$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: Y4m5bCRO/eQzU4W14gdBIzzLCZF9PEe9Hz9X0eYfzwM= Subject key identifier: C5:14:BE:04:E7:84:D3:AA:A2:75:ED:A9:A3:21:8C:1F:80:49:FF:5E Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 14F5F779788B7763D216086946F0BBAD5D87B085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: 010A Signing time: Wed 03 Sep 2025 15:02:08 +0000 Manifest this update: Wed 03 Sep 2025 14:57:08 +0000 Manifest next update: Sat 06 Sep 2025 22:20:08 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: HSezcJ4HgM1PP7iCYbkvmhmb+e9JN4ApjTBw2jba004=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f5:f7:79:78:8b:77:63:d2:16:08:69:46:f0:bb:ad:5d:87:b0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Sep 3 14:57:08 2025 GMT Not After : Sep 6 22:20:08 2025 GMT Subject: CN=C514BE04E784D3AAA275EDA9A3218C1F8049FF5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:73:c6:67:12:02:8f:50:fa:80:dd:e5:a2: b4:22:e5:15:d6:07:c6:9e:42:77:2a:ca:1a:6b:54: 92:8c:0e:4d:2d:ee:45:2d:2e:36:d1:47:02:a8:0e: e4:91:dc:5a:e9:ae:cc:e9:fc:cb:2e:03:c9:85:af: c0:bb:01:e6:d4:0d:fe:7d:6a:38:3b:c9:88:41:51: 1f:f7:0e:ff:3a:b2:31:d1:11:4c:d3:ec:b3:97:9a: 21:ea:d4:d5:00:c9:55:06:aa:1c:d7:6b:ec:13:cf: 24:8a:ea:b9:74:4f:86:01:2d:95:14:2c:35:a5:90: de:6b:82:07:9a:3d:5b:36:ae:8f:4d:e4:a4:04:60: e2:9e:54:80:7c:1d:2f:98:46:9b:34:94:9a:44:07: 4e:eb:bd:f0:4d:09:2f:41:29:cf:3b:a1:24:07:18: f1:5d:c1:55:a1:b7:4c:c5:56:cc:50:6e:03:b1:de: be:33:e7:6a:e4:37:ad:28:db:83:8f:55:8a:54:b8: 67:fb:cf:54:ed:15:c6:ae:fb:86:e7:f4:7c:66:da: da:aa:3d:9a:41:a8:d8:9a:86:ea:b3:aa:b3:29:a0: 3b:92:52:0d:36:3c:6f:61:1c:78:9b:0c:06:e7:85: 7b:78:6b:3d:1f:b7:da:3a:56:37:5e:2b:82:62:33: 37:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:14:BE:04:E7:84:D3:AA:A2:75:ED:A9:A3:21:8C:1F:80:49:FF:5E X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:41:23:ba:fc:e6:4a:1c:61:3e:2d:74:e3:05:38:f4:29:3e: 0b:8a:c1:cc:e2:53:1b:97:f2:14:82:58:33:7e:6a:89:45:b2: ea:f6:1d:bc:35:af:b2:26:32:a4:5b:f6:f8:5f:60:56:eb:28: b1:f4:73:28:10:1a:b8:92:4d:1c:63:a4:41:26:5c:3e:03:9b: 6c:33:89:b0:4f:63:e9:99:b3:b5:5d:1b:25:43:5b:55:f1:ef: d6:94:fd:11:7f:5a:c6:1d:ac:8a:90:52:29:1f:48:c2:b5:91: f3:66:6a:51:b6:34:fd:96:26:02:95:10:1b:3b:1c:b6:24:9f: 7a:0c:f9:64:33:fa:a9:fd:c8:76:17:eb:20:e2:f9:0b:e9:a1: e3:66:c0:7c:8c:02:7e:e8:66:9c:7e:95:92:e1:ad:d1:3d:5a: 24:43:d7:0e:1a:05:9c:34:71:e6:35:c2:e3:d9:dd:8e:10:7b: 7f:1e:88:4b:83:47:81:76:c1:4d:af:f1:88:7d:88:78:50:f8: ee:1a:2b:77:d3:65:48:c9:29:59:a7:5a:83:57:db:15:a5:2a: 3e:0c:11:e1:eb:a4:3f:f5:8a:58:94:b7:43:2d:59:23:00:f4: 0a:09:ab:64:84:ac:47:85:66:43:94:5e:bd:32:df:86:a7:48: 9e:d3:ff:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPX3eXiLd2PSFghpRvC7rV2HsIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNTA5MDMxNDU3MDhaFw0yNTA5MDYyMjIwMDhaMDMxMTAvBgNV BAMTKEM1MTRCRTA0RTc4NEQzQUFBMjc1RURBOUEzMjE4QzFGODA0OUZGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpnPGZxICj1D6gN3lorQi5RXW B8aeQncqyhprVJKMDk0t7kUtLjbRRwKoDuSR3Frprszp/MsuA8mFr8C7AebUDf59 ajg7yYhBUR/3Dv86sjHREUzT7LOXmiHq1NUAyVUGqhzXa+wTzySK6rl0T4YBLZUU LDWlkN5rggeaPVs2ro9N5KQEYOKeVIB8HS+YRps0lJpEB07rvfBNCS9BKc87oSQH GPFdwVWht0zFVsxQbgOx3r4z52rkN60o24OPVYpUuGf7z1TtFcau+4bn9Hxm2tqq PZpBqNiahuqzqrMpoDuSUg02PG9hHHibDAbnhXt4az0ft9o6VjdeK4JiMzcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRS+BOeE06qide2poyGMH4BJ/14wHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdBI7r85kocYT4tdOMFOPQpPguKwcziUxuX 8hSCWDN+aolFsur2Hbw1r7ImMqRb9vhfYFbrKLH0cygQGriSTRxjpEEmXD4Dm2wz ibBPY+mZs7VdGyVDW1Xx79aU/RF/WsYdrIqQUikfSMK1kfNmalG2NP2WJgKVEBs7 HLYkn3oM+WQz+qn9yHYX6yDi+QvpoeNmwHyMAn7oZpx+lZLhrdE9WiRD1w4aBZw0 ceY1wuPZ3Y4Qe38eiEuDR4F2wU2v8Yh9iHhQ+O4aK3fTZUjJKVmnWoNX2xWlKj4M EeHrpD/1iliUt0MtWSMA9AoJq2SErEeFZkOUXr0y34anSJ7T/wk= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:21 2025 by rpki-client