$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json) Hash identifier: 47WPyxS75QMX8yhv4clDjdv3q7YSNLTrfR7OeggrFIE= Subject key identifier: B9:A8:C9:A3:7C:6B:B5:35:40:34:FE:7A:33:B5:5E:64:63:75:6D:9C Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Certificate serial: 5865EEB44D578AA1A77DD1A1B69F9B7BD4F348F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft Manifest number: 0263 Signing time: Fri 22 Aug 2025 18:10:45 +0000 Manifest this update: Fri 22 Aug 2025 18:05:45 +0000 Manifest next update: Mon 25 Aug 2025 18:49:45 +0000 Files and hashes: 1: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 4ffaA+HJTlhbFhWXiIV/z7UyuFvQH2sRUiYe/L6G0PQ=) 2: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: DyrlUjs6Uu6vGAvg5tT+7myynUr8e84wIlqBuR6C9G0=) 3: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: VuXnUu6nt1vWqWklNdmA8LNOdeUQg5m/ryy7i6vjQ/4=) 4: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: vFbxzvWMe+G7Jz6pzEc4uPBFg5E57nkcCYhIffrIAXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:65:ee:b4:4d:57:8a:a1:a7:7d:d1:a1:b6:9f:9b:7b:d4:f3:48:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Validity Not Before: Aug 22 18:05:45 2025 GMT Not After : Aug 25 18:49:45 2025 GMT Subject: CN=B9A8C9A37C6BB5354034FE7A33B55E6463756D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:5c:06:bb:49:4d:aa:ad:54:81:23:2d:a1: 33:bd:7e:f1:7f:37:b7:70:ca:d8:d0:9a:18:61:6f: 74:f9:bb:be:a7:3a:3c:76:d4:c5:8f:75:44:b1:90: 19:f6:a4:cd:3b:db:0d:e7:32:d5:64:4b:48:d1:70: 8c:55:60:bd:cb:00:3a:19:28:91:26:52:5e:15:63: 9e:30:f6:37:dc:44:bf:64:f3:7d:05:45:48:57:3c: 49:1f:f5:17:82:5c:2f:79:5e:fb:e0:86:87:65:a6: ce:43:54:fe:e9:3d:e2:d9:89:4e:dd:87:1a:5b:27: 74:03:3e:53:3a:55:30:79:07:3e:d1:a8:e9:ba:55: 74:65:e4:11:a6:e0:29:b0:94:cc:17:1a:05:b8:dd: 55:54:1e:1b:22:e6:43:76:77:8b:79:5b:9b:91:12: f0:d8:aa:bd:76:d9:7a:a2:df:c2:50:57:bc:43:7b: c3:82:4f:ce:61:f0:b0:1e:36:ac:22:d9:b4:0e:68: ff:f3:0c:13:4b:9d:a8:58:5c:e1:12:1a:48:ca:28: 87:01:68:06:24:f4:d2:fe:81:ef:39:ed:22:ad:a4: fe:5a:14:d1:9c:39:c2:49:ad:9a:6d:fc:c8:fa:c9: 20:84:e4:ea:83:b5:ee:48:51:c0:78:e7:b6:3b:d6: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A8:C9:A3:7C:6B:B5:35:40:34:FE:7A:33:B5:5E:64:63:75:6D:9C X509v3 Authority Key Identifier: keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:29:d2:e1:48:3b:1f:37:c2:e6:ed:43:bc:ad:3d:26:3e:c5: 88:64:ed:05:97:87:cf:68:d8:8c:27:d7:d9:4b:bc:f6:6c:8a: d9:b0:0e:7d:53:1d:d2:50:04:38:76:2b:ea:be:8a:fc:9c:29: 8d:ea:62:82:0d:97:e7:36:d0:d4:58:fe:a3:28:f5:15:88:1c: 3a:0d:f2:0f:0c:a8:12:1d:07:b4:88:e3:00:6e:91:5c:f8:27: 87:35:65:ec:c6:ff:b8:00:74:2b:30:ac:4a:8b:7a:d4:90:16: f8:10:60:da:04:45:ac:86:e5:bc:c8:b8:81:64:98:47:a8:61: 68:ee:b2:77:92:75:4e:48:fd:51:3f:e8:0b:40:ad:4a:f3:71: 15:7c:17:fa:87:3a:bf:79:c8:c5:24:8f:d8:e1:56:da:b2:08: f2:ca:c4:3c:19:1a:be:60:bf:82:a5:df:66:f7:52:ec:a3:52: 37:a7:fe:4b:81:e8:04:c0:a4:99:52:4d:53:20:13:8d:a6:92: 2a:76:57:9a:6b:0b:28:62:6b:08:ca:d5:d7:60:40:1c:03:2a: 20:8b:e6:0f:bc:3f:bf:e0:64:f1:51:15:f4:41:44:ca:8b:19: 5b:1f:31:1a:ae:38:c8:64:aa:a8:e1:ca:f6:76:2d:22:4a:0c: d1:ca:00:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGXutE1XiqGnfdGhtp+be9TzSPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5 NDc5OUFBNjAeFw0yNTA4MjIxODA1NDVaFw0yNTA4MjUxODQ5NDVaMDMxMTAvBgNV BAMTKEI5QThDOUEzN0M2QkI1MzU0MDM0RkU3QTMzQjU1RTY0NjM3NTZEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8FwGu0lNqq1UgSMtoTO9fvF/ N7dwytjQmhhhb3T5u76nOjx21MWPdUSxkBn2pM072w3nMtVkS0jRcIxVYL3LADoZ KJEmUl4VY54w9jfcRL9k830FRUhXPEkf9ReCXC95Xvvghodlps5DVP7pPeLZiU7d hxpbJ3QDPlM6VTB5Bz7RqOm6VXRl5BGm4CmwlMwXGgW43VVUHhsi5kN2d4t5W5uR EvDYqr122Xqi38JQV7xDe8OCT85h8LAeNqwi2bQOaP/zDBNLnahYXOESGkjKKIcB aAYk9NL+ge857SKtpP5aFNGcOcJJrZpt/Mj6ySCE5OqDte5IUcB457Y71pbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuajJo3xrtTVANP56M7VeZGN1bZwwHwYDVR0j BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3 ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5 OUFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI4MWJjZWEtYjcwZi00Mzc0LTky NGItYjZjNzc4MTA5ODM3LzAvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0 QUU5NDc5OUFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsp0uFIOx83wubtQ7ytPSY+xYhk7QWXh89o 2Iwn19lLvPZsitmwDn1THdJQBDh2K+q+ivycKY3qYoINl+c20NRY/qMo9RWIHDoN 8g8MqBIdB7SI4wBukVz4J4c1ZezG/7gAdCswrEqLetSQFvgQYNoERayG5bzIuIFk mEeoYWjusneSdU5I/VE/6AtArUrzcRV8F/qHOr95yMUkj9jhVtqyCPLKxDwZGr5g v4Kl32b3UuyjUjen/kuB6ATApJlSTVMgE42mkip2V5prCyhiawjK1ddgQBwDKiCL 5g+8P7/gZPFRFfRBRMqLGVsfMRquOMhkqqjhyvZ2LSJKDNHKAD0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:32 2025 by rpki-client