$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json) Hash identifier: kjRN7BIRi+7Yru+7S/o/Up7ZA0yF317lVh2W1pXhv2Q= Subject key identifier: 28:84:4C:3C:1D:71:01:E6:89:0F:C5:A2:08:6A:E2:74:4B:A3:DB:0A Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Certificate serial: 3EF816ED4CCD847F26CA5E084BC99C0BC97ABD79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft Manifest number: 0210 Signing time: Sun 29 Jun 2025 21:01:49 +0000 Manifest this update: Sun 29 Jun 2025 20:56:49 +0000 Manifest next update: Thu 03 Jul 2025 03:52:49 +0000 Files and hashes: 1: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: 8H31XCyCaiL3PCemms0R9BN5c7plOXzf526xqtKgtHw=) 2: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: WkOEvMx4pLjLVaF0ggIqh7pDPWEbi8P19IogxuTVO3k=) 3: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: P4hdS37EWneF08stt5Krg+rWSIKfiKz6ffEd1QqCT5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f8:16:ed:4c:cd:84:7f:26:ca:5e:08:4b:c9:9c:0b:c9:7a:bd:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Validity Not Before: Jun 29 20:56:49 2025 GMT Not After : Jul 3 03:52:49 2025 GMT Subject: CN=28844C3C1D7101E6890FC5A2086AE2744BA3DB0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:f2:8f:be:64:74:8b:af:98:f1:77:37:26: 10:f1:2c:46:1d:f2:77:6a:ae:94:d7:f1:19:7a:d9: 17:b7:4b:9d:b7:3c:ab:fd:23:ee:78:e2:75:21:17: 42:d4:c0:cb:d0:b0:b9:26:2e:34:2d:c7:0e:ec:15: 77:67:3f:bf:37:78:74:aa:35:f8:11:fb:ec:5f:d6: c3:df:08:e8:e4:84:00:d4:66:99:3b:14:97:4b:fa: 8c:f9:d5:e2:b0:43:8a:ad:0e:66:d2:ff:0c:82:6a: 4d:b8:8e:4b:62:ad:ce:7a:79:ae:8f:5a:0c:a3:22: db:2b:08:7b:59:cf:32:35:2d:32:9d:e4:d0:9d:8c: 83:d0:71:d2:e2:48:e5:c2:e4:ec:29:f6:9c:64:a7: 1f:6b:ed:3d:6a:67:d0:16:d3:fb:b9:80:ad:1a:0b: bc:5b:21:86:50:4a:b8:51:58:d1:a2:d1:3d:34:91: ba:01:0e:d5:d3:92:ff:d0:98:17:30:25:8a:48:69: 70:ea:07:8c:7d:90:91:38:03:b1:a5:ba:c2:07:aa: e5:bb:e7:cf:1b:7a:ad:fe:8d:ee:57:bc:2a:7f:23: 00:6f:e5:5d:4e:e7:85:19:0d:47:b7:36:6c:1d:99: 3a:98:31:ed:a6:f1:2e:c7:65:a1:08:61:14:0f:a2: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:4C:3C:1D:71:01:E6:89:0F:C5:A2:08:6A:E2:74:4B:A3:DB:0A X509v3 Authority Key Identifier: keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c1:5c:e3:c8:c9:69:f4:ff:54:e1:9f:71:4a:0a:0e:3e:14: f2:b5:02:9e:5d:52:00:63:7e:50:ef:5c:fc:4a:65:78:40:3c: d4:a4:0b:21:32:e8:66:66:21:ed:7a:95:8a:2a:d7:9d:70:04: 37:17:d3:4e:0c:83:08:01:0c:d8:35:99:2a:84:36:3e:e8:c6: a2:d6:57:b0:b6:91:26:ce:51:08:fa:19:49:09:1b:38:46:92: 66:a0:ff:9d:09:f6:92:37:6d:bc:6a:ac:ea:db:77:b4:df:c2: 6b:9d:21:5b:a8:7c:8a:f3:e1:38:c0:49:f9:1e:38:c3:c4:57: ec:fd:58:56:12:e5:7c:0b:fb:81:b6:1e:d3:07:2c:a6:07:ab: 51:bc:9c:38:45:01:18:59:96:79:17:51:1e:ac:ec:01:96:ff: 72:4d:76:24:d2:45:7a:2c:7f:12:d6:9d:92:40:fa:a0:91:36: 03:a1:4d:23:aa:c0:0e:41:00:3e:31:60:e0:3f:42:59:62:e9: 05:7b:86:23:55:5f:9d:96:dc:96:d2:e4:b2:2a:7b:9e:de:28: bd:99:41:31:64:1c:16:7c:4f:f4:a3:5e:6f:45:d4:1a:a1:f9: e0:2a:e8:5c:62:96:ff:ed:c6:58:31:a5:cf:9a:47:b0:ed:b8: 74:d0:a1:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvgW7UzNhH8myl4IS8mcC8l6vXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5 QTc0NUI1MDAeFw0yNTA2MjkyMDU2NDlaFw0yNTA3MDMwMzUyNDlaMDMxMTAvBgNV BAMTKDI4ODQ0QzNDMUQ3MTAxRTY4OTBGQzVBMjA4NkFFMjc0NEJBM0RCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yfKPvmR0i6+Y8Xc3JhDxLEYd 8ndqrpTX8Rl62Re3S523PKv9I+544nUhF0LUwMvQsLkmLjQtxw7sFXdnP783eHSq NfgR++xf1sPfCOjkhADUZpk7FJdL+oz51eKwQ4qtDmbS/wyCak24jktirc56ea6P WgyjItsrCHtZzzI1LTKd5NCdjIPQcdLiSOXC5Owp9pxkpx9r7T1qZ9AW0/u5gK0a C7xbIYZQSrhRWNGi0T00kboBDtXTkv/QmBcwJYpIaXDqB4x9kJE4A7GlusIHquW7 588beq3+je5XvCp/IwBv5V1O54UZDUe3NmwdmTqYMe2m8S7HZaEIYRQPolcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIRMPB1xAeaJD8WiCGridEuj2wowHwYDVR0j BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0 ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0 NUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdB QjU5QTc0NUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnBXOPIyWn0/1Thn3FKCg4+FPK1Ap5dUgBj flDvXPxKZXhAPNSkCyEy6GZmIe16lYoq151wBDcX004MgwgBDNg1mSqENj7oxqLW V7C2kSbOUQj6GUkJGzhGkmag/50J9pI3bbxqrOrbd7TfwmudIVuofIrz4TjASfke OMPEV+z9WFYS5XwL+4G2HtMHLKYHq1G8nDhFARhZlnkXUR6s7AGW/3JNdiTSRXos fxLWnZJA+qCRNgOhTSOqwA5BAD4xYOA/Qlli6QV7hiNVX52W3JbS5LIqe57eKL2Z QTFkHBZ8T/SjXm9F1Bqh+eAq6Fxilv/txlgxpc+aR7DtuHTQoaM= -----END CERTIFICATE-----Generated at Mon Jun 30 00:29:54 2025 by rpki-client