$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json) Hash identifier: oibw1YwzEImLaUpG3gY9iU2ou1ocg9+rle7lMH+X1Do= Subject key identifier: 79:FA:B0:D0:B5:0C:3C:AF:13:25:4B:B2:4D:1F:81:03:B2:4B:62:F5 Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Certificate serial: 7496D8B536F87EF756DDE48FFEEEC7FC8A4C5A86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft Manifest number: 04F0 Signing time: Tue 11 Nov 2025 16:21:07 +0000 Manifest this update: Tue 11 Nov 2025 16:16:07 +0000 Manifest next update: Fri 14 Nov 2025 19:38:07 +0000 Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: DfRMCvSsDKoe5edHIWruagxEki45XzRoaly6e0+/08I=) 2: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=) 3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=) 4: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 19:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:96:d8:b5:36:f8:7e:f7:56:dd:e4:8f:fe:ee:c7:fc:8a:4c:5a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Validity Not Before: Nov 11 16:16:07 2025 GMT Not After : Nov 14 19:38:07 2025 GMT Subject: CN=79FAB0D0B50C3CAF13254BB24D1F8103B24B62F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:e5:9e:28:17:fd:f6:05:20:40:24:51:50: 19:f6:46:35:23:8f:90:b8:28:d6:c6:2e:6c:bd:ba: eb:c8:c2:fd:10:f5:15:3e:e5:31:a6:09:4b:07:24: df:86:d4:a9:c4:15:51:d4:9d:f3:f8:c1:5d:28:be: 08:05:81:2d:2e:2f:cf:19:23:b8:03:cb:8a:67:97: 74:fc:8e:7e:60:e5:20:77:24:4f:77:a7:9f:d3:b0: 86:77:d2:6f:24:65:6c:6f:18:e4:16:ec:87:67:bb: 83:57:25:aa:d3:f1:07:27:c9:46:9f:b2:20:7e:cb: 09:5c:20:a7:04:df:24:30:fc:16:2c:f2:e4:b0:fe: 67:dc:38:04:ee:8e:e6:f0:ce:bc:79:8f:e4:2e:f9: 9f:17:75:5c:95:b2:8f:35:09:9b:d0:e8:ca:b6:ed: ff:2f:9c:76:f1:d6:4c:38:f9:a1:a4:d6:02:40:ac: de:ec:da:8d:37:22:98:4e:a9:ba:00:96:fb:81:54: 83:fe:eb:30:b1:ef:76:ef:c1:2c:27:75:54:92:cb: 79:5b:59:0b:35:b7:53:74:35:5b:db:74:8b:d7:2f: f7:83:dc:49:3e:0d:42:47:bd:d6:e5:2b:f9:b9:67: 0f:87:6b:a1:21:ce:2d:a7:5f:5e:0d:4d:aa:da:e6: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:B0:D0:B5:0C:3C:AF:13:25:4B:B2:4D:1F:81:03:B2:4B:62:F5 X509v3 Authority Key Identifier: keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9f:f5:88:1f:96:50:b0:61:b6:f2:45:07:6a:3b:29:ea:d5: 99:2f:b0:7c:9e:74:1d:1e:f7:40:e9:9d:7f:e8:56:1b:5b:2e: f1:6a:5c:0c:cc:ea:c6:44:db:e3:42:68:0e:7e:fd:9b:2f:75: da:88:8f:ac:31:5b:a6:3f:83:41:5b:5a:c6:9d:ac:5d:93:f4: 2b:92:5c:7a:3d:0b:87:47:5a:e2:98:93:10:1f:02:38:7e:c7: a4:00:91:db:bc:d4:85:03:07:23:d3:98:c9:e8:fa:f5:68:78: a8:82:e8:80:1d:8d:62:37:25:e1:56:d7:05:fb:0a:6b:19:e9: fa:aa:44:49:17:24:b9:7b:98:4e:c7:ca:9f:87:a4:3e:dc:e3: 79:af:95:cb:88:91:59:6c:62:3b:4b:81:45:e9:a6:fe:89:57: 9c:98:07:7d:19:6c:8c:d1:75:0e:f6:7a:85:68:8e:e8:8a:2d: 0b:e1:f0:7c:3b:41:cf:a1:cf:7b:62:32:78:df:49:ab:80:12: 1b:97:8a:87:e8:cb:fb:62:92:6b:01:eb:98:f9:00:3a:88:f9: 4c:49:c7:fa:69:43:fd:03:5f:e7:34:76:b4:05:b5:eb:29:23: d6:dc:d3:af:1f:7f:9d:4f:ea:3c:7d:96:7f:7c:80:9a:90:4f: 1e:bc:40:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJbYtTb4fvdW3eSP/u7H/IpMWoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy NDE4N0Q1OTAeFw0yNTExMTExNjE2MDdaFw0yNTExMTQxOTM4MDdaMDMxMTAvBgNV BAMTKDc5RkFCMEQwQjUwQzNDQUYxMzI1NEJCMjREMUY4MTAzQjI0QjYyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxOWeKBf99gUgQCRRUBn2RjUj j5C4KNbGLmy9uuvIwv0Q9RU+5TGmCUsHJN+G1KnEFVHUnfP4wV0ovggFgS0uL88Z I7gDy4pnl3T8jn5g5SB3JE93p5/TsIZ30m8kZWxvGOQW7Idnu4NXJarT8QcnyUaf siB+ywlcIKcE3yQw/BYs8uSw/mfcOATujubwzrx5j+Qu+Z8XdVyVso81CZvQ6Mq2 7f8vnHbx1kw4+aGk1gJArN7s2o03IphOqboAlvuBVIP+6zCx73bvwSwndVSSy3lb WQs1t1N0NVvbdIvXL/eD3Ek+DUJHvdblK/m5Zw+Ha6Ehzi2nX14NTara5kOxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUefqw0LUMPK8TJUuyTR+BA7JLYvUwHwYDVR0j BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4 N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4 RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2f9YgfllCwYbbyRQdqOynq1ZkvsHyedB0e 90DpnX/oVhtbLvFqXAzM6sZE2+NCaA5+/ZsvddqIj6wxW6Y/g0FbWsadrF2T9CuS XHo9C4dHWuKYkxAfAjh+x6QAkdu81IUDByPTmMno+vVoeKiC6IAdjWI3JeFW1wX7 CmsZ6fqqREkXJLl7mE7Hyp+HpD7c43mvlcuIkVlsYjtLgUXppv6JV5yYB30ZbIzR dQ72eoVojuiKLQvh8Hw7Qc+hz3tiMnjfSauAEhuXiofoy/tikmsB65j5ADqI+UxJ x/ppQ/0DX+c0drQFtespI9bc068ff51P6jx9ln98gJqQTx68QDE= -----END CERTIFICATE-----Generated at Thu Nov 13 09:25:19 2025 by rpki-client