$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: uxsLALTWKtNZbbHUxi71kzX5uoMGhBaf0XX5jIH07Xw= Subject key identifier: 6A:00:3A:BD:8F:81:AE:88:20:30:99:7A:30:9C:E8:BC:63:9C:ED:97 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 1FAFD2C54712478C377C280F4B65EF2FE6FE0812 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 04A5 Signing time: Mon 30 Jun 2025 02:10:59 +0000 Manifest this update: Mon 30 Jun 2025 02:05:59 +0000 Manifest next update: Thu 03 Jul 2025 05:22:59 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: jRs6w4ouHOkODl02dVxaiFXNinffjGI3tgIbCYZ6jd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:af:d2:c5:47:12:47:8c:37:7c:28:0f:4b:65:ef:2f:e6:fe:08:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Jun 30 02:05:59 2025 GMT Not After : Jul 3 05:22:59 2025 GMT Subject: CN=6A003ABD8F81AE882030997A309CE8BC639CED97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:fa:5e:72:70:cc:97:f5:07:b9:1f:68:ad: 79:09:04:2d:c0:62:cb:e5:74:5d:88:27:f2:93:3c: fe:4c:26:69:47:25:fa:b9:70:7a:ad:bf:60:4e:6c: ad:16:c8:2d:f4:52:6f:15:cc:4d:98:ff:7a:54:65: 08:a2:48:00:d5:e6:2d:93:ca:88:d8:84:cb:2a:11: 1d:e2:a3:2a:a4:ab:96:61:fc:fc:22:58:ac:55:10: 84:57:1b:06:4c:e3:5e:ff:87:ea:80:be:ed:fa:70: 67:d6:6c:9b:22:8f:86:d2:ad:15:7b:77:cf:bc:48: c2:35:b5:72:2b:37:49:7e:64:4c:bb:64:05:34:4d: d5:dd:44:0a:b5:3c:dc:a4:2c:32:39:b4:60:29:a4: 5b:00:7d:4c:40:55:7f:c6:f1:52:4b:b9:4b:de:0b: 85:5a:10:23:fe:ad:5f:4e:3a:1d:76:fb:38:25:34: 28:99:34:bb:81:7f:57:36:97:af:7f:d7:82:ca:2f: 56:15:a6:e3:27:3d:48:c3:a2:96:3d:98:16:2a:ee: 65:c8:4d:b5:a8:c7:94:ca:76:62:94:90:0a:41:4c: 70:7a:86:b8:95:b6:fd:84:df:a2:ff:49:54:cd:bb: 09:b2:48:aa:44:0c:39:cf:04:77:9e:e7:03:47:d5: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:3A:BD:8F:81:AE:88:20:30:99:7A:30:9C:E8:BC:63:9C:ED:97 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:ae:4c:e1:b4:80:d8:c9:e6:1d:0e:21:31:39:c5:4e:90:90: e7:17:19:14:21:a9:23:a4:2a:7a:d8:82:80:3a:b3:16:3a:58: bc:f5:28:6a:3a:c9:2e:5b:de:3b:6f:94:22:ef:c7:73:28:a6: 1c:d5:c1:f9:5f:b1:d3:50:7b:cd:e4:36:62:22:f0:12:0a:a4: 8d:34:5d:08:dd:9f:6a:25:c0:90:b2:48:f6:f2:ac:c9:7e:df: 87:fc:09:fa:45:43:b6:3c:ea:5b:23:7b:80:ac:26:e4:68:48: ca:99:71:ad:78:5e:12:c2:62:e1:ab:3f:40:9c:cc:4a:c8:51: be:72:2c:ab:4d:ce:17:f4:da:65:eb:4d:b1:26:fb:89:35:74: 3c:c2:19:bf:53:05:a6:3e:8e:44:bc:96:b3:ed:a2:1f:9c:4f: 4c:44:ac:1b:ec:f5:6d:fb:67:bf:d7:12:96:4d:99:71:67:ec: f5:ee:ae:7e:b5:38:fb:46:d7:0f:fd:67:cc:39:98:72:c2:52: c6:7b:c1:9b:31:a5:10:fc:a7:13:7c:98:22:7a:86:e9:12:8c: 93:66:f1:8f:0b:f5:7b:6a:4c:6d:a2:81:c5:de:31:fc:1f:49: 26:0f:f5:ab:ed:76:11:80:17:a1:e1:0a:a0:dd:cc:7b:03:86: 1f:a3:f2:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6/SxUcSR4w3fCgPS2XvL+b+CBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTA2MzAwMjA1NTlaFw0yNTA3MDMwNTIyNTlaMDMxMTAvBgNV BAMTKDZBMDAzQUJEOEY4MUFFODgyMDMwOTk3QTMwOUNFOEJDNjM5Q0VEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDH/pecnDMl/UHuR9orXkJBC3A YsvldF2IJ/KTPP5MJmlHJfq5cHqtv2BObK0WyC30Um8VzE2Y/3pUZQiiSADV5i2T yojYhMsqER3ioyqkq5Zh/PwiWKxVEIRXGwZM417/h+qAvu36cGfWbJsij4bSrRV7 d8+8SMI1tXIrN0l+ZEy7ZAU0TdXdRAq1PNykLDI5tGAppFsAfUxAVX/G8VJLuUve C4VaECP+rV9OOh12+zglNCiZNLuBf1c2l69/14LKL1YVpuMnPUjDopY9mBYq7mXI TbWox5TKdmKUkApBTHB6hriVtv2E36L/SVTNuwmySKpEDDnPBHee5wNH1T3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUagA6vY+BroggMJl6MJzovGOc7ZcwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANWuTOG0gNjJ5h0OITE5xU6QkOcXGRQhqSOk KnrYgoA6sxY6WLz1KGo6yS5b3jtvlCLvx3MophzVwflfsdNQe83kNmIi8BIKpI00 XQjdn2olwJCySPbyrMl+34f8CfpFQ7Y86lsje4CsJuRoSMqZca14XhLCYuGrP0Cc zErIUb5yLKtNzhf02mXrTbEm+4k1dDzCGb9TBaY+jkS8lrPtoh+cT0xErBvs9W37 Z7/XEpZNmXFn7PXurn61OPtG1w/9Z8w5mHLCUsZ7wZsxpRD8pxN8mCJ6hukSjJNm 8Y8L9XtqTG2igcXeMfwfSSYP9avtdhGAF6HhCqDdzHsDhh+j8h0= -----END CERTIFICATE-----Generated at Tue Jul 1 02:40:17 2025 by rpki-client