$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft File: 47CBAD1A648715C5E867F1A2ED3558688608EE19.mft (raw, json) Hash identifier: or5E5cZKVyFQtnfmi6T4ISll/MENg0A0YdjRuPYG48E= Subject key identifier: A4:32:05:03:DA:B4:F5:48:A9:30:32:78:D7:E6:73:09:4A:BE:7C:67 Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Certificate serial: 5D5F39D825D2F5272AD14805784C1F4A59557E5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft Manifest number: 0180 Signing time: Tue 04 Nov 2025 08:31:10 +0000 Manifest this update: Tue 04 Nov 2025 08:26:10 +0000 Manifest next update: Fri 07 Nov 2025 08:39:10 +0000 Files and hashes: 1: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: 1a16GMwOcOCsjYtXlZLoq81/WntEbXylQSYsmM31kuc=) 2: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: zg3C7UqiFNjk6v4cmaqyG4vvOgQ3amedsyfg+VEOO70=) 3: 47CBAD1A648715C5E867F1A2ED3558688608EE19.crl (hash: jU0JT/tEyc9Rh/v09vER8/chEj7RepeYn4nsa1AsiSM=) 4: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: +ck2E10dFd5/OEf+e40wX7Ntpp2HW/ZWwaXbGUuqd1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5f:39:d8:25:d2:f5:27:2a:d1:48:05:78:4c:1f:4a:59:55:7e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Validity Not Before: Nov 4 08:26:10 2025 GMT Not After : Nov 7 08:39:10 2025 GMT Subject: CN=A4320503DAB4F548A9303278D7E673094ABE7C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:d4:fd:9d:4f:c1:e9:e4:10:97:3e:2c:eb: 84:a0:11:cb:6b:e2:50:9c:b2:c0:f0:09:b2:53:60: 7f:19:72:2a:25:7e:c2:93:fc:06:2c:27:43:11:20: 72:92:b6:42:1d:a7:cf:61:93:27:1d:46:cc:aa:97: ea:28:3d:30:53:17:5e:78:03:32:38:1a:50:e1:89: 6b:eb:43:b0:bd:5e:00:73:e5:98:8e:25:95:78:aa: e6:3b:0e:2a:3f:19:9d:75:6d:37:ed:d7:3c:16:af: 9a:f2:3c:f5:9c:7c:a1:fb:6d:0f:96:1d:64:54:d3: b9:41:4f:c3:3e:65:8d:bb:64:93:89:29:10:58:ed: 17:3d:be:9d:7d:09:a3:e6:21:f6:f4:d7:f3:89:9e: ed:55:bd:42:e4:eb:ee:e4:49:68:f4:28:ef:02:d3: 1a:3e:b6:0d:3e:f5:b1:03:06:8a:82:e8:41:b5:7e: 8d:fb:0d:80:95:bc:26:d0:7f:ec:32:cf:67:0a:a5: 60:db:23:05:9d:0e:0f:81:ed:09:7a:d0:f3:a0:18: 34:d0:ba:8c:61:21:2d:13:22:5b:38:8e:86:f6:6d: 25:c4:81:52:c7:80:3f:41:b0:b9:c3:46:78:98:ce: 63:a9:9f:b8:c4:0f:c3:38:5f:62:27:b6:52:ea:c3: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:32:05:03:DA:B4:F5:48:A9:30:32:78:D7:E6:73:09:4A:BE:7C:67 X509v3 Authority Key Identifier: keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:54:5c:b6:e8:44:01:ff:23:ed:3b:e4:3a:e8:ea:b5:d4:f0: 48:cf:45:c6:d2:fd:f2:28:3d:79:96:f6:aa:aa:6b:6f:9d:76: 76:11:5c:96:e3:74:ae:fd:e6:1c:42:04:1f:c7:a9:9d:f3:32: e7:a4:2b:b7:d0:a9:ea:5f:29:f2:4e:30:6e:a0:a5:d5:0f:bd: e0:ff:7b:78:50:48:01:4e:b1:3d:1e:9c:46:23:e1:8e:7c:78: 19:76:31:ed:4b:7c:d6:aa:76:01:43:52:f9:3e:80:68:5f:d2: 0b:4d:74:40:aa:ad:79:ab:46:c0:46:8d:e9:53:e5:d7:ff:dd: 54:c1:e5:a4:ad:7f:5a:33:03:0a:5a:a1:4d:48:d4:cb:5e:16: 89:db:bc:b1:37:40:82:c0:76:5c:ca:57:7d:c7:18:12:e1:66: 73:b3:f9:f6:dc:2b:16:3b:f7:7a:9e:df:ec:6d:66:83:4c:a1: 8d:95:5b:8b:59:d1:65:9d:68:a9:d7:6f:2d:4a:8b:67:bc:91: 14:c7:56:39:3b:c3:19:4a:c3:89:9b:8c:d8:c7:eb:91:bc:a1: dc:3a:d4:64:e5:e1:dd:e7:2e:67:ae:9c:7c:a8:c7:3f:f4:dd: e9:c4:ab:09:51:26:e6:49:1a:cf:62:60:a9:48:ff:df:9a:d7: 72:6b:93:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXV852CXS9Scq0UgFeEwfSllVflswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4 NjA4RUUxOTAeFw0yNTExMDQwODI2MTBaFw0yNTExMDcwODM5MTBaMDMxMTAvBgNV BAMTKEE0MzIwNTAzREFCNEY1NDhBOTMwMzI3OEQ3RTY3MzA5NEFCRTdDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RNT9nU/B6eQQlz4s64SgEctr 4lCcssDwCbJTYH8ZciolfsKT/AYsJ0MRIHKStkIdp89hkycdRsyql+ooPTBTF154 AzI4GlDhiWvrQ7C9XgBz5ZiOJZV4quY7Dio/GZ11bTft1zwWr5ryPPWcfKH7bQ+W HWRU07lBT8M+ZY27ZJOJKRBY7Rc9vp19CaPmIfb01/OJnu1VvULk6+7kSWj0KO8C 0xo+tg0+9bEDBoqC6EG1fo37DYCVvCbQf+wyz2cKpWDbIwWdDg+B7Ql60POgGDTQ uoxhIS0TIls4job2bSXEgVLHgD9BsLnDRniYzmOpn7jED8M4X2IntlLqw+vzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDIFA9q09UipMDJ41+ZzCUq+fGcwHwYDVR0j BBgwFoAUR8utGmSHFcXoZ/Gi7TVYaIYI7hkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDk1NjUwNS1kNmIzLTQzZGMtOTA3MC1kNGRiZGI3Y2Y5NjMvMC80N0NCQUQxQTY0 ODcxNUM1RTg2N0YxQTJFRDM1NTg2ODg2MDhFRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4NjA4 RUUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ5NTY1MDUtZDZiMy00M2RjLTkw NzAtZDRkYmRiN2NmOTYzLzAvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4 Njg4NjA4RUUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBUXLboRAH/I+075Dro6rXU8EjPRcbS/fIo PXmW9qqqa2+ddnYRXJbjdK795hxCBB/HqZ3zMuekK7fQqepfKfJOMG6gpdUPveD/ e3hQSAFOsT0enEYj4Y58eBl2Me1LfNaqdgFDUvk+gGhf0gtNdECqrXmrRsBGjelT 5df/3VTB5aStf1ozAwpaoU1I1MteFonbvLE3QILAdlzKV33HGBLhZnOz+fbcKxY7 93qe3+xtZoNMoY2VW4tZ0WWdaKnXby1Ki2e8kRTHVjk7wxlKw4mbjNjH65G8odw6 1GTl4d3nLmeunHyoxz/03enEqwlRJuZJGs9iYKlI/9+a13Jrk8k= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:43 2025 by rpki-client