$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: m4GZwUX1vXuarkXmtNm18Wm1n7UzIgPYAh/kKLFPmlc= Subject key identifier: A9:4C:5D:26:A4:8B:05:DC:59:56:CB:80:6B:C9:0A:D0:FD:E2:FC:54 Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 6B8C037E4770B5AFE9A21CE1FDD4D40F806C5325 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 01FE Signing time: Tue 04 Nov 2025 11:20:55 +0000 Manifest this update: Tue 04 Nov 2025 11:15:55 +0000 Manifest next update: Fri 07 Nov 2025 17:33:55 +0000 Files and hashes: 1: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: gh1GRjjqoV15CR4amEOXJN+4PKdMtXPTf3xU5RK5tk0=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: YpgQnQU5lvkeRKFK74g+rncTHe8QCPlhwaAIMSjOHQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8c:03:7e:47:70:b5:af:e9:a2:1c:e1:fd:d4:d4:0f:80:6c:53:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Nov 4 11:15:55 2025 GMT Not After : Nov 7 17:33:55 2025 GMT Subject: CN=A94C5D26A48B05DC5956CB806BC90AD0FDE2FC54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:9e:f8:ae:b7:70:dc:1e:79:43:7f:a1:09: 42:08:0c:f1:c8:e2:7a:02:d8:42:e8:a2:0c:66:d6: 18:46:f3:a7:9a:cb:6a:de:67:1c:69:aa:23:43:34: 9d:86:06:e6:59:61:31:e8:b2:6a:f3:3e:80:0e:50: cf:45:1b:eb:e7:ca:67:43:dd:fb:07:6c:a5:0a:4c: aa:9e:42:31:a3:76:21:24:88:95:d8:17:e3:05:8a: 7e:52:f7:48:83:69:f4:52:7d:3b:47:f2:27:a1:61: fd:10:64:45:ac:bd:43:a3:96:67:c0:da:45:c4:4e: 8c:38:00:e7:e5:f4:f5:22:e7:04:ab:bb:7f:8a:ee: 5f:8b:4b:7a:17:c9:6b:6d:b4:88:cf:58:b7:a8:14: 91:f3:5b:3c:e7:aa:2b:cc:0a:8b:1f:df:83:aa:20: f5:94:e7:98:0c:4d:e9:45:76:ed:4a:bc:3f:7c:12: 80:21:93:0a:17:f4:2f:0d:bd:16:02:b5:48:76:70: c7:fc:19:8f:3a:81:c3:cf:2d:c9:51:fa:42:68:9d: 82:f0:5a:dc:87:13:06:e0:22:54:0d:e6:21:21:0b: 12:37:e2:4d:67:b4:db:dd:19:b6:98:7d:60:d0:3e: f0:a1:25:42:45:85:db:8c:57:5a:4f:6f:28:73:1c: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4C:5D:26:A4:8B:05:DC:59:56:CB:80:6B:C9:0A:D0:FD:E2:FC:54 X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:eb:e0:52:79:93:c8:17:d7:59:e7:9c:1c:21:30:34:c2:da: 80:d6:61:8f:e1:f1:cd:0a:82:f7:54:cf:2c:7b:c7:5a:ae:36: 7b:aa:cf:99:07:f1:05:be:0a:ed:8b:02:da:0d:80:c1:3c:3c: 44:8e:b5:ee:4d:c5:7f:b1:be:51:06:ba:f9:18:8e:1b:2c:f8: f4:2d:12:a1:e4:1a:ad:10:00:91:96:35:90:f8:ad:97:10:f7: f6:c3:db:98:5f:bf:65:94:28:e9:95:b5:f3:36:7b:6b:1a:45: d7:6a:5f:95:b5:1a:94:01:21:37:37:43:77:4e:f2:2d:1b:7b: 11:7e:0b:b0:d9:8e:bd:eb:2e:eb:39:c5:0d:41:c0:6f:40:6e: bc:27:e6:fe:d1:c7:12:4e:52:77:1d:69:3e:8d:c1:f3:3b:ea: 30:14:7a:33:a1:74:2a:6e:ea:8d:18:3c:2d:bc:40:47:98:0a: 29:15:09:9e:7e:c9:74:91:f1:66:b8:dc:c1:2b:0e:4b:d4:f9: 8d:4d:c7:1a:b4:91:9d:1d:3a:58:5c:3d:a4:94:44:24:34:2e: 38:34:e4:ec:c4:4e:38:b4:86:a4:08:8e:71:8d:cb:c4:06:18: be:4d:86:d3:ee:41:50:9a:36:cc:5c:4b:28:5c:05:8d:f9:d6: fa:bd:c3:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa4wDfkdwta/pohzh/dTUD4BsUyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNTExMDQxMTE1NTVaFw0yNTExMDcxNzMzNTVaMDMxMTAvBgNV BAMTKEE5NEM1RDI2QTQ4QjA1REM1OTU2Q0I4MDZCQzkwQUQwRkRFMkZDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wJ74rrdw3B55Q3+hCUIIDPHI 4noC2ELoogxm1hhG86eay2reZxxpqiNDNJ2GBuZZYTHosmrzPoAOUM9FG+vnymdD 3fsHbKUKTKqeQjGjdiEkiJXYF+MFin5S90iDafRSfTtH8iehYf0QZEWsvUOjlmfA 2kXETow4AOfl9PUi5wSru3+K7l+LS3oXyWtttIjPWLeoFJHzWzznqivMCosf34Oq IPWU55gMTelFdu1KvD98EoAhkwoX9C8NvRYCtUh2cMf8GY86gcPPLclR+kJonYLw WtyHEwbgIlQN5iEhCxI34k1ntNvdGbaYfWDQPvChJUJFhduMV1pPbyhzHB1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqUxdJqSLBdxZVsuAa8kK0P3i/FQwHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHr4FJ5k8gX11nnnBwhMDTC2oDWYY/h8c0K gvdUzyx7x1quNnuqz5kH8QW+Cu2LAtoNgME8PESOte5NxX+xvlEGuvkYjhss+PQt EqHkGq0QAJGWNZD4rZcQ9/bD25hfv2WUKOmVtfM2e2saRddqX5W1GpQBITc3Q3dO 8i0bexF+C7DZjr3rLus5xQ1BwG9Abrwn5v7RxxJOUncdaT6NwfM76jAUejOhdCpu 6o0YPC28QEeYCikVCZ5+yXSR8Wa43MErDkvU+Y1Nxxq0kZ0dOlhcPaSURCQ0Ljg0 5OzETji0hqQIjnGNy8QGGL5NhtPuQVCaNsxcSyhcBY351vq9w0Q= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:18 2025 by rpki-client