$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: J6pnnXSTWtABMMc0aJbVfyAMYhlP/OpCtwOcL8M0Qmg= Subject key identifier: 29:93:D6:C8:60:08:41:4B:9B:65:E1:5E:22:72:4D:C0:EE:F2:9A:7D Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 6C0D01DBC329FCF26D2182FF3C5CB8AE0F2555C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 0516 Signing time: Sat 18 Oct 2025 23:42:10 +0000 Manifest this update: Sat 18 Oct 2025 23:37:10 +0000 Manifest next update: Wed 22 Oct 2025 04:40:10 +0000 Files and hashes: 1: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) 2: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) 3: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: mJslQhlGnSjC9ba+u6+v3yC1XOiuIQLWBuG73ktS5n0=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0d:01:db:c3:29:fc:f2:6d:21:82:ff:3c:5c:b8:ae:0f:25:55:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Oct 18 23:37:10 2025 GMT Not After : Oct 22 04:40:10 2025 GMT Subject: CN=2993D6C86008414B9B65E15E22724DC0EEF29A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5c:06:aa:2b:cf:fe:7f:fd:49:e3:06:e2:73: ee:c3:c8:3a:eb:c3:f1:d3:76:0d:a3:a5:c7:2b:b7: 90:ac:b7:ad:d9:88:b8:0a:67:7d:5f:64:61:5d:60: c1:49:77:ca:eb:20:27:d4:7a:9c:b4:36:f1:24:c4: 51:3a:55:12:e8:e1:74:9f:c4:c7:38:c7:7a:67:c5: d5:6b:c2:ae:97:37:af:01:16:94:47:db:80:87:90: eb:3e:47:81:35:23:06:f8:18:28:ba:a7:bf:81:7e: ae:a7:80:ef:93:ce:0c:23:4c:b0:85:c5:1c:2a:a4: 4e:da:1a:b1:37:cb:4f:e1:e5:bf:35:35:dc:68:52: bd:cf:3c:7d:b1:25:cb:5e:bf:c8:6d:0c:50:0d:3b: 5a:b2:cc:51:50:45:0c:93:57:40:ce:8b:47:c5:c4: 17:0a:58:5e:2d:2d:7e:09:fd:58:4a:36:d8:78:80: be:61:85:b9:05:54:f4:5a:22:2b:35:ce:63:35:a1: 41:f7:5e:f7:24:5d:c8:bf:49:39:38:cb:7b:8c:bc: 67:c0:5a:39:45:31:dd:7d:e5:ca:e0:fc:c3:12:3f: de:80:78:3f:f1:68:8b:d7:1c:67:8b:04:81:0d:19: ac:91:cd:5e:11:cd:4f:22:97:01:fa:13:15:5b:9d: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:D6:C8:60:08:41:4B:9B:65:E1:5E:22:72:4D:C0:EE:F2:9A:7D X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:02:33:f2:c8:8c:b9:e5:29:0d:02:af:ce:34:d6:43:7f:66: 67:6e:65:19:d9:cb:af:60:e7:08:fd:a3:df:02:fa:8f:f8:ca: 58:3e:70:40:f1:50:76:8d:1e:55:28:06:26:d5:ff:6d:1d:e4: f1:ec:0b:d5:bd:ad:fd:bb:0a:b2:61:9f:2f:f0:cc:c6:82:a7: 35:21:e4:cc:c0:b2:62:a3:e7:9e:e4:69:01:25:c7:24:71:15: 1d:fb:58:20:a8:df:8f:14:bc:21:74:ab:f3:10:34:ff:19:90: ed:ba:d1:0a:5d:72:d4:42:4e:30:17:7d:c4:9d:29:e3:b6:41: c6:12:a2:9c:53:56:70:ec:bb:b2:41:61:a7:9f:03:94:42:db: 5f:5c:88:25:b9:cf:08:25:9c:6b:6e:c9:02:fd:b8:b9:b0:ef: 5e:96:22:4b:89:be:79:b4:ca:27:47:15:fd:04:60:81:97:5d: 2d:58:98:3c:10:d8:c8:2a:84:e5:ed:96:7a:19:86:2a:23:d6: fa:4b:ea:e5:ba:ab:e2:a4:5e:99:44:68:a7:db:ed:97:c3:3e: 54:9b:be:1f:dd:44:d9:f7:08:79:68:2f:5f:d8:25:d2:b7:16: 28:18:01:ae:8f:ee:47:01:4f:3f:ec:bf:93:3c:14:9a:b2:8f: ef:39:45:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbA0B28Mp/PJtIYL/PFy4rg8lVcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNTEwMTgyMzM3MTBaFw0yNTEwMjIwNDQwMTBaMDMxMTAvBgNV BAMTKDI5OTNENkM4NjAwODQxNEI5QjY1RTE1RTIyNzI0REMwRUVGMjlBN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmXAaqK8/+f/1J4wbic+7DyDrr w/HTdg2jpccrt5Cst63ZiLgKZ31fZGFdYMFJd8rrICfUepy0NvEkxFE6VRLo4XSf xMc4x3pnxdVrwq6XN68BFpRH24CHkOs+R4E1Iwb4GCi6p7+Bfq6ngO+TzgwjTLCF xRwqpE7aGrE3y0/h5b81NdxoUr3PPH2xJctev8htDFANO1qyzFFQRQyTV0DOi0fF xBcKWF4tLX4J/VhKNth4gL5hhbkFVPRaIis1zmM1oUH3XvckXci/STk4y3uMvGfA WjlFMd195crg/MMSP96AeD/xaIvXHGeLBIENGayRzV4RzU8ilwH6ExVbnUXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKZPWyGAIQUubZeFeInJNwO7ymn0wHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMCM/LIjLnlKQ0Cr8401kN/ZmduZRnZy69g 5wj9o98C+o/4ylg+cEDxUHaNHlUoBibV/20d5PHsC9W9rf27CrJhny/wzMaCpzUh 5MzAsmKj557kaQElxyRxFR37WCCo348UvCF0q/MQNP8ZkO260QpdctRCTjAXfcSd KeO2QcYSopxTVnDsu7JBYaefA5RC219ciCW5zwglnGtuyQL9uLmw716WIkuJvnm0 yidHFf0EYIGXXS1YmDwQ2MgqhOXtlnoZhioj1vpL6uW6q+KkXplEaKfb7ZfDPlSb vh/dRNn3CHloL1/YJdK3FigYAa6P7kcBTz/sv5M8FJqyj+85ReY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:51:55 2025 by rpki-client