$ rpki-client -vvf repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft File: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft (raw, json) Hash identifier: bUd8UCHK7Y7xTiGEbLew//KPlKWKgg9aUdISGFRRDXI= Subject key identifier: E7:11:6C:13:EC:31:BD:2C:41:81:E0:36:F2:2A:B3:0B:94:1E:C9:D6 Authority key identifier: 47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 Certificate issuer: /CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Certificate serial: 598CFF30BFFC80C398323140237EC8666DE54409 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft Manifest number: 01B4 Signing time: Thu 21 Aug 2025 10:50:36 +0000 Manifest this update: Thu 21 Aug 2025 10:45:36 +0000 Manifest next update: Sun 24 Aug 2025 16:11:36 +0000 Files and hashes: 1: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl (hash: wcqD6atI7xHLhwAc+rPzxmnNN4PZPAS3Xc3eEzOF3xU=) 2: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: bBbNPM+LEkAq0fM/oBVcPA1WIs4XZKUuvuR7dXMnleM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8c:ff:30:bf:fc:80:c3:98:32:31:40:23:7e:c8:66:6d:e5:44:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Validity Not Before: Aug 21 10:45:36 2025 GMT Not After : Aug 24 16:11:36 2025 GMT Subject: CN=E7116C13EC31BD2C4181E036F22AB30B941EC9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:9e:20:cf:73:c0:84:0e:d2:f0:02:79:c4: e5:c2:5f:a6:22:6b:88:14:3d:cd:24:ae:08:31:68: 8d:38:54:3c:6f:21:9a:89:7a:de:23:b1:fb:59:38: c2:28:ea:34:ee:87:bd:ea:71:5e:d7:d1:48:be:29: 85:c9:01:c7:42:ea:4e:34:89:67:88:78:50:04:29: 66:78:31:a4:93:f1:dc:75:4a:d9:1b:20:46:e8:a5: a7:ef:25:0c:98:7b:ab:96:d4:4d:6c:e7:df:1b:bb: b0:22:77:a5:cc:78:5e:79:8a:b6:15:04:31:46:b9: 1a:46:ff:1b:61:11:81:bd:3e:4a:78:b0:44:65:5d: 36:fe:3d:5e:47:8f:f9:8c:8f:98:b6:8b:9d:be:33: 58:cb:fa:07:b3:64:31:06:29:42:5b:42:33:99:a6: 0f:ab:55:a0:2f:d6:37:bf:52:14:37:5b:89:7b:7a: b2:b6:f7:d2:38:40:64:dc:c7:90:ab:09:df:d2:d5: ac:b8:c0:22:e5:8f:3d:32:87:9a:6c:52:14:16:85: d5:a3:2c:21:8c:25:6e:6b:a2:3f:4d:f0:d5:4a:a9: 09:17:e0:4f:e0:15:62:68:a5:1a:14:28:b8:0a:b1: 15:24:9d:6e:ab:45:ad:3d:78:f1:10:c7:74:35:f7: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:11:6C:13:EC:31:BD:2C:41:81:E0:36:F2:2A:B3:0B:94:1E:C9:D6 X509v3 Authority Key Identifier: keyid:47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:7e:b3:fc:92:b9:4c:35:2a:7c:a5:81:2b:15:fa:35:9d:bb: 0b:ef:6f:41:45:69:1b:1c:6d:60:d3:71:21:55:c3:5a:a7:f9: 50:8f:05:72:54:ec:65:12:80:1b:cc:4d:28:e1:4b:3a:94:8b: 00:a8:d3:06:19:75:4c:46:1a:1f:e5:67:e6:00:5c:4a:77:3d: 6b:26:df:a4:7d:32:3c:62:5c:5b:01:02:20:85:98:d9:35:b6: b2:b0:ca:99:cb:a3:11:14:6c:f6:8c:de:c6:8a:aa:0c:71:79: ac:1f:a6:e3:96:a8:b4:37:04:2d:de:0d:d6:34:db:ce:a9:8d: 13:62:6c:f8:c0:d5:fd:2f:67:86:d6:b4:00:f3:7b:59:aa:8e: 20:9d:76:5f:03:21:ee:2c:fe:ec:4a:42:7e:5d:2a:52:c9:c5: 4a:a1:76:37:50:8f:50:7f:b3:8e:47:48:b9:5b:e5:43:bf:5c: 4c:07:8c:94:7e:36:e7:e5:f5:b5:51:b4:20:90:00:3f:22:b6: 56:83:b0:0b:76:62:a3:a0:d9:d0:ff:aa:af:0a:0e:f9:88:89: 97:7f:cc:64:00:68:cd:a2:bf:1f:fa:8a:7f:b6:9e:72:24:34: c5:f3:24:89:b6:91:c0:2e:a5:2e:8a:e4:f3:d0:de:8d:0d:62: 37:b2:7f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYz/ML/8gMOYMjFAI37IZm3lRAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0 ODkyNDI3NDAeFw0yNTA4MjExMDQ1MzZaFw0yNTA4MjQxNjExMzZaMDMxMTAvBgNV BAMTKEU3MTE2QzEzRUMzMUJEMkM0MTgxRTAzNkYyMkFCMzBCOTQxRUM5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mZ4gz3PAhA7S8AJ5xOXCX6Yi a4gUPc0krggxaI04VDxvIZqJet4jsftZOMIo6jTuh73qcV7X0Ui+KYXJAcdC6k40 iWeIeFAEKWZ4MaST8dx1StkbIEbopafvJQyYe6uW1E1s598bu7Aid6XMeF55irYV BDFGuRpG/xthEYG9Pkp4sERlXTb+PV5Hj/mMj5i2i52+M1jL+gezZDEGKUJbQjOZ pg+rVaAv1je/UhQ3W4l7erK299I4QGTcx5CrCd/S1ay4wCLljz0yh5psUhQWhdWj LCGMJW5roj9N8NVKqQkX4E/gFWJopRoUKLgKsRUknW6rRa09ePEQx3Q199JtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xFsE+wxvSxBgeA28iqzC5QeydYwHwYDVR0j BBgwFoAUR6nZmoUR985U+fceHvg+9UiSQnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i M2M5NzNkNS1mZTk0LTQwMGQtYmNiZi1mMjMzZThhYzU1MzcvMC80N0E5RDk5QTg1 MTFGN0NFNTRGOUY3MUUxRUY4M0VGNTQ4OTI0Mjc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0ODky NDI3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNF RjU0ODkyNDI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR+s/ySuUw1KnylgSsV+jWduwvvb0FFaRsc bWDTcSFVw1qn+VCPBXJU7GUSgBvMTSjhSzqUiwCo0wYZdUxGGh/lZ+YAXEp3PWsm 36R9MjxiXFsBAiCFmNk1trKwypnLoxEUbPaM3saKqgxxeawfpuOWqLQ3BC3eDdY0 286pjRNibPjA1f0vZ4bWtADze1mqjiCddl8DIe4s/uxKQn5dKlLJxUqhdjdQj1B/ s45HSLlb5UO/XEwHjJR+Nufl9bVRtCCQAD8itlaDsAt2YqOg2dD/qq8KDvmIiZd/ zGQAaM2ivx/6in+2nnIkNMXzJIm2kcAupS6K5PPQ3o0NYjeyf4k= -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:51 2025 by rpki-client