$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: +JnoJd/5ghWUGp5TtTc0jgpnYCJUk3FEHHdTfN+kevE= Subject key identifier: 96:0F:68:89:8F:C8:E7:1F:A4:70:49:7B:D0:DD:DA:1E:F1:C9:DE:70 Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 31E36358DAAC9234F9B4F595B4642049258F2DCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 0226 Signing time: Sat 18 Oct 2025 08:41:32 +0000 Manifest this update: Sat 18 Oct 2025 08:36:32 +0000 Manifest next update: Tue 21 Oct 2025 16:21:32 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: 15/V+fbLYGwKqJXLCUaVCjOyvWjRQ4TxthpwqrUmyA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e3:63:58:da:ac:92:34:f9:b4:f5:95:b4:64:20:49:25:8f:2d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Oct 18 08:36:32 2025 GMT Not After : Oct 21 16:21:32 2025 GMT Subject: CN=960F68898FC8E71FA470497BD0DDDA1EF1C9DE70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:80:e9:3d:51:1b:0b:c4:9e:53:34:70:24:02: 41:e5:57:bf:62:a8:59:c5:52:91:eb:a3:a9:94:59: a3:bd:53:1b:06:ed:c9:88:e8:22:52:59:94:55:f0: bc:24:fa:00:12:0a:75:7c:7f:3c:2b:0d:07:df:59: 5a:2a:28:2e:f9:de:0d:04:9e:6c:e7:5b:e7:2d:f5: 06:c4:37:c5:ba:3c:a5:68:2d:69:b8:8f:35:3f:56: 04:9f:0a:1e:17:7b:7d:3c:43:26:89:ba:72:57:4e: f0:71:a3:01:a3:e9:35:a1:fd:c2:80:7c:53:17:bf: e3:91:5b:9b:69:f4:e5:05:c1:3a:ba:60:d5:ed:dc: 97:8d:9b:74:8a:76:a6:28:87:b6:15:75:69:5f:b9: 9d:aa:9e:02:2f:89:0c:a1:b1:3e:73:2d:72:90:bd: 6f:52:1c:f2:29:60:9b:c2:15:82:d0:05:56:b4:b1: a6:b2:2d:ee:4d:4a:ab:82:de:a5:c9:0a:88:c3:ea: 28:8d:52:c2:11:89:ab:42:94:9c:3f:9f:42:18:aa: f7:61:fb:dc:b7:09:3b:50:01:2e:0d:be:7b:91:4b: 09:41:e8:58:fb:5d:e8:aa:98:2b:0f:97:e1:b3:e4: 90:81:85:34:df:23:be:8c:d6:46:58:d7:19:0c:b3: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0F:68:89:8F:C8:E7:1F:A4:70:49:7B:D0:DD:DA:1E:F1:C9:DE:70 X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:63:1e:c0:08:65:a5:f7:f6:23:96:49:01:5c:8e:21:4a:e1: 5d:79:a3:ce:5b:92:19:c0:d5:23:11:ed:ba:9d:f0:db:2a:aa: e8:db:1a:e2:30:1e:43:db:8b:61:f7:af:c1:c7:23:37:03:ea: 71:07:f9:fd:ff:6a:d2:f1:68:31:9a:73:52:dc:a9:24:24:c2: 68:35:f0:68:56:d8:eb:c8:95:ed:01:f8:c2:78:67:eb:81:36: be:43:d8:6c:45:79:76:5d:09:e7:91:d3:00:89:a8:ac:62:71: 7d:a1:1d:3c:00:13:4c:85:e3:95:87:7c:7f:f6:1f:bf:e3:d4: 97:27:c4:b4:f6:73:7a:9b:61:c1:86:7b:02:ea:a3:4d:77:40: 20:06:8d:2b:f3:42:37:73:5b:f7:e5:4f:cb:4a:07:9a:d5:bf: 5d:9d:ec:6d:d9:15:8c:51:5e:70:05:5b:9a:5f:43:a7:c5:67: fe:a4:ef:ed:ec:6a:52:d9:ae:32:d1:71:f6:d1:1b:fb:be:5b: a2:dd:ba:0e:ea:91:87:96:45:df:3d:01:52:fe:59:ac:92:95: 7c:05:98:c1:26:68:cc:9e:ed:79:8e:fb:48:12:81:0a:cd:b5: b9:9e:26:0a:58:ab:30:6b:e0:c8:56:d7:84:3b:69:e7:34:e7: 81:a8:57:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeNjWNqskjT5tPWVtGQgSSWPLc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTEwMTgwODM2MzJaFw0yNTEwMjExNjIxMzJaMDMxMTAvBgNV BAMTKDk2MEY2ODg5OEZDOEU3MUZBNDcwNDk3QkQwREREQTFFRjFDOURFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7gOk9URsLxJ5TNHAkAkHlV79i qFnFUpHro6mUWaO9UxsG7cmI6CJSWZRV8Lwk+gASCnV8fzwrDQffWVoqKC753g0E nmznW+ct9QbEN8W6PKVoLWm4jzU/VgSfCh4Xe308QyaJunJXTvBxowGj6TWh/cKA fFMXv+ORW5tp9OUFwTq6YNXt3JeNm3SKdqYoh7YVdWlfuZ2qngIviQyhsT5zLXKQ vW9SHPIpYJvCFYLQBVa0saayLe5NSquC3qXJCojD6iiNUsIRiatClJw/n0IYqvdh +9y3CTtQAS4NvnuRSwlB6Fj7XeiqmCsPl+Gz5JCBhTTfI76M1kZY1xkMsyFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlg9oiY/I5x+kcEl70N3aHvHJ3nAwHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZjHsAIZaX39iOWSQFcjiFK4V15o85bkhnA 1SMR7bqd8NsqqujbGuIwHkPbi2H3r8HHIzcD6nEH+f3/atLxaDGac1LcqSQkwmg1 8GhW2OvIle0B+MJ4Z+uBNr5D2GxFeXZdCeeR0wCJqKxicX2hHTwAE0yF45WHfH/2 H7/j1JcnxLT2c3qbYcGGewLqo013QCAGjSvzQjdzW/flT8tKB5rVv12d7G3ZFYxR XnAFW5pfQ6fFZ/6k7+3salLZrjLRcfbRG/u+W6Ldug7qkYeWRd89AVL+WaySlXwF mMEmaMye7XmO+0gSgQrNtbmeJgpYqzBr4MhW14Q7aec054GoVxg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:35 2025 by rpki-client