$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: q1f7rms3Xtlf1pDZyN2VO5EvL4aGZ4y+uowWA9f3AUo= Subject key identifier: 63:67:AB:1D:7F:AE:6F:52:02:16:70:C9:A4:39:59:53:07:C1:01:A7 Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 33CB2105F7A9C84B37532E3D4D33420263D829AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 0258 Signing time: Mon 27 Oct 2025 08:12:13 +0000 Manifest this update: Mon 27 Oct 2025 08:07:13 +0000 Manifest next update: Thu 30 Oct 2025 16:06:13 +0000 Files and hashes: 1: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: rm9p3ZeDrMz8U62rFr5oNf2Aytzh11yUtmF8XudDWng=) 2: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: Fp/8UnawhM2NuX7rV7CkvyBDfW79/QkTvgsmF36JIIM=) 3: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: MieROalwE/fB127Dk3xdzAYuGXCkhJHq65WAQmDl2tQ=) 4: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: ETpw0a+aN27La/w8z8t2+Ujt+M7eqg9mv9UITCWqsgM=) 5: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: HvrDpYE/J5atwLV8aNk1LyzF9yjb46bY62W/GVeHaaA=) 6: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: ZoCcekYbdPtZF1d0wHmqp26jbbPlMBnCSh/Sj6Wzh/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 16:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cb:21:05:f7:a9:c8:4b:37:53:2e:3d:4d:33:42:02:63:d8:29:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Oct 27 08:07:13 2025 GMT Not After : Oct 30 16:06:13 2025 GMT Subject: CN=6367AB1D7FAE6F52021670C9A439595307C101A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:2c:88:d0:c1:3c:09:ed:59:27:12:14:d8: 24:32:10:7e:63:2d:4c:e4:82:b7:50:41:2c:ca:a2: 6a:d2:84:ad:df:ef:9a:03:56:3a:8b:3c:5c:8d:b9: 8e:6e:46:6c:14:c3:bc:64:c0:6d:d0:d1:76:c9:81: 2e:21:b2:d9:33:27:b2:af:b8:60:ac:5b:5d:e3:b0: f8:cb:41:11:d5:15:5a:f9:1d:75:13:68:df:06:2f: ac:e9:4c:1a:ec:f7:a2:dc:d7:30:e7:3d:d3:75:5f: 35:a4:0e:90:25:b7:17:b5:c5:45:0c:2b:1e:52:b6: 53:44:c0:64:c2:ad:c6:6d:e1:1c:37:b9:18:f3:b3: 89:30:af:79:3d:d2:1e:6d:15:02:d0:72:77:16:6d: ae:ce:35:33:07:9e:b7:57:0a:bb:13:16:f9:97:33: e6:20:f6:3c:d1:b6:30:f8:bb:3a:a3:09:cc:c4:56: 04:b0:7e:f3:25:5c:4c:e1:3e:5f:93:af:0b:72:0e: 7c:2f:d1:8e:57:4b:8e:18:4e:41:a0:5a:17:9c:4b: 26:40:af:16:a0:c0:8b:0f:26:19:85:a3:1f:d0:6e: 22:fc:e5:43:79:ff:48:de:03:72:20:49:f4:04:9b: a8:18:b8:f5:bf:e6:f1:dc:77:15:25:60:1d:15:dc: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:67:AB:1D:7F:AE:6F:52:02:16:70:C9:A4:39:59:53:07:C1:01:A7 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:87:e0:28:fd:68:3a:86:80:ce:61:50:51:82:6b:6b:a6:34: 34:88:88:d2:cc:de:df:f8:24:50:ea:e5:7a:67:a9:83:43:fa: 4b:cb:22:87:4e:f0:55:df:3e:68:7f:bd:61:70:f8:0b:51:39: 8f:c2:45:26:e7:00:cd:7a:7d:68:17:80:6d:a2:ae:d5:d8:63: 92:c7:9c:b8:3b:9d:37:1d:db:3f:fd:4a:df:41:4d:83:91:65: f2:b8:58:ae:24:0c:75:54:22:42:7b:8d:1f:13:6a:50:f5:cb: 6b:7a:13:d8:ad:99:b0:ad:bf:7b:2a:0e:e8:f2:75:f1:1a:41: f8:ed:45:26:cf:12:c3:22:c3:1b:3a:62:4b:b4:6f:46:c9:01: c8:33:a0:93:44:47:6a:d1:62:58:f5:16:8a:be:d8:6f:18:03: 1b:c6:a7:ec:cf:4b:40:b3:b8:db:a3:6b:0a:2b:08:ec:55:d8: 09:7a:ff:0a:c1:5d:02:ca:d7:75:cf:1f:28:6e:2b:71:ac:c3: a4:8b:b5:9d:e3:00:43:4d:2c:30:9f:a0:3a:e2:7c:2f:77:7e: 7f:bd:09:d0:9b:72:6d:2c:22:b9:be:2b:31:56:1c:ba:5c:27: f2:41:af:cd:34:c7:62:db:c7:59:b6:6a:6e:25:82:7e:39:86: 27:d8:12:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8shBfepyEs3Uy49TTNCAmPYKa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNTEwMjcwODA3MTNaFw0yNTEwMzAxNjA2MTNaMDMxMTAvBgNV BAMTKDYzNjdBQjFEN0ZBRTZGNTIwMjE2NzBDOUE0Mzk1OTUzMDdDMTAxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/CyI0ME8Ce1ZJxIU2CQyEH5j LUzkgrdQQSzKomrShK3f75oDVjqLPFyNuY5uRmwUw7xkwG3Q0XbJgS4hstkzJ7Kv uGCsW13jsPjLQRHVFVr5HXUTaN8GL6zpTBrs96Lc1zDnPdN1XzWkDpAltxe1xUUM Kx5StlNEwGTCrcZt4Rw3uRjzs4kwr3k90h5tFQLQcncWba7ONTMHnrdXCrsTFvmX M+Yg9jzRtjD4uzqjCczEVgSwfvMlXEzhPl+TrwtyDnwv0Y5XS44YTkGgWhecSyZA rxagwIsPJhmFox/QbiL85UN5/0jeA3IgSfQEm6gYuPW/5vHcdxUlYB0V3PODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY2erHX+ub1ICFnDJpDlZUwfBAacwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+H4Cj9aDqGgM5hUFGCa2umNDSIiNLM3t/4 JFDq5XpnqYND+kvLIodO8FXfPmh/vWFw+AtROY/CRSbnAM16fWgXgG2irtXYY5LH nLg7nTcd2z/9St9BTYORZfK4WK4kDHVUIkJ7jR8TalD1y2t6E9itmbCtv3sqDujy dfEaQfjtRSbPEsMiwxs6Yku0b0bJAcgzoJNER2rRYlj1Foq+2G8YAxvGp+zPS0Cz uNujaworCOxV2Al6/wrBXQLK13XPHyhuK3Gsw6SLtZ3jAENNLDCfoDrifC93fn+9 CdCbcm0sIrm+KzFWHLpcJ/JBr800x2Lbx1m2am4lgn45hifYEug= -----END CERTIFICATE-----Generated at Wed Oct 29 11:26:10 2025 by rpki-client