$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json) Hash identifier: mhDeA4XNE9POKSGRC3lRr+DlF5CMhgYsZQlYmbQqFhk= Subject key identifier: DE:87:DE:F8:38:86:42:B5:9F:DC:7E:83:C0:F1:69:47:8A:59:0B:78 Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Certificate serial: 14955C83059D179AE8CD118B454092DDA9D2E436 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft Manifest number: 01F7 Signing time: Sun 04 May 2025 15:11:48 +0000 Manifest this update: Sun 04 May 2025 15:06:48 +0000 Manifest next update: Wed 07 May 2025 16:43:48 +0000 Files and hashes: 1: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: WkOEvMx4pLjLVaF0ggIqh7pDPWEbi8P19IogxuTVO3k=) 2: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: P4hdS37EWneF08stt5Krg+rWSIKfiKz6ffEd1QqCT5Q=) 3: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: mYiWgj/e5hOHmE5YufgfH19hpOA3RYlV8xTQUZBz6JE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 16:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:95:5c:83:05:9d:17:9a:e8:cd:11:8b:45:40:92:dd:a9:d2:e4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Validity Not Before: May 4 15:06:48 2025 GMT Not After : May 7 16:43:48 2025 GMT Subject: CN=DE87DEF8388642B59FDC7E83C0F169478A590B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:ff:29:4b:00:50:24:e8:e9:23:f3:94:d2: 92:a7:58:86:65:e0:bf:d6:7b:9b:3d:a6:a5:8d:9a: 83:c0:0b:7c:a3:84:93:4e:f5:6a:cf:e0:ee:c8:97: 54:c9:c0:f1:ca:79:35:03:de:69:54:1f:71:c0:e0: c2:51:fc:0d:84:a1:f3:69:ee:68:05:cd:a2:54:42: 77:a7:86:13:8c:3c:d1:ff:51:40:3d:cd:4f:05:9c: 34:f1:8c:71:1d:c9:0a:14:f7:36:90:ae:0e:be:08: f4:02:6e:f9:6b:8d:c3:f2:33:38:78:5a:33:94:9c: d8:d0:54:e4:5e:7d:2c:01:84:60:a7:47:2f:dd:ae: bd:25:cc:5b:f2:05:a1:c6:e7:f7:46:73:b8:d9:29: 8a:25:42:10:32:9f:19:c7:9f:e5:f9:f0:a9:c0:cd: d2:73:01:e9:0e:5d:a1:02:b6:7d:5f:bf:91:c1:1c: 16:bc:ab:d4:d0:1d:a4:22:26:f0:97:51:22:74:19: 67:63:bd:f0:61:b8:30:65:37:ee:b2:4c:7c:d8:63: 22:4e:9e:80:ec:8c:53:43:e9:54:ed:3a:17:03:9b: b5:fa:d0:86:87:10:bc:5a:45:f9:2a:97:f4:e6:34: cb:01:0d:3f:45:0e:08:9b:2e:e0:0d:1a:12:05:62: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:DE:F8:38:86:42:B5:9F:DC:7E:83:C0:F1:69:47:8A:59:0B:78 X509v3 Authority Key Identifier: keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:6a:a7:81:49:14:4b:99:da:7a:bd:89:ec:4d:aa:dd:36:3d: 01:28:aa:f9:c6:cd:d7:79:c4:35:ae:13:7a:63:15:c0:4f:57: 3b:45:45:fb:cc:b2:d9:2c:1f:a9:d6:44:be:36:ee:28:0e:56: ed:2e:6f:00:4e:35:80:6e:31:2a:f7:00:1d:1b:79:51:84:69: ce:ef:38:a7:40:17:36:67:61:bb:3d:27:d8:9c:e0:79:f3:f1: 3f:4f:4e:af:38:75:62:56:67:c4:f2:59:8a:7c:e0:42:ef:7d: c0:42:ef:a1:b0:8a:1f:ee:10:4e:23:7e:77:c5:16:08:44:25: 5d:53:f0:97:05:4c:a9:cd:d7:c0:a7:bc:5f:6b:7d:72:61:32: 24:32:ba:75:68:8a:75:af:0b:2f:44:e3:94:e5:70:7d:b6:bb: 5f:40:29:f6:5f:4e:f0:07:13:18:8a:a1:ff:08:3b:d4:6a:61: 1c:5b:6d:cd:09:9c:25:ab:d2:27:4a:cc:02:6c:25:7f:c9:a1: 4c:fc:09:c1:ce:44:27:11:db:5b:a0:aa:3e:55:59:e7:43:51: fa:61:28:7f:5e:fa:6a:1a:7d:c1:8e:cc:91:c9:6b:67:53:64: c1:94:24:fc:9f:18:09:e4:fb:8d:94:39:03:82:36:11:d8:d3: 93:62:31:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJVcgwWdF5rozRGLRUCS3anS5DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5 QTc0NUI1MDAeFw0yNTA1MDQxNTA2NDhaFw0yNTA1MDcxNjQzNDhaMDMxMTAvBgNV BAMTKERFODdERUY4Mzg4NjQyQjU5RkRDN0U4M0MwRjE2OTQ3OEE1OTBCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwf8pSwBQJOjpI/OU0pKnWIZl 4L/We5s9pqWNmoPAC3yjhJNO9WrP4O7Il1TJwPHKeTUD3mlUH3HA4MJR/A2EofNp 7mgFzaJUQnenhhOMPNH/UUA9zU8FnDTxjHEdyQoU9zaQrg6+CPQCbvlrjcPyMzh4 WjOUnNjQVORefSwBhGCnRy/drr0lzFvyBaHG5/dGc7jZKYolQhAynxnHn+X58KnA zdJzAekOXaECtn1fv5HBHBa8q9TQHaQiJvCXUSJ0GWdjvfBhuDBlN+6yTHzYYyJO noDsjFND6VTtOhcDm7X60IaHELxaRfkql/TmNMsBDT9FDgibLuANGhIFYntFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ofe+DiGQrWf3H6DwPFpR4pZC3gwHwYDVR0j BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0 ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0 NUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdB QjU5QTc0NUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAONqp4FJFEuZ2nq9iexNqt02PQEoqvnGzdd5 xDWuE3pjFcBPVztFRfvMstksH6nWRL427igOVu0ubwBONYBuMSr3AB0beVGEac7v OKdAFzZnYbs9J9ic4Hnz8T9PTq84dWJWZ8TyWYp84ELvfcBC76Gwih/uEE4jfnfF FghEJV1T8JcFTKnN18CnvF9rfXJhMiQyunVoinWvCy9E45TlcH22u19AKfZfTvAH ExiKof8IO9RqYRxbbc0JnCWr0idKzAJsJX/JoUz8CcHORCcR21ugqj5VWedDUfph KH9e+moafcGOzJHJa2dTZMGUJPyfGAnk+42UOQOCNhHY05NiMSg= -----END CERTIFICATE-----Generated at Mon May 5 23:39:31 2025 by rpki-client