$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: IxM6HATUrXScRxbZrtrog9HfI1eqzMv+eiQ1/sIZfWI= Subject key identifier: E9:87:BC:DA:44:70:7F:B4:1E:B1:58:CD:92:EF:0E:D2:F4:F7:D7:52 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 7CF1A3D2CAF99DD6A6ADC77E008FC4C16935F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 04BC Signing time: Thu 21 Aug 2025 09:41:00 +0000 Manifest this update: Thu 21 Aug 2025 09:36:00 +0000 Manifest next update: Sun 24 Aug 2025 15:02:00 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: dwHnX9FyjdT44CbOFBN5m9lm7GzxB/YzAT8hn3fs/9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f1:a3:d2:ca:f9:9d:d6:a6:ad:c7:7e:00:8f:c4:c1:69:35:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Aug 21 09:36:00 2025 GMT Not After : Aug 24 15:02:00 2025 GMT Subject: CN=E987BCDA44707FB41EB158CD92EF0ED2F4F7D752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:5a:e6:ad:30:c2:bb:72:ca:a9:ae:b4:32: 97:fb:e6:5f:1c:e4:95:2a:6b:f9:90:4f:9b:81:fb: b8:9a:b6:a6:11:44:47:1a:a9:7d:c2:6b:3e:d1:c0: e9:9d:0c:47:0d:e1:b1:e3:4f:0f:42:2b:8f:f6:99: 40:f0:a1:74:a2:65:20:7f:de:27:2e:bd:d3:bc:17: 17:d9:32:0b:3a:a1:36:dd:3b:3a:c4:94:62:83:78: 3b:96:5f:88:82:e6:0a:84:cf:38:8a:6f:44:d5:8d: ba:2b:bc:3e:75:77:a6:d5:c9:77:c7:97:11:ac:02: 21:0d:cd:f5:56:05:c7:d8:2b:5f:35:b8:bb:a6:a6: 5c:ec:d5:dd:27:ca:6f:7b:8a:69:52:2f:cc:c0:aa: 32:a6:3f:d6:19:cb:f2:c7:ee:37:58:5d:4c:ce:6c: fd:0e:be:0a:88:7e:ae:06:86:86:39:ce:4f:68:01: c4:4b:74:69:69:28:4c:1b:d1:94:0d:b3:d1:1c:c5: 7e:47:ed:24:64:6d:cc:63:9c:4f:f0:3a:ce:1a:28: 18:28:18:6f:db:e1:d0:34:f1:65:3c:38:49:db:30: b5:dc:5d:89:bb:5c:cc:f8:f8:89:a1:b4:a1:7a:64: ec:a9:ab:09:ce:32:6e:00:6d:95:d3:77:07:77:ef: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:87:BC:DA:44:70:7F:B4:1E:B1:58:CD:92:EF:0E:D2:F4:F7:D7:52 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3f:d1:df:b3:98:3d:c9:3c:ba:f0:c0:4d:a6:77:99:e7:7e: c0:5b:45:69:ad:37:f7:28:61:fb:1f:11:be:b4:8d:ec:3e:34: ef:61:42:4f:98:56:13:ab:49:e0:bf:d7:3f:d8:43:47:61:ba: 01:bb:c4:00:fe:f4:8d:8d:1a:a1:f7:ab:2b:f6:38:34:48:3b: f5:e4:92:93:13:ca:85:00:9c:f4:c4:40:a4:3b:2d:d4:e9:26: ae:86:02:f5:30:cc:2c:dc:ca:93:4a:83:f0:1e:80:40:0c:92: 5e:0a:5c:cd:15:f8:47:5b:0d:22:a6:80:69:6a:32:02:67:09: a8:c1:ed:20:75:7b:91:49:55:03:41:69:ff:44:c5:e3:8d:c5: e2:10:0d:32:38:69:55:7e:17:c4:a1:24:38:f2:14:04:6b:d6: b3:1f:27:d8:a7:0f:94:79:89:e7:0d:c2:90:2c:a5:51:f5:47: fe:a0:09:e6:85:42:5e:9e:7d:05:27:42:00:d2:09:7e:61:9f: 38:b0:3d:91:ca:fc:66:7b:23:3f:48:65:41:53:0e:3d:f3:c1: 46:8b:b1:e6:4a:2b:1b:ec:7d:59:6c:38:d3:b8:5b:2a:72:b5: bd:30:d5:45:9c:40:15:dc:9f:a1:4a:53:c4:ea:42:2f:84:69: 6a:5a:0f:af -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITfPGj0sr5ndamrcd+AI/EwWk18DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDNDdFNzNFNjY5MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVF MDdEMzdBMB4XDTI1MDgyMTA5MzYwMFoXDTI1MDgyNDE1MDIwMFowMzExMC8GA1UE AxMoRTk4N0JDREE0NDcwN0ZCNDFFQjE1OENEOTJFRjBFRDJGNEY3RDc1MjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgGWuatMMK7csqprrQyl/vmXxzk lSpr+ZBPm4H7uJq2phFERxqpfcJrPtHA6Z0MRw3hseNPD0Irj/aZQPChdKJlIH/e Jy6907wXF9kyCzqhNt07OsSUYoN4O5ZfiILmCoTPOIpvRNWNuiu8PnV3ptXJd8eX EawCIQ3N9VYFx9grXzW4u6amXOzV3SfKb3uKaVIvzMCqMqY/1hnL8sfuN1hdTM5s /Q6+Coh+rgaGhjnOT2gBxEt0aWkoTBvRlA2z0RzFfkftJGRtzGOcT/A6zhooGCgY b9vh0DTxZTw4SdswtdxdibtczPj4iaG0oXpk7KmrCc4ybgBtldN3B3fvuv8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTph7zaRHB/tB6xWM2S7w7S9PfXUjAfBgNVHSME GDAWgBTEfnPmaRVtj7MquAlBxuWk7gfTejAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5 N2I4ZjRhLTMxMTAtNDBiNy05MDMyLTBmMDIyMTVhMGI2YS8wL0M0N0U3M0U2Njkx NTZEOEZCMzJBQjgwOTQxQzZFNUE0RUUwN0QzN0EuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9DNDdFNzNFNjY5MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdE MzdBLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83OTdiOGY0YS0zMTEwLTQwYjctOTAz Mi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5MTU2RDhGQjMyQUI4MDk0MUM2RTVB NEVFMDdEMzdBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAAj/R37OYPck8uvDATaZ3med+wFtFaa039yhh +x8RvrSN7D4072FCT5hWE6tJ4L/XP9hDR2G6AbvEAP70jY0aoferK/Y4NEg79eSS kxPKhQCc9MRApDst1OkmroYC9TDMLNzKk0qD8B6AQAySXgpczRX4R1sNIqaAaWoy AmcJqMHtIHV7kUlVA0Fp/0TF443F4hANMjhpVX4XxKEkOPIUBGvWsx8n2KcPlHmJ 5w3CkCylUfVH/qAJ5oVCXp59BSdCANIJfmGfOLA9kcr8ZnsjP0hlQVMOPfPBRoux 5korG+x9WWw407hbKnK1vTDVRZxAFdyfoUpTxOpCL4RpaloPrw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:48 2025 by rpki-client