$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: knh+bOljudO/79lLp+7z6W8f43Tg/wpwv2zyRdF0iak= Subject key identifier: A2:19:39:BC:01:87:A2:4C:D7:68:83:70:36:75:7E:B5:31:1D:7A:1E Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 47716B977F3FC5C7BCD8E445B77F763FCE5C1221 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 0213 Signing time: Fri 05 Sep 2025 22:51:32 +0000 Manifest this update: Fri 05 Sep 2025 22:46:32 +0000 Manifest next update: Tue 09 Sep 2025 07:22:32 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: daM1wxug9rXi982VjCcZJ3ZrdGykQbE4hdT57Uz9qx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:71:6b:97:7f:3f:c5:c7:bc:d8:e4:45:b7:7f:76:3f:ce:5c:12:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Sep 5 22:46:32 2025 GMT Not After : Sep 9 07:22:32 2025 GMT Subject: CN=A21939BC0187A24CD768837036757EB5311D7A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:72:00:12:3c:72:1d:a9:53:0a:b5:4f:7c: f6:52:67:aa:79:e8:92:34:04:78:38:1c:13:af:a2: b2:90:8e:ab:95:50:4d:aa:e1:ca:14:ec:7c:0a:66: a2:21:6b:c1:10:b0:a9:1d:77:8f:6a:d2:25:e9:69: 12:7d:d2:0d:c5:62:4b:2b:b3:6d:58:18:78:eb:bd: 45:af:21:1b:cb:1a:a8:5d:70:13:75:16:45:0e:e7: 98:c7:9f:15:5d:08:15:55:90:f1:79:99:33:ef:9f: 4d:13:ba:86:1a:bb:4e:40:8e:80:8d:f7:a9:d1:cf: b2:63:aa:28:61:e7:d6:04:c1:2b:8b:ba:99:d5:9b: 28:e5:99:df:4a:d9:0c:7c:79:d5:90:08:35:8e:54: a6:d5:c2:70:2d:72:d1:78:4f:0a:24:92:b1:92:2a: 58:9b:36:6f:2e:22:7d:92:75:13:cd:40:09:68:f5: 48:e5:f4:cb:44:b8:49:98:69:c7:fd:e9:49:7e:6c: 04:5c:22:fa:c9:88:96:73:53:fa:6a:e9:20:40:2c: 4f:92:3e:71:c4:0e:6b:0e:05:51:ae:20:9b:d4:27: 11:8a:e9:82:02:f2:b1:87:1d:e4:aa:5d:c4:cb:b6: 58:9c:09:09:e3:a3:e2:a7:3f:81:20:66:01:4b:68: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:39:BC:01:87:A2:4C:D7:68:83:70:36:75:7E:B5:31:1D:7A:1E X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:83:e6:41:83:ae:90:f7:09:c4:15:c3:59:94:65:6c:ca:6d: 87:91:0e:85:57:de:d7:13:78:64:37:44:f4:6b:96:3a:59:f7: 4d:2d:ce:78:9a:d9:1b:d7:38:97:fd:45:d2:3b:83:a0:ac:d4: 36:68:2c:8a:45:a3:72:4d:19:83:5c:9f:1c:ab:e0:d7:b3:55: 28:d2:75:88:55:a9:98:96:1a:88:ce:b1:e7:24:11:4a:a1:ce: 7e:56:b1:2d:f2:39:5c:39:19:67:9f:de:f2:6e:fb:ac:01:85: 72:03:03:ad:d0:7e:09:e5:ab:0d:a2:d0:e1:88:27:22:cd:0f: 19:89:4e:83:12:8b:49:4e:9c:26:2d:bc:b1:ef:24:4b:b6:1d: e5:53:dd:16:53:01:88:35:ac:b4:26:8f:59:b4:d3:ae:60:2e: ca:7b:68:b0:2e:a6:43:14:38:e3:7b:10:ca:f6:75:2c:c3:2e: 3e:2e:ff:e1:8c:96:e7:60:35:72:08:20:f4:c5:44:80:eb:0d: 41:21:8a:f5:69:7b:03:6f:51:b2:12:07:05:9d:ab:c6:29:3b: 2b:90:4e:82:00:2b:0e:ea:68:15:49:0c:53:16:3b:53:1e:a0: 22:79:ec:46:a8:6b:38:e9:7d:5f:fa:84:8a:6c:29:34:1d:d3: 03:ab:94:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3Frl38/xce82ORFt392P85cEiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTA5MDUyMjQ2MzJaFw0yNTA5MDkwNzIyMzJaMDMxMTAvBgNV BAMTKEEyMTkzOUJDMDE4N0EyNENENzY4ODM3MDM2NzU3RUI1MzExRDdBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+HIAEjxyHalTCrVPfPZSZ6p5 6JI0BHg4HBOvorKQjquVUE2q4coU7HwKZqIha8EQsKkdd49q0iXpaRJ90g3FYksr s21YGHjrvUWvIRvLGqhdcBN1FkUO55jHnxVdCBVVkPF5mTPvn00TuoYau05AjoCN 96nRz7Jjqihh59YEwSuLupnVmyjlmd9K2Qx8edWQCDWOVKbVwnAtctF4TwokkrGS KlibNm8uIn2SdRPNQAlo9Ujl9MtEuEmYacf96Ul+bARcIvrJiJZzU/pq6SBALE+S PnHEDmsOBVGuIJvUJxGK6YIC8rGHHeSqXcTLtlicCQnjo+KnP4EgZgFLaLAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUohk5vAGHokzXaINwNnV+tTEdeh4wHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6D5kGDrpD3CcQVw1mUZWzKbYeRDoVX3tcT eGQ3RPRrljpZ900tznia2RvXOJf9RdI7g6Cs1DZoLIpFo3JNGYNcnxyr4NezVSjS dYhVqZiWGojOseckEUqhzn5WsS3yOVw5GWef3vJu+6wBhXIDA63Qfgnlqw2i0OGI JyLNDxmJToMSi0lOnCYtvLHvJEu2HeVT3RZTAYg1rLQmj1m0065gLsp7aLAupkMU OON7EMr2dSzDLj4u/+GMludgNXIIIPTFRIDrDUEhivVpewNvUbISBwWdq8YpOyuQ ToIAKw7qaBVJDFMWO1MeoCJ57EaoazjpfV/6hIpsKTQd0wOrlAs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:23 2025 by rpki-client