$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: +9vJ9L/AhfW/HkYQcw0dm/KHLsS5OyJqQL0zQ5VVojY= Subject key identifier: EC:E4:F9:2C:79:C0:50:87:A5:C1:EB:BC:E2:2B:7B:1A:26:48:88:FA Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 165206E0903E1C22C057F18B2755D3B600645739 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 051D Signing time: Mon 03 Nov 2025 11:32:10 +0000 Manifest this update: Mon 03 Nov 2025 11:27:10 +0000 Manifest next update: Thu 06 Nov 2025 13:41:10 +0000 Files and hashes: 1: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: ey2LE9GpasuM6GyOSx3KXGRLCu39woEVdwtkWqbG2wQ=) 2: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) 3: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) 4: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:52:06:e0:90:3e:1c:22:c0:57:f1:8b:27:55:d3:b6:00:64:57:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Nov 3 11:27:10 2025 GMT Not After : Nov 6 13:41:10 2025 GMT Subject: CN=ECE4F92C79C05087A5C1EBBCE22B7B1A264888FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:0a:c9:44:94:e6:53:b9:64:4d:c4:26:8c: 01:cf:28:71:16:9c:4e:ac:b1:e0:0e:09:fe:8d:f6: 64:81:87:1b:9e:5a:7c:a3:00:c0:75:7b:ed:dc:8e: b7:73:5d:c7:f1:45:dc:2a:fb:cb:b8:c5:7b:5d:0f: 33:dc:b6:37:4f:f1:b3:aa:6b:9f:24:fb:b1:8d:20: fe:36:e7:47:8e:dc:a7:8e:33:32:db:e4:5a:c3:dd: fd:35:d4:7d:4e:a2:e2:a3:d5:e0:2b:67:51:e1:10: 29:3d:00:4a:b9:7e:ea:27:ab:2a:cd:b8:3e:a4:16: a3:8d:e5:2f:26:a3:71:ea:47:62:d7:74:a7:26:f6: 60:15:20:75:d8:bf:ea:3b:b9:b5:a5:57:a4:1b:5e: 4b:93:53:3e:ae:d5:08:ad:a4:c6:ee:91:03:17:34: 0c:b3:e7:11:48:db:13:f3:b2:b2:a2:40:85:97:e0: 07:db:f1:66:ea:96:d4:e5:69:47:4b:70:34:49:45: 24:17:62:eb:61:67:83:e3:0d:5a:bf:5f:28:ff:fd: c1:8a:7c:ad:0a:bc:7f:20:51:2c:7b:3b:ee:fa:a1: 19:fb:fc:40:6c:ed:7b:dd:71:1d:da:d2:cc:17:eb: 80:d8:7a:d0:ae:99:04:4e:fa:20:69:a9:91:c7:6d: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E4:F9:2C:79:C0:50:87:A5:C1:EB:BC:E2:2B:7B:1A:26:48:88:FA X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:42:9a:a7:c2:e9:13:16:74:7a:06:3e:e9:1d:5b:94:4e:8c: a1:d3:88:75:8a:29:7a:07:0c:7f:49:87:20:53:af:a7:12:35: a7:2f:23:14:ab:99:51:bf:ec:63:cb:cd:a7:94:c0:80:2b:ae: 5e:75:e9:90:87:b3:04:62:aa:17:31:52:08:98:66:ae:5e:9a: 47:ea:9d:f1:75:d5:53:fb:4f:86:14:79:19:14:b6:3c:8c:6c: 80:3b:41:76:ca:db:1a:30:a9:2e:a8:b0:fe:6f:a6:74:54:06: ed:7a:5f:bd:f2:d6:e8:d1:9b:81:e3:8c:aa:1c:7d:af:47:4a: 64:67:32:1f:e6:a8:05:f4:68:41:f5:aa:49:90:a8:88:d0:f1: c2:81:8f:a5:5b:fe:cd:59:19:9e:8d:c3:88:37:fe:a3:91:56: 50:e9:81:ac:68:4d:fa:d3:77:08:39:d5:39:8b:f3:e0:23:8c: 1f:e4:1d:2e:7e:0c:10:8b:fc:d0:1d:6e:99:85:35:fe:44:98: e5:0d:da:7e:3d:da:7d:a9:a9:fe:ec:3f:c1:bf:be:ee:02:c8: 9e:20:a0:7f:f4:cd:b2:04:3d:43:95:a0:01:29:0d:3c:2a:a8: 12:7c:96:42:2d:2b:5d:e6:d6:ce:dc:ca:5a:4b:f1:23:77:a2: 6b:c0:f5:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlIG4JA+HCLAV/GLJ1XTtgBkVzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNTExMDMxMTI3MTBaFw0yNTExMDYxMzQxMTBaMDMxMTAvBgNV BAMTKEVDRTRGOTJDNzlDMDUwODdBNUMxRUJCQ0UyMkI3QjFBMjY0ODg4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVgrJRJTmU7lkTcQmjAHPKHEW nE6sseAOCf6N9mSBhxueWnyjAMB1e+3cjrdzXcfxRdwq+8u4xXtdDzPctjdP8bOq a58k+7GNIP4250eO3KeOMzLb5FrD3f011H1OouKj1eArZ1HhECk9AEq5fuonqyrN uD6kFqON5S8mo3HqR2LXdKcm9mAVIHXYv+o7ubWlV6QbXkuTUz6u1QitpMbukQMX NAyz5xFI2xPzsrKiQIWX4Afb8WbqltTlaUdLcDRJRSQXYuthZ4PjDVq/Xyj//cGK fK0KvH8gUSx7O+76oRn7/EBs7XvdcR3a0swX64DYetCumQRO+iBpqZHHbVyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OT5LHnAUIelweu84it7GiZIiPowHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhCmqfC6RMWdHoGPukdW5ROjKHTiHWKKXoH DH9JhyBTr6cSNacvIxSrmVG/7GPLzaeUwIArrl516ZCHswRiqhcxUgiYZq5emkfq nfF11VP7T4YUeRkUtjyMbIA7QXbK2xowqS6osP5vpnRUBu16X73y1ujRm4HjjKoc fa9HSmRnMh/mqAX0aEH1qkmQqIjQ8cKBj6Vb/s1ZGZ6Nw4g3/qORVlDpgaxoTfrT dwg51TmL8+AjjB/kHS5+DBCL/NAdbpmFNf5EmOUN2n492n2pqf7sP8G/vu4CyJ4g oH/0zbIEPUOVoAEpDTwqqBJ8lkItK13m1s7cylpL8SN3omvA9Wc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:44 2025 by rpki-client