$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: 9FYvlYILPQMzEQW+s+IM/gqq/48pH3+T5E8Ts89XQEM= Subject key identifier: FD:BD:5D:D5:E0:6A:BD:54:F6:CA:5E:26:59:F7:FD:D8:EF:43:85:6B Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 1DA95B9EA63F1C7F8B8E58BE183B5884028B854A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 0167 Signing time: Sun 29 Jun 2025 21:41:59 +0000 Manifest this update: Sun 29 Jun 2025 21:36:59 +0000 Manifest next update: Thu 03 Jul 2025 06:44:59 +0000 Files and hashes: 1: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) 2: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) 3: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: XF6VU79VUKIaiu8ES66EAfCUkLxu/GAd1h+lkcsQOcY=) 4: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 06:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a9:5b:9e:a6:3f:1c:7f:8b:8e:58:be:18:3b:58:84:02:8b:85:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Jun 29 21:36:59 2025 GMT Not After : Jul 3 06:44:59 2025 GMT Subject: CN=FDBD5DD5E06ABD54F6CA5E2659F7FDD8EF43856B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:ff:e4:6f:56:1a:25:09:cc:98:09:5a:86: 0a:57:df:cb:5a:bd:5a:57:71:09:51:84:e6:23:4a: 0b:ee:f9:0c:dd:82:94:92:a8:c6:70:9d:d5:ab:d8: 23:d3:cd:35:62:f0:5d:0c:10:aa:35:e0:a1:99:5c: fd:60:66:12:dd:1e:f6:27:53:a2:d2:4f:d8:3d:a6: e1:cf:e7:a2:34:91:4e:b3:43:02:9e:34:c1:c6:6d: 01:8a:60:91:1d:9d:d2:48:2e:f9:03:11:85:b9:ac: 9b:70:b9:86:86:55:9c:56:a8:d4:bf:03:94:d3:49: 70:54:b0:a6:74:16:94:fb:47:80:9b:f3:5b:de:c8: 73:a1:72:09:22:9a:33:5f:5c:91:62:5e:1d:6e:cc: 4f:1e:94:41:be:35:a2:6c:e7:ac:f2:24:08:f5:9e: 18:11:b2:e4:96:bf:8b:84:35:0c:75:75:7b:2d:78: 07:bb:de:05:c9:c0:32:b1:e4:7a:77:11:6a:76:6a: c4:64:6b:46:22:e5:11:34:18:b6:79:28:1e:cd:77: d8:1d:0d:96:1d:4f:ea:38:ed:25:53:b3:d6:80:62: 59:0b:f7:d7:67:28:45:01:4d:6a:6e:55:e8:40:7c: 96:3e:ad:af:1a:c3:0d:ed:55:cd:08:f5:61:f3:7d: 53:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BD:5D:D5:E0:6A:BD:54:F6:CA:5E:26:59:F7:FD:D8:EF:43:85:6B X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:50:a8:3d:9a:5a:f0:4f:19:d6:ad:9b:ef:32:d4:88:16:d3: 8c:8f:c4:c2:08:72:72:02:a2:2e:77:19:a7:e7:be:a9:09:a1: a6:ed:71:fb:8c:c1:7d:d9:11:b3:b2:72:0d:b2:46:23:60:e3: 37:73:6f:1c:24:63:8b:ae:01:2e:1c:ed:ea:6f:44:f0:06:47: fd:4f:9d:a5:c1:0b:25:c0:0b:2d:37:3d:44:5d:84:f8:9c:b8: a8:35:c0:be:ec:7e:d8:75:25:85:4d:d5:b1:c1:11:92:5d:b4: b4:37:22:a3:20:c2:56:32:70:c0:f7:c0:33:e4:bc:dd:cf:b3: 69:f1:df:ae:d1:65:5f:b9:ca:76:21:48:a7:9c:9a:43:0f:4a: e9:70:88:28:5a:e8:62:e8:07:51:6d:93:67:bf:02:6d:47:96: 21:7d:74:a7:e8:a0:48:05:0d:30:e1:1b:31:67:8c:a5:5a:bf: de:e6:aa:8d:7d:97:0b:db:30:3c:b0:a4:0a:41:66:a3:6b:f1: ce:9d:81:40:13:7d:20:19:28:c4:bc:1d:89:90:53:8c:0f:e8: 34:53:13:36:5e:75:bf:ae:f2:a6:4b:6a:5c:7d:14:54:a7:86: fc:1e:c8:e6:00:ee:b2:23:98:61:b5:18:4c:68:4d:a0:0c:b9: 97:de:42:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHalbnqY/HH+Ljli+GDtYhAKLhUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNTA2MjkyMTM2NTlaFw0yNTA3MDMwNjQ0NTlaMDMxMTAvBgNV BAMTKEZEQkQ1REQ1RTA2QUJENTRGNkNBNUUyNjU5RjdGREQ4RUY0Mzg1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvS//kb1YaJQnMmAlahgpX38ta vVpXcQlRhOYjSgvu+QzdgpSSqMZwndWr2CPTzTVi8F0MEKo14KGZXP1gZhLdHvYn U6LST9g9puHP56I0kU6zQwKeNMHGbQGKYJEdndJILvkDEYW5rJtwuYaGVZxWqNS/ A5TTSXBUsKZ0FpT7R4Cb81veyHOhcgkimjNfXJFiXh1uzE8elEG+NaJs56zyJAj1 nhgRsuSWv4uENQx1dXsteAe73gXJwDKx5Hp3EWp2asRka0Yi5RE0GLZ5KB7Nd9gd DZYdT+o47SVTs9aAYlkL99dnKEUBTWpuVehAfJY+ra8aww3tVc0I9WHzfVPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/b1d1eBqvVT2yl4mWff92O9DhWswHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBQqD2aWvBPGdatm+8y1IgW04yPxMIIcnIC oi53GafnvqkJoabtcfuMwX3ZEbOycg2yRiNg4zdzbxwkY4uuAS4c7epvRPAGR/1P naXBCyXACy03PURdhPicuKg1wL7sfth1JYVN1bHBEZJdtLQ3IqMgwlYycMD3wDPk vN3Ps2nx367RZV+5ynYhSKecmkMPSulwiCha6GLoB1Ftk2e/Am1HliF9dKfooEgF DTDhGzFnjKVav97mqo19lwvbMDywpApBZqNr8c6dgUATfSAZKMS8HYmQU4wP6DRT EzZedb+u8qZLalx9FFSnhvweyOYA7rIjmGG1GExoTaAMuZfeQiU= -----END CERTIFICATE-----Generated at Tue Jul 1 11:51:50 2025 by rpki-client