$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: 2gYhga5LJqivunhNE3+8mZgA+bwuhnY0MZk/U6kCipg= Subject key identifier: BF:8C:C1:8F:1F:EA:F4:94:69:6D:ED:D5:80:1E:66:D1:96:46:1B:40 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 5F19EC3EF1B1540489FFB0A235FCCE4759327B0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 04D6 Signing time: Sun 19 Oct 2025 22:01:02 +0000 Manifest this update: Sun 19 Oct 2025 21:56:02 +0000 Manifest next update: Thu 23 Oct 2025 03:50:02 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: dE4wPcQlTcQ8R+3WOeTWx+30uzc7OUe+BC8KYvTbrGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:19:ec:3e:f1:b1:54:04:89:ff:b0:a2:35:fc:ce:47:59:32:7b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Oct 19 21:56:02 2025 GMT Not After : Oct 23 03:50:02 2025 GMT Subject: CN=BF8CC18F1FEAF494696DEDD5801E66D196461B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:12:cd:33:65:91:91:27:f7:89:f7:24:c0: 8d:63:8d:4f:f2:94:7e:6f:35:fd:82:0a:68:b8:73: af:89:2f:a4:e8:e4:a5:d8:83:05:b9:85:ce:6d:94: 0d:19:01:ad:ed:02:f5:39:e4:4f:f1:95:cf:51:ed: fd:03:43:30:a0:5d:6c:c8:86:ee:1f:de:24:13:47: 45:8e:37:65:e3:72:f3:1e:4d:1c:91:78:f0:be:41: 20:6d:23:94:f9:f8:35:93:42:1f:70:55:92:5b:f2: 4f:12:13:6c:f3:f0:b8:79:2b:1e:9f:46:60:49:d4: 44:29:e5:2d:cc:52:44:22:2e:71:46:b9:8d:11:4b: 8c:f3:88:8a:98:cf:a1:24:d8:43:22:33:fb:73:58: 89:97:e2:47:88:5f:4c:e0:ed:36:13:bb:70:3e:8a: cc:d2:27:41:22:45:0d:04:34:57:4f:0c:38:dd:4e: 61:52:ae:90:2c:a4:e9:78:72:1f:7e:83:bf:1a:e9: 49:54:5c:28:d7:fa:cd:55:b2:b2:04:dd:32:30:01: a9:d9:e9:e1:b5:f0:d8:f3:ba:2d:71:9a:16:b0:eb: dc:b0:9f:2b:a7:06:ef:9d:1d:ad:89:86:3a:05:59: 59:10:89:58:d8:a2:70:c4:f3:9e:4b:d2:37:98:40: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8C:C1:8F:1F:EA:F4:94:69:6D:ED:D5:80:1E:66:D1:96:46:1B:40 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:85:39:8c:75:70:c5:1d:8c:bb:f8:37:f0:eb:1b:24:24:90: 01:cc:5e:1f:2c:2a:5c:45:0f:b4:51:cc:34:41:47:56:f5:d4: 4f:40:e2:94:f2:bf:dd:a8:a4:b5:fe:b0:8f:b9:e2:3c:45:e5: b7:5d:84:55:8d:f1:a3:e2:50:3b:fa:10:9b:32:77:cf:46:b0: b5:ed:bd:3a:56:4b:a4:89:3d:cd:fe:e2:26:19:e3:5a:e7:ba: 71:7f:22:3b:b4:a2:cc:37:9e:cd:b5:a0:25:32:48:b3:d4:ae: b2:40:88:84:7d:43:77:da:4e:43:b7:48:e1:69:ca:08:a0:f9: f4:46:ae:b2:7c:d9:1b:e1:1e:51:ce:ff:fc:5e:97:27:b9:5c: 36:96:f2:2e:72:57:86:74:ff:fb:a3:d3:a6:56:50:36:97:c4: 4d:49:ec:7b:83:cb:c6:8e:73:e1:43:b0:60:39:90:95:33:45: 2d:aa:99:d2:ae:cc:57:bd:dd:14:00:42:79:0a:d7:f5:21:ec: d7:75:43:eb:74:8f:96:9f:22:37:a4:ad:da:2d:8f:2f:f4:31: 85:fc:55:6e:75:76:8e:77:4f:9a:3a:83:9c:47:87:bf:43:29: ca:bd:d8:5d:54:3e:17:13:54:14:96:74:b1:ae:6e:ae:ea:0b: b1:19:5f:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxnsPvGxVASJ/7CiNfzOR1kyew0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTEwMTkyMTU2MDJaFw0yNTEwMjMwMzUwMDJaMDMxMTAvBgNV BAMTKEJGOENDMThGMUZFQUY0OTQ2OTZERURENTgwMUU2NkQxOTY0NjFCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GxLNM2WRkSf3ifckwI1jjU/y lH5vNf2CCmi4c6+JL6To5KXYgwW5hc5tlA0ZAa3tAvU55E/xlc9R7f0DQzCgXWzI hu4f3iQTR0WON2XjcvMeTRyRePC+QSBtI5T5+DWTQh9wVZJb8k8SE2zz8Lh5Kx6f RmBJ1EQp5S3MUkQiLnFGuY0RS4zziIqYz6Ek2EMiM/tzWImX4keIX0zg7TYTu3A+ iszSJ0EiRQ0ENFdPDDjdTmFSrpAspOl4ch9+g78a6UlUXCjX+s1VsrIE3TIwAanZ 6eG18Njzui1xmhaw69ywnyunBu+dHa2JhjoFWVkQiVjYonDE855L0jeYQN8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4zBjx/q9JRpbe3VgB5m0ZZGG0AwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyFOYx1cMUdjLv4N/DrGyQkkAHMXh8sKlxF D7RRzDRBR1b11E9A4pTyv92opLX+sI+54jxF5bddhFWN8aPiUDv6EJsyd89GsLXt vTpWS6SJPc3+4iYZ41rnunF/Iju0osw3ns21oCUySLPUrrJAiIR9Q3faTkO3SOFp ygig+fRGrrJ82RvhHlHO//xelye5XDaW8i5yV4Z0//uj06ZWUDaXxE1J7HuDy8aO c+FDsGA5kJUzRS2qmdKuzFe93RQAQnkK1/Uh7Nd1Q+t0j5afIjekrdotjy/0MYX8 VW51do53T5o6g5xHh79DKcq92F1UPhcTVBSWdLGubq7qC7EZXxM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:07 2025 by rpki-client