$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json) Hash identifier: G99zRXRdMFO5LY7fWtP3st3xglmodroY/vwkKDidcXw= Subject key identifier: 8B:4C:F4:CE:84:90:BF:42:CB:12:84:6B:60:A9:98:AD:C8:32:8D:CA Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93 Certificate serial: 17EFB3578FC13A243181AAB08209C957B6716FC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft Manifest number: 67 Signing time: Mon 30 Jun 2025 02:32:14 +0000 Manifest this update: Mon 30 Jun 2025 02:27:14 +0000 Manifest next update: Thu 03 Jul 2025 14:25:14 +0000 Files and hashes: 1: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: BvaDIWpj6ESRsWcAoy+nFwj3Inz0agR3mscyzt5hzAg=) 2: 3136302e3138372e3136342e302f32342d3234203d3e20313533313330.roa (hash: im2cEhcHMcPPGMdkIZRyFzdz2wzWxxkZLPRmLaETJuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ef:b3:57:8f:c1:3a:24:31:81:aa:b0:82:09:c9:57:b6:71:6f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93 Validity Not Before: Jun 30 02:27:14 2025 GMT Not After : Jul 3 14:25:14 2025 GMT Subject: CN=8B4CF4CE8490BF42CB12846B60A998ADC8328DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:62:e9:30:36:6c:3a:2d:dc:af:90:7a:67:e8: 64:60:5b:4e:d7:f0:4d:38:46:9b:7e:10:f7:c7:0b: 81:be:b1:2e:20:da:a6:59:b7:af:45:ee:b4:33:fc: f6:38:0c:c1:4f:8b:d1:f8:43:7e:0f:30:13:12:db: 5c:2e:7c:db:19:9e:67:bc:1a:7d:de:07:d4:07:71: 2f:05:ef:bb:7b:72:29:e2:a5:d6:c4:35:0c:0d:84: 49:89:5b:d6:f8:5e:b5:1a:05:cd:22:36:d5:2e:26: ae:e8:37:69:49:1e:c3:7c:c6:c2:48:60:32:44:26: c2:b4:67:b7:67:be:b8:e4:70:22:64:60:e4:f6:14: 72:8c:f8:f0:57:cb:80:03:de:eb:fe:11:46:31:8d: d2:bd:e5:fb:e9:f8:ce:dc:56:24:f4:36:0e:7c:7a: 1d:74:08:5e:e3:d4:a3:45:a2:f7:f4:7b:3f:51:ec: 71:67:fc:30:98:a2:c6:8b:64:4c:d8:0d:a6:dc:34: c9:7c:23:be:c8:58:1f:82:32:a4:55:fc:40:d0:df: 17:3f:85:74:ff:3f:51:5b:c5:61:21:37:12:b5:a0: d8:06:c6:02:74:2b:0f:8d:10:68:12:fa:a6:c6:46: ed:a0:94:1a:2e:5d:95:5c:6d:dd:a8:e3:7f:c8:37: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4C:F4:CE:84:90:BF:42:CB:12:84:6B:60:A9:98:AD:C8:32:8D:CA X509v3 Authority Key Identifier: keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6e:3e:1e:02:58:4a:f8:25:bf:fc:bc:d1:59:0b:c9:f8:73: a3:51:b7:06:58:b0:09:c1:24:a6:1d:69:76:7b:ea:5e:49:45: 58:be:bd:4c:01:fb:ae:bc:9a:c0:a3:82:98:6e:4f:9b:8e:66: f5:5e:20:d6:a9:aa:39:f3:cf:8e:84:65:65:73:3a:eb:f6:8e: e1:81:83:05:88:a5:bd:b6:ae:84:0d:e9:a9:ee:c6:14:93:a5: 9d:5a:1e:45:0c:d4:30:ab:32:48:76:28:c3:f3:70:94:28:17: 50:c7:7c:89:77:d1:dd:5e:eb:f5:10:ca:60:0f:32:93:3d:07: 5f:75:74:c0:e8:65:26:6c:07:f9:70:34:22:64:bd:90:87:81: 68:59:14:ee:a7:b9:dc:2b:db:31:cf:46:4d:78:b0:98:23:a8: da:d0:41:95:fd:64:3a:fe:30:97:92:fe:08:fb:58:52:68:c5: 6b:fa:68:56:ef:e2:4c:3e:f4:d1:90:24:af:b4:ed:aa:e5:9a: de:4d:7d:f3:52:80:ff:40:3d:a0:51:06:77:e7:d1:ea:75:da: 5f:e0:a6:4c:0d:4a:85:68:ab:d9:92:33:b6:cf:5c:59:c7:8b: 22:d7:ad:ba:61:d1:80:fd:12:bf:9f:f4:85:c5:2b:a5:14:7a: 50:e5:14:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF++zV4/BOiQxgaqwggnJV7Zxb8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4 RkIzM0U5MzAeFw0yNTA2MzAwMjI3MTRaFw0yNTA3MDMxNDI1MTRaMDMxMTAvBgNV BAMTKDhCNENGNENFODQ5MEJGNDJDQjEyODQ2QjYwQTk5OEFEQzgzMjhEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbYukwNmw6LdyvkHpn6GRgW07X 8E04Rpt+EPfHC4G+sS4g2qZZt69F7rQz/PY4DMFPi9H4Q34PMBMS21wufNsZnme8 Gn3eB9QHcS8F77t7cinipdbENQwNhEmJW9b4XrUaBc0iNtUuJq7oN2lJHsN8xsJI YDJEJsK0Z7dnvrjkcCJkYOT2FHKM+PBXy4AD3uv+EUYxjdK95fvp+M7cViT0Ng58 eh10CF7j1KNFovf0ez9R7HFn/DCYosaLZEzYDabcNMl8I77IWB+CMqRV/EDQ3xc/ hXT/P1FbxWEhNxK1oNgGxgJ0Kw+NEGgS+qbGRu2glBouXZVcbd2o43/IN7W/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi0z0zoSQv0LLEoRrYKmYrcgyjcowHwYDVR0j BBgwFoAUR1cfA2aHW3NRskTSXLfoJY+zPpMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMC80NzU3MUYwMzY2 ODc1QjczNTFCMjQ0RDI1Q0I3RTgyNThGQjMzRTkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4RkIz M0U5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4 MjU4RkIzM0U5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhuPh4CWEr4Jb/8vNFZC8n4c6NRtwZYsAnB JKYdaXZ76l5JRVi+vUwB+668msCjgphuT5uOZvVeINapqjnzz46EZWVzOuv2juGB gwWIpb22roQN6anuxhSTpZ1aHkUM1DCrMkh2KMPzcJQoF1DHfIl30d1e6/UQymAP MpM9B191dMDoZSZsB/lwNCJkvZCHgWhZFO6nudwr2zHPRk14sJgjqNrQQZX9ZDr+ MJeS/gj7WFJoxWv6aFbv4kw+9NGQJK+07arlmt5NffNSgP9APaBRBnfn0ep12l/g pkwNSoVoq9mSM7bPXFnHiyLXrbph0YD9Er+f9IXFK6UUelDlFOY= -----END CERTIFICATE-----Generated at Mon Jun 30 07:25:48 2025 by rpki-client