$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: 2bdruaxU5NlgA+GHkXckXrDEl1ct49ANwK0KbzhkX8I= Subject key identifier: CA:DA:8E:17:FD:10:2E:C9:4C:AE:9E:6B:5E:26:04:AE:1B:02:4F:93 Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 71DB0E990BE8D87A185266EE43472A0C5C75ED36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 020C Signing time: Thu 21 Aug 2025 18:51:32 +0000 Manifest this update: Thu 21 Aug 2025 18:46:32 +0000 Manifest next update: Mon 25 Aug 2025 01:26:32 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: DDscFbE58IX7PwlWgbeguwHocSS78xmVQZgvA5xZiTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:db:0e:99:0b:e8:d8:7a:18:52:66:ee:43:47:2a:0c:5c:75:ed:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Aug 21 18:46:32 2025 GMT Not After : Aug 25 01:26:32 2025 GMT Subject: CN=CADA8E17FD102EC94CAE9E6B5E2604AE1B024F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:93:0b:22:cd:d6:9f:59:75:a2:94:1e:ba:7a: f2:18:e7:fd:89:10:64:7b:89:ff:f2:e1:23:1c:8d: e0:08:61:46:c0:75:0b:37:6b:e0:59:8d:2c:e5:6c: c9:e1:01:91:85:fb:45:cd:ee:62:1c:de:03:7a:06: 3f:b5:e8:2f:cc:a4:53:0b:5f:e4:fd:b8:b2:e5:75: 75:fc:97:fa:6d:bd:65:66:00:bf:7e:11:06:ad:09: 2f:28:11:aa:ef:a1:d9:eb:d3:a3:d9:22:f6:5d:4e: 37:f9:ba:30:d4:7f:d5:5d:67:37:25:c1:3d:3d:47: 1f:9c:b9:3a:0f:71:cc:8a:ba:7f:40:97:b1:cc:4d: a0:e9:8d:ab:6f:45:14:8c:89:4a:91:bf:28:42:e5: af:fe:83:ad:55:0e:a4:e6:1d:3c:66:b8:32:ad:5b: ee:0a:e9:8d:50:e0:25:30:d2:f1:b3:0a:21:fd:0a: 3f:4b:f9:4a:8a:35:e0:04:44:be:9f:f5:9f:9d:18: 7f:34:8c:63:77:0f:45:c1:fc:48:d3:c2:db:a5:b3: 7e:62:45:85:7b:a3:49:bd:72:59:73:9f:27:ed:20: f3:61:5a:af:de:45:6c:d0:63:20:fc:ee:e1:a4:ae: e2:42:c9:e7:62:25:89:1d:6a:c7:14:3b:40:b9:5f: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:8E:17:FD:10:2E:C9:4C:AE:9E:6B:5E:26:04:AE:1B:02:4F:93 X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b9:d4:88:d8:a4:17:05:71:8b:cf:4d:0d:5f:77:dc:0f:aa: 7d:c4:a7:e9:8d:70:e1:ba:3d:c4:c1:ac:9f:30:33:17:ef:b3: 76:64:1b:e0:61:02:6a:7b:a7:2f:d5:bf:b7:0e:60:b7:f0:1a: 3f:0a:48:43:94:86:0f:ef:97:60:1d:0f:36:9e:a5:40:d9:55: da:14:1b:9c:90:81:e9:1b:0e:b7:e4:9a:c7:27:83:89:eb:33: d6:3f:d2:7c:dd:95:9d:1d:3c:77:1f:1b:32:ae:2a:3d:51:7a: 4b:85:65:85:db:be:21:07:3e:ab:7a:1e:6c:9a:4a:ba:c9:f6: 6f:66:8e:d0:a7:f7:46:05:6f:da:60:93:a0:04:ab:22:e0:bd: d4:89:f7:07:0b:93:2a:77:75:fd:88:d5:86:64:1c:bd:07:51: 3f:68:0f:4a:f9:f0:34:58:f5:9e:76:20:a8:94:75:4f:17:fa: 95:b6:d4:16:ce:73:df:de:bf:f0:55:c0:af:12:32:f2:e8:a2: 4d:7e:1e:f9:e3:99:f5:4d:0a:69:5d:53:cf:70:02:2f:54:44: af:a8:6d:37:bd:b4:6b:3b:67:cf:05:eb:44:01:ee:80:93:1d: 28:60:d4:71:99:b2:64:0e:2b:64:3a:89:a9:18:f1:87:03:ad: b4:f8:09:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcdsOmQvo2HoYUmbuQ0cqDFx17TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTA4MjExODQ2MzJaFw0yNTA4MjUwMTI2MzJaMDMxMTAvBgNV BAMTKENBREE4RTE3RkQxMDJFQzk0Q0FFOUU2QjVFMjYwNEFFMUIwMjRGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxkwsizdafWXWilB66evIY5/2J EGR7if/y4SMcjeAIYUbAdQs3a+BZjSzlbMnhAZGF+0XN7mIc3gN6Bj+16C/MpFML X+T9uLLldXX8l/ptvWVmAL9+EQatCS8oEarvodnr06PZIvZdTjf5ujDUf9VdZzcl wT09Rx+cuToPccyKun9Al7HMTaDpjatvRRSMiUqRvyhC5a/+g61VDqTmHTxmuDKt W+4K6Y1Q4CUw0vGzCiH9Cj9L+UqKNeAERL6f9Z+dGH80jGN3D0XB/EjTwtuls35i RYV7o0m9cllznyftIPNhWq/eRWzQYyD87uGkruJCyediJYkdascUO0C5X4WfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUytqOF/0QLslMrp5rXiYErhsCT5MwHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAe51IjYpBcFcYvPTQ1fd9wPqn3Ep+mNcOG6 PcTBrJ8wMxfvs3ZkG+BhAmp7py/Vv7cOYLfwGj8KSEOUhg/vl2AdDzaepUDZVdoU G5yQgekbDrfkmscng4nrM9Y/0nzdlZ0dPHcfGzKuKj1RekuFZYXbviEHPqt6Hmya SrrJ9m9mjtCn90YFb9pgk6AEqyLgvdSJ9wcLkyp3df2I1YZkHL0HUT9oD0r58DRY 9Z52IKiUdU8X+pW21BbOc9/ev/BVwK8SMvLook1+HvnjmfVNCmldU89wAi9URK+o bTe9tGs7Z88F60QB7oCTHShg1HGZsmQOK2Q6iakY8YcDrbT4CSA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:03:29 2025 by rpki-client