$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft (raw, json) Hash identifier: 1APmgBGX1qOi7GbOpZdBSHYr2nIOPFkxKNJdBjjYnhc= Subject key identifier: 26:A3:C9:3F:EC:CD:98:76:DE:73:58:E2:74:FB:FB:CC:01:4C:01:28 Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 2825B321123BFAF7B932CC04F1C0BDA3992723C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft Manifest number: E0 Signing time: Mon 03 Nov 2025 16:01:22 +0000 Manifest this update: Mon 03 Nov 2025 15:56:22 +0000 Manifest next update: Thu 06 Nov 2025 16:45:22 +0000 Files and hashes: 1: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: t+CPpE2TC/5JImEcRiXdAKKegyxY7qwMPfKY4AYQh6I=) 2: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl (hash: VOcWi9evTVJtQ/p/cH32wEmWDEcXZItw+s7YATYJa2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:25:b3:21:12:3b:fa:f7:b9:32:cc:04:f1:c0:bd:a3:99:27:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Nov 3 15:56:22 2025 GMT Not After : Nov 6 16:45:22 2025 GMT Subject: CN=26A3C93FECCD9876DE7358E274FBFBCC014C0128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:31:23:b0:04:55:ec:59:92:04:23:0a:e1: 7f:a6:2a:9e:dc:d1:de:25:f8:7f:a0:c6:93:f1:01: e2:67:62:33:78:39:27:ac:14:cd:1c:44:e3:ef:c8: d3:87:5c:e5:b6:26:c3:30:57:85:24:33:1e:cc:c0: b9:8d:6e:80:89:4a:58:f3:78:ee:a2:d0:fb:36:15: 97:30:03:7b:4f:5b:3a:69:a7:b1:7f:2f:b0:e6:4d: ff:ea:70:d2:c2:06:63:7e:dc:24:31:77:ea:03:11: ee:d5:4b:34:b9:31:62:9a:d3:fb:58:28:06:f5:20: 39:73:b3:89:fd:96:2e:9f:3d:01:b7:0a:fd:f3:ba: 8c:72:ad:1d:06:ef:65:c2:4d:b8:8d:ee:3b:a4:0c: ab:bd:e1:f3:b5:01:0f:21:40:b8:de:59:10:34:4f: ac:1b:93:fc:37:8f:77:34:c8:95:4f:1d:35:3e:8c: 54:40:19:6c:32:79:d0:49:dc:85:87:19:19:fe:d4: 4f:f7:ef:c4:2b:07:45:25:fe:49:07:41:0a:8e:e7: 79:43:e5:cb:19:63:43:e8:00:39:1f:1a:0e:59:35: 10:91:46:d1:73:24:b6:75:14:0c:82:b7:f9:5f:07: 7d:04:07:ba:08:02:91:ed:7c:fe:f1:8f:e0:ec:ed: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A3:C9:3F:EC:CD:98:76:DE:73:58:E2:74:FB:FB:CC:01:4C:01:28 X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1f:5c:6f:63:ea:06:f2:6c:8d:f3:7a:6b:db:48:af:91:cc: bf:ca:6e:d6:25:7c:73:43:38:e6:59:d5:53:02:d2:51:1d:65: 04:9d:de:e4:0c:4a:c4:12:04:e5:c9:07:d2:5d:8d:cf:17:3b: fa:71:27:e5:81:03:9f:09:a3:64:fa:3e:ee:67:b5:5a:38:56: b1:14:d6:e9:d0:a4:75:c2:cb:12:bf:f9:b1:32:29:a0:15:8e: 70:53:c3:7a:6f:1e:33:2c:57:32:a1:99:31:ae:e3:8d:33:be: a3:68:7b:da:dc:f3:80:37:4c:89:51:67:d5:27:fc:70:23:38: 23:47:b3:2d:74:14:de:03:5f:ca:9f:e6:30:b4:dc:aa:4f:e4: 65:ba:c1:0a:a3:c3:a7:bf:d8:2e:b3:49:59:82:0b:fa:33:de: 3d:f9:89:9f:f0:07:d3:38:10:73:fa:3a:3b:eb:d3:b7:66:96: 7b:1f:14:93:64:1c:83:90:4c:c3:c3:2d:ba:ea:47:7a:02:ea: e9:1d:16:80:a7:f8:cd:9e:21:0d:16:9f:bc:7d:01:02:d1:7b: 97:6e:fb:0e:33:22:48:03:38:93:e1:d1:76:f6:e5:54:8c:8d: 71:4d:c4:21:4e:6e:1b:35:f1:26:1d:db:48:56:cb:03:05:17: 27:32:a7:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCWzIRI7+ve5MswE8cC9o5knI8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNTExMDMxNTU2MjJaFw0yNTExMDYxNjQ1MjJaMDMxMTAvBgNV BAMTKDI2QTNDOTNGRUNDRDk4NzZERTczNThFMjc0RkJGQkNDMDE0QzAxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogDEjsARV7FmSBCMK4X+mKp7c 0d4l+H+gxpPxAeJnYjN4OSesFM0cROPvyNOHXOW2JsMwV4UkMx7MwLmNboCJSljz eO6i0Ps2FZcwA3tPWzppp7F/L7DmTf/qcNLCBmN+3CQxd+oDEe7VSzS5MWKa0/tY KAb1IDlzs4n9li6fPQG3Cv3zuoxyrR0G72XCTbiN7jukDKu94fO1AQ8hQLjeWRA0 T6wbk/w3j3c0yJVPHTU+jFRAGWwyedBJ3IWHGRn+1E/378QrB0Ul/kkHQQqO53lD 5csZY0PoADkfGg5ZNRCRRtFzJLZ1FAyCt/lfB30EB7oIApHtfP7xj+Ds7SCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJqPJP+zNmHbec1jidPv7zAFMASgwHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZE OThDQTQyNzk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEfXG9j6gbybI3zemvbSK+RzL/KbtYlfHND OOZZ1VMC0lEdZQSd3uQMSsQSBOXJB9Jdjc8XO/pxJ+WBA58Jo2T6Pu5ntVo4VrEU 1unQpHXCyxK/+bEyKaAVjnBTw3pvHjMsVzKhmTGu440zvqNoe9rc84A3TIlRZ9Un /HAjOCNHsy10FN4DX8qf5jC03KpP5GW6wQqjw6e/2C6zSVmCC/oz3j35iZ/wB9M4 EHP6Ojvr07dmlnsfFJNkHIOQTMPDLbrqR3oC6ukdFoCn+M2eIQ0Wn7x9AQLRe5du +w4zIkgDOJPh0Xb25VSMjXFNxCFObhs18SYd20hWywMFFycyp2g= -----END CERTIFICATE-----Generated at Wed Nov 5 06:05:20 2025 by rpki-client