$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json) Hash identifier: 1zw//6kw8C7lO0cUVwR+hpJNbdKPvLU5OBV/3VmFH8c= Subject key identifier: 34:B3:77:25:8E:7A:99:CB:8E:20:AC:60:05:95:30:CD:77:15:C1:A9 Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Certificate serial: 64EBBCE286FBE5F2AEA9F3649EE1D00B5AAAB330 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft Manifest number: 04D2 Signing time: Thu 04 Sep 2025 21:11:01 +0000 Manifest this update: Thu 04 Sep 2025 21:06:01 +0000 Manifest next update: Sun 07 Sep 2025 23:25:01 +0000 Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: 5hAAivQSKUWtwtjd1AIine5YJ+NDv3bE/kRMmLr85ME=) 2: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=) 3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=) 4: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 23:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:eb:bc:e2:86:fb:e5:f2:ae:a9:f3:64:9e:e1:d0:0b:5a:aa:b3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Validity Not Before: Sep 4 21:06:01 2025 GMT Not After : Sep 7 23:25:01 2025 GMT Subject: CN=34B377258E7A99CB8E20AC60059530CD7715C1A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:c0:8d:4b:a8:51:ae:1a:26:1e:d2:42:00: 1f:ab:29:94:33:cd:5d:9c:52:4d:0e:f4:d9:66:2e: 9b:5c:dc:95:dd:54:97:76:5c:c3:9e:87:46:81:e2: c2:86:7b:4e:60:48:3b:1e:11:21:8d:0f:19:94:54: e0:2d:c6:7b:e1:0b:e4:43:c9:78:3c:e8:d1:78:b2: 50:6c:42:7d:0b:44:c9:38:d4:63:92:d1:cf:69:b6: 9b:3f:d3:f5:f3:bb:07:5a:47:91:4d:12:dd:7b:6d: bd:53:4d:a7:32:b5:be:58:db:83:f4:9b:d1:98:e6: 84:d3:7a:37:a6:76:83:f5:f2:39:1f:b9:0c:3c:b2: a7:6e:02:cd:60:a5:7c:89:db:90:3f:3c:8a:1b:07: 82:0a:f7:8c:55:54:d0:4d:52:20:58:69:bb:6e:2e: e9:45:08:cd:ef:4a:e5:0c:62:42:d5:c8:f8:08:fe: 2b:f2:38:20:76:b3:d8:e9:b2:dd:f8:fa:fe:9f:5a: 58:c9:3f:3a:36:ac:f2:2c:6b:2d:f2:0f:7b:81:87: a9:35:c4:8f:21:8f:2f:44:c1:97:d5:a2:a9:e9:02: 57:13:47:ca:50:ff:10:c7:29:58:58:b0:f9:3c:99: 2f:ce:fa:b8:05:e9:0a:24:4e:96:b1:87:c3:9b:32: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B3:77:25:8E:7A:99:CB:8E:20:AC:60:05:95:30:CD:77:15:C1:A9 X509v3 Authority Key Identifier: keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9b:63:31:1a:f8:88:00:a5:cd:3c:19:05:36:a6:3f:57:8f: b2:f7:34:c6:5a:1b:07:cc:b4:98:f7:0a:7c:34:ea:f2:8f:11: 6d:5a:66:df:d1:a4:d6:9b:df:c0:80:98:b8:6b:0a:f8:e7:b6: 7b:77:ba:3f:27:85:20:86:0e:23:77:2c:a3:ff:a4:9a:3d:3f: 33:c8:f3:46:58:df:79:ff:80:4f:da:f0:e7:76:b2:08:13:eb: d4:8f:b1:00:d8:75:b4:8f:6e:05:39:7b:c4:ac:86:d2:8d:14: dd:79:d4:0a:59:ef:61:fc:34:16:99:a4:f4:50:0c:ac:73:77: 82:67:0b:d7:4b:d3:ea:33:28:0d:8c:a9:95:5c:a0:12:8b:a9: c6:5f:e2:ef:e9:69:c1:af:e3:48:0e:ac:18:91:59:c7:53:ac: c7:b8:b3:f7:84:a8:f3:67:6b:a3:c4:61:4b:f7:2f:c9:51:61: 3b:dc:a3:7e:94:29:a8:e3:c5:e1:81:8a:58:43:da:6b:82:00: 35:0a:b6:96:13:c4:44:bd:98:81:c3:1f:c0:75:2b:e4:81:dd: 9a:1e:ac:45:f2:35:05:2d:e0:f5:1b:86:94:d2:b8:5b:95:31: 47:31:9e:45:1d:e7:19:8e:78:be:ce:e7:01:94:14:54:b7:8a: c0:10:0e:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOu84ob75fKuqfNknuHQC1qqszAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy NDE4N0Q1OTAeFw0yNTA5MDQyMTA2MDFaFw0yNTA5MDcyMzI1MDFaMDMxMTAvBgNV BAMTKDM0QjM3NzI1OEU3QTk5Q0I4RTIwQUM2MDA1OTUzMENENzcxNUMxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZcCNS6hRrhomHtJCAB+rKZQz zV2cUk0O9NlmLptc3JXdVJd2XMOeh0aB4sKGe05gSDseESGNDxmUVOAtxnvhC+RD yXg86NF4slBsQn0LRMk41GOS0c9ptps/0/XzuwdaR5FNEt17bb1TTacytb5Y24P0 m9GY5oTTejemdoP18jkfuQw8sqduAs1gpXyJ25A/PIobB4IK94xVVNBNUiBYabtu LulFCM3vSuUMYkLVyPgI/ivyOCB2s9jpst34+v6fWljJPzo2rPIsay3yD3uBh6k1 xI8hjy9EwZfVoqnpAlcTR8pQ/xDHKVhYsPk8mS/O+rgF6QokTpaxh8ObMtCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLN3JY56mcuOIKxgBZUwzXcVwakwHwYDVR0j BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4 N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4 RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIabYzEa+IgApc08GQU2pj9Xj7L3NMZaGwfM tJj3Cnw06vKPEW1aZt/RpNab38CAmLhrCvjntnt3uj8nhSCGDiN3LKP/pJo9PzPI 80ZY33n/gE/a8Od2sggT69SPsQDYdbSPbgU5e8SshtKNFN151ApZ72H8NBaZpPRQ DKxzd4JnC9dL0+ozKA2MqZVcoBKLqcZf4u/pacGv40gOrBiRWcdTrMe4s/eEqPNn a6PEYUv3L8lRYTvco36UKajjxeGBilhD2muCADUKtpYTxES9mIHDH8B1K+SB3Zoe rEXyNQUt4PUbhpTSuFuVMUcxnkUd5xmOeL7O5wGUFFS3isAQDkA= -----END CERTIFICATE-----Generated at Fri Sep 5 12:38:45 2025 by rpki-client