$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: LAISWQyfs4gzI9XA4CH+VLquqGMNUEIuIdh7N09VnGA= Subject key identifier: 2C:B9:46:A4:E1:0E:80:F7:73:CA:B9:A0:6E:41:EA:EF:13:5E:E7:2F Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 39DFEDEA4961DEEA9AD4F8C3ECE050674890A305 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: E0 Signing time: Mon 02 Jun 2025 15:02:05 +0000 Manifest this update: Mon 02 Jun 2025 14:57:05 +0000 Manifest next update: Thu 05 Jun 2025 21:47:05 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: kP3pzIma5M9DFYKUFpDAedQmiykyrKg8gQ33x6FRzrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:df:ed:ea:49:61:de:ea:9a:d4:f8:c3:ec:e0:50:67:48:90:a3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Jun 2 14:57:05 2025 GMT Not After : Jun 5 21:47:05 2025 GMT Subject: CN=2CB946A4E10E80F773CAB9A06E41EAEF135EE72F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:e9:e6:ea:d6:02:2f:8e:e7:23:65:1b:52: e8:41:35:ca:bb:39:a3:bd:23:2c:fa:83:f3:9e:c5: fd:c4:a6:21:a5:1e:6b:eb:36:c7:ef:32:90:54:b3: 22:14:ea:ff:e9:2e:0f:e6:1e:5f:a6:99:ba:cf:30: 17:95:39:63:e3:d7:09:99:aa:f7:f8:1d:7a:1e:20: f4:35:df:7d:2b:35:6f:e0:6b:d0:f9:fd:bf:f6:ae: fd:c1:a9:9d:cb:26:7f:58:09:dd:09:00:a6:3d:a8: 91:d5:8c:4f:ed:7e:2b:5d:43:9f:46:41:35:58:fe: a2:ac:f9:f7:0c:ed:44:95:34:a6:db:d2:b3:44:3d: 97:6f:b4:8d:eb:6a:ae:51:74:39:4c:25:3a:c6:d1: 2a:48:91:3d:99:6c:31:ca:34:3a:3d:34:88:e3:f6: 56:fc:56:ad:22:f8:e5:26:5a:53:d3:56:81:af:c5: c3:8c:7d:d9:84:c2:61:5f:2e:fe:7e:a8:89:9e:0a: 54:56:01:1c:35:fa:ad:3f:a2:50:bc:57:30:86:8b: 87:7a:86:4e:d9:5e:23:a3:ac:aa:59:de:0a:e5:ca: 9c:96:01:61:8f:a1:cb:e1:86:fc:03:53:e9:03:c4: 2e:20:89:cd:e9:f1:8e:cc:3c:7a:8c:ab:5e:9d:94: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B9:46:A4:E1:0E:80:F7:73:CA:B9:A0:6E:41:EA:EF:13:5E:E7:2F X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f0:a0:b5:5d:1a:8d:87:8a:f1:e5:34:09:32:78:06:40:22: a9:18:bd:d3:06:f5:3f:32:dc:3a:51:f3:1c:59:c5:ca:1a:d1: 41:d7:f6:db:73:47:ea:84:d4:5b:b8:7e:b5:6f:87:9e:13:8b: 2a:b8:d8:ec:1e:cf:ee:25:33:e9:e9:9f:8b:62:cb:8c:03:b2: 83:a8:bc:dd:ca:24:c8:9e:34:db:33:e7:a2:87:66:1c:93:89: af:cb:f0:c0:16:cc:f6:c7:43:c4:a7:a4:02:ee:1c:3a:fd:17: e1:48:11:cc:42:e0:4c:3f:b3:cd:30:df:6f:cf:82:55:d3:86: 8d:d9:1e:a5:74:97:04:a0:88:07:1c:10:c0:65:8e:ba:38:cf: 77:08:b9:6e:80:19:d7:e8:10:56:ed:7d:a3:b2:34:cb:3a:f1: 00:d4:aa:c9:13:79:2d:f7:1b:35:1f:2b:8c:29:65:2b:69:24: 5a:47:ca:29:ce:2e:eb:cc:12:5d:86:df:77:33:f9:ae:bb:d2: b9:26:e4:81:b2:5a:7a:80:09:51:68:1c:76:79:d3:90:d5:95: a4:9f:c3:1b:86:2d:38:fd:23:23:fa:06:4d:7e:8f:69:d4:6b: 97:ff:43:c5:80:0c:37:16:f6:17:6f:b8:47:be:1e:18:0f:4a: c0:9f:22:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOd/t6klh3uqa1PjD7OBQZ0iQowUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNTA2MDIxNDU3MDVaFw0yNTA2MDUyMTQ3MDVaMDMxMTAvBgNV BAMTKDJDQjk0NkE0RTEwRTgwRjc3M0NBQjlBMDZFNDFFQUVGMTM1RUU3MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiOnm6tYCL47nI2UbUuhBNcq7 OaO9Iyz6g/Oexf3EpiGlHmvrNsfvMpBUsyIU6v/pLg/mHl+mmbrPMBeVOWPj1wmZ qvf4HXoeIPQ1330rNW/ga9D5/b/2rv3BqZ3LJn9YCd0JAKY9qJHVjE/tfitdQ59G QTVY/qKs+fcM7USVNKbb0rNEPZdvtI3raq5RdDlMJTrG0SpIkT2ZbDHKNDo9NIjj 9lb8Vq0i+OUmWlPTVoGvxcOMfdmEwmFfLv5+qImeClRWARw1+q0/olC8VzCGi4d6 hk7ZXiOjrKpZ3grlypyWAWGPocvhhvwDU+kDxC4gic3p8Y7MPHqMq16dlPnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULLlGpOEOgPdzyrmgbkHq7xNe5y8wHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPwoLVdGo2HivHlNAkyeAZAIqkYvdMG9T8y 3DpR8xxZxcoa0UHX9ttzR+qE1Fu4frVvh54Tiyq42Owez+4lM+npn4tiy4wDsoOo vN3KJMieNNsz56KHZhyTia/L8MAWzPbHQ8SnpALuHDr9F+FIEcxC4Ew/s80w32/P glXTho3ZHqV0lwSgiAccEMBljro4z3cIuW6AGdfoEFbtfaOyNMs68QDUqskTeS33 GzUfK4wpZStpJFpHyinOLuvMEl2G33cz+a670rkm5IGyWnqACVFoHHZ505DVlaSf wxuGLTj9IyP6Bk1+j2nUa5f/Q8WADDcW9hdvuEe+HhgPSsCfIoA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:49 2025 by rpki-client