$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft File: 47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft (raw, json) Hash identifier: QCK7adPJwuAB+6Iaa+0XOSjJfJSxiFfFDaaGHLnA3/U= Subject key identifier: DF:36:31:36:5B:E1:77:63:98:83:15:F8:4B:43:60:B7:D1:FA:B2:56 Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Certificate serial: 3824E6F9E64BE3E9624595EA1E400891159E353A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft Manifest number: 0534 Signing time: Sun 02 Nov 2025 21:22:24 +0000 Manifest this update: Sun 02 Nov 2025 21:17:24 +0000 Manifest next update: Wed 05 Nov 2025 22:10:24 +0000 Files and hashes: 1: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (hash: Oy5e7U/30QVlyKxMTN7vJxNvo6wTwC5oIUWauMMWfdo=) 2: 323430333a623230303a3166653a3a2f34382d3438203d3e203233363731.roa (hash: 33YyvmLMqhZHlF7KJWBhAIcrQi1mJNeErJXlgE4dA9I=) 3: 323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (hash: ts0AEf7tiHhCVv2ig8cqn7e5DacXGcYUg0GU/UCUV0c=) 4: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (hash: o4W2Bn3hIO35RbuFmhkTKwAoJsgLCdi8pu7yd1yS3Ms=) 5: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (hash: Q7K6vxdURqUVSTL2QfOJv0VWNAbfREV5qlrBrpZeG6I=) 6: 3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (hash: df0Q+ODl4p6I3yq1hTHdmDcT4TE0771iCXobeoyheBo=) 7: 3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (hash: oro99xPF0g8Z1jg47VoAobJMfgIUYlWHNueiwIHbC6Q=) 8: 3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (hash: lbnWZKH0GPtjWhFyMTf9c/PsNGVPciiwPzsQOX+Yzc8=) 9: 3131312e39322e3137342e302f32332d3234203d3e203233363731.roa (hash: 8ak9Wna4PDMgD/5N0XmaPxXzV+DSrg2LKuSQaDnQR1U=) 10: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (hash: sW9/hG0RWFfw6EKpkp4ujTdk8BVnOXVgNyKBaEt5vdk=) 11: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (hash: jLhZx5mtiEAtxHo0r3n7tiNwdx/V4EFJlvX7pV1BZjQ=) 12: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (hash: Ro4VwJnTaG/NeUG6CyxbPAddbmOcZkAvVjQYjSzO/Mo=) 13: 3131312e39322e3136372e302f32342d3234203d3e203233363731.roa (hash: 4hjY9Fjlzmj94VSsHtzX7aFufDgxxFUYB9x0rBt/afw=) 14: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (hash: hJFdnnFqf4q4VdOkKOAgrkVtfC9wQ0ni99baqMKqYMY=) 15: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (hash: iSE7SlBpYXDTIvrotxnrP3PFTmmB98DokgHfrrkNkRo=) 16: 47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl (hash: u7F7qUV3f1zrcjtTDliDjsMfaasEABHtnZlvjUIGD88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:24:e6:f9:e6:4b:e3:e9:62:45:95:ea:1e:40:08:91:15:9e:35:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Validity Not Before: Nov 2 21:17:24 2025 GMT Not After : Nov 5 22:10:24 2025 GMT Subject: CN=DF3631365BE17763988315F84B4360B7D1FAB256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:57:68:9d:77:f8:06:61:0e:1e:11:2a:4c: 79:0f:72:a8:f2:af:67:9a:06:fb:06:98:ef:fe:d3: 50:58:63:21:5f:b8:46:1a:19:df:46:78:83:d5:cc: d4:19:13:8b:5c:2b:ca:b6:63:17:72:52:30:24:49: 02:a6:88:4f:5d:47:72:4d:01:37:b7:ff:a6:74:29: bf:31:f3:2f:c6:f3:1f:6f:83:15:b6:39:ba:5e:80: ac:72:32:30:e7:bf:58:cf:aa:ef:7a:a7:b9:9c:5d: 1b:e1:fc:1d:c9:12:d5:95:5d:86:23:a6:3a:07:6a: 4c:e4:6c:12:d0:44:ac:2c:83:3e:90:b2:41:25:47: f7:87:28:7d:74:92:7e:16:54:20:86:49:a4:18:db: 5c:dd:74:77:22:85:25:81:5d:cd:84:97:9d:17:16: 79:c6:f1:fe:ac:1a:42:b1:c2:bd:31:d4:ac:86:06: 3c:39:8e:36:a6:28:ab:0b:94:36:49:7e:45:e2:dd: b7:40:84:a4:d1:53:bb:6f:b3:a7:00:8d:8a:76:fe: 57:54:7a:ef:94:37:f3:a7:a7:29:89:ff:c2:46:95: 1c:f3:d7:57:da:24:ce:61:2d:de:8c:a9:0f:b9:ea: ef:42:e0:f8:0d:c2:fe:dd:6a:f7:c4:b7:e5:75:f3: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:31:36:5B:E1:77:63:98:83:15:F8:4B:43:60:B7:D1:FA:B2:56 X509v3 Authority Key Identifier: keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ac:f1:e4:da:da:88:52:5f:15:02:b3:fa:d7:ee:0d:e7:1a: b2:9e:ae:4f:1c:41:df:36:39:01:a9:12:a1:b1:86:bf:99:cf: 37:f3:94:b7:25:f3:74:41:d4:ef:de:aa:35:9d:ee:8a:d1:d4: eb:51:18:10:20:5c:0d:4e:75:73:1f:a4:6d:24:b2:95:e3:bd: b8:0e:51:4c:83:32:c4:ba:97:95:ce:1d:9f:18:2b:d4:54:bd: 3a:39:9a:bd:aa:63:e4:72:6e:3f:d8:36:a6:0e:3f:c4:a3:4d: e9:bd:3e:be:ec:f6:20:83:a9:dc:29:14:ac:1e:71:7d:06:b2: da:4e:9f:61:bc:27:f9:5a:00:f4:31:87:84:c6:67:d9:19:af: ea:b8:a0:9e:28:93:5f:d5:50:55:32:1d:99:fb:09:b7:fa:4b: 30:aa:04:c2:38:6e:64:de:26:90:ef:07:42:d7:f1:ca:24:b3: cc:fe:03:48:49:2d:32:2f:83:02:ac:63:fc:50:cb:00:bb:e5: 21:53:3f:95:b0:dd:12:8a:2b:e9:17:94:67:c8:4f:2d:50:03: 0a:02:f5:d0:d8:59:16:95:1a:ad:0a:69:c4:c3:2f:f2:3d:88: a7:93:62:66:c8:a8:61:49:32:8b:09:4f:7c:1e:00:8b:fd:62: 0e:35:db:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCTm+eZL4+liRZXqHkAIkRWeNTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy MTg4ODY2RjAeFw0yNTExMDIyMTE3MjRaFw0yNTExMDUyMjEwMjRaMDMxMTAvBgNV BAMTKERGMzYzMTM2NUJFMTc3NjM5ODgzMTVGODRCNDM2MEI3RDFGQUIyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgEldonXf4BmEOHhEqTHkPcqjy r2eaBvsGmO/+01BYYyFfuEYaGd9GeIPVzNQZE4tcK8q2YxdyUjAkSQKmiE9dR3JN ATe3/6Z0Kb8x8y/G8x9vgxW2ObpegKxyMjDnv1jPqu96p7mcXRvh/B3JEtWVXYYj pjoHakzkbBLQRKwsgz6QskElR/eHKH10kn4WVCCGSaQY21zddHcihSWBXc2El50X FnnG8f6sGkKxwr0x1KyGBjw5jjamKKsLlDZJfkXi3bdAhKTRU7tvs6cAjYp2/ldU eu+UN/OnpymJ/8JGlRzz11faJM5hLd6MqQ+56u9C4PgNwv7davfEt+V18wX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3zYxNlvhd2OYgxX4S0Ngt9H6slYwHwYDVR0j BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4 ODY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ5YmE5NTMtODQ4OS00NTBlLWJi ZGYtNzY0NTcxZmJhY2U3LzAvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcx QjEyMTg4ODY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACas8eTa2ohSXxUCs/rX7g3nGrKerk8cQd82 OQGpEqGxhr+ZzzfzlLcl83RB1O/eqjWd7orR1OtRGBAgXA1OdXMfpG0kspXjvbgO UUyDMsS6l5XOHZ8YK9RUvTo5mr2qY+Rybj/YNqYOP8SjTem9Pr7s9iCDqdwpFKwe cX0GstpOn2G8J/laAPQxh4TGZ9kZr+q4oJ4ok1/VUFUyHZn7Cbf6SzCqBMI4bmTe JpDvB0LX8coks8z+A0hJLTIvgwKsY/xQywC75SFTP5Ww3RKKK+kXlGfITy1QAwoC 9dDYWRaVGq0KacTDL/I9iKeTYmbIqGFJMosJT3weAIv9Yg41270= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:07 2025 by rpki-client