$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft File: 47CBAD1A648715C5E867F1A2ED3558688608EE19.mft (raw, json) Hash identifier: U7RAXgymOdAIyp6gQvJPRJW/dPgiyGF807NmbYcVO9c= Subject key identifier: D3:98:39:33:DB:D1:FA:B8:77:7B:6E:FD:49:AC:0C:C7:4D:96:29:BC Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Certificate serial: 4C6B7C35DD3C4E4B3F8EDA101D02F100B5CC6842 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft Manifest number: 0147 Signing time: Sat 28 Jun 2025 13:01:09 +0000 Manifest this update: Sat 28 Jun 2025 12:56:09 +0000 Manifest next update: Tue 01 Jul 2025 15:18:09 +0000 Files and hashes: 1: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: 1a16GMwOcOCsjYtXlZLoq81/WntEbXylQSYsmM31kuc=) 2: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: zg3C7UqiFNjk6v4cmaqyG4vvOgQ3amedsyfg+VEOO70=) 3: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: +ck2E10dFd5/OEf+e40wX7Ntpp2HW/ZWwaXbGUuqd1Q=) 4: 47CBAD1A648715C5E867F1A2ED3558688608EE19.crl (hash: qCz/i47tqjoWFd2cU1fNquQoLkMihP5OdBKh1PVNDs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6b:7c:35:dd:3c:4e:4b:3f:8e:da:10:1d:02:f1:00:b5:cc:68:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Validity Not Before: Jun 28 12:56:09 2025 GMT Not After : Jul 1 15:18:09 2025 GMT Subject: CN=D3983933DBD1FAB8777B6EFD49AC0CC74D9629BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:29:52:1b:38:88:b5:08:a0:1b:bf:47:9b: 14:3f:77:b4:b9:ae:db:bd:2c:eb:13:1b:57:ff:47: 77:fa:ad:13:57:e7:a7:68:e9:0e:9b:4d:5e:fb:1f: 66:57:db:6c:5c:9a:87:6b:f5:0a:64:e4:8b:39:95: af:5b:0a:a4:08:31:d5:52:3b:28:a3:85:78:74:4e: db:40:db:df:39:de:5b:9f:c0:4c:68:27:c1:1d:29: 8e:cf:68:57:2a:e3:cc:fc:d2:da:6d:f6:f1:31:4a: b9:71:d5:77:9b:64:6b:ae:92:e9:2d:4a:a6:ed:e4: 8c:62:42:92:29:4e:60:a6:25:ec:e4:aa:90:28:a2: 53:32:5e:22:05:d1:9e:32:70:a9:10:42:68:b3:40: 03:04:2a:52:cd:0f:af:67:43:c9:63:52:08:1e:67: fd:38:7e:9a:4f:df:d6:79:3b:6b:58:6f:3c:f8:1a: 7f:60:f5:e7:6c:2a:da:4d:8d:58:ac:ee:7c:43:3a: 42:a4:14:2f:49:cb:e1:82:d6:3a:97:92:0e:8d:cf: 20:ea:8a:75:da:f9:0f:d6:03:f3:07:0a:b8:dc:46: 69:21:fd:cf:0e:16:7a:2b:6a:5f:24:09:ea:8b:cb: 6b:62:d5:5c:38:be:2c:1e:2a:76:89:e1:d3:f7:09: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:98:39:33:DB:D1:FA:B8:77:7B:6E:FD:49:AC:0C:C7:4D:96:29:BC X509v3 Authority Key Identifier: keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a3:6b:a1:48:76:2f:bf:cd:c7:8e:ac:25:87:9f:f5:04:08: 05:6f:ce:e6:dd:a4:55:f5:1c:8c:bd:96:e7:22:ad:d7:f5:a7: f3:65:1d:a2:5c:d3:db:f0:cb:54:d9:0e:55:21:fb:28:39:89: 5a:bb:18:d5:1b:24:33:33:71:68:d3:9c:58:72:e8:bd:99:cd: fd:a3:de:02:f8:86:26:bc:05:b3:88:63:e0:7b:22:e3:36:ab: e7:66:24:5c:f8:d8:d8:89:7b:b6:b8:bf:79:4f:fe:84:96:51: 53:61:fd:7d:f3:ff:80:3c:89:94:d1:68:28:ac:17:27:a9:f9: 06:2c:7d:64:3b:c3:f9:aa:04:0f:8b:8d:13:a7:dc:b4:a3:49: 0e:ff:d6:58:69:13:d5:94:88:08:b9:8a:7c:ed:09:b9:27:aa: 33:b6:a4:f0:1d:c7:fc:f5:7e:aa:8c:80:23:76:50:bd:a7:ec: 68:b5:45:7f:90:08:09:7e:d4:64:91:9f:04:22:f6:c5:1c:40: cf:00:a3:cb:33:5d:86:52:48:c1:db:56:00:c6:99:d0:cc:7d: 0f:db:7c:12:b6:83:a5:fa:7e:bc:99:5b:e3:de:a1:6f:57:54: cd:ae:58:71:ba:65:c5:8c:e2:18:0c:cb:ba:0d:3d:85:8a:90: b4:8c:89:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGt8Nd08Tks/jtoQHQLxALXMaEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4 NjA4RUUxOTAeFw0yNTA2MjgxMjU2MDlaFw0yNTA3MDExNTE4MDlaMDMxMTAvBgNV BAMTKEQzOTgzOTMzREJEMUZBQjg3NzdCNkVGRDQ5QUMwQ0M3NEQ5NjI5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXClSGziItQigG79HmxQ/d7S5 rtu9LOsTG1f/R3f6rRNX56do6Q6bTV77H2ZX22xcmodr9Qpk5Is5la9bCqQIMdVS OyijhXh0TttA29853lufwExoJ8EdKY7PaFcq48z80tpt9vExSrlx1XebZGuukukt Sqbt5IxiQpIpTmCmJezkqpAoolMyXiIF0Z4ycKkQQmizQAMEKlLND69nQ8ljUgge Z/04fppP39Z5O2tYbzz4Gn9g9edsKtpNjVis7nxDOkKkFC9Jy+GC1jqXkg6NzyDq inXa+Q/WA/MHCrjcRmkh/c8OFnoral8kCeqLy2ti1Vw4viweKnaJ4dP3CTOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05g5M9vR+rh3e279SawMx02WKbwwHwYDVR0j BBgwFoAUR8utGmSHFcXoZ/Gi7TVYaIYI7hkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDk1NjUwNS1kNmIzLTQzZGMtOTA3MC1kNGRiZGI3Y2Y5NjMvMC80N0NCQUQxQTY0 ODcxNUM1RTg2N0YxQTJFRDM1NTg2ODg2MDhFRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4NjA4 RUUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ5NTY1MDUtZDZiMy00M2RjLTkw NzAtZDRkYmRiN2NmOTYzLzAvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4 Njg4NjA4RUUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqja6FIdi+/zceOrCWHn/UECAVvzubdpFX1 HIy9lucirdf1p/NlHaJc09vwy1TZDlUh+yg5iVq7GNUbJDMzcWjTnFhy6L2Zzf2j 3gL4hia8BbOIY+B7IuM2q+dmJFz42NiJe7a4v3lP/oSWUVNh/X3z/4A8iZTRaCis Fyep+QYsfWQ7w/mqBA+LjROn3LSjSQ7/1lhpE9WUiAi5inztCbknqjO2pPAdx/z1 fqqMgCN2UL2n7Gi1RX+QCAl+1GSRnwQi9sUcQM8Ao8szXYZSSMHbVgDGmdDMfQ/b fBK2g6X6fryZW+PeoW9XVM2uWHG6ZcWM4hgMy7oNPYWKkLSMiWE= -----END CERTIFICATE-----Generated at Mon Jun 30 01:08:25 2025 by rpki-client