$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: mieNFqDRWL7DGFXV4UoHU2RxeYNCzKXACXw+VdLYjzg= Subject key identifier: 10:14:91:53:35:D8:F2:5E:CC:90:46:47:E2:87:30:9D:59:9C:B4:BE Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 57037AA3F8A5E9F6992D5887B566CA8BDFDD465F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 0145 Signing time: Fri 18 Apr 2025 07:31:54 +0000 Manifest this update: Fri 18 Apr 2025 07:26:54 +0000 Manifest next update: Mon 21 Apr 2025 07:37:54 +0000 Files and hashes: 1: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) 2: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: Rsp0inkAe4x/F4hisAzY5o/UwhJ2oK1k5juyxF64B0U=) 3: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: UcmAKI2nLuk+UIbxEp9UW3qF1xsZlpTKJeaAD46VdRc=) 4: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 07:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:03:7a:a3:f8:a5:e9:f6:99:2d:58:87:b5:66:ca:8b:df:dd:46:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Apr 18 07:26:54 2025 GMT Not After : Apr 21 07:37:54 2025 GMT Subject: CN=1014915335D8F25ECC904647E287309D599CB4BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b8:e0:73:56:37:6d:39:31:67:2a:68:ae:87: 9e:99:7b:bf:c0:12:ca:e8:1c:4e:d5:06:5c:09:2a: 1c:2c:17:3b:87:73:a4:06:37:d3:2c:cc:a7:1f:0c: 3e:36:43:5c:d1:c1:45:93:b9:8e:e9:80:ab:d5:c7: 4d:dd:54:9d:95:ca:0f:e3:94:24:f3:49:bf:85:fe: 51:dc:52:b6:04:a5:1f:a4:1f:ad:09:05:0a:62:01: 69:1a:ac:07:c3:3b:04:d5:91:47:91:5d:93:c1:14: 36:f5:bd:28:c1:05:11:4b:94:a2:a2:a3:42:67:95: 00:04:40:67:ac:52:6f:1d:b6:53:eb:71:af:cb:3a: 96:c1:3f:d8:1b:05:24:65:ac:67:42:0d:cd:49:8c: b7:f5:54:29:f1:47:23:71:a3:e6:aa:c2:56:f4:24: 0f:38:fb:6e:e7:19:43:01:ef:f2:84:68:c7:90:14: ca:da:cb:21:42:4f:0a:6c:2e:72:38:eb:47:a8:77: f2:09:51:72:dd:9d:b5:fd:68:e7:f2:39:b6:21:ad: a1:b1:a4:41:e6:b1:a4:37:e4:59:aa:eb:76:21:c8: 26:78:ff:97:93:53:17:69:c0:fe:cb:00:fa:f9:fe: 16:5f:23:7f:0c:5f:e7:19:a3:4e:95:82:71:62:ad: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:91:53:35:D8:F2:5E:CC:90:46:47:E2:87:30:9D:59:9C:B4:BE X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f9:2c:c8:00:8a:2b:3d:02:f3:d3:88:37:e2:69:65:5a:cd: 40:30:a7:39:f4:4e:aa:ab:4b:3b:23:6a:ac:e2:06:3f:25:cc: a1:5a:62:0a:35:ed:b6:8a:ce:68:10:e0:0c:20:1d:45:a3:60: 48:6d:42:62:24:7e:57:06:9e:ff:4d:b2:ed:1d:46:ca:6e:01: 2d:00:a8:01:9b:96:0b:f2:87:55:d1:f4:ff:57:a3:62:bf:69: b2:c4:ec:fb:c2:90:d6:65:eb:a3:e5:61:33:e1:b3:c2:f0:53: 12:5a:3f:6b:38:d9:47:58:6d:75:0f:c2:d2:a0:6b:35:9f:e9: 5f:d1:40:ba:6c:8f:4c:13:81:39:3e:0c:2f:6a:2f:ce:a8:0d: b1:fb:f8:59:78:f4:30:93:f7:3f:70:c8:01:0d:fc:bd:30:d3: b4:9a:b3:23:d4:7c:87:1c:9f:7e:23:9a:c1:b7:35:ce:d7:28: 16:57:72:b4:8d:f2:ab:e7:8d:b6:2d:44:15:e1:8f:c5:e0:3f: 65:89:0c:cf:a2:93:96:21:b2:37:5a:aa:76:0a:78:7b:cf:ad: 5b:bf:d2:fc:93:a6:c3:ed:45:18:e6:91:99:64:30:91:3c:cb: 08:43:e2:6e:6c:a8:23:8b:17:ba:1f:5d:1e:45:25:df:f3:f1: 34:2a:2e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwN6o/il6faZLViHtWbKi9/dRl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNTA0MTgwNzI2NTRaFw0yNTA0MjEwNzM3NTRaMDMxMTAvBgNV BAMTKDEwMTQ5MTUzMzVEOEYyNUVDQzkwNDY0N0UyODczMDlENTk5Q0I0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyuOBzVjdtOTFnKmiuh56Ze7/A EsroHE7VBlwJKhwsFzuHc6QGN9MszKcfDD42Q1zRwUWTuY7pgKvVx03dVJ2Vyg/j lCTzSb+F/lHcUrYEpR+kH60JBQpiAWkarAfDOwTVkUeRXZPBFDb1vSjBBRFLlKKi o0JnlQAEQGesUm8dtlPrca/LOpbBP9gbBSRlrGdCDc1JjLf1VCnxRyNxo+aqwlb0 JA84+27nGUMB7/KEaMeQFMrayyFCTwpsLnI460eod/IJUXLdnbX9aOfyObYhraGx pEHmsaQ35Fmq63YhyCZ4/5eTUxdpwP7LAPr5/hZfI38MX+cZo06VgnFirS2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBSRUzXY8l7MkEZH4ocwnVmctL4wHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH5LMgAiis9AvPTiDfiaWVazUAwpzn0Tqqr SzsjaqziBj8lzKFaYgo17baKzmgQ4AwgHUWjYEhtQmIkflcGnv9Nsu0dRspuAS0A qAGblgvyh1XR9P9Xo2K/abLE7PvCkNZl66PlYTPhs8LwUxJaP2s42UdYbXUPwtKg azWf6V/RQLpsj0wTgTk+DC9qL86oDbH7+Fl49DCT9z9wyAEN/L0w07SasyPUfIcc n34jmsG3Nc7XKBZXcrSN8qvnjbYtRBXhj8XgP2WJDM+ik5YhsjdaqnYKeHvPrVu/ 0vyTpsPtRRjmkZlkMJE8ywhD4m5sqCOLF7ofXR5FJd/z8TQqLvA= -----END CERTIFICATE-----Generated at Sun Apr 20 02:52:24 2025 by rpki-client