$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: cUKF5XBd/StdMYneXMGkXilPo9tHaHZHpSEvY112LFk= Subject key identifier: 35:C6:A1:76:57:E5:9D:65:F8:42:EB:34:28:A4:EE:AA:9C:BB:29:83 Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 7F589C13130C5BBE2395A2D81DBD5A600EA1E24C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 0254 Signing time: Sat 18 Oct 2025 13:13:42 +0000 Manifest this update: Sat 18 Oct 2025 13:08:42 +0000 Manifest next update: Tue 21 Oct 2025 21:35:42 +0000 Files and hashes: 1: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: Fp/8UnawhM2NuX7rV7CkvyBDfW79/QkTvgsmF36JIIM=) 2: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: ZoCcekYbdPtZF1d0wHmqp26jbbPlMBnCSh/Sj6Wzh/Y=) 3: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: MieROalwE/fB127Dk3xdzAYuGXCkhJHq65WAQmDl2tQ=) 4: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: 8yPBJ8nwHdJsp/MTpbUm4s5LYlWFkhJnb1tcxlos5EM=) 5: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: ETpw0a+aN27La/w8z8t2+Ujt+M7eqg9mv9UITCWqsgM=) 6: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: HvrDpYE/J5atwLV8aNk1LyzF9yjb46bY62W/GVeHaaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:58:9c:13:13:0c:5b:be:23:95:a2:d8:1d:bd:5a:60:0e:a1:e2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Oct 18 13:08:42 2025 GMT Not After : Oct 21 21:35:42 2025 GMT Subject: CN=35C6A17657E59D65F842EB3428A4EEAA9CBB2983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:1f:f8:15:41:09:fe:c5:16:0f:9e:e6:73: f6:7f:b2:48:de:10:4d:f4:0e:a5:c7:65:89:63:d2: e5:12:20:7a:ae:c9:a0:80:1e:a7:a5:57:2c:09:8f: 33:1c:43:ea:e4:37:98:51:b3:5b:bc:8c:9c:fc:e2: 72:68:2f:56:b1:fb:a6:0c:ec:3f:7c:53:b9:d7:9a: c8:58:e0:eb:c5:84:5c:3b:4e:fa:e4:8b:9f:55:83: 8c:bb:e5:95:8c:08:05:d3:26:d1:a6:df:a3:23:b1: 53:da:b2:7d:90:67:99:37:b1:9e:8d:21:56:fe:5e: 1c:9a:cb:df:3a:68:06:26:c5:74:4c:ee:b5:7e:e0: 8a:81:20:ad:4a:af:ff:ec:36:71:2d:b1:3b:7b:5a: 0d:1a:0a:d5:c3:6a:72:2c:2b:f5:17:4f:b6:be:a3: bc:1f:7a:10:17:4f:6c:08:99:38:70:3f:ba:10:fd: 31:7d:9c:d0:8b:a3:82:81:5f:0b:4a:0c:a0:b8:a6: d1:e7:da:af:37:c4:9a:58:c3:4a:fe:1a:d5:49:29: ad:98:87:99:70:83:5f:6b:38:ff:62:8c:50:fa:0a: f4:0a:6a:3a:f6:d4:49:f8:cc:9b:0f:92:f4:55:2b: 6a:51:bf:f1:6a:7e:05:54:a2:b6:45:b5:4c:6b:b7: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C6:A1:76:57:E5:9D:65:F8:42:EB:34:28:A4:EE:AA:9C:BB:29:83 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:26:a9:7c:ec:a9:50:31:28:56:61:12:98:5c:ff:96:ec:63: a0:10:72:7b:5f:ba:e5:10:aa:5f:98:5c:7d:a7:a4:ed:3b:4c: 2c:67:27:05:d1:db:96:e1:e7:7c:ca:dd:70:a0:65:cb:5e:7e: 55:f2:33:e1:ae:1b:d5:28:4b:bc:2f:48:ed:a3:30:8a:54:e6: af:50:f7:6c:8d:6e:fc:46:95:ed:f2:b1:4e:8f:c0:f2:2b:44: 3e:bf:31:ac:57:e0:97:da:8c:07:81:e7:3d:56:2a:0b:22:1f: 5b:4b:98:c1:89:0e:58:3b:11:09:85:e4:2f:97:9b:eb:d7:a8: 00:a8:b6:bb:ee:78:8f:56:14:df:be:ec:a6:9f:96:9b:87:73: 62:1b:7b:4a:3d:c8:4c:01:b9:b1:e4:16:2c:7b:4d:2a:00:d5: 29:2c:87:0d:99:82:36:b5:d1:73:fc:4d:4a:8c:f2:3b:46:de: 9b:6a:fd:28:d6:15:bb:0b:01:d1:19:b6:38:7a:b9:69:8f:19: 10:30:b5:db:d4:5e:65:b1:48:10:ac:75:8b:43:79:b4:32:c9: f9:0b:14:09:9d:a3:5e:ee:47:cc:5e:ef:7c:8b:52:8c:66:dd: c6:c8:be:2c:9e:7f:7c:8e:31:cf:94:65:e4:bf:7c:09:75:50: db:f5:61:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1icExMMW74jlaLYHb1aYA6h4kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNTEwMTgxMzA4NDJaFw0yNTEwMjEyMTM1NDJaMDMxMTAvBgNV BAMTKDM1QzZBMTc2NTdFNTlENjVGODQyRUIzNDI4QTRFRUFBOUNCQjI5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbx/4FUEJ/sUWD57mc/Z/skje EE30DqXHZYlj0uUSIHquyaCAHqelVywJjzMcQ+rkN5hRs1u8jJz84nJoL1ax+6YM 7D98U7nXmshY4OvFhFw7Tvrki59Vg4y75ZWMCAXTJtGm36MjsVPasn2QZ5k3sZ6N IVb+Xhyay986aAYmxXRM7rV+4IqBIK1Kr//sNnEtsTt7Wg0aCtXDanIsK/UXT7a+ o7wfehAXT2wImThwP7oQ/TF9nNCLo4KBXwtKDKC4ptHn2q83xJpYw0r+GtVJKa2Y h5lwg19rOP9ijFD6CvQKajr21En4zJsPkvRVK2pRv/FqfgVUorZFtUxrtzSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNcahdlflnWX4Qus0KKTuqpy7KYMwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQmqXzsqVAxKFZhEphc/5bsY6AQcntfuuUQ ql+YXH2npO07TCxnJwXR25bh53zK3XCgZcteflXyM+GuG9UoS7wvSO2jMIpU5q9Q 92yNbvxGle3ysU6PwPIrRD6/MaxX4JfajAeB5z1WKgsiH1tLmMGJDlg7EQmF5C+X m+vXqACotrvueI9WFN++7KaflpuHc2Ibe0o9yEwBubHkFix7TSoA1Skshw2Zgja1 0XP8TUqM8jtG3ptq/SjWFbsLAdEZtjh6uWmPGRAwtdvUXmWxSBCsdYtDebQyyfkL FAmdo17uR8xe73yLUoxm3cbIviyef3yOMc+UZeS/fAl1UNv1Yas= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:24 2025 by rpki-client