$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: DeTmoxfBw3tNjji5TT11VuSzQXKhuEXF19fLTewakUg= Subject key identifier: 67:F7:E1:9B:D3:51:4A:29:E2:43:0A:5B:90:52:A4:95:D9:39:35:65 Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 6ED273104F38F812B8AC596459AAF8ACCD20AE82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 01E4 Signing time: Sun 07 Sep 2025 04:20:54 +0000 Manifest this update: Sun 07 Sep 2025 04:15:54 +0000 Manifest next update: Wed 10 Sep 2025 11:05:54 +0000 Files and hashes: 1: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: EK4BRT/RAst+j6FG9PPuIaQVW5qhVOQ7NscnQ6CD+R8=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: YpgQnQU5lvkeRKFK74g+rncTHe8QCPlhwaAIMSjOHQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d2:73:10:4f:38:f8:12:b8:ac:59:64:59:aa:f8:ac:cd:20:ae:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Sep 7 04:15:54 2025 GMT Not After : Sep 10 11:05:54 2025 GMT Subject: CN=67F7E19BD3514A29E2430A5B9052A495D9393565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:c8:4e:44:be:10:ce:bf:41:c1:a7:e8:3a: 74:cf:fb:0a:1c:1c:33:1e:59:c0:58:e3:ab:d8:b6: 59:e6:d6:e8:ec:ee:3d:be:8f:bf:8d:33:b8:c5:3b: 8f:a4:0f:8b:01:f0:f3:26:1a:ee:83:98:60:7b:b9: 36:09:0e:ea:60:90:a3:cd:a8:dd:9f:7f:66:47:d2: 83:5e:20:31:5e:2f:24:0f:b5:56:27:2c:97:4f:2b: d3:53:6e:5f:b7:5d:33:35:fe:a8:2e:5a:6f:23:01: a8:67:4d:4a:25:9e:1f:8c:7a:03:9e:ed:09:f7:c9: 5b:9f:74:20:2b:38:92:3b:e0:b0:0d:e0:1d:0d:8e: 13:63:ff:37:f2:73:90:df:33:30:39:27:92:dd:04: a1:cf:b0:94:8c:04:20:9c:57:f6:17:91:17:15:b6: 29:76:8a:e9:e7:d9:d8:98:b7:da:7c:34:ff:76:0b: be:86:93:1c:23:7f:04:82:13:f7:01:a6:ab:41:c2: 1c:e6:68:d4:3f:32:ac:eb:50:3b:36:1a:57:ee:b5: 77:dc:19:9a:37:9d:de:0b:f7:49:3c:d7:49:13:ae: 5f:03:64:67:2f:e6:42:e7:01:77:fc:72:10:20:fc: 26:90:be:bc:6a:10:c7:65:07:c4:7e:ff:d2:31:87: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F7:E1:9B:D3:51:4A:29:E2:43:0A:5B:90:52:A4:95:D9:39:35:65 X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8a:c4:e4:f7:e1:b7:ad:1e:f9:5c:29:b2:1e:62:f9:1f:63: 3f:db:7e:64:a1:43:bf:60:2a:73:27:11:8f:eb:c9:9e:a4:75: 14:69:cd:a0:12:eb:ce:7e:4a:a4:97:1a:b7:19:3c:81:90:a5: 67:d8:70:be:0f:39:85:32:99:d8:ae:19:6c:6d:78:a8:11:60: d5:30:4f:a0:24:29:1e:ab:f7:b7:c8:35:6e:cf:77:48:25:86: 63:65:52:74:5b:fe:6d:30:21:ed:97:91:e6:cd:6c:86:e4:8d: 5e:a4:69:0c:b3:8f:4d:37:9c:68:c1:52:6a:02:a5:bb:ba:9d: ff:2f:ea:0e:5c:83:4c:a4:9b:9e:44:ab:94:0f:60:8e:09:7a: 7f:e6:94:41:f7:c8:57:f8:9c:0e:9d:16:5d:a9:12:19:0b:9d: b8:68:c8:27:55:3c:ce:73:fe:88:f4:ed:83:62:c2:84:b3:05: 2a:ac:86:6e:88:3a:b6:a0:fd:63:a5:be:ed:0e:56:4e:66:50: aa:73:12:6d:d1:ee:43:1b:5c:2c:c7:38:10:16:f4:c3:ac:f6: 81:6e:63:8f:f2:86:b2:3f:d5:d2:d5:a6:4b:77:d4:a7:ec:8e: e8:99:a8:9a:a3:42:a9:e9:31:1e:56:46:01:fe:3b:60:65:f0: 5d:78:c1:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtJzEE84+BK4rFlkWar4rM0groIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNTA5MDcwNDE1NTRaFw0yNTA5MTAxMTA1NTRaMDMxMTAvBgNV BAMTKDY3RjdFMTlCRDM1MTRBMjlFMjQzMEE1QjkwNTJBNDk1RDkzOTM1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKMhORL4Qzr9BwafoOnTP+woc HDMeWcBY46vYtlnm1ujs7j2+j7+NM7jFO4+kD4sB8PMmGu6DmGB7uTYJDupgkKPN qN2ff2ZH0oNeIDFeLyQPtVYnLJdPK9NTbl+3XTM1/qguWm8jAahnTUolnh+MegOe 7Qn3yVufdCArOJI74LAN4B0NjhNj/zfyc5DfMzA5J5LdBKHPsJSMBCCcV/YXkRcV til2iunn2diYt9p8NP92C76GkxwjfwSCE/cBpqtBwhzmaNQ/MqzrUDs2GlfutXfc GZo3nd4L90k810kTrl8DZGcv5kLnAXf8chAg/CaQvrxqEMdlB8R+/9Ixh/e/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/fhm9NRSiniQwpbkFKkldk5NWUwHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+KxOT34betHvlcKbIeYvkfYz/bfmShQ79g KnMnEY/ryZ6kdRRpzaAS685+SqSXGrcZPIGQpWfYcL4POYUymdiuGWxteKgRYNUw T6AkKR6r97fINW7Pd0glhmNlUnRb/m0wIe2XkebNbIbkjV6kaQyzj003nGjBUmoC pbu6nf8v6g5cg0ykm55Eq5QPYI4Jen/mlEH3yFf4nA6dFl2pEhkLnbhoyCdVPM5z /oj07YNiwoSzBSqshm6IOrag/WOlvu0OVk5mUKpzEm3R7kMbXCzHOBAW9MOs9oFu Y4/yhrI/1dLVpkt31KfsjuiZqJqjQqnpMR5WRgH+O2Bl8F14wYo= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:46 2025 by rpki-client