$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: WNSA0xvDxNfpi6FWE1aF3MjKa7mVRnnuj5gPoRpRx4c= Subject key identifier: 90:90:60:DB:3F:C5:A4:CE:7C:09:DB:84:4C:08:E1:5B:E6:47:B7:C9 Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 342810ED426FB3B261E09D67EF7B8A20F0CDEE67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: EC Signing time: Sun 29 Jun 2025 03:52:04 +0000 Manifest this update: Sun 29 Jun 2025 03:47:04 +0000 Manifest next update: Wed 02 Jul 2025 04:06:04 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: qNLq6QBqDU/QtHWG2Ztukxx2/0NIKOjtSOa0xkbEQRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:28:10:ed:42:6f:b3:b2:61:e0:9d:67:ef:7b:8a:20:f0:cd:ee:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Jun 29 03:47:04 2025 GMT Not After : Jul 2 04:06:04 2025 GMT Subject: CN=909060DB3FC5A4CE7C09DB844C08E15BE647B7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:2a:15:63:1d:3d:0b:bd:87:48:30:d0:5e: c9:1c:69:5e:4b:a9:4c:d9:54:37:de:cc:1b:10:c7: 79:67:04:a6:77:e5:0b:08:94:a4:5b:41:63:35:11: c0:ef:85:23:2d:7e:18:12:a2:57:1d:eb:32:d4:d4: 94:ee:c4:ea:21:3f:f8:f1:56:a2:60:4f:53:e1:e9: f0:fe:27:b3:1e:db:87:05:cf:f9:29:ef:ed:5d:c4: d1:21:33:42:66:14:d8:5c:42:3e:97:60:b2:9c:fe: 72:1c:1e:14:c5:b0:98:50:ee:3a:58:59:6b:9f:f0: 7f:32:48:d3:d5:b9:6a:d3:20:8e:e3:56:40:05:58: 07:eb:b8:23:ad:ca:82:8a:39:ae:05:59:ce:f0:cb: 3f:41:7d:7a:c0:9d:55:d4:cf:5a:66:a1:df:24:76: 84:b3:99:33:33:e0:4e:ac:6f:2e:9b:33:35:39:ab: 9e:4d:f8:4d:75:4d:67:a3:ee:15:90:97:df:9a:51: 1f:20:3c:96:fd:31:37:7b:76:58:39:f4:98:20:6c: 02:f7:1c:6c:54:17:0b:17:8c:ee:a6:f8:50:fe:ab: 9b:e1:b7:67:c9:0f:df:ba:84:fb:d6:5c:25:67:1d: 61:39:30:94:53:a3:93:91:18:06:1e:39:be:8b:bc: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:90:60:DB:3F:C5:A4:CE:7C:09:DB:84:4C:08:E1:5B:E6:47:B7:C9 X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5d:ee:f3:35:91:99:e6:10:5f:2c:41:4d:b7:f3:47:c0:e0: ba:c2:7e:eb:3d:68:aa:3f:6f:f4:d1:5b:34:79:ac:7b:93:ef: e1:5d:c1:17:d8:2e:7e:af:5c:ce:9f:78:e2:fb:fd:34:2a:7a: 81:21:2d:e3:3a:92:cf:4c:b4:ab:b8:81:68:d2:a5:7d:ec:b6: 6f:a7:88:35:4b:26:5e:bb:c0:e7:cf:a3:32:7f:e1:e3:26:a0: be:e0:18:66:aa:e2:e2:1b:94:f1:4e:2a:d0:52:d2:28:c4:70: 90:fd:65:d0:52:f2:77:27:62:5a:b8:08:6d:21:be:90:ff:27: b1:34:19:96:cf:f3:80:52:d7:a9:17:17:91:1e:bf:05:98:29: 89:38:f1:fc:44:7c:18:18:04:5d:5c:4e:19:52:0d:14:bb:89: 7c:54:4d:0c:6f:1b:ca:22:8b:f6:6a:2f:b5:2e:59:91:1d:56: 71:08:ce:a0:04:dd:c8:bb:54:0c:e8:9c:04:8a:0f:0c:d6:23: f4:d2:b3:8c:c9:35:ef:2d:48:26:a6:e5:82:1e:5e:fe:e5:e4: 8e:48:77:74:d3:bc:61:a6:6d:a2:34:31:02:ad:b0:7d:e6:ee: 3b:d7:97:99:37:73:8e:b6:64:e8:4e:b8:af:8b:92:cd:dc:56: 39:92:b5:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNCgQ7UJvs7Jh4J1n73uKIPDN7mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNTA2MjkwMzQ3MDRaFw0yNTA3MDIwNDA2MDRaMDMxMTAvBgNV BAMTKDkwOTA2MERCM0ZDNUE0Q0U3QzA5REI4NDRDMDhFMTVCRTY0N0I3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZSoVYx09C72HSDDQXskcaV5L qUzZVDfezBsQx3lnBKZ35QsIlKRbQWM1EcDvhSMtfhgSolcd6zLU1JTuxOohP/jx VqJgT1Ph6fD+J7Me24cFz/kp7+1dxNEhM0JmFNhcQj6XYLKc/nIcHhTFsJhQ7jpY WWuf8H8ySNPVuWrTII7jVkAFWAfruCOtyoKKOa4FWc7wyz9BfXrAnVXUz1pmod8k doSzmTMz4E6sby6bMzU5q55N+E11TWej7hWQl9+aUR8gPJb9MTd7dlg59JggbAL3 HGxUFwsXjO6m+FD+q5vht2fJD9+6hPvWXCVnHWE5MJRTo5ORGAYeOb6LvKfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkJBg2z/FpM58CduETAjhW+ZHt8kwHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEld7vM1kZnmEF8sQU2380fA4LrCfus9aKo/ b/TRWzR5rHuT7+FdwRfYLn6vXM6feOL7/TQqeoEhLeM6ks9MtKu4gWjSpX3stm+n iDVLJl67wOfPozJ/4eMmoL7gGGaq4uIblPFOKtBS0ijEcJD9ZdBS8ncnYlq4CG0h vpD/J7E0GZbP84BS16kXF5EevwWYKYk48fxEfBgYBF1cThlSDRS7iXxUTQxvG8oi i/ZqL7UuWZEdVnEIzqAE3ci7VAzonASKDwzWI/TSs4zJNe8tSCam5YIeXv7l5I5I d3TTvGGmbaI0MQKtsH3m7jvXl5k3c462ZOhOuK+Lks3cVjmStQo= -----END CERTIFICATE-----Generated at Mon Jun 30 00:50:53 2025 by rpki-client