$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: OHF67HjjqFPctL3yM/nyyKEr8U6ntLZo874jnNoi1F0= Subject key identifier: 5C:36:8E:D3:1E:9A:38:E2:CA:79:4D:0E:7B:D6:66:75:BB:AC:49:B1 Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 1D22B049008BDAA4DEE4228B7AB39071D29B2EF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: 011F Signing time: Mon 20 Oct 2025 00:32:06 +0000 Manifest this update: Mon 20 Oct 2025 00:27:06 +0000 Manifest next update: Thu 23 Oct 2025 04:54:06 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: 5X3/lVT3vTaeWrVrrcFjm52aZysdQBuSrPbJw3jmagU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:22:b0:49:00:8b:da:a4:de:e4:22:8b:7a:b3:90:71:d2:9b:2e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Oct 20 00:27:06 2025 GMT Not After : Oct 23 04:54:06 2025 GMT Subject: CN=5C368ED31E9A38E2CA794D0E7BD66675BBAC49B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:c0:8b:1a:bf:d9:bc:bc:24:9c:11:ab:ab: 39:f0:08:22:f2:cf:79:e1:4d:2a:d9:b5:f5:bc:e7: 33:2a:d5:17:6d:27:a1:7f:dc:e2:2d:95:9a:96:9f: f2:80:dc:6f:1f:0e:4f:90:92:10:a5:e0:ac:13:c7: 22:9e:b4:4e:8f:be:3e:41:c8:89:eb:8f:25:6f:ff: bb:48:a5:f0:fa:1a:82:30:0b:16:5a:7c:e9:96:34: 6d:48:43:1a:8c:ff:96:17:53:bc:21:72:d4:04:37: d2:7a:45:98:d6:5e:6e:9f:c4:fa:d7:92:a7:16:2c: 20:76:00:73:5c:17:fa:fe:a1:9e:43:c2:f8:94:6b: fe:08:8d:38:4f:e5:c0:6a:0a:b7:77:d0:77:9c:95: ad:39:1c:d6:7c:94:56:7b:4c:1f:71:60:77:1e:c9: 11:2d:74:93:cd:e2:48:70:01:ad:23:f2:e2:31:78: 99:74:2c:d4:48:31:cc:59:90:75:b7:c2:b2:b9:b3: 98:c3:b6:9a:b9:4b:8b:9e:88:70:b6:e6:26:35:12: a6:08:7b:1f:96:c6:56:52:e0:03:58:56:24:d4:87: d9:80:1a:2c:17:23:40:44:09:93:14:1e:e3:0c:3b: 04:11:8b:df:3d:8d:8e:16:b1:e9:4d:13:5e:f8:92: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:36:8E:D3:1E:9A:38:E2:CA:79:4D:0E:7B:D6:66:75:BB:AC:49:B1 X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a5:1f:29:a6:c0:80:66:b6:db:f8:9b:14:1b:84:15:ae:3c: 52:d1:6a:9a:12:27:39:ce:11:95:85:1d:ea:bf:e8:0d:54:d4: 4d:9f:bd:6b:cb:c3:87:68:fb:ab:13:14:0b:db:60:db:6c:5e: f8:24:66:ea:4f:68:bf:a9:2c:57:32:99:cf:ac:69:df:f6:2c: 94:31:b6:f6:a5:29:d9:03:b0:94:9c:cc:fb:19:d4:a9:17:2b: 6d:ae:a5:6d:13:f0:a6:bc:c6:0f:c9:db:c6:01:75:b1:c0:57: 30:ae:d2:d8:b7:a3:45:da:14:60:33:ba:a9:d7:b5:eb:31:c0: ba:5e:0d:85:b9:60:f6:8c:31:b8:cf:2c:a6:1a:02:6e:4c:84: 8b:4e:30:68:5f:fa:9f:ad:5e:55:4a:1c:83:01:f5:86:ac:04: ab:77:52:b7:70:c4:db:e0:63:cd:17:69:94:6d:50:69:1a:ab: b3:22:7a:b0:83:7a:ef:0c:62:dd:07:14:57:88:26:8d:cf:30: ce:89:de:f7:87:92:73:40:68:92:df:7f:12:34:e6:87:14:f1: a7:d9:5e:0a:d5:a9:e9:76:1a:d2:82:da:22:0a:98:95:57:32: 65:f0:8d:ec:63:50:3c:fb:a6:f5:e1:75:a6:0c:64:73:06:28: c9:5d:00:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSKwSQCL2qTe5CKLerOQcdKbLvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNTEwMjAwMDI3MDZaFw0yNTEwMjMwNDU0MDZaMDMxMTAvBgNV BAMTKDVDMzY4RUQzMUU5QTM4RTJDQTc5NEQwRTdCRDY2Njc1QkJBQzQ5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5sCLGr/ZvLwknBGrqznwCCLy z3nhTSrZtfW85zMq1RdtJ6F/3OItlZqWn/KA3G8fDk+QkhCl4KwTxyKetE6Pvj5B yInrjyVv/7tIpfD6GoIwCxZafOmWNG1IQxqM/5YXU7whctQEN9J6RZjWXm6fxPrX kqcWLCB2AHNcF/r+oZ5DwviUa/4IjThP5cBqCrd30Hecla05HNZ8lFZ7TB9xYHce yREtdJPN4khwAa0j8uIxeJl0LNRIMcxZkHW3wrK5s5jDtpq5S4ueiHC25iY1EqYI ex+WxlZS4ANYViTUh9mAGiwXI0BECZMUHuMMOwQRi989jY4WselNE174knr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXDaO0x6aOOLKeU0Oe9ZmdbusSbEwHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+lHymmwIBmttv4mxQbhBWuPFLRapoSJznO EZWFHeq/6A1U1E2fvWvLw4do+6sTFAvbYNtsXvgkZupPaL+pLFcymc+sad/2LJQx tvalKdkDsJSczPsZ1KkXK22upW0T8Ka8xg/J28YBdbHAVzCu0ti3o0XaFGAzuqnX tesxwLpeDYW5YPaMMbjPLKYaAm5MhItOMGhf+p+tXlVKHIMB9YasBKt3UrdwxNvg Y80XaZRtUGkaq7MierCDeu8MYt0HFFeIJo3PMM6J3veHknNAaJLffxI05ocU8afZ XgrVqel2GtKC2iIKmJVXMmXwjexjUDz7pvXhdaYMZHMGKMldAO8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:00 2025 by rpki-client