$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: CSa8sHT65HMsf7UU7HET79HEv6jFkVrjnQjntWBQvTs= Subject key identifier: 16:69:3A:CA:D9:43:6E:CC:AD:0D:6C:C5:6B:2D:85:0C:99:90:C1:EB Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 0393EE756A03BD65C891C9781AE1B5C23DA46282 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 01F4 Signing time: Sat 28 Jun 2025 18:11:29 +0000 Manifest this update: Sat 28 Jun 2025 18:06:29 +0000 Manifest next update: Tue 01 Jul 2025 21:57:29 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: DsR41PpjzyM8G2c/Glq60eRgCl3O4cq2N+lyqisrTZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:93:ee:75:6a:03:bd:65:c8:91:c9:78:1a:e1:b5:c2:3d:a4:62:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Jun 28 18:06:29 2025 GMT Not After : Jul 1 21:57:29 2025 GMT Subject: CN=16693ACAD9436ECCAD0D6CC56B2D850C9990C1EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:c4:01:5b:58:d2:4f:03:25:48:a2:88:4e: 31:57:ec:a5:1e:f9:9a:1e:6c:41:a1:f7:00:45:eb: bd:58:3d:17:83:0d:9c:43:87:30:8e:2b:77:87:48: 24:b4:31:e5:80:a5:f5:cc:e7:ab:1d:8b:bc:17:3a: 6d:4a:13:7f:f0:fe:a6:e4:cb:b3:c1:bf:e4:2b:a2: e5:b8:0d:3e:54:63:83:a8:c4:91:fc:a5:b3:6a:29: 2d:8a:7a:9a:95:73:28:69:27:2c:20:9e:3b:cd:30: ca:4f:9d:8f:43:2c:ed:b3:b9:0c:42:39:51:18:a2: 4f:35:95:26:b3:46:33:a8:93:e5:42:bb:fe:50:b0: e0:be:d2:e3:f2:9d:7b:e0:fd:16:55:2a:5d:bd:90: c7:6c:e4:b9:77:dc:a4:12:68:e5:cb:9b:d1:dc:a5: 2d:a5:c6:f8:b2:4b:98:f7:69:47:75:a7:63:6a:1f: 5a:fe:c4:fd:cd:28:e9:f0:7d:33:f8:58:05:c5:87: 5e:12:95:45:2b:ca:a1:9e:d0:e9:8b:ab:f4:ba:16: 36:cf:45:e0:ff:6f:ad:fa:ac:6c:c2:64:30:79:c7: 67:0d:6e:16:19:bd:f4:64:e4:7f:c8:2a:4d:ee:f9: 71:6c:9d:c4:b8:c2:da:5b:fc:43:b0:68:f9:29:92: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:69:3A:CA:D9:43:6E:CC:AD:0D:6C:C5:6B:2D:85:0C:99:90:C1:EB X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:48:d6:9e:17:4e:df:1b:17:3f:25:6e:f0:d0:a4:be:ba:ad: 5e:15:18:12:b4:e6:ed:62:c3:33:c9:05:0b:49:70:1a:73:db: 86:65:8f:08:34:f3:1b:0a:2e:d3:94:c5:08:a9:3c:76:58:0d: 12:a3:09:47:4e:d4:c2:e3:db:ae:9a:c8:17:6d:07:88:b0:fb: d3:3d:11:52:78:23:91:c0:16:1e:76:cf:29:18:2f:74:3e:1b: 12:87:0f:82:88:9c:10:78:fb:1f:8e:ec:82:e0:d3:6d:c7:ea: 35:31:a0:02:30:c5:20:b3:9c:16:c9:86:2f:47:ac:d8:56:fe: 41:83:f8:68:78:07:a1:69:d8:ef:97:9a:27:52:62:5a:71:54: 97:ba:9c:df:01:57:d9:73:03:7f:d3:f1:73:62:71:c4:74:e9: 43:08:5d:82:4c:0c:c1:06:c5:24:cd:c7:38:37:a2:69:ed:e7: fd:5a:79:d0:03:55:cb:75:bd:2d:3c:ad:4f:97:e9:02:ab:55: 35:03:c7:c6:64:3e:c9:c7:09:86:ac:38:23:02:a5:ea:44:02: 6f:a9:ca:c2:9f:96:5b:89:eb:aa:49:2f:54:4f:a9:9b:3f:79: 5f:86:62:58:6e:f7:a1:7c:ea:6c:9d:c3:ec:a7:f6:97:ce:b4: a0:11:c5:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5PudWoDvWXIkcl4GuG1wj2kYoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTA2MjgxODA2MjlaFw0yNTA3MDEyMTU3MjlaMDMxMTAvBgNV BAMTKDE2NjkzQUNBRDk0MzZFQ0NBRDBENkNDNTZCMkQ4NTBDOTk5MEMxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8M8QBW1jSTwMlSKKITjFX7KUe +ZoebEGh9wBF671YPReDDZxDhzCOK3eHSCS0MeWApfXM56sdi7wXOm1KE3/w/qbk y7PBv+QrouW4DT5UY4OoxJH8pbNqKS2KepqVcyhpJywgnjvNMMpPnY9DLO2zuQxC OVEYok81lSazRjOok+VCu/5QsOC+0uPynXvg/RZVKl29kMds5Ll33KQSaOXLm9Hc pS2lxviyS5j3aUd1p2NqH1r+xP3NKOnwfTP4WAXFh14SlUUryqGe0OmLq/S6FjbP ReD/b636rGzCZDB5x2cNbhYZvfRk5H/IKk3u+XFsncS4wtpb/EOwaPkpkgNnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFmk6ytlDbsytDWzFay2FDJmQweswHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpI1p4XTt8bFz8lbvDQpL66rV4VGBK05u1i wzPJBQtJcBpz24Zljwg08xsKLtOUxQipPHZYDRKjCUdO1MLj266ayBdtB4iw+9M9 EVJ4I5HAFh52zykYL3Q+GxKHD4KInBB4+x+O7ILg023H6jUxoAIwxSCznBbJhi9H rNhW/kGD+Gh4B6Fp2O+XmidSYlpxVJe6nN8BV9lzA3/T8XNiccR06UMIXYJMDMEG xSTNxzg3omnt5/1aedADVct1vS08rU+X6QKrVTUDx8ZkPsnHCYasOCMCpepEAm+p ysKflluJ66pJL1RPqZs/eV+GYlhu96F86mydw+yn9pfOtKARxbo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:17 2025 by rpki-client