$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: +rZhKb5mQzdKa0JEI76Q+WrSALPY9ks4+oC2Ka816zQ= Subject key identifier: C4:52:23:4A:C9:09:95:4C:EB:A2:7A:A9:6E:63:F3:64:90:4A:38:26 Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 42A78150BE924995B89987F8FCD91EF797469608 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 01DE Signing time: Fri 09 May 2025 17:01:29 +0000 Manifest this update: Fri 09 May 2025 16:56:29 +0000 Manifest next update: Mon 12 May 2025 21:42:29 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: NMSeJ71x0bQlgA4jwXBBMS6M2xWz5dufCQmiZJNhvtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a7:81:50:be:92:49:95:b8:99:87:f8:fc:d9:1e:f7:97:46:96:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: May 9 16:56:29 2025 GMT Not After : May 12 21:42:29 2025 GMT Subject: CN=C452234AC909954CEBA27AA96E63F364904A3826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:e1:53:ad:25:8d:5d:a9:99:3c:bf:7a:53: fb:91:67:33:4f:7b:81:37:2b:85:e7:7b:38:9e:05: 85:93:2a:3f:8f:57:af:bd:4f:3a:93:ba:a0:43:62: 84:ac:d3:ac:d9:56:fa:98:e2:91:9f:94:e6:2a:82: d7:df:dc:16:c5:02:a4:c9:ef:34:3c:e8:1c:4c:fe: 93:9e:c1:15:1e:aa:76:80:8e:f6:b5:f8:2d:8c:40: b6:b0:9d:41:a0:d7:47:55:e2:64:67:4d:26:c7:ed: 7c:69:02:c7:c9:09:30:2f:f5:d6:90:71:86:60:89: 83:16:25:61:45:92:52:80:1f:d1:06:fb:29:36:42: e2:3e:38:c7:77:4a:cb:4d:39:43:de:f2:8d:62:3d: 31:b3:d9:81:15:be:60:f5:a3:91:d9:47:62:a8:c8: ef:23:b0:31:45:51:90:ce:9f:30:82:6b:b3:2f:53: 76:fb:a3:b9:14:a8:7c:e2:1a:e0:3d:0e:d2:51:47: 64:cb:d3:8a:6d:e2:0e:30:7b:f1:fd:55:ee:67:5f: d8:15:50:23:96:fb:65:16:c5:ea:e3:8b:f8:7e:ef: 26:40:c4:18:52:67:27:4e:a4:61:88:e1:51:31:94: 24:d7:f9:75:cf:c9:f7:e2:f0:c3:a8:37:cd:62:e0: 6c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:52:23:4A:C9:09:95:4C:EB:A2:7A:A9:6E:63:F3:64:90:4A:38:26 X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:91:f1:3a:d5:f2:36:3e:f5:96:13:4b:09:4f:6e:a9:ba:f6: a6:1f:9f:3f:ab:57:fe:e3:1b:75:1d:06:34:13:7e:b6:a4:02: 6d:e9:13:cd:03:bf:eb:04:63:e4:b5:6d:46:ca:3d:af:a3:6b: 2a:c1:7d:20:7f:73:0a:d8:c0:4a:30:44:fc:32:f5:73:ba:53: 5b:40:de:72:4d:a0:ef:48:c1:58:83:43:91:2f:0f:d9:ae:35: df:db:9f:e3:ab:b0:d2:32:0e:75:ad:0c:1a:39:41:6f:08:e9: 26:ad:60:9b:a0:29:12:fc:55:b7:28:36:e6:95:a3:2b:3e:4c: 9c:7e:fa:70:63:07:6d:7d:67:0e:81:41:31:53:96:52:3e:69: 3a:ba:cc:52:74:b9:d6:14:04:e3:87:fa:ae:ad:e1:6a:28:28: 93:f4:68:68:10:26:7d:b6:c8:0a:0e:21:cf:d7:b0:17:d9:cd: 63:51:56:6e:6f:52:1a:88:f0:f3:09:40:46:21:e5:ce:df:65: 16:dd:9b:21:be:33:ee:18:a9:9d:66:ae:5e:f2:6b:42:d2:93: aa:ae:69:ac:23:3b:48:22:0d:36:d0:2b:0a:d5:49:65:24:17: 3c:1b:e9:d6:60:31:55:26:0a:2f:ce:3e:90:41:37:67:dc:f2: d8:e8:4d:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqeBUL6SSZW4mYf4/Nke95dGlggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTA1MDkxNjU2MjlaFw0yNTA1MTIyMTQyMjlaMDMxMTAvBgNV BAMTKEM0NTIyMzRBQzkwOTk1NENFQkEyN0FBOTZFNjNGMzY0OTA0QTM4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAeFTrSWNXamZPL96U/uRZzNP e4E3K4XnezieBYWTKj+PV6+9TzqTuqBDYoSs06zZVvqY4pGflOYqgtff3BbFAqTJ 7zQ86BxM/pOewRUeqnaAjva1+C2MQLawnUGg10dV4mRnTSbH7XxpAsfJCTAv9daQ cYZgiYMWJWFFklKAH9EG+yk2QuI+OMd3SstNOUPe8o1iPTGz2YEVvmD1o5HZR2Ko yO8jsDFFUZDOnzCCa7MvU3b7o7kUqHziGuA9DtJRR2TL04pt4g4we/H9Ve5nX9gV UCOW+2UWxerji/h+7yZAxBhSZydOpGGI4VExlCTX+XXPyffi8MOoN81i4GwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxFIjSskJlUzronqpbmPzZJBKOCYwHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyR8TrV8jY+9ZYTSwlPbqm69qYfnz+rV/7j G3UdBjQTfrakAm3pE80Dv+sEY+S1bUbKPa+jayrBfSB/cwrYwEowRPwy9XO6U1tA 3nJNoO9IwViDQ5EvD9muNd/bn+OrsNIyDnWtDBo5QW8I6SatYJugKRL8VbcoNuaV oys+TJx++nBjB219Zw6BQTFTllI+aTq6zFJ0udYUBOOH+q6t4WooKJP0aGgQJn22 yAoOIc/XsBfZzWNRVm5vUhqI8PMJQEYh5c7fZRbdmyG+M+4YqZ1mrl7ya0LSk6qu aawjO0giDTbQKwrVSWUkFzwb6dZgMVUmCi/OPpBBN2fc8tjoTa4= -----END CERTIFICATE-----Generated at Sun May 11 05:13:14 2025 by rpki-client