$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: ytJyZpoy6PExHIqIeZuP6njN+I1u4AG+PRf/z6GY9Qg= Subject key identifier: 25:80:C6:C8:C3:6B:95:BC:C4:6B:E5:21:83:C5:C5:E2:2D:C7:36:51 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 195AD1C8B9CA3C016581CD4837607166B45D1ED4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 047E Signing time: Fri 04 Apr 2025 23:50:58 +0000 Manifest this update: Fri 04 Apr 2025 23:45:58 +0000 Manifest next update: Tue 08 Apr 2025 00:04:58 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: OsFyzi3qtAroqwOrqZfqEH6jGleVM1e3g9lA70ZeHXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5a:d1:c8:b9:ca:3c:01:65:81:cd:48:37:60:71:66:b4:5d:1e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Apr 4 23:45:58 2025 GMT Not After : Apr 8 00:04:58 2025 GMT Subject: CN=2580C6C8C36B95BCC46BE52183C5C5E22DC73651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:6c:06:63:2d:7a:87:87:ee:1c:ab:d9:2b: 07:db:a2:50:de:53:a9:89:da:ff:59:ac:9b:fd:b6: 93:97:2e:bf:88:71:86:da:5e:f5:df:de:e2:9a:9b: 0b:d5:24:cc:8c:5b:76:2e:0b:0f:aa:92:5a:99:b5: c3:35:22:91:ea:38:75:37:7b:43:84:a9:9e:ca:af: 80:46:b7:cb:60:c6:3e:e6:10:c5:f3:96:b1:d2:5b: 7c:76:25:40:e7:63:7f:59:d1:17:24:f0:71:0e:ff: 52:ae:aa:e3:29:9b:9f:94:4c:0e:30:6c:7f:1a:56: b1:46:8d:74:b8:68:37:9b:1c:f5:0f:ec:d2:48:31: 43:78:09:de:d6:51:fe:a7:a2:78:08:63:34:c5:da: 99:8a:c3:08:b8:8b:2b:02:a2:8c:d4:e0:40:a2:2c: f1:f9:54:54:0d:e2:a0:8c:ae:d9:3b:5e:89:fe:bf: fd:57:d7:58:b7:94:72:70:d7:40:59:35:e0:bc:44: 23:41:57:4e:3a:75:c4:13:9f:72:aa:85:13:00:3d: d9:3d:da:f8:17:b0:d8:62:58:8f:4c:8d:cf:1d:23: e0:2e:fc:17:2b:c9:fb:05:b4:08:cb:39:68:42:a0: 65:51:79:4d:96:12:85:c3:b1:e2:09:87:07:2d:97: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:C6:C8:C3:6B:95:BC:C4:6B:E5:21:83:C5:C5:E2:2D:C7:36:51 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:b2:17:8b:eb:74:d6:d6:f7:53:32:d2:70:af:ea:56:f6:e7: 0a:56:92:76:be:34:8b:5a:9d:95:c4:cd:6f:5b:fb:b1:4a:77: 65:0a:74:1b:2e:1a:85:eb:95:6a:38:f3:df:9b:a5:74:bb:0b: e4:10:46:ea:c6:f8:cd:01:89:9c:43:d5:64:83:e3:ff:7e:95: d9:94:ec:0e:37:a5:d9:87:be:34:c6:c6:ed:82:f2:19:3f:5c: 79:02:33:e0:f2:34:a9:01:c3:3e:16:cf:92:e6:66:e4:b2:94: 2a:e7:e7:c9:6c:62:48:c4:cc:b5:b5:ac:bd:63:ab:25:a7:1b: 0a:cf:be:8f:4b:01:a1:b5:2f:80:b7:59:6c:47:ed:56:1c:65: ee:fb:4e:5a:84:c7:23:e6:6c:cb:a3:a5:a6:58:2d:d7:a4:8e: fd:07:03:a4:cb:0c:8d:7d:ff:ee:cf:02:b4:f2:18:40:10:5c: e4:41:78:92:41:fd:51:fb:a4:f3:90:91:61:d1:e8:ef:02:84: da:5a:39:26:ed:4c:29:17:d3:62:a8:46:72:e6:92:66:95:67: 13:f5:9e:ef:30:88:69:07:80:15:2b:89:ff:6a:da:7c:6f:91: 9a:34:e3:07:82:b1:ee:b0:62:d6:46:45:6e:03:c1:8c:d9:ae: f3:de:e7:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVrRyLnKPAFlgc1IN2BxZrRdHtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTA0MDQyMzQ1NThaFw0yNTA0MDgwMDA0NThaMDMxMTAvBgNV BAMTKDI1ODBDNkM4QzM2Qjk1QkNDNDZCRTUyMTgzQzVDNUUyMkRDNzM2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+mwGYy16h4fuHKvZKwfbolDe U6mJ2v9ZrJv9tpOXLr+IcYbaXvXf3uKamwvVJMyMW3YuCw+qklqZtcM1IpHqOHU3 e0OEqZ7Kr4BGt8tgxj7mEMXzlrHSW3x2JUDnY39Z0Rck8HEO/1KuquMpm5+UTA4w bH8aVrFGjXS4aDebHPUP7NJIMUN4Cd7WUf6nongIYzTF2pmKwwi4iysCoozU4ECi LPH5VFQN4qCMrtk7Xon+v/1X11i3lHJw10BZNeC8RCNBV046dcQTn3KqhRMAPdk9 2vgXsNhiWI9Mjc8dI+Au/BcryfsFtAjLOWhCoGVReU2WEoXDseIJhwctl9aBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYDGyMNrlbzEa+Uhg8XF4i3HNlEwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANCyF4vrdNbW91My0nCv6lb25wpWkna+NIta nZXEzW9b+7FKd2UKdBsuGoXrlWo489+bpXS7C+QQRurG+M0BiZxD1WSD4/9+ldmU 7A43pdmHvjTGxu2C8hk/XHkCM+DyNKkBwz4Wz5LmZuSylCrn58lsYkjEzLW1rL1j qyWnGwrPvo9LAaG1L4C3WWxH7VYcZe77TlqExyPmbMujpaZYLdekjv0HA6TLDI19 /+7PArTyGEAQXORBeJJB/VH7pPOQkWHR6O8ChNpaOSbtTCkX02KoRnLmkmaVZxP1 nu8wiGkHgBUrif9q2nxvkZo04weCse6wYtZGRW4DwYzZrvPe58M= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:19 2025 by rpki-client