$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: iHnLeQYnp1/Eo+am9d3AR+4sRx+e3kMFEvyhXX05szc= Subject key identifier: 8B:2D:03:30:BE:53:62:FB:FE:21:C9:4A:22:2C:82:E3:2A:A8:10:CE Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 0CF032FD5BB548A8D1CA3C27F77882A0AF01C87F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 022D Signing time: Mon 03 Nov 2025 12:11:30 +0000 Manifest this update: Mon 03 Nov 2025 12:06:30 +0000 Manifest next update: Thu 06 Nov 2025 14:51:30 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: v3rbvGqKb0NbDZVgOSvElDOrfhaJ0wYydG5o5rm9kWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f0:32:fd:5b:b5:48:a8:d1:ca:3c:27:f7:78:82:a0:af:01:c8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Nov 3 12:06:30 2025 GMT Not After : Nov 6 14:51:30 2025 GMT Subject: CN=8B2D0330BE5362FBFE21C94A222C82E32AA810CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:3e:39:3b:5b:95:5f:ec:cb:6b:cf:a8:08: d1:cd:03:6a:c9:14:3d:e1:22:ce:ba:e7:19:ff:cf: d4:5c:22:cd:61:80:3f:d9:b7:0d:79:d5:80:a1:2c: 81:cf:a8:cb:61:0c:42:eb:76:31:05:26:da:d0:40: 4b:b2:83:e9:5b:95:94:3f:9d:4f:66:2c:11:cf:8d: f0:77:2e:c1:b6:92:b0:2c:b4:14:80:96:b8:9b:cd: f8:4d:9d:ea:02:e8:6a:5d:a2:b5:35:05:cd:6b:71: 45:ac:36:de:bc:62:fb:2c:e2:0d:ee:62:68:c4:16: c6:6a:bc:a9:58:56:1a:38:a7:64:84:3a:4c:17:b1: db:cd:de:b2:f0:ab:77:55:84:89:82:12:c3:3b:de: 40:21:60:53:1a:41:e0:d0:be:25:d4:9a:30:de:61: 3d:a3:92:1c:0a:39:86:07:f1:d5:67:90:a5:99:91: 0f:da:47:1a:d1:34:df:bc:b8:6a:b3:7e:e5:80:7f: 0a:fb:6f:22:4b:a6:45:9b:6b:60:cc:e7:52:bc:1c: 93:33:76:e2:d4:84:96:09:5f:12:80:00:c9:3a:e4: 51:13:53:95:5c:cf:01:cf:29:61:9e:35:dd:c8:f4: 47:b2:a5:3e:d0:7b:a8:3a:63:37:30:46:29:0b:44: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2D:03:30:BE:53:62:FB:FE:21:C9:4A:22:2C:82:E3:2A:A8:10:CE X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:e0:75:7c:66:70:eb:98:f9:67:ec:7b:5e:31:d0:98:d2:13: 20:00:5c:aa:47:d4:62:03:c8:f7:16:e7:d8:c2:8c:92:15:3b: 59:6f:af:55:43:2b:eb:e8:b1:fe:c7:8a:40:4e:da:fa:b3:77: 3d:d0:24:41:59:1d:db:76:6c:bc:e2:99:51:0c:f7:e1:b5:95: 0f:80:74:d7:3f:fb:ee:1b:9f:57:22:e1:b6:51:e7:5f:9c:35: f8:57:6f:fd:ec:b5:72:1b:2e:c3:19:4c:ac:91:c6:80:fc:d9: 3a:d3:c9:4f:fd:61:76:71:78:fd:77:14:f0:bc:cc:2b:40:f8: 4c:f0:31:f8:17:01:8b:06:c6:66:27:31:c9:b3:e0:90:a3:47: 34:24:d5:6b:6d:9f:10:81:03:0e:9d:66:a7:fe:d8:1d:63:40: a2:a5:e2:d6:0e:69:7d:47:a7:57:23:b3:fa:d5:f5:8f:55:fe: 7b:08:a1:e6:51:51:6f:2a:9c:c8:67:8e:54:dd:20:05:04:09: f6:d0:f9:22:28:97:00:af:57:26:95:fe:02:42:2e:8d:90:09: 40:3b:8c:03:38:c4:5e:2b:17:07:87:33:01:2a:82:8a:fe:b8: 24:8a:33:37:f3:e9:bb:42:4d:73:d4:4c:c9:bc:3c:87:3f:c4: a2:ab:f0:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPAy/Vu1SKjRyjwn93iCoK8ByH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTExMDMxMjA2MzBaFw0yNTExMDYxNDUxMzBaMDMxMTAvBgNV BAMTKDhCMkQwMzMwQkU1MzYyRkJGRTIxQzk0QTIyMkM4MkUzMkFBODEwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/D45O1uVX+zLa8+oCNHNA2rJ FD3hIs665xn/z9RcIs1hgD/Ztw151YChLIHPqMthDELrdjEFJtrQQEuyg+lblZQ/ nU9mLBHPjfB3LsG2krAstBSAlribzfhNneoC6GpdorU1Bc1rcUWsNt68Yvss4g3u YmjEFsZqvKlYVho4p2SEOkwXsdvN3rLwq3dVhImCEsM73kAhYFMaQeDQviXUmjDe YT2jkhwKOYYH8dVnkKWZkQ/aRxrRNN+8uGqzfuWAfwr7byJLpkWba2DM51K8HJMz duLUhJYJXxKAAMk65FETU5VczwHPKWGeNd3I9EeypT7Qe6g6YzcwRikLRA3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiy0DML5TYvv+IclKIiyC4yqoEM4wHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfgdXxmcOuY+Wfse14x0JjSEyAAXKpH1GID yPcW59jCjJIVO1lvr1VDK+vosf7HikBO2vqzdz3QJEFZHdt2bLzimVEM9+G1lQ+A dNc/++4bn1ci4bZR51+cNfhXb/3stXIbLsMZTKyRxoD82TrTyU/9YXZxeP13FPC8 zCtA+EzwMfgXAYsGxmYnMcmz4JCjRzQk1WttnxCBAw6dZqf+2B1jQKKl4tYOaX1H p1cjs/rV9Y9V/nsIoeZRUW8qnMhnjlTdIAUECfbQ+SIolwCvVyaV/gJCLo2QCUA7 jAM4xF4rFweHMwEqgor+uCSKMzfz6btCTXPUTMm8PIc/xKKr8Mk= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:42 2025 by rpki-client