$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: wo0RcDR8C9AnQbxDcF99PXLuDzu8mfyJh/Ff8SkqkzM= Subject key identifier: D7:09:AB:53:D3:55:D2:B3:A9:BB:0B:00:5D:B6:68:16:65:FC:5E:C8 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 4007F10CDFC3310016EC150C318F1B258F8F10EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 04DC Signing time: Sun 02 Nov 2025 09:31:00 +0000 Manifest this update: Sun 02 Nov 2025 09:26:00 +0000 Manifest next update: Wed 05 Nov 2025 12:45:00 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: chKAteQBjPFqhk4geAZ3hYAUBwJuxyQlgFNpUP4/euM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:07:f1:0c:df:c3:31:00:16:ec:15:0c:31:8f:1b:25:8f:8f:10:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Nov 2 09:26:00 2025 GMT Not After : Nov 5 12:45:00 2025 GMT Subject: CN=D709AB53D355D2B3A9BB0B005DB6681665FC5EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:59:b1:23:50:77:45:c3:5e:f9:66:d4:c1: 34:c6:9f:c4:26:3b:a5:fb:3b:a9:e6:1d:20:ec:f4: c6:76:cc:2d:1a:d6:fd:f9:5f:cf:66:2f:be:b0:5c: 71:a9:44:4f:f3:6e:24:55:96:e5:4b:e1:79:31:d7: 3e:a7:a2:2a:73:fa:4f:ed:e4:95:11:26:e0:58:79: 5c:08:17:b8:62:9e:98:be:08:ee:67:f7:44:a0:a9: 77:3e:f3:e8:15:30:50:ae:d6:1b:1d:0f:0f:e4:9a: 4c:4c:6b:c2:7c:06:00:c9:a5:45:16:da:eb:c5:1a: 13:8b:bb:81:e5:5c:26:cc:3f:07:35:82:f8:08:84: 6b:0c:f2:43:07:3c:fa:41:f6:1c:fa:31:2b:8b:d7: 09:7e:b1:f1:b2:7e:d3:08:75:24:dc:be:1a:b2:bb: 15:04:a3:15:8d:d0:c0:87:39:bd:90:ab:2b:12:af: 6d:b5:ba:df:87:a2:a1:ba:18:50:3c:bc:9b:dc:1d: b0:05:f4:0b:90:07:3b:c7:5e:6b:5b:ce:5d:9a:cc: 9d:37:a8:c9:1c:c3:f2:2f:9a:50:b5:e0:d4:25:c9: 95:bb:0f:9e:bf:64:ec:47:d8:f9:a4:70:c6:29:76: 6f:ab:d6:9a:e2:00:3f:f2:36:b4:65:9c:2d:86:52: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:AB:53:D3:55:D2:B3:A9:BB:0B:00:5D:B6:68:16:65:FC:5E:C8 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:30:b5:da:6b:b9:68:d8:bf:1c:95:f1:8f:d4:ff:9b:57:4f: 15:9d:0c:28:bc:8c:35:a6:90:c9:cc:4a:93:38:5f:da:2c:b4: 65:ee:fe:06:db:81:4f:2e:d6:d3:40:f5:de:49:cd:af:39:43: 61:a8:8f:6d:f8:cf:2d:b1:88:b6:ae:fb:f6:9f:f6:dc:05:ed: 29:97:d8:f9:e7:71:59:4b:36:99:44:e1:82:02:49:78:10:fe: 55:36:72:15:a2:8c:ba:12:70:4b:10:06:c1:92:cb:75:13:dd: a9:c9:6d:69:b2:f6:e3:ee:9a:7e:18:d6:8b:a4:f1:62:15:d5: 5e:d9:eb:0c:76:3e:3e:e6:b7:69:4f:59:df:57:54:74:b7:a3: 30:ad:84:4e:29:4a:db:d7:f2:c0:93:64:2b:73:ca:39:18:43: 8f:a0:e7:35:fb:5e:ec:c3:5a:72:a4:e3:80:d8:33:28:51:e1: 2e:55:b6:20:49:d9:7e:dd:0c:aa:9d:32:4e:fd:a0:06:6f:0d: c1:2c:4f:5f:0f:6f:e0:ee:89:57:25:38:6e:a8:64:ec:de:51: 92:5b:52:13:dd:b7:0f:14:d9:71:16:05:76:29:9c:65:02:86: f0:bd:da:09:7d:ea:23:4f:8d:24:c0:06:b4:04:c1:36:f5:ff: cd:b2:3b:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAfxDN/DMQAW7BUMMY8bJY+PEOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTExMDIwOTI2MDBaFw0yNTExMDUxMjQ1MDBaMDMxMTAvBgNV BAMTKEQ3MDlBQjUzRDM1NUQyQjNBOUJCMEIwMDVEQjY2ODE2NjVGQzVFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC691mxI1B3RcNe+WbUwTTGn8Qm O6X7O6nmHSDs9MZ2zC0a1v35X89mL76wXHGpRE/zbiRVluVL4Xkx1z6noipz+k/t 5JURJuBYeVwIF7hinpi+CO5n90SgqXc+8+gVMFCu1hsdDw/kmkxMa8J8BgDJpUUW 2uvFGhOLu4HlXCbMPwc1gvgIhGsM8kMHPPpB9hz6MSuL1wl+sfGyftMIdSTcvhqy uxUEoxWN0MCHOb2QqysSr221ut+HoqG6GFA8vJvcHbAF9AuQBzvHXmtbzl2azJ03 qMkcw/IvmlC14NQlyZW7D56/ZOxH2PmkcMYpdm+r1priAD/yNrRlnC2GUjInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wmrU9NV0rOpuwsAXbZoFmX8XsgwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANgwtdpruWjYvxyV8Y/U/5tXTxWdDCi8jDWm kMnMSpM4X9ostGXu/gbbgU8u1tNA9d5Jza85Q2Goj234zy2xiLau+/af9twF7SmX 2PnncVlLNplE4YICSXgQ/lU2chWijLoScEsQBsGSy3UT3anJbWmy9uPumn4Y1ouk 8WIV1V7Z6wx2Pj7mt2lPWd9XVHS3ozCthE4pStvX8sCTZCtzyjkYQ4+g5zX7XuzD WnKk44DYMyhR4S5VtiBJ2X7dDKqdMk79oAZvDcEsT18Pb+DuiVclOG6oZOzeUZJb UhPdtw8U2XEWBXYpnGUChvC92gl96iNPjSTABrQEwTb1/82yO+c= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:29 2025 by rpki-client