$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: 9RnM7DisVFzE/G6+5YHCDJHhx5da8903P2KC6NghPkY= Subject key identifier: CC:EA:CB:5D:D5:6F:E8:2C:7F:48:58:BC:CB:4B:D9:5A:9D:1E:C6:7B Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 0820E3600C2D53EF8CDFE6514449F5266FA4B6F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 017F Signing time: Sat 23 Aug 2025 17:12:01 +0000 Manifest this update: Sat 23 Aug 2025 17:07:01 +0000 Manifest next update: Wed 27 Aug 2025 01:55:01 +0000 Files and hashes: 1: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) 2: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) 3: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) 4: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: sigbusj8Tsn1RtyOUrDn8TvmGrfXmF548m8KAPvSFHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:20:e3:60:0c:2d:53:ef:8c:df:e6:51:44:49:f5:26:6f:a4:b6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Aug 23 17:07:01 2025 GMT Not After : Aug 27 01:55:01 2025 GMT Subject: CN=CCEACB5DD56FE82C7F4858BCCB4BD95A9D1EC67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:a2:a1:f8:85:e5:d9:f8:c7:3b:d7:a2:ce: cc:54:24:6e:4f:41:ea:f8:c2:7b:3c:da:e9:86:41: 90:a5:a4:6e:56:6b:4e:26:07:10:4b:53:7c:7c:5b: 77:2e:1d:90:80:d2:18:60:e2:ff:4c:69:82:0e:4a: e5:9d:5f:2d:23:d7:c2:2f:a9:84:46:56:f3:4a:9c: e0:77:94:86:5c:e7:61:b8:01:4a:c5:1d:b1:2d:56: 89:29:55:0d:0a:09:79:4b:9b:9b:6b:4d:36:13:7a: 96:21:7f:3f:2b:cc:61:2b:2d:83:da:af:e1:28:f3: 15:4c:f8:79:f1:bb:c6:56:58:80:f6:67:04:67:4e: 9d:7f:0d:37:dd:71:25:1a:4e:39:47:e2:23:aa:6a: a8:3f:36:9d:81:27:3f:53:68:3f:ea:27:43:0c:fa: ee:11:12:e3:80:59:bd:92:01:23:56:3a:03:8c:00: 4e:73:df:5a:c2:b9:58:2d:33:d0:5e:b3:89:d3:87: 2f:2a:ca:49:d7:a4:54:a7:a6:aa:da:1d:18:bf:b6: ba:6a:66:93:92:a3:5e:39:7c:b8:0b:7e:f5:66:73: 8f:44:34:03:ad:6f:07:7a:17:53:33:ce:a3:9e:09: cd:a7:10:a4:3d:5d:e9:b6:ab:fe:d6:e8:33:8a:72: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EA:CB:5D:D5:6F:E8:2C:7F:48:58:BC:CB:4B:D9:5A:9D:1E:C6:7B X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:94:8e:5e:3b:ec:f0:13:58:86:b1:a9:37:a2:ef:69:12:c4: 30:51:a2:8c:8c:d0:58:c3:aa:cf:60:aa:08:21:45:d0:16:f2: 05:09:c9:2f:5c:b8:85:03:6b:88:05:01:bf:a7:52:20:d1:12: a8:f4:56:bb:be:5d:88:3c:ba:1b:1c:9e:1b:5d:08:20:29:66: 6e:a2:a5:f9:1d:3b:e7:d0:72:ad:4b:f9:60:ae:47:36:24:92: b6:aa:13:31:6c:59:1d:70:87:2c:9a:3c:74:57:3f:16:80:53: f9:bb:6c:34:a6:91:57:42:ee:3e:b2:05:03:68:f4:a6:78:54: 7f:d6:7e:fe:99:a0:02:04:e6:7d:05:3e:34:e6:7a:0e:90:77: 41:f9:19:79:8b:0e:50:68:d5:ee:41:ce:6a:dc:e2:b5:09:18: 20:61:83:2d:2b:2f:15:63:7a:5f:20:13:94:1e:61:06:20:64: 9c:20:fd:0d:89:bb:d2:d6:31:d5:ef:ac:71:06:65:6d:55:86: 58:bf:bf:bf:97:fb:83:41:ae:fa:b2:6b:86:14:da:19:a3:6f: a1:0c:e1:58:0a:16:03:6e:a6:b2:3c:89:50:e0:0c:a0:66:7b: ac:38:85:5e:87:84:33:e6:54:e3:6b:95:27:51:74:0a:8e:d0: e2:b1:0a:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCDjYAwtU++M3+ZRREn1Jm+ktvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNTA4MjMxNzA3MDFaFw0yNTA4MjcwMTU1MDFaMDMxMTAvBgNV BAMTKENDRUFDQjVERDU2RkU4MkM3RjQ4NThCQ0NCNEJEOTVBOUQxRUM2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxqKh+IXl2fjHO9eizsxUJG5P Qer4wns82umGQZClpG5Wa04mBxBLU3x8W3cuHZCA0hhg4v9MaYIOSuWdXy0j18Iv qYRGVvNKnOB3lIZc52G4AUrFHbEtVokpVQ0KCXlLm5trTTYTepYhfz8rzGErLYPa r+Eo8xVM+Hnxu8ZWWID2ZwRnTp1/DTfdcSUaTjlH4iOqaqg/Np2BJz9TaD/qJ0MM +u4REuOAWb2SASNWOgOMAE5z31rCuVgtM9Bes4nThy8qyknXpFSnpqraHRi/trpq ZpOSo145fLgLfvVmc49ENAOtbwd6F1MzzqOeCc2nEKQ9Xem2q/7W6DOKclyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOrLXdVv6Cx/SFi8y0vZWp0exnswHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+Ujl477PATWIaxqTei72kSxDBRooyM0FjD qs9gqgghRdAW8gUJyS9cuIUDa4gFAb+nUiDREqj0Vru+XYg8uhscnhtdCCApZm6i pfkdO+fQcq1L+WCuRzYkkraqEzFsWR1whyyaPHRXPxaAU/m7bDSmkVdC7j6yBQNo 9KZ4VH/Wfv6ZoAIE5n0FPjTmeg6Qd0H5GXmLDlBo1e5Bzmrc4rUJGCBhgy0rLxVj el8gE5QeYQYgZJwg/Q2Ju9LWMdXvrHEGZW1Vhli/v7+X+4NBrvqya4YU2hmjb6EM 4VgKFgNuprI8iVDgDKBme6w4hV6HhDPmVONrlSdRdAqO0OKxCiY= -----END CERTIFICATE-----Generated at Sat Aug 23 19:50:02 2025 by rpki-client