$ rpki-client -vvf repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft File: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft (raw, json) Hash identifier: VdTYIpGTQdFl9RLKHeoSJuGwd8R6aDEqHd/SeOWFKFE= Subject key identifier: BA:72:43:B1:30:71:2D:D3:52:F4:72:CE:DF:81:EE:4D:73:F3:8C:78 Authority key identifier: 47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 Certificate issuer: /CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Certificate serial: 67957602A6486E4A25BA5C187674F69CEE402410 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft Manifest number: 01CF Signing time: Mon 20 Oct 2025 03:20:36 +0000 Manifest this update: Mon 20 Oct 2025 03:15:36 +0000 Manifest next update: Thu 23 Oct 2025 14:13:36 +0000 Files and hashes: 1: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl (hash: MxTX6ODT5QbV6Ot1QtUHIMPpzuTjHx1Mu7841Eakw0o=) 2: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: Co4oCqQgIJlqQAiLFlbpmiRGvqJo8VYFhlYbFw0DIow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:95:76:02:a6:48:6e:4a:25:ba:5c:18:76:74:f6:9c:ee:40:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Validity Not Before: Oct 20 03:15:36 2025 GMT Not After : Oct 23 14:13:36 2025 GMT Subject: CN=BA7243B130712DD352F472CEDF81EE4D73F38C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:2b:1d:82:0d:bf:ee:f1:99:52:f9:8e:b6: 65:59:75:e6:4e:fa:d6:ad:ca:52:2b:ab:dd:73:f0: 54:a9:8a:ed:56:cc:0d:a6:3b:41:c4:03:bd:39:94: 3d:ad:34:89:23:ae:a3:b7:4d:64:d9:f1:ca:23:f6: fb:3f:64:42:fa:f4:08:ac:b7:cb:e1:b7:2a:65:5f: 7c:3b:f1:64:3d:9e:bb:a4:1c:fe:fa:6e:e9:38:9a: 3f:4e:6d:a5:8a:95:06:02:c2:25:d4:cc:1d:00:bd: 6f:ca:2b:bc:c6:3a:7d:5f:60:7e:29:b9:8c:95:ef: 52:52:d2:47:a1:e0:66:03:0a:fe:52:15:81:ac:ad: 5c:bd:b7:b6:31:44:7a:7e:b2:ed:42:08:00:3d:ae: 88:b7:90:96:14:d3:94:05:2a:44:07:ba:8d:19:b0: 6a:75:ee:ea:c0:eb:48:ed:73:dd:8d:b6:65:77:d3: 8a:e6:50:b9:fb:a7:49:3a:22:53:ec:4f:6a:d9:2d: ab:db:c5:ce:72:1f:00:f3:99:97:dd:53:90:c1:76: fc:07:11:4b:03:15:05:70:67:ce:fd:70:d2:33:4e: a3:f8:79:84:54:ca:31:34:c6:78:44:ee:94:3c:93: e2:a5:34:1f:90:17:c5:ed:7a:9d:36:fa:71:1a:66: 45:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:43:B1:30:71:2D:D3:52:F4:72:CE:DF:81:EE:4D:73:F3:8C:78 X509v3 Authority Key Identifier: keyid:47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f2:cf:a6:7e:f6:d5:6d:3b:bf:4a:5c:4f:18:36:a3:28:27: d0:06:02:47:bc:d9:c4:ad:56:8a:42:a7:a1:b7:af:89:13:a0: 41:e7:0a:b9:15:87:16:d9:c2:59:00:9b:4b:c8:38:08:5f:1e: 07:3f:5d:31:2f:6f:cd:7a:0d:03:76:1b:7e:b5:a0:3d:71:00: ba:e6:a0:d1:e5:68:85:07:ed:b8:30:31:07:c1:85:be:30:90: 1d:ea:74:fc:1e:44:20:2e:b3:99:b8:07:8b:82:32:0e:a2:a4: e3:4d:6f:c0:6c:60:f8:79:cb:6f:9b:88:fa:35:93:f3:1e:ae: fc:20:29:8b:c2:54:71:7e:d6:62:82:85:84:02:41:7a:a2:87: ce:1f:ed:1f:3e:b7:bd:27:c5:87:8d:c4:86:19:78:5f:93:e2: b7:1a:1c:d7:60:0e:87:34:8c:15:34:86:06:34:3c:a5:40:84: 82:3d:75:a1:75:76:dd:89:53:71:46:90:5e:ac:d8:12:1c:74: e0:4a:e1:d2:ab:35:15:05:64:7c:b8:66:41:8f:6f:3f:51:66: 80:21:c8:0c:37:96:77:d6:5a:a1:9b:49:b5:cd:20:86:1c:a0: 62:84:06:a7:71:f5:af:5a:ed:3c:7c:11:ab:4e:c5:c9:91:ad: 71:be:14:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5V2AqZIbkolulwYdnT2nO5AJBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0 ODkyNDI3NDAeFw0yNTEwMjAwMzE1MzZaFw0yNTEwMjMxNDEzMzZaMDMxMTAvBgNV BAMTKEJBNzI0M0IxMzA3MTJERDM1MkY0NzJDRURGODFFRTRENzNGMzhDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGeysdgg2/7vGZUvmOtmVZdeZO +tatylIrq91z8FSpiu1WzA2mO0HEA705lD2tNIkjrqO3TWTZ8coj9vs/ZEL69Ais t8vhtyplX3w78WQ9nrukHP76buk4mj9ObaWKlQYCwiXUzB0AvW/KK7zGOn1fYH4p uYyV71JS0keh4GYDCv5SFYGsrVy9t7YxRHp+su1CCAA9roi3kJYU05QFKkQHuo0Z sGp17urA60jtc92NtmV304rmULn7p0k6IlPsT2rZLavbxc5yHwDzmZfdU5DBdvwH EUsDFQVwZ879cNIzTqP4eYRUyjE0xnhE7pQ8k+KlNB+QF8Xtep02+nEaZkUhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUunJDsTBxLdNS9HLO34HuTXPzjHgwHwYDVR0j BBgwFoAUR6nZmoUR985U+fceHvg+9UiSQnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i M2M5NzNkNS1mZTk0LTQwMGQtYmNiZi1mMjMzZThhYzU1MzcvMC80N0E5RDk5QTg1 MTFGN0NFNTRGOUY3MUUxRUY4M0VGNTQ4OTI0Mjc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0ODky NDI3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNF RjU0ODkyNDI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7yz6Z+9tVtO79KXE8YNqMoJ9AGAke82cSt VopCp6G3r4kToEHnCrkVhxbZwlkAm0vIOAhfHgc/XTEvb816DQN2G361oD1xALrm oNHlaIUH7bgwMQfBhb4wkB3qdPweRCAus5m4B4uCMg6ipONNb8BsYPh5y2+biPo1 k/MervwgKYvCVHF+1mKChYQCQXqih84f7R8+t70nxYeNxIYZeF+T4rcaHNdgDoc0 jBU0hgY0PKVAhII9daF1dt2JU3FGkF6s2BIcdOBK4dKrNRUFZHy4ZkGPbz9RZoAh yAw3lnfWWqGbSbXNIIYcoGKEBqdx9a9a7Tx8EatOxcmRrXG+FIg= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:14 2025 by rpki-client