$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: gvl3DL/qcUiacMLavUcpd9lXPV89CcG4xSaW7gnpn8k= Subject key identifier: C9:AA:CC:5E:ED:8C:5F:8D:A1:A2:FA:36:63:B0:A9:A7:2F:02:1B:6D Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 2532A397C835EC7BF7B29AA557886A86D6E7C6C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 0499 Signing time: Tue 03 Jun 2025 16:01:10 +0000 Manifest this update: Tue 03 Jun 2025 15:56:10 +0000 Manifest next update: Sat 07 Jun 2025 00:07:10 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: 9quPQStsoqhLKda9/iBXjGtov6Jr9OB22Qql4vsSfgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:32:a3:97:c8:35:ec:7b:f7:b2:9a:a5:57:88:6a:86:d6:e7:c6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Jun 3 15:56:10 2025 GMT Not After : Jun 7 00:07:10 2025 GMT Subject: CN=C9AACC5EED8C5F8DA1A2FA3663B0A9A72F021B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:69:97:66:02:e2:fd:57:e5:89:cc:55:48: e1:85:f8:16:a9:82:8c:a3:5e:c3:2b:81:89:98:20: e4:a7:a3:f0:54:a6:0c:b6:8b:e5:74:e4:11:aa:48: 25:05:23:22:5f:3f:2d:f4:e0:d2:f0:64:40:23:85: a8:bc:57:9c:c0:e0:31:c7:34:56:58:5e:d3:7a:9f: 61:a2:eb:1a:77:5a:44:19:f2:e9:0c:b9:88:92:e3: 21:34:6e:d0:0b:75:3a:7e:c2:ae:f5:05:bb:68:51: 68:92:83:e1:89:2f:f5:fc:42:77:a8:2a:55:ea:db: 3e:be:bc:49:65:10:f5:48:e7:46:e1:fd:c1:0a:0a: b0:5f:10:d4:66:5b:4c:64:d0:11:c0:f1:e3:5e:c8: de:90:47:ff:9d:ab:f1:8b:8f:86:3c:f3:ee:c2:bd: 7f:f4:c1:9e:9b:c9:be:d7:df:fa:4d:29:4d:ff:06: 14:ee:3f:64:1d:39:ba:77:aa:1d:b7:8d:16:14:f9: 3f:bc:3e:6c:76:8d:68:cb:67:a9:19:92:5b:8c:7b: de:0d:e6:dc:26:43:dc:60:11:51:87:a2:54:94:de: ba:96:95:d8:4a:8f:91:e6:14:e5:ff:69:b2:1e:38: bf:a5:c2:77:e1:18:57:9f:90:a7:b8:f3:a6:f0:2b: 2c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AA:CC:5E:ED:8C:5F:8D:A1:A2:FA:36:63:B0:A9:A7:2F:02:1B:6D X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:04:6b:21:53:ff:39:a9:b5:3d:7f:59:48:7a:79:80:e2:59: 53:60:7a:59:6d:7e:31:6d:7e:f7:19:3a:68:83:e7:19:61:f5: 7a:76:e4:12:20:78:67:aa:9f:dd:fe:36:2a:17:80:a7:c3:1c: ff:82:80:a4:25:5e:6c:09:08:a7:d7:f4:dd:a2:76:b5:36:cd: cb:ec:52:3d:00:cc:da:09:b6:a7:e5:d4:fd:2a:9c:e6:2f:68: 33:63:3f:00:d6:93:7d:4f:e8:d0:01:a5:b3:52:28:83:c6:39: 62:45:dc:5c:e8:5a:b0:d8:8f:e4:75:7e:03:b7:e4:1d:50:22: 58:fc:dc:33:bf:5a:fe:9f:3d:1b:50:e0:8a:07:25:23:a4:da: 4f:8e:dd:64:be:72:aa:da:94:6a:75:61:b3:a0:b7:fc:a6:52: 87:be:05:83:e2:60:ea:12:02:5a:3b:d2:10:ad:a0:e1:5f:3b: 86:e8:ce:81:bf:ee:2f:ec:ae:a5:00:83:5d:f4:63:08:a8:62: b2:4a:38:34:77:90:ef:de:2c:f4:35:ea:b5:13:2a:ca:c1:6b: 51:1f:42:5e:a3:10:a8:34:9c:d4:b5:00:7e:de:9a:7d:66:c8: 09:c4:66:aa:88:ce:9b:a4:7e:5c:64:18:b9:15:86:45:2d:53: dd:39:6c:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTKjl8g17Hv3spqlV4hqhtbnxsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTA2MDMxNTU2MTBaFw0yNTA2MDcwMDA3MTBaMDMxMTAvBgNV BAMTKEM5QUFDQzVFRUQ4QzVGOERBMUEyRkEzNjYzQjBBOUE3MkYwMjFCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxmmXZgLi/VflicxVSOGF+Bap goyjXsMrgYmYIOSno/BUpgy2i+V05BGqSCUFIyJfPy304NLwZEAjhai8V5zA4DHH NFZYXtN6n2Gi6xp3WkQZ8ukMuYiS4yE0btALdTp+wq71BbtoUWiSg+GJL/X8Qneo KlXq2z6+vEllEPVI50bh/cEKCrBfENRmW0xk0BHA8eNeyN6QR/+dq/GLj4Y88+7C vX/0wZ6byb7X3/pNKU3/BhTuP2QdObp3qh23jRYU+T+8Pmx2jWjLZ6kZkluMe94N 5twmQ9xgEVGHolSU3rqWldhKj5HmFOX/abIeOL+lwnfhGFefkKe486bwKyyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyarMXu2MX42hovo2Y7Cppy8CG20wHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgEayFT/zmptT1/WUh6eYDiWVNgelltfjFt fvcZOmiD5xlh9Xp25BIgeGeqn93+NioXgKfDHP+CgKQlXmwJCKfX9N2idrU2zcvs Uj0AzNoJtqfl1P0qnOYvaDNjPwDWk31P6NABpbNSKIPGOWJF3FzoWrDYj+R1fgO3 5B1QIlj83DO/Wv6fPRtQ4IoHJSOk2k+O3WS+cqralGp1YbOgt/ymUoe+BYPiYOoS Alo70hCtoOFfO4bozoG/7i/srqUAg130YwioYrJKODR3kO/eLPQ16rUTKsrBa1Ef Ql6jEKg0nNS1AH7emn1myAnEZqqIzpukflxkGLkVhkUtU905bLc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:50 2025 by rpki-client