$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: SSN4yEkWOidgcKjNvF7ZwrnOFr5RFAxEkN1SecwlHE0= Subject key identifier: B2:3B:C2:6C:DC:23:83:90:7D:0B:7A:6B:99:80:8B:C0:85:0A:64:9F Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 7179F77F44DEAD77C587A958C7ABC6BE6BB9BCFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 01AE Signing time: Wed 07 May 2025 17:00:55 +0000 Manifest this update: Wed 07 May 2025 16:55:55 +0000 Manifest next update: Sat 10 May 2025 23:19:55 +0000 Files and hashes: 1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: UInZsMvDimz9gQSVeWEpP6G47EPeJg4fLXau5OzQIkc=) 2: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: oDsHmaVaP405XMWW4RF8xlnbcgs8zB2+zk74kHum4IQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 23:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:79:f7:7f:44:de:ad:77:c5:87:a9:58:c7:ab:c6:be:6b:b9:bc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: May 7 16:55:55 2025 GMT Not After : May 10 23:19:55 2025 GMT Subject: CN=B23BC26CDC2383907D0B7A6B99808BC0850A649F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7e:4e:bb:6b:34:7d:d1:e7:96:32:f2:34:77: 34:f1:11:2a:7b:fb:82:f0:3d:e1:70:ec:71:37:63: 2d:db:63:f0:a3:1c:b0:23:e5:9d:3e:fc:38:12:ca: f1:6a:ca:7c:3c:a9:eb:d6:45:72:70:e7:c7:65:d8: 92:58:2b:ed:cc:ee:2b:1e:4d:3b:9d:12:21:65:d0: 86:8d:74:41:10:c3:7d:7e:5e:f5:42:e5:81:2e:97: 99:20:6b:ee:83:d0:3b:28:a0:27:21:a9:ca:6b:4f: 02:b1:e3:c3:5b:a8:3e:0d:72:8e:73:ea:62:93:ee: 44:d3:e2:40:b4:56:44:d1:d8:6e:1a:a2:85:74:db: 3c:7b:96:e8:6b:6a:9e:c1:30:63:b5:02:5d:75:bd: f6:4b:ff:a0:43:eb:14:ab:ce:8f:1d:01:c0:e5:03: b0:b4:ea:5b:53:ac:d0:0a:81:37:ef:af:39:27:11: 8d:08:63:7e:cb:68:c8:88:93:87:01:19:b1:54:93: 2c:4d:7b:46:a0:66:38:99:9b:71:e5:2f:c0:11:a5: c9:9d:e6:62:2f:9b:45:2c:1d:a0:c1:b0:ed:af:f4: 7b:fa:8c:3b:f8:a9:55:47:b6:35:d4:c4:1d:a4:62: a5:f4:39:bf:5d:80:3c:e2:d0:4e:8c:6b:b6:12:45: 78:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3B:C2:6C:DC:23:83:90:7D:0B:7A:6B:99:80:8B:C0:85:0A:64:9F X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b7:cd:0f:2e:85:e7:aa:ae:0c:8e:24:bc:32:1c:24:b9:66: f0:97:40:83:de:3a:58:ed:ea:ee:1f:84:d2:33:f2:80:3b:65: 14:22:13:2e:06:a5:30:fb:2f:a6:77:2d:e3:fe:a3:cd:4e:c8: 8c:89:1b:3f:d8:a5:10:25:09:aa:a4:10:bb:36:84:f6:30:37: 57:43:fd:31:f9:72:44:96:1b:3e:9e:84:3c:72:8b:66:26:74: c4:6d:92:5e:f4:ce:f8:01:74:2a:7c:9b:23:d6:d5:04:e8:78: 38:9e:5c:5d:24:2c:53:fc:0d:0b:d5:68:ed:7d:5f:03:94:e0: 93:5f:6c:85:2b:28:c8:33:de:fb:e5:0f:2e:57:10:5e:05:4c: dc:2f:31:ef:b6:2a:33:ac:bf:3d:fb:67:75:4c:99:f3:7e:73: cd:3f:c0:97:2c:87:14:7f:16:1b:71:29:44:4d:19:0c:b7:c7: 64:e4:9a:ed:74:93:d6:3e:4c:42:ab:2d:92:e7:b0:e0:b0:68: 99:ab:bf:85:39:eb:f7:8f:ca:4c:d6:2c:b4:48:cc:c2:7f:6d: f6:70:69:7b:e9:8a:be:87:23:78:f3:d4:54:11:84:28:6a:c5: be:11:e5:86:c0:56:44:6c:3e:7d:31:97:fb:f3:c3:aa:cb:e2: ef:52:55:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXn3f0TerXfFh6lYx6vGvmu5vPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNTA1MDcxNjU1NTVaFw0yNTA1MTAyMzE5NTVaMDMxMTAvBgNV BAMTKEIyM0JDMjZDREMyMzgzOTA3RDBCN0E2Qjk5ODA4QkMwODUwQTY0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDffk67azR90eeWMvI0dzTxESp7 +4LwPeFw7HE3Yy3bY/CjHLAj5Z0+/DgSyvFqynw8qevWRXJw58dl2JJYK+3M7ise TTudEiFl0IaNdEEQw31+XvVC5YEul5kga+6D0DsooCchqcprTwKx48NbqD4Nco5z 6mKT7kTT4kC0VkTR2G4aooV02zx7luhrap7BMGO1Al11vfZL/6BD6xSrzo8dAcDl A7C06ltTrNAKgTfvrzknEY0IY37LaMiIk4cBGbFUkyxNe0agZjiZm3HlL8ARpcmd 5mIvm0UsHaDBsO2v9Hv6jDv4qVVHtjXUxB2kYqX0Ob9dgDzi0E6Ma7YSRXipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsjvCbNwjg5B9C3prmYCLwIUKZJ8wHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa3zQ8uheeqrgyOJLwyHCS5ZvCXQIPeOljt 6u4fhNIz8oA7ZRQiEy4GpTD7L6Z3LeP+o81OyIyJGz/YpRAlCaqkELs2hPYwN1dD /TH5ckSWGz6ehDxyi2YmdMRtkl70zvgBdCp8myPW1QToeDieXF0kLFP8DQvVaO19 XwOU4JNfbIUrKMgz3vvlDy5XEF4FTNwvMe+2KjOsvz37Z3VMmfN+c80/wJcshxR/ FhtxKURNGQy3x2Tkmu10k9Y+TEKrLZLnsOCwaJmrv4U56/ePykzWLLRIzMJ/bfZw aXvpir6HI3jz1FQRhChqxb4R5YbAVkRsPn0xl/vzw6rL4u9SVTQ= -----END CERTIFICATE-----Generated at Thu May 8 20:40:07 2025 by rpki-client