$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: jCOHWKFxYB9kPFJueFjWidrVxKI/kT2Rjj2dq6VKMqA= Subject key identifier: 37:2C:5C:5B:5B:DE:8E:99:66:2D:C7:D1:0E:1C:14:FE:E8:6F:6B:C4 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 716DAE7A63825B940B29E1D16498DDB49216BB1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 04C2 Signing time: Wed 03 Sep 2025 17:41:00 +0000 Manifest this update: Wed 03 Sep 2025 17:36:00 +0000 Manifest next update: Sat 06 Sep 2025 22:28:00 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: 1ooqA+CMvBGUG31ecY2+GtZi4ag9AK0Mn9h36fsJAPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6d:ae:7a:63:82:5b:94:0b:29:e1:d1:64:98:dd:b4:92:16:bb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Sep 3 17:36:00 2025 GMT Not After : Sep 6 22:28:00 2025 GMT Subject: CN=372C5C5B5BDE8E99662DC7D10E1C14FEE86F6BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:da:ad:99:71:ae:e4:b8:36:e9:3a:cb:76: 10:f2:04:40:c9:7c:5c:a3:66:03:76:8c:96:aa:af: 86:1c:57:3b:6f:92:df:0b:51:19:f0:99:a6:73:1d: 48:88:66:ca:2a:a1:d1:87:2a:8c:a4:f6:5d:60:22: e9:41:e0:4d:83:94:db:23:ea:54:cd:d6:1a:ff:e2: e1:5f:6f:b8:6f:66:b6:db:e1:83:b6:07:36:d8:47: 79:f5:a7:c3:25:08:81:b2:8f:b9:d9:f5:76:27:6d: f2:da:f0:b4:a4:e2:46:c4:09:cd:3c:27:8c:84:19: 5c:e4:33:b8:4d:04:1d:3e:a7:b8:b9:15:68:e0:78: 96:b6:72:b3:96:e7:60:77:0a:54:6a:e2:9c:4b:da: bb:97:7a:3a:07:95:d4:f1:37:db:3d:db:98:d1:6b: bc:a0:94:73:d8:d4:7d:ad:ad:9b:87:c3:a7:65:16: 84:93:8e:27:d0:26:c8:81:40:8d:f3:60:3d:ea:81: 70:c7:7b:f9:3c:f5:3b:d5:77:d8:74:60:4f:57:21: 28:0b:96:af:e9:0c:72:4c:47:3d:a7:79:81:c6:c0: 63:32:69:b9:5f:31:88:2e:bc:e3:f1:39:09:a7:0a: 40:89:a9:2c:18:fc:f8:fa:d8:8a:75:9a:9c:9f:6b: ae:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:5C:5B:5B:DE:8E:99:66:2D:C7:D1:0E:1C:14:FE:E8:6F:6B:C4 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f4:6e:1c:b0:78:e3:c6:ed:00:ff:8f:f6:ca:d5:de:7e:66: 23:0f:9e:82:e3:e5:15:2b:87:e5:99:11:32:62:20:6e:46:9a: 6e:9c:9e:5f:cc:9f:c2:04:e8:d3:de:49:05:59:4c:f7:67:b1: 99:2c:71:4b:fe:75:63:f6:fd:c9:8e:3c:c5:c0:da:5f:99:cd: 8d:a5:0d:51:d9:b7:5b:eb:7c:87:d5:f8:b8:39:8d:bd:36:6d: ed:f3:4d:74:b1:ae:20:e6:34:e2:a2:1d:7c:cd:f8:79:66:0f: 2b:bc:c9:35:f6:6f:1a:53:44:0d:f7:b7:84:51:f6:7c:83:00: c3:7b:fe:f1:d5:81:8f:1d:5d:5a:89:c3:90:3c:dd:a0:8c:cc: 47:d2:85:02:cc:b2:07:bf:99:0c:cd:c6:d1:b1:7b:dc:20:05: e9:67:ac:96:c2:0f:d8:17:18:5c:a5:fc:3e:39:54:aa:56:14: 2a:0a:30:39:c4:6c:b8:20:c9:7f:35:58:fe:64:f8:5c:5a:5e: 94:4e:e3:47:1f:94:f2:3f:92:75:12:b0:48:0a:a0:f7:f9:69: fd:2b:bc:f5:68:06:e4:33:79:57:87:36:81:2d:3e:e9:41:e0: ce:84:6b:90:ee:5a:95:17:dd:ad:b6:27:86:85:3c:c4:2b:97: 26:0b:95:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcW2uemOCW5QLKeHRZJjdtJIWuxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTA5MDMxNzM2MDBaFw0yNTA5MDYyMjI4MDBaMDMxMTAvBgNV BAMTKDM3MkM1QzVCNUJERThFOTk2NjJEQzdEMTBFMUMxNEZFRTg2RjZCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldNqtmXGu5Lg26TrLdhDyBEDJ fFyjZgN2jJaqr4YcVztvkt8LURnwmaZzHUiIZsoqodGHKoyk9l1gIulB4E2DlNsj 6lTN1hr/4uFfb7hvZrbb4YO2BzbYR3n1p8MlCIGyj7nZ9XYnbfLa8LSk4kbECc08 J4yEGVzkM7hNBB0+p7i5FWjgeJa2crOW52B3ClRq4pxL2ruXejoHldTxN9s925jR a7yglHPY1H2trZuHw6dlFoSTjifQJsiBQI3zYD3qgXDHe/k89TvVd9h0YE9XISgL lq/pDHJMRz2neYHGwGMyablfMYguvOPxOQmnCkCJqSwY/Pj62Ip1mpyfa67hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNyxcW1vejplmLcfRDhwU/uhva8QwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABn0bhyweOPG7QD/j/bK1d5+ZiMPnoLj5RUr h+WZETJiIG5Gmm6cnl/Mn8IE6NPeSQVZTPdnsZkscUv+dWP2/cmOPMXA2l+ZzY2l DVHZt1vrfIfV+Lg5jb02be3zTXSxriDmNOKiHXzN+HlmDyu8yTX2bxpTRA33t4RR 9nyDAMN7/vHVgY8dXVqJw5A83aCMzEfShQLMsge/mQzNxtGxe9wgBelnrJbCD9gX GFyl/D45VKpWFCoKMDnEbLggyX81WP5k+FxaXpRO40cflPI/knUSsEgKoPf5af0r vPVoBuQzeVeHNoEtPulB4M6Ea5DuWpUX3a22J4aFPMQrlyYLlTA= -----END CERTIFICATE-----Generated at Fri Sep 5 12:43:18 2025 by rpki-client