$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: HEyweNSnCG6NHY2bXmbSZpJFdvYk36XmKkidoyTfz4k= Subject key identifier: B1:1B:7D:EF:EE:34:0B:1B:D8:96:1D:8A:63:9F:53:7A:18:A5:F4:4F Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 11B7B5BBF9F849F6655DBDEDE62AAF7EA73FDA66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 048E Signing time: Sat 10 May 2025 05:41:01 +0000 Manifest this update: Sat 10 May 2025 05:36:01 +0000 Manifest next update: Tue 13 May 2025 17:16:01 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: 0y8GyaqwLBO1mEJSP2MizQjbTmXrGiqHhE4yTX6Brs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b7:b5:bb:f9:f8:49:f6:65:5d:bd:ed:e6:2a:af:7e:a7:3f:da:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: May 10 05:36:01 2025 GMT Not After : May 13 17:16:01 2025 GMT Subject: CN=B11B7DEFEE340B1BD8961D8A639F537A18A5F44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:d0:1d:c9:5d:97:03:8c:e3:8c:bc:95:e3: 91:86:56:29:c8:21:57:2f:b1:de:54:92:6c:e3:57: 94:92:f9:16:6d:df:67:71:43:2b:47:48:af:e2:a4: 03:82:90:32:76:da:58:16:28:a6:e8:c0:c8:fd:da: 33:20:5b:5e:df:1b:1b:0d:37:93:6d:7d:84:05:18: 55:15:34:8f:03:bf:31:22:8b:b0:e5:04:ef:73:b8: 35:d4:4f:18:99:11:b8:6e:73:6e:16:8c:b6:4c:47: 25:40:1a:cd:79:c9:a8:f6:e4:91:3e:54:0b:b3:f1: f1:fd:0d:7a:6b:3b:70:51:d3:41:90:77:24:e7:2b: d9:2e:f2:1d:8a:4a:9c:cf:a8:0c:fc:2c:0a:33:60: d7:e2:15:bb:e3:3a:e0:e1:ee:e0:bd:bd:6b:89:5f: 50:fb:a8:2d:9c:14:ee:d6:d5:dd:b0:16:9f:13:02: 34:dc:53:1e:28:39:0e:a2:af:27:96:6c:5a:62:59: c4:13:15:fe:00:2c:06:a7:76:21:9f:b3:cd:bc:b7: 72:67:96:d0:2f:fa:55:dd:40:a0:c5:7f:b9:d0:8d: c1:f4:17:10:68:c5:75:ed:34:6b:ec:f8:3c:ce:3c: eb:10:28:00:d8:cf:29:70:14:2e:0e:5d:78:d6:8c: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1B:7D:EF:EE:34:0B:1B:D8:96:1D:8A:63:9F:53:7A:18:A5:F4:4F X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:34:3f:d3:42:75:c6:fa:52:42:89:85:22:7d:77:d3:f6:7f: ef:4b:15:97:1c:22:66:03:a9:80:61:45:48:c9:3b:4b:4e:af: d7:54:a2:01:93:bc:f0:17:85:65:34:39:bc:3d:60:ba:e0:c6: 2a:81:ce:52:08:56:28:80:b6:95:df:e1:7f:a9:8a:99:e6:1a: 35:a9:3e:3c:ab:6a:17:0e:23:f3:ad:bb:af:13:be:0b:14:ff: 81:0e:11:fa:76:88:97:50:16:04:0a:bb:7c:f0:59:57:6a:94: 18:11:16:d1:82:88:5b:e7:b9:08:20:db:83:fb:fb:bd:bf:50: 7c:e3:2c:a8:89:6a:f5:fd:68:81:e4:5a:df:1d:79:bf:d3:2c: 0a:39:fd:3a:8d:c7:ef:15:41:08:93:07:40:dc:82:75:69:96: 21:75:62:0a:45:b6:53:80:dd:06:d1:ed:73:c0:dd:09:7b:f1: f3:8a:fc:a5:a5:97:cd:5a:b3:2a:0d:03:76:97:73:77:fa:1f: 9f:e8:53:2c:d6:77:28:72:4b:63:a6:4f:c6:4f:28:8a:2d:f7: 10:23:50:dd:ce:8c:2f:66:7c:6b:e9:f6:28:6f:1a:21:00:12: b9:bb:3f:5e:35:ea:ca:6f:82:27:fb:b0:9e:44:4e:1b:0b:84: a8:8f:d2:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbe1u/n4SfZlXb3t5iqvfqc/2mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTA1MTAwNTM2MDFaFw0yNTA1MTMxNzE2MDFaMDMxMTAvBgNV BAMTKEIxMUI3REVGRUUzNDBCMUJEODk2MUQ4QTYzOUY1MzdBMThBNUY0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaQ9AdyV2XA4zjjLyV45GGVinI IVcvsd5UkmzjV5SS+RZt32dxQytHSK/ipAOCkDJ22lgWKKbowMj92jMgW17fGxsN N5NtfYQFGFUVNI8DvzEii7DlBO9zuDXUTxiZEbhuc24WjLZMRyVAGs15yaj25JE+ VAuz8fH9DXprO3BR00GQdyTnK9ku8h2KSpzPqAz8LAozYNfiFbvjOuDh7uC9vWuJ X1D7qC2cFO7W1d2wFp8TAjTcUx4oOQ6iryeWbFpiWcQTFf4ALAandiGfs828t3Jn ltAv+lXdQKDFf7nQjcH0FxBoxXXtNGvs+DzOPOsQKADYzylwFC4OXXjWjLldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsRt97+40CxvYlh2KY59Tehil9E8wHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG80P9NCdcb6UkKJhSJ9d9P2f+9LFZccImYD qYBhRUjJO0tOr9dUogGTvPAXhWU0Obw9YLrgxiqBzlIIViiAtpXf4X+pipnmGjWp PjyrahcOI/Otu68TvgsU/4EOEfp2iJdQFgQKu3zwWVdqlBgRFtGCiFvnuQgg24P7 +72/UHzjLKiJavX9aIHkWt8deb/TLAo5/TqNx+8VQQiTB0DcgnVpliF1YgpFtlOA 3QbR7XPA3Ql78fOK/KWll81asyoNA3aXc3f6H5/oUyzWdyhyS2OmT8ZPKIot9xAj UN3OjC9mfGvp9ihvGiEAErm7P1416spvgif7sJ5EThsLhKiP0nk= -----END CERTIFICATE-----Generated at Sat May 10 20:42:01 2025 by rpki-client