$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json) Hash identifier: yxUut6Ho5NI4lFErxQULHFaOAaT3tLsSwAmVXo5OzNw= Subject key identifier: B9:77:02:A2:8D:0D:EC:22:88:76:7C:7A:A6:24:48:63:A0:DF:95:F9 Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Certificate serial: 1DF0919042CD48BA7809C4675CF654DD578BA6CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft Manifest number: 048D Signing time: Thu 03 Apr 2025 15:31:00 +0000 Manifest this update: Thu 03 Apr 2025 15:26:00 +0000 Manifest next update: Sun 06 Apr 2025 19:22:00 +0000 Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: +nXLqTPhqCp9QCb5vZL6pTq5VJAXgaa3fwP1SIHBOxQ=) 2: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=) 3: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: RSSKQ80qetxdl3Vs6AqHUHNTYF+l0dFEx0uWms41D5o=) 4: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: jnhIwx03UauIIk4jQYORMW4E9+8OTi1hP5M4TRVep5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 19:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f0:91:90:42:cd:48:ba:78:09:c4:67:5c:f6:54:dd:57:8b:a6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Validity Not Before: Apr 3 15:26:00 2025 GMT Not After : Apr 6 19:22:00 2025 GMT Subject: CN=B97702A28D0DEC2288767C7AA6244863A0DF95F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8c:40:1e:ac:6e:9c:55:2a:5f:00:a5:7f:5d: 7a:f7:7b:67:9a:cb:ef:bb:6e:d1:ab:39:e1:50:01: ba:8a:5d:45:f1:9c:77:f9:36:e2:b2:0b:07:58:f6: d9:79:a3:63:da:db:9d:d8:4a:62:7a:2f:7d:27:e2: aa:03:73:e3:08:a8:2e:7f:36:9d:74:d9:6f:30:e2: 34:ff:07:fe:a4:08:e9:67:e8:ed:5e:27:e3:86:07: 22:3b:12:c7:50:1b:36:7a:fb:5a:7f:32:51:4c:b2: de:3d:76:8d:c4:d2:00:60:d6:c6:9b:69:1f:e0:8a: 9d:21:3c:91:f6:92:15:7b:67:5b:63:7f:ac:cd:e1: 8f:e2:2a:f1:34:b7:93:23:e5:ee:d6:55:1b:e7:21: 4f:48:e7:40:bb:29:9f:f8:b1:e7:b5:54:7a:47:18: a7:49:24:7d:a9:c1:e4:dc:ad:8f:cd:df:46:a4:71: 6c:5b:05:c3:be:82:05:ee:3d:ce:e3:ed:2b:e3:29: 7a:87:5f:96:c2:30:ab:a9:f1:be:48:f5:c0:1e:6e: e1:55:07:40:cc:96:83:c3:5d:b7:04:ba:d6:c7:e9: 63:39:bf:3f:63:54:6d:81:d9:53:7a:e2:a1:df:0b: 13:5d:d2:24:a7:39:4e:31:25:2b:25:71:90:5f:87: ae:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:77:02:A2:8D:0D:EC:22:88:76:7C:7A:A6:24:48:63:A0:DF:95:F9 X509v3 Authority Key Identifier: keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c4:1d:85:49:6d:f5:5f:fc:48:52:f6:d6:5e:2b:9b:5d:64: 25:6c:5b:92:f9:45:8d:c2:a9:9c:16:cc:3b:3a:1b:b8:87:a4: 97:17:74:f1:a6:0f:77:eb:09:8a:42:11:72:69:7f:50:9b:a4: e9:b0:57:4f:24:90:14:4b:e9:37:2c:74:74:bc:d5:4a:ea:d5: 37:ce:91:54:88:32:43:44:f7:9a:ff:34:09:d0:78:ae:10:95: 99:e1:9c:99:c2:31:d9:d3:a6:5c:37:08:43:f2:39:2e:6a:5b: 33:21:2e:03:f9:c2:e2:f0:f3:3c:31:cb:a0:3c:db:22:df:6b: 4b:a5:ff:5f:ba:b2:b2:d7:05:89:bf:23:c7:3f:85:58:4e:06: 55:6e:16:1f:7b:21:8f:6d:85:9f:ff:d2:79:de:8f:98:24:5e: f3:32:52:45:fe:37:d9:0c:ff:c8:4c:65:d4:33:8d:d2:36:bc: d0:e0:aa:f0:c1:1b:b8:d0:ca:42:ba:77:d3:fc:4d:e0:10:e9: 8f:ca:d7:74:b6:f3:2b:1c:c1:c8:35:66:44:9c:51:6b:d1:48: bb:30:b1:0b:4c:00:d3:36:9c:1e:05:07:da:28:52:76:a3:94: 72:e7:16:6d:3c:37:8e:c9:f3:f9:1f:6f:39:ac:69:84:81:9b: 23:f2:82:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfCRkELNSLp4CcRnXPZU3VeLpsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy NDE4N0Q1OTAeFw0yNTA0MDMxNTI2MDBaFw0yNTA0MDYxOTIyMDBaMDMxMTAvBgNV BAMTKEI5NzcwMkEyOEQwREVDMjI4ODc2N0M3QUE2MjQ0ODYzQTBERjk1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7jEAerG6cVSpfAKV/XXr3e2ea y++7btGrOeFQAbqKXUXxnHf5NuKyCwdY9tl5o2Pa253YSmJ6L30n4qoDc+MIqC5/ Np102W8w4jT/B/6kCOln6O1eJ+OGByI7EsdQGzZ6+1p/MlFMst49do3E0gBg1sab aR/gip0hPJH2khV7Z1tjf6zN4Y/iKvE0t5Mj5e7WVRvnIU9I50C7KZ/4see1VHpH GKdJJH2pweTcrY/N30akcWxbBcO+ggXuPc7j7SvjKXqHX5bCMKup8b5I9cAebuFV B0DMloPDXbcEutbH6WM5vz9jVG2B2VN64qHfCxNd0iSnOU4xJSslcZBfh66RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuXcCoo0N7CKIdnx6piRIY6DflfkwHwYDVR0j BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4 N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4 RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLEHYVJbfVf/EhS9tZeK5tdZCVsW5L5RY3C qZwWzDs6G7iHpJcXdPGmD3frCYpCEXJpf1CbpOmwV08kkBRL6TcsdHS81Urq1TfO kVSIMkNE95r/NAnQeK4QlZnhnJnCMdnTplw3CEPyOS5qWzMhLgP5wuLw8zwxy6A8 2yLfa0ul/1+6srLXBYm/I8c/hVhOBlVuFh97IY9thZ//0nnej5gkXvMyUkX+N9kM /8hMZdQzjdI2vNDgqvDBG7jQykK6d9P8TeAQ6Y/K13S28yscwcg1ZkScUWvRSLsw sQtMANM2nB4FB9ooUnajlHLnFm08N47J8/kfbzmsaYSBmyPyglQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:52:37 2025 by rpki-client