$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: uwm/5DQt0aWN+IN52aAClYcA2brChDjoNnOQW2Yb58U= Subject key identifier: 51:97:D9:68:75:00:CE:35:84:CC:BD:09:C3:98:28:FA:1F:3B:59:CA Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 05E7C3D488DFDC9A57B14EE4B665237E222B4B89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 01B5 Signing time: Mon 17 Feb 2025 10:41:28 +0000 Manifest this update: Mon 17 Feb 2025 10:36:28 +0000 Manifest next update: Thu 20 Feb 2025 22:35:28 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: LsCH8Scf08CS6Uu6hQ7bYfYIRqU0B737baAvCQYctII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 22:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e7:c3:d4:88:df:dc:9a:57:b1:4e:e4:b6:65:23:7e:22:2b:4b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Feb 17 10:36:28 2025 GMT Not After : Feb 20 22:35:28 2025 GMT Subject: CN=5197D9687500CE3584CCBD09C39828FA1F3B59CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:7b:0e:01:b8:85:16:17:65:55:14:d1:9a: e6:7c:45:b5:8a:fa:f7:d2:cc:c8:64:76:9e:9b:06: 15:6e:f9:40:44:2c:5b:02:29:18:76:ad:37:65:2e: 46:a0:23:71:b9:be:a0:75:a2:5c:e0:68:31:6d:91: 7f:9e:8a:a5:cf:3a:36:e1:6f:d9:51:5a:c5:5b:2d: a5:c2:91:b3:d1:0b:30:f1:0a:47:78:b3:45:84:3e: 2a:4d:a0:4f:8d:fd:12:44:6f:ba:0f:b1:ca:7e:40: 1a:0c:68:e4:1f:52:f6:b4:f3:41:aa:94:5d:17:d2: 5f:ea:08:6d:c2:0e:a1:a7:78:c4:21:25:63:ea:00: 51:95:3c:d1:dc:1f:7d:6a:7d:35:f0:a6:d5:44:88: c7:eb:37:51:ce:e1:ab:e9:19:c1:6e:a8:5b:92:a3: ca:b4:9a:10:77:d7:bf:5b:72:24:d7:b0:aa:c1:44: 4a:28:59:2c:69:fc:06:8f:43:bc:fa:ff:b6:59:bf: 59:85:ef:57:a5:bb:52:cd:6e:97:5b:74:86:4d:14: 35:be:72:69:4d:ae:90:38:b8:6c:68:bb:dc:40:c6: f3:ea:f2:09:e6:8a:76:ae:a1:a7:a6:b3:7b:a3:fd: a7:d0:11:2e:ff:2e:e9:11:08:2a:a5:f5:68:f8:3f: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:97:D9:68:75:00:CE:35:84:CC:BD:09:C3:98:28:FA:1F:3B:59:CA X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6d:92:f7:20:88:eb:0f:fa:34:e2:e5:5e:d2:2b:4f:fe:0e: 41:e9:c7:3f:fd:6e:6d:69:28:ea:d3:a8:dd:27:64:34:9c:7a: e6:7c:c9:08:03:46:ba:f7:e6:30:82:7b:cd:95:08:d7:09:78: 05:22:17:5b:7d:19:14:84:cf:e6:81:e6:68:c2:2f:a0:1c:e8: c8:f3:2e:ea:c1:d3:af:22:6e:86:a9:56:f8:fa:78:10:38:54: 17:43:7a:89:ba:30:77:67:20:5f:10:d5:d3:c8:47:03:10:bd: 13:77:41:86:da:57:76:87:97:c5:8b:f1:1b:8e:80:05:62:47: 87:d2:61:b0:69:63:22:8e:22:eb:60:25:8d:12:e6:ad:dc:6b: 83:d8:2d:e6:66:93:fc:6f:88:f1:95:70:6a:e9:49:b3:e1:8c: e3:72:a9:81:90:49:30:7a:fa:8f:a8:a6:c5:0d:f0:5a:27:e2: b2:a3:1a:7d:2f:0e:75:1a:c1:4c:0e:2e:1d:d1:94:7f:79:35: 01:ec:c0:bd:a8:b7:61:83:fc:76:fb:53:a3:cc:44:dd:3e:b9: 49:92:55:fc:00:31:89:71:85:93:c3:aa:e9:d2:9b:55:ad:6d: 2b:9d:fd:74:72:85:e7:1e:f3:7c:ef:77:e3:23:1d:ad:6d:ea: ca:04:1b:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBefD1Ijf3JpXsU7ktmUjfiIrS4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTAyMTcxMDM2MjhaFw0yNTAyMjAyMjM1MjhaMDMxMTAvBgNV BAMTKDUxOTdEOTY4NzUwMENFMzU4NENDQkQwOUMzOTgyOEZBMUYzQjU5Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviXsOAbiFFhdlVRTRmuZ8RbWK +vfSzMhkdp6bBhVu+UBELFsCKRh2rTdlLkagI3G5vqB1olzgaDFtkX+eiqXPOjbh b9lRWsVbLaXCkbPRCzDxCkd4s0WEPipNoE+N/RJEb7oPscp+QBoMaOQfUva080Gq lF0X0l/qCG3CDqGneMQhJWPqAFGVPNHcH31qfTXwptVEiMfrN1HO4avpGcFuqFuS o8q0mhB3179bciTXsKrBREooWSxp/AaPQ7z6/7ZZv1mF71elu1LNbpdbdIZNFDW+ cmlNrpA4uGxou9xAxvPq8gnminauoaems3uj/afQES7/LukRCCql9Wj4P2SvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUZfZaHUAzjWEzL0Jw5go+h87WcowHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhtkvcgiOsP+jTi5V7SK0/+DkHpxz/9bm1p KOrTqN0nZDSceuZ8yQgDRrr35jCCe82VCNcJeAUiF1t9GRSEz+aB5mjCL6Ac6Mjz LurB068iboapVvj6eBA4VBdDeom6MHdnIF8Q1dPIRwMQvRN3QYbaV3aHl8WL8RuO gAViR4fSYbBpYyKOIutgJY0S5q3ca4PYLeZmk/xviPGVcGrpSbPhjONyqYGQSTB6 +o+opsUN8Fon4rKjGn0vDnUawUwOLh3RlH95NQHswL2ot2GD/Hb7U6PMRN0+uUmS VfwAMYlxhZPDqunSm1WtbSud/XRyhece83zvd+MjHa1t6soEGxY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:15:10 2025 by rpki-client