$ rpki-client -vvf repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft File: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft (raw, json) Hash identifier: bML55fS14jF2890brqct//EHlBWRNzEKfCUrXjelH4w= Subject key identifier: 0C:5C:62:86:49:7F:C5:18:8D:F4:D9:BF:5C:4F:B2:F3:41:23:E8:F7 Authority key identifier: 47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 Certificate issuer: /CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Certificate serial: 52A49557E44CAE32674ACB89946A49429FC95F06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft Manifest number: 0186 Signing time: Sat 10 May 2025 18:40:35 +0000 Manifest this update: Sat 10 May 2025 18:35:35 +0000 Manifest next update: Wed 14 May 2025 05:44:35 +0000 Files and hashes: 1: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl (hash: +bzlmJv7x/nA4Y0eeMPqkpLms/pqR85ObSy8T77qouk=) 2: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: bBbNPM+LEkAq0fM/oBVcPA1WIs4XZKUuvuR7dXMnleM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a4:95:57:e4:4c:ae:32:67:4a:cb:89:94:6a:49:42:9f:c9:5f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Validity Not Before: May 10 18:35:35 2025 GMT Not After : May 14 05:44:35 2025 GMT Subject: CN=0C5C6286497FC5188DF4D9BF5C4FB2F34123E8F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:44:9c:a2:c6:27:6b:22:3a:8d:65:ea:16:9a: 5b:9d:cd:fe:94:2e:0d:6d:f9:82:fc:e7:c1:e7:e0: cd:11:05:eb:8f:5c:b3:47:b3:be:d7:ca:2f:4f:dc: 98:05:d0:9c:66:89:0f:dd:46:23:87:32:f7:a5:0c: 8c:d7:f2:25:97:ca:db:4a:17:fa:23:b7:d6:b8:d1: da:27:70:cc:0e:8a:85:9e:6e:ba:3e:bf:06:95:2c: 3f:51:1a:f5:98:bf:67:3c:9b:4c:f5:23:b3:a7:f0: 60:68:2a:37:be:81:f1:83:0a:8b:43:96:a2:4a:e4: 79:9d:12:f0:1b:29:9c:73:f0:9d:cf:92:fa:c6:a5: b8:64:ff:f0:e1:cd:00:7a:46:2e:6f:af:bd:e7:c7: 65:62:69:8e:e2:58:a9:b0:80:e2:45:0a:5b:6d:a5: 70:59:5a:0d:e3:71:3c:da:0a:cc:64:09:91:98:13: 2a:8b:77:e5:76:b6:46:b2:7c:26:c0:8d:99:e9:cc: d8:e9:73:bb:f4:d0:f5:f9:56:94:0d:21:8b:72:39: dd:a0:f5:2c:06:e7:43:10:cc:f1:e3:ae:06:0b:9a: 3e:f6:5b:d0:22:70:63:34:82:61:78:a9:1f:f8:a0: a7:7f:06:0f:92:39:40:61:fc:2e:bb:4e:bd:87:c7: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:62:86:49:7F:C5:18:8D:F4:D9:BF:5C:4F:B2:F3:41:23:E8:F7 X509v3 Authority Key Identifier: keyid:47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:17:56:89:0f:e9:06:1c:6d:83:4d:02:b0:4b:ee:d7:c6:35: fe:63:66:18:b9:02:bd:f9:ad:51:a7:18:96:85:57:c1:a1:1f: 29:54:20:63:f2:ac:3b:7b:6e:4f:2c:e3:71:97:23:b5:0b:e0: fc:dc:12:d1:ed:68:69:5e:9c:8d:f9:e7:0e:d7:69:a4:3c:7b: 3c:f7:40:d2:1f:2d:54:83:cd:4a:ec:7d:94:4f:d3:03:ce:16: 40:52:99:31:86:a6:cb:dc:d4:ae:e0:53:1d:0c:82:7f:eb:4c: 1f:c7:b4:94:0f:30:d2:b1:d7:9c:8c:44:85:38:d3:57:26:48: 00:dc:18:f2:fd:57:b6:23:b4:ab:07:fc:1a:6f:4e:56:de:84: 63:16:75:f7:c5:8e:29:91:9d:89:d1:ad:5f:3c:55:7f:2c:e2: 19:46:f9:7c:c2:05:4a:ac:76:48:e3:ef:9a:57:e4:9c:c3:34: df:7f:d5:61:6c:4c:09:c6:7f:e6:0e:1a:73:7c:7e:4a:9b:7f: 35:2b:ee:bb:f4:14:60:40:ee:b5:c4:44:62:78:71:d4:c5:85: 5d:b5:b3:ec:aa:c4:29:49:82:64:b9:3c:1c:56:b0:54:b3:61: 6c:2f:fb:4f:74:5e:6b:36:ce:e8:58:ef:ce:e0:4c:e9:0b:d0: a4:ba:f6:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqSVV+RMrjJnSsuJlGpJQp/JXwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0 ODkyNDI3NDAeFw0yNTA1MTAxODM1MzVaFw0yNTA1MTQwNTQ0MzVaMDMxMTAvBgNV BAMTKDBDNUM2Mjg2NDk3RkM1MTg4REY0RDlCRjVDNEZCMkYzNDEyM0U4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3RJyixidrIjqNZeoWmludzf6U Lg1t+YL858Hn4M0RBeuPXLNHs77Xyi9P3JgF0JxmiQ/dRiOHMvelDIzX8iWXyttK F/ojt9a40doncMwOioWebro+vwaVLD9RGvWYv2c8m0z1I7On8GBoKje+gfGDCotD lqJK5HmdEvAbKZxz8J3PkvrGpbhk//DhzQB6Ri5vr73nx2ViaY7iWKmwgOJFCltt pXBZWg3jcTzaCsxkCZGYEyqLd+V2tkayfCbAjZnpzNjpc7v00PX5VpQNIYtyOd2g 9SwG50MQzPHjrgYLmj72W9AicGM0gmF4qR/4oKd/Bg+SOUBh/C67Tr2HxzQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDFxihkl/xRiN9Nm/XE+y80Ej6PcwHwYDVR0j BBgwFoAUR6nZmoUR985U+fceHvg+9UiSQnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i M2M5NzNkNS1mZTk0LTQwMGQtYmNiZi1mMjMzZThhYzU1MzcvMC80N0E5RDk5QTg1 MTFGN0NFNTRGOUY3MUUxRUY4M0VGNTQ4OTI0Mjc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0ODky NDI3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNF RjU0ODkyNDI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwXVokP6QYcbYNNArBL7tfGNf5jZhi5Ar35 rVGnGJaFV8GhHylUIGPyrDt7bk8s43GXI7UL4PzcEtHtaGlenI355w7XaaQ8ezz3 QNIfLVSDzUrsfZRP0wPOFkBSmTGGpsvc1K7gUx0Mgn/rTB/HtJQPMNKx15yMRIU4 01cmSADcGPL9V7YjtKsH/BpvTlbehGMWdffFjimRnYnRrV88VX8s4hlG+XzCBUqs dkjj75pX5JzDNN9/1WFsTAnGf+YOGnN8fkqbfzUr7rv0FGBA7rXERGJ4cdTFhV21 s+yqxClJgmS5PBxWsFSzYWwv+090Xms2zuhY787gTOkL0KS69q8= -----END CERTIFICATE-----Generated at Mon May 12 15:40:24 2025 by rpki-client