$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json) Hash identifier: ingtE2qAnROUAcRJaiXBpdt5IeSE7DMEu7Pzm6Db0YQ= Subject key identifier: 80:50:D3:32:0D:10:21:DC:11:5D:6A:CA:0A:9F:98:23:BB:D3:4D:52 Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Certificate serial: 395DF43BAF28413377A09B0E8DFFDD1EEA75FE95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft Manifest number: 0234 Signing time: Fri 09 May 2025 11:20:43 +0000 Manifest this update: Fri 09 May 2025 11:15:43 +0000 Manifest next update: Mon 12 May 2025 17:11:43 +0000 Files and hashes: 1: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: c3H3zC5UCn/YsDpQ5hkbM9i0IOve9Y7TRNRMAxjkKMc=) 2: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: DyrlUjs6Uu6vGAvg5tT+7myynUr8e84wIlqBuR6C9G0=) 3: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 4ffaA+HJTlhbFhWXiIV/z7UyuFvQH2sRUiYe/L6G0PQ=) 4: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: vFbxzvWMe+G7Jz6pzEc4uPBFg5E57nkcCYhIffrIAXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5d:f4:3b:af:28:41:33:77:a0:9b:0e:8d:ff:dd:1e:ea:75:fe:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Validity Not Before: May 9 11:15:43 2025 GMT Not After : May 12 17:11:43 2025 GMT Subject: CN=8050D3320D1021DC115D6ACA0A9F9823BBD34D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:90:fb:fb:56:25:4a:67:1f:54:dc:50:4f:94: 84:08:d3:d2:07:1b:72:ee:9d:0f:68:a5:8e:6c:cc: 5b:fc:41:99:85:9f:ef:af:7a:fc:72:14:94:2e:4e: 99:d7:fe:55:46:bd:e8:6b:ce:3e:5c:8e:fe:57:ad: ba:c2:80:a8:6f:6a:40:d3:a2:67:2b:47:b1:de:c9: b6:33:c7:09:82:8f:4c:3a:38:53:a0:47:4c:42:9e: 02:70:0d:5c:24:e3:86:6e:08:8c:82:8d:13:e1:ae: f0:bd:6b:b0:ce:21:d2:31:a8:73:47:84:a9:25:aa: a8:5f:af:04:d4:6b:21:95:46:a1:a0:da:60:eb:9d: 3a:d4:a2:75:2d:8e:b1:f9:cc:f1:7f:60:f9:f6:3a: 52:71:34:07:f4:73:e8:c1:fe:c9:01:9e:0e:b0:a1: cd:d9:8b:12:f6:20:d5:9d:15:6a:b2:73:fa:cc:2f: ad:67:36:ad:7e:6a:5f:bd:69:8a:a4:e0:72:d4:c0: 68:84:a1:76:bd:53:8b:ae:79:43:83:2a:98:7c:ec: 09:5b:1e:68:be:df:ef:b3:a6:df:11:91:b4:e8:7b: f2:80:c2:81:20:db:c3:a1:c0:45:15:15:20:70:ac: a4:7c:b3:3c:32:38:83:d6:ee:ab:e1:ac:80:0d:e2: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:D3:32:0D:10:21:DC:11:5D:6A:CA:0A:9F:98:23:BB:D3:4D:52 X509v3 Authority Key Identifier: keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ca:fd:f2:6e:3c:0d:97:ee:6a:d9:75:a7:31:71:bc:f6:db: 4b:b2:ac:91:b3:24:96:ae:aa:d0:f5:71:ee:38:cf:ee:ab:f9: 93:f0:17:49:93:73:51:eb:8a:f0:b5:6f:70:f1:3a:a7:43:80: eb:76:ec:33:a5:ff:d8:7a:50:10:93:cd:48:57:e2:17:d6:73: d1:5b:cc:ca:83:59:f4:b6:f9:dc:38:58:12:4b:78:d1:5c:30: f3:4b:d3:e4:8d:2d:44:9b:96:ba:c4:ae:fe:b7:2f:11:4c:53: 9f:89:e1:8e:c8:65:ae:68:a6:48:c1:c3:eb:dc:3d:d6:c9:b0: a6:a2:ce:d5:f0:3c:e3:46:09:0f:c5:04:bd:bb:9d:6d:c4:85: cf:e2:a4:1b:46:5a:bd:0a:f1:78:cf:32:28:67:54:50:e5:4f: 29:ba:1f:cd:22:74:a0:13:92:79:9a:b3:40:d0:7b:f2:8d:96: 52:34:47:5b:78:7f:01:66:ea:ce:3c:20:4b:33:93:bb:51:63: 00:30:52:17:a0:cd:39:8a:81:97:84:30:c4:1a:b4:4a:d1:36: 18:b7:de:8b:d7:3e:f4:1d:3f:79:d5:76:62:76:1c:bf:60:c8: a8:ee:97:8e:0e:b0:92:c4:fe:88:b4:e4:c2:7e:d0:b2:9f:b1: 7e:12:6f:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOV30O68oQTN3oJsOjf/dHup1/pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5 NDc5OUFBNjAeFw0yNTA1MDkxMTE1NDNaFw0yNTA1MTIxNzExNDNaMDMxMTAvBgNV BAMTKDgwNTBEMzMyMEQxMDIxREMxMTVENkFDQTBBOUY5ODIzQkJEMzRENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlkPv7ViVKZx9U3FBPlIQI09IH G3LunQ9opY5szFv8QZmFn++vevxyFJQuTpnX/lVGvehrzj5cjv5XrbrCgKhvakDT omcrR7HeybYzxwmCj0w6OFOgR0xCngJwDVwk44ZuCIyCjRPhrvC9a7DOIdIxqHNH hKklqqhfrwTUayGVRqGg2mDrnTrUonUtjrH5zPF/YPn2OlJxNAf0c+jB/skBng6w oc3ZixL2INWdFWqyc/rML61nNq1+al+9aYqk4HLUwGiEoXa9U4uueUODKph87Alb Hmi+3++zpt8RkbToe/KAwoEg28OhwEUVFSBwrKR8szwyOIPW7qvhrIAN4m6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgFDTMg0QIdwRXWrKCp+YI7vTTVIwHwYDVR0j BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3 ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5 OUFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI4MWJjZWEtYjcwZi00Mzc0LTky NGItYjZjNzc4MTA5ODM3LzAvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0 QUU5NDc5OUFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPK/fJuPA2X7mrZdacxcbz220uyrJGzJJau qtD1ce44z+6r+ZPwF0mTc1HrivC1b3DxOqdDgOt27DOl/9h6UBCTzUhX4hfWc9Fb zMqDWfS2+dw4WBJLeNFcMPNL0+SNLUSblrrErv63LxFMU5+J4Y7IZa5opkjBw+vc PdbJsKaiztXwPONGCQ/FBL27nW3Ehc/ipBtGWr0K8XjPMihnVFDlTym6H80idKAT knmas0DQe/KNllI0R1t4fwFm6s48IEszk7tRYwAwUhegzTmKgZeEMMQatErRNhi3 3ovXPvQdP3nVdmJ2HL9gyKjul44OsJLE/oi05MJ+0LKfsX4Sb64= -----END CERTIFICATE-----Generated at Sun May 11 01:17:43 2025 by rpki-client