$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: j4QD3WnB7wn98tS5YrcF4OG2CHUkHje60FZTATonL1U= Subject key identifier: 3B:34:C6:46:3A:BB:27:D0:95:08:AB:A9:7A:AE:8E:68:67:E9:D0:28 Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 7D64D0629513430FDC63E07339D90B9227831CC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: D5 Signing time: Thu 08 May 2025 20:42:03 +0000 Manifest this update: Thu 08 May 2025 20:37:03 +0000 Manifest next update: Mon 12 May 2025 08:14:03 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: UX6d2YI+c1Isaxsc6kuj+00I6JU8VAFj0PWj4o5PTB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:64:d0:62:95:13:43:0f:dc:63:e0:73:39:d9:0b:92:27:83:1c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: May 8 20:37:03 2025 GMT Not After : May 12 08:14:03 2025 GMT Subject: CN=3B34C6463ABB27D09508ABA97AAE8E6867E9D028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:3d:47:84:1d:1c:c6:8d:fe:00:14:2f:a3: 44:49:d8:58:84:95:bb:c4:76:fc:4b:05:1b:d9:58: 6c:f7:af:04:eb:b7:e0:98:27:72:85:bb:e2:88:49: 0d:43:ac:22:0a:2f:2b:a5:51:fb:f1:b1:ed:7f:6f: 47:8b:a2:d7:bd:b5:0b:7c:13:ae:6f:7f:10:b3:4b: 93:05:08:ed:d2:56:94:83:1f:05:98:e1:36:89:fb: 3c:a2:91:bc:89:cf:cf:40:b8:e0:00:06:ca:c2:69: 08:7a:f6:61:d6:97:15:60:fc:e1:ce:8f:98:e5:0b: 2e:54:0a:aa:13:8a:40:83:71:99:be:04:4c:73:21: ce:3b:ff:4c:a0:31:10:26:fb:01:df:4e:d6:e1:6f: 3a:f5:a8:86:8d:63:1f:1f:f2:eb:33:24:f5:77:60: 0f:79:45:f3:c3:e4:58:ed:06:79:b5:8d:18:e1:bb: b9:b6:46:74:5e:c3:75:1a:7c:0f:dc:0b:86:d2:7e: 5a:f7:4f:f9:d8:98:df:4f:bf:9b:1a:51:bd:00:44: 6b:e4:f6:20:2f:ab:50:40:92:42:69:61:c1:a0:b0: 0b:5e:ab:94:4f:68:53:a9:72:48:68:1b:9b:3c:c9: 3c:31:5b:ac:d4:f0:1c:79:e0:d2:2a:4d:43:a2:90: db:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:34:C6:46:3A:BB:27:D0:95:08:AB:A9:7A:AE:8E:68:67:E9:D0:28 X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:00:aa:1a:76:63:1b:3c:01:29:76:94:d5:62:7a:61:ed:38: 6a:6d:7b:6f:c6:70:e6:6a:10:ce:cd:55:06:e1:01:03:b3:d5: 67:6b:1e:fb:c6:f7:53:e9:34:49:64:5f:44:bf:7a:60:1f:d6: 3c:77:db:0d:ff:d5:40:80:15:62:de:38:62:3b:1f:be:a4:a7: 99:b0:26:e8:3f:85:1a:b4:76:7b:26:a8:ae:50:a9:b0:84:56: 9d:0b:5d:4a:db:34:cd:52:44:d9:98:78:0d:ca:ee:e0:79:d4: 08:14:c8:b9:79:c2:ee:12:59:58:7c:99:91:a0:45:2c:b5:fc: 62:5e:87:b0:7f:ed:43:b4:9d:29:17:85:05:60:13:7f:9b:69: 96:5e:32:29:8a:fd:f4:8d:c4:ad:1e:e7:b4:2b:5b:ca:8b:17: 7e:85:44:ae:71:48:ce:ed:94:be:e4:b6:7f:80:e0:21:75:72: fa:2c:7b:33:de:f4:56:93:48:13:ed:89:af:b7:be:bc:ac:1f: 1a:fa:b0:f7:c4:eb:a7:b2:b8:30:81:cf:af:32:eb:8b:8c:a4: ed:71:9a:2c:a8:0d:31:24:d8:86:f0:d5:37:69:41:0a:01:13: f4:7a:84:c5:01:c4:12:cb:38:ff:9a:ed:fa:bf:09:3d:a7:ff: 47:55:22:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWTQYpUTQw/cY+BzOdkLkieDHMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNTA1MDgyMDM3MDNaFw0yNTA1MTIwODE0MDNaMDMxMTAvBgNV BAMTKDNCMzRDNjQ2M0FCQjI3RDA5NTA4QUJBOTdBQUU4RTY4NjdFOUQwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXT1HhB0cxo3+ABQvo0RJ2FiE lbvEdvxLBRvZWGz3rwTrt+CYJ3KFu+KISQ1DrCIKLyulUfvxse1/b0eLote9tQt8 E65vfxCzS5MFCO3SVpSDHwWY4TaJ+zyikbyJz89AuOAABsrCaQh69mHWlxVg/OHO j5jlCy5UCqoTikCDcZm+BExzIc47/0ygMRAm+wHfTtbhbzr1qIaNYx8f8uszJPV3 YA95RfPD5FjtBnm1jRjhu7m2RnRew3UafA/cC4bSflr3T/nYmN9Pv5saUb0ARGvk 9iAvq1BAkkJpYcGgsAteq5RPaFOpckhoG5s8yTwxW6zU8Bx54NIqTUOikNs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOzTGRjq7J9CVCKupeq6OaGfp0CgwHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcAqhp2Yxs8ASl2lNViemHtOGpte2/GcOZq EM7NVQbhAQOz1WdrHvvG91PpNElkX0S/emAf1jx32w3/1UCAFWLeOGI7H76kp5mw Jug/hRq0dnsmqK5QqbCEVp0LXUrbNM1SRNmYeA3K7uB51AgUyLl5wu4SWVh8mZGg RSy1/GJeh7B/7UO0nSkXhQVgE3+baZZeMimK/fSNxK0e57QrW8qLF36FRK5xSM7t lL7ktn+A4CF1cvosezPe9FaTSBPtia+3vrysHxr6sPfE66eyuDCBz68y64uMpO1x miyoDTEk2Ibw1TdpQQoBE/R6hMUBxBLLOP+a7fq/CT2n/0dVIh8= -----END CERTIFICATE-----Generated at Fri May 9 08:29:58 2025 by rpki-client