWjjnxKkWPI+ ytLzhTnNu7MqFkSII6XsUevV0lPIegAmES6scXzWgEh1Mi/HObp//vhKso0r9P/M P53Yf4fpKsSLaGOH0GhCazwlbs6LPS9M7tpRT/Jtk5y4uj3++uUcEuk+/fULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgbjwQu55Uxl4E1gPhjMbnapCXrswHwYDVR0j BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4 N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4 RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABq/ymqhhcRuZ8OcSleua5+V3PZAdzvy60P3 ASqJYzoA+lTebLL8pPUGQGPYmay4flDKMXEtfx8zl7zjsyfQ6IEUMewME3CcVJNl d1tofLWdd18C0EsYruH0DbX3PM9ZQ/5LYNxFPS+cXDUz+YRZf+RY0dxVXHXFjCZh 75GlHo0fZm5Se4D602zfi33z5hZCjXfOs77T1qc6HvOR+uyYXItXXK50lYTGRmtY jkG4ppBlzJJmsiMeQFuI8oWE7BWmKiiBIMsEjXm7dB20hgvgCDEkandcj3QE5LFG m8+NoXXUcYlLlvexBni291rcuKiJ0nMAHU+Bjp9Kw1NG/pppwVk= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:49 2025 by rpki-client