$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: a404iwALUPUaw/mwriDKY8lbZzZDiwOCGEq7bBkLc4E= Subject key identifier: 99:00:53:BE:6F:1C:A5:28:56:85:30:60:F7:F6:31:01:F5:91:9A:2B Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 7EB1DF8F95AB7096A52884118C8F6CE1059DE39A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: 0104 Signing time: Thu 21 Aug 2025 02:42:06 +0000 Manifest this update: Thu 21 Aug 2025 02:37:06 +0000 Manifest next update: Sun 24 Aug 2025 14:35:06 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: Q9J8JdEz9MkWVxKoJYmZU8uz9r17gOAnuVpuOjh7Qn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b1:df:8f:95:ab:70:96:a5:28:84:11:8c:8f:6c:e1:05:9d:e3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Aug 21 02:37:06 2025 GMT Not After : Aug 24 14:35:06 2025 GMT Subject: CN=990053BE6F1CA52856853060F7F63101F5919A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:f4:a2:70:6e:f5:f8:4f:1b:4a:52:c0:fa: 34:cf:4d:04:ff:8d:c1:d5:37:fe:92:85:79:58:8a: f6:65:a8:9e:97:4c:01:78:8c:6d:29:28:7c:e9:65: 7d:18:01:31:86:5e:99:dc:c4:d5:23:54:ce:6e:d5: a8:23:94:d4:fb:54:eb:e3:11:d8:b3:ed:95:73:76: 0b:3b:8b:ef:3f:c5:5f:8e:cd:60:a6:ef:90:61:26: 88:2e:5c:22:34:8e:fb:94:37:3b:26:e1:d4:f0:20: 94:d1:d3:d5:ed:b0:1e:99:ea:63:7e:1e:33:6e:ed: b0:b2:cd:2d:66:68:14:bd:35:3e:e9:d0:bc:e5:92: 12:c2:50:50:06:44:e2:7a:f1:7d:85:0e:4c:8c:ff: 54:ac:03:95:29:d0:3a:26:f6:50:d8:d4:20:94:ac: be:31:c8:46:d2:d9:5f:35:8b:e9:d2:26:0b:20:eb: ab:f9:e2:fa:ce:ed:c9:6f:ef:45:86:b4:a9:3c:37: a5:b8:e2:fb:58:ea:e7:49:00:14:66:c5:7e:bb:bc: a9:5d:7b:6b:6a:bf:db:c0:0a:a3:88:44:de:56:87: c9:13:4e:f4:12:a1:79:ca:12:70:19:bc:10:02:7b: 0c:07:5c:60:ca:6e:d1:cb:97:b4:c5:55:6c:c2:16: 5a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:00:53:BE:6F:1C:A5:28:56:85:30:60:F7:F6:31:01:F5:91:9A:2B X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cd:4f:16:95:f5:cb:85:93:9e:3d:bc:29:1e:12:83:a4:38: 77:62:03:40:1f:62:13:37:40:2d:4c:ff:69:00:a1:59:a6:0e: 38:b2:4f:c3:8c:9b:ee:88:fe:25:36:04:8f:c0:8c:9c:5e:b2: 71:54:66:a4:62:de:0f:0d:c3:ab:0a:1b:7e:6e:4b:8f:91:7d: 1a:06:3b:28:6d:e0:ad:e3:a5:ca:64:cc:70:59:53:12:92:b6: ba:7b:27:ce:f8:b5:49:a3:51:c2:ee:b3:8d:7e:70:3d:13:95: 7d:80:08:4d:25:8e:a9:4f:86:f6:60:8e:36:f4:e1:41:ed:90: 62:3e:e9:df:b1:a7:99:71:5b:b9:bc:1c:66:b4:80:58:bc:7d: e7:f8:1b:ab:02:aa:dc:b9:cd:b9:71:b5:17:41:77:86:f9:0b: 89:35:25:92:7f:a1:32:7d:36:93:9a:ac:b2:e8:f5:76:3c:83: fc:9c:53:19:af:07:05:d0:04:4d:77:de:2d:9a:95:64:a9:03: 2e:6d:0d:64:33:f1:b5:8f:35:bd:06:ba:72:62:ff:fd:db:b1: d9:27:24:eb:cd:22:3d:a4:35:01:8c:2b:8a:cc:90:b5:56:77: 89:a7:e4:35:b6:b6:4b:63:f6:1a:c6:bd:ab:50:68:60:34:6b: ab:f8:93:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfrHfj5WrcJalKIQRjI9s4QWd45owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNTA4MjEwMjM3MDZaFw0yNTA4MjQxNDM1MDZaMDMxMTAvBgNV BAMTKDk5MDA1M0JFNkYxQ0E1Mjg1Njg1MzA2MEY3RjYzMTAxRjU5MTlBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8/SicG71+E8bSlLA+jTPTQT/ jcHVN/6ShXlYivZlqJ6XTAF4jG0pKHzpZX0YATGGXpncxNUjVM5u1agjlNT7VOvj Ediz7ZVzdgs7i+8/xV+OzWCm75BhJoguXCI0jvuUNzsm4dTwIJTR09XtsB6Z6mN+ HjNu7bCyzS1maBS9NT7p0LzlkhLCUFAGROJ68X2FDkyM/1SsA5Up0Dom9lDY1CCU rL4xyEbS2V81i+nSJgsg66v54vrO7clv70WGtKk8N6W44vtY6udJABRmxX67vKld e2tqv9vACqOIRN5Wh8kTTvQSoXnKEnAZvBACewwHXGDKbtHLl7TFVWzCFlqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQBTvm8cpShWhTBg9/YxAfWRmiswHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDNTxaV9cuFk549vCkeEoOkOHdiA0AfYhM3 QC1M/2kAoVmmDjiyT8OMm+6I/iU2BI/AjJxesnFUZqRi3g8Nw6sKG35uS4+RfRoG Oyht4K3jpcpkzHBZUxKStrp7J874tUmjUcLus41+cD0TlX2ACE0ljqlPhvZgjjb0 4UHtkGI+6d+xp5lxW7m8HGa0gFi8fef4G6sCqty5zblxtRdBd4b5C4k1JZJ/oTJ9 NpOarLLo9XY8g/ycUxmvBwXQBE133i2alWSpAy5tDWQz8bWPNb0GunJi//3bsdkn JOvNIj2kNQGMK4rMkLVWd4mn5DW2tktj9hrGvatQaGA0a6v4k1w= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:33 2025 by rpki-client