$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: qMSpC4hge+1T4JTJhF3Yd0ToR+2QJqeg0961hDHj1Zo= Subject key identifier: A4:66:CC:D1:C3:3D:A3:20:B3:DB:2E:32:6A:A1:D9:30:40:FD:C9:03 Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 710F1BF298E6848CB908FB86908F651DC9344350 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 023A Signing time: Fri 22 Aug 2025 01:12:10 +0000 Manifest this update: Fri 22 Aug 2025 01:07:10 +0000 Manifest next update: Mon 25 Aug 2025 01:38:10 +0000 Files and hashes: 1: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: HvrDpYE/J5atwLV8aNk1LyzF9yjb46bY62W/GVeHaaA=) 2: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: MieROalwE/fB127Dk3xdzAYuGXCkhJHq65WAQmDl2tQ=) 3: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: ETpw0a+aN27La/w8z8t2+Ujt+M7eqg9mv9UITCWqsgM=) 4: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: FsQBYjfLZyjpocmK6Y8WzOXuw2qYQR7LbAy1qpU71Iw=) 5: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: ZoCcekYbdPtZF1d0wHmqp26jbbPlMBnCSh/Sj6Wzh/Y=) 6: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: Fp/8UnawhM2NuX7rV7CkvyBDfW79/QkTvgsmF36JIIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0f:1b:f2:98:e6:84:8c:b9:08:fb:86:90:8f:65:1d:c9:34:43:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Aug 22 01:07:10 2025 GMT Not After : Aug 25 01:38:10 2025 GMT Subject: CN=A466CCD1C33DA320B3DB2E326AA1D93040FDC903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:3f:66:a2:65:16:21:58:a6:87:1b:96:27: 14:8e:6a:c2:b4:87:56:db:e3:d6:1b:5d:0a:22:6f: d0:1d:a4:6b:a8:84:a5:e3:9f:a6:61:b4:29:ac:31: 01:5d:b5:22:c3:19:8b:d4:f3:2d:31:66:2b:c9:e3: 8c:ca:5f:98:22:fb:61:f4:00:e1:bb:f6:a3:04:28: 8f:1b:5e:3a:3b:a9:5a:e2:5c:b2:18:3c:4a:35:6e: ac:ed:70:36:02:fe:43:9a:eb:22:5e:2b:70:99:18: 4e:45:98:e0:b1:4a:f1:91:13:b0:a0:ce:0a:19:7f: 26:c9:b9:37:47:43:8a:e7:83:57:43:b4:1b:6b:1e: ec:9d:c9:bb:22:4c:35:ff:0e:46:69:1c:0a:f3:e7: 51:b8:b8:5d:24:8d:d3:27:c9:ac:b3:48:da:24:fa: a8:f4:ed:56:0f:d8:0d:4c:af:a0:fd:7a:9a:44:41: 97:e8:a3:36:70:51:b8:c0:d8:d0:4b:37:59:7f:34: 6e:51:76:ac:10:b4:ef:be:9f:16:6e:14:ef:19:04: 90:e6:b7:6b:42:38:40:02:b0:04:9c:9e:51:cd:e5: 11:f6:82:34:de:0f:09:0f:74:0b:81:25:13:9f:eb: 19:2b:de:b7:e4:48:b7:46:84:e6:0a:a1:58:1d:fa: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:66:CC:D1:C3:3D:A3:20:B3:DB:2E:32:6A:A1:D9:30:40:FD:C9:03 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:de:b5:bd:5c:3c:cf:27:b8:6f:be:9b:d9:25:8d:95:0a:f0: 5d:ee:b6:c3:37:00:61:da:79:ad:76:c6:54:66:1b:19:18:a6: 43:26:ec:7b:e4:fe:8a:d1:c6:b9:47:23:bf:1f:db:4e:ac:20: a4:92:4b:a8:2f:29:bb:1a:85:8d:c2:c5:f3:af:6d:dc:ed:06: 16:ed:a4:ca:17:a8:ab:f6:1f:8b:ae:d2:6b:f1:d7:41:16:7a: 80:47:c4:a6:88:71:94:f1:09:7b:9b:44:5c:8c:1b:a7:ca:a1: cf:d3:32:67:9d:9a:38:53:ff:b9:90:4d:d5:9e:5c:a5:4b:1c: 83:59:1b:47:7c:21:7e:b4:00:33:4b:d2:6e:24:96:08:70:e8: b0:f4:b9:c3:1a:32:00:22:7e:e4:d7:e8:cf:8e:99:68:8e:d9: 5d:6f:b5:5e:6e:a9:7a:14:8b:c6:03:e6:d8:38:af:f4:8e:65: 46:68:86:d6:b4:99:48:d2:8b:7d:e2:d0:d8:c0:b0:2f:6f:f8: 40:ed:34:c8:5f:f0:f9:b4:2a:73:98:cb:4a:4b:fa:ab:dd:fe: cc:48:5c:31:c0:f9:11:2e:84:1d:47:5e:32:51:35:fa:98:e6: 30:86:e9:89:11:9f:49:99:a3:f1:63:82:71:8a:a8:27:b0:1f: 3a:45:54:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQ8b8pjmhIy5CPuGkI9lHck0Q1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNTA4MjIwMTA3MTBaFw0yNTA4MjUwMTM4MTBaMDMxMTAvBgNV BAMTKEE0NjZDQ0QxQzMzREEzMjBCM0RCMkUzMjZBQTFEOTMwNDBGREM5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYj9momUWIVimhxuWJxSOasK0 h1bb49YbXQoib9AdpGuohKXjn6ZhtCmsMQFdtSLDGYvU8y0xZivJ44zKX5gi+2H0 AOG79qMEKI8bXjo7qVriXLIYPEo1bqztcDYC/kOa6yJeK3CZGE5FmOCxSvGRE7Cg zgoZfybJuTdHQ4rng1dDtBtrHuydybsiTDX/DkZpHArz51G4uF0kjdMnyayzSNok +qj07VYP2A1Mr6D9eppEQZfoozZwUbjA2NBLN1l/NG5RdqwQtO++nxZuFO8ZBJDm t2tCOEACsAScnlHN5RH2gjTeDwkPdAuBJROf6xkr3rfkSLdGhOYKoVgd+hq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpGbM0cM9oyCz2y4yaqHZMED9yQMwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHetb1cPM8nuG++m9kljZUK8F3utsM3AGHa ea12xlRmGxkYpkMm7Hvk/orRxrlHI78f206sIKSSS6gvKbsahY3CxfOvbdztBhbt pMoXqKv2H4uu0mvx10EWeoBHxKaIcZTxCXubRFyMG6fKoc/TMmedmjhT/7mQTdWe XKVLHINZG0d8IX60ADNL0m4klghw6LD0ucMaMgAifuTX6M+OmWiO2V1vtV5uqXoU i8YD5tg4r/SOZUZohta0mUjSi33i0NjAsC9v+EDtNMhf8Pm0KnOYy0pL+qvd/sxI XDHA+REuhB1HXjJRNfqY5jCG6YkRn0mZo/FjgnGKqCewHzpFVC0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:36 2025 by rpki-client