$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json) Hash identifier: Bm9k0gWYVx2vDycQDCOU62xen2BjUYiM5fdFJCYdV+U= Subject key identifier: EF:DD:3B:48:2F:F0:B1:CE:75:09:B8:EA:B2:32:25:2C:CB:D1:28:F2 Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Certificate serial: 35ADF17457E0BF3856353AFE54A4B567862E7586 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft Manifest number: 0269 Signing time: Fri 05 Sep 2025 02:10:44 +0000 Manifest this update: Fri 05 Sep 2025 02:05:44 +0000 Manifest next update: Mon 08 Sep 2025 09:51:44 +0000 Files and hashes: 1: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: vFbxzvWMe+G7Jz6pzEc4uPBFg5E57nkcCYhIffrIAXo=) 2: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 4ffaA+HJTlhbFhWXiIV/z7UyuFvQH2sRUiYe/L6G0PQ=) 3: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: +wJJzwdLS8EsiXAhnmnQxC4S7wuGcphGcO7PB0pgKRg=) 4: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: DyrlUjs6Uu6vGAvg5tT+7myynUr8e84wIlqBuR6C9G0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ad:f1:74:57:e0:bf:38:56:35:3a:fe:54:a4:b5:67:86:2e:75:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Validity Not Before: Sep 5 02:05:44 2025 GMT Not After : Sep 8 09:51:44 2025 GMT Subject: CN=EFDD3B482FF0B1CE7509B8EAB232252CCBD128F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:19:94:ad:87:05:32:d1:6d:e8:7b:87:37: 48:f3:14:d0:ac:da:64:77:de:43:92:1f:a7:36:14: e1:03:83:b8:b8:b0:2b:e5:90:ad:8a:7b:56:08:80: 5b:39:0f:3e:d1:0b:c7:04:66:0b:de:ec:65:2f:1b: 76:e8:a9:10:4e:2e:0a:34:12:f6:57:75:c8:b5:35: 53:f0:0f:5a:dd:19:90:a8:1a:1c:29:9d:47:5a:af: bc:e3:23:ca:84:2a:ca:91:53:0a:0e:91:3a:85:a9: f7:e3:fe:0b:0a:fe:2d:34:c7:98:1b:d3:d8:bb:93: 17:15:75:84:e7:89:e5:46:64:ac:94:91:a2:a1:9b: 20:a6:01:8d:ae:6f:72:e0:8f:3b:90:96:60:92:77: a0:c9:66:0b:07:47:b8:ee:dd:95:e0:e0:2f:d6:5a: 0b:6f:ff:b6:b3:f4:17:dd:54:e9:41:00:a9:1a:e2: ea:f0:1f:34:54:a8:73:60:eb:43:5c:85:f0:78:48: 5f:54:94:b4:b2:cb:20:b9:f2:dc:90:5f:4e:1b:b9: f5:52:a9:ba:d5:6e:02:3d:57:00:b7:96:e7:0c:88: bd:bb:a4:ee:5b:72:de:fc:d6:38:a1:ac:37:3b:c8: a8:08:ee:eb:4a:28:37:e8:8c:fd:95:28:88:c2:ea: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DD:3B:48:2F:F0:B1:CE:75:09:B8:EA:B2:32:25:2C:CB:D1:28:F2 X509v3 Authority Key Identifier: keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:bf:63:4c:ff:3e:65:b2:6f:a0:a7:2f:9f:cb:ae:a7:ab:13: 3b:5a:34:94:bc:ce:d4:3b:ad:db:2b:77:87:63:0c:8f:4a:82: 96:d8:96:3c:25:59:b1:bb:1f:0d:6e:58:eb:7c:b3:b5:c1:f9: 66:ef:22:bc:b3:4f:96:a5:18:af:75:eb:78:69:07:f8:0c:f1: 71:10:07:fc:66:19:73:ce:41:e9:2f:ef:f4:c4:b8:8a:74:e9: 77:63:f7:76:a6:93:e7:ea:b2:a0:d3:4e:dd:2b:c6:88:01:72: d2:0d:2c:2a:22:c7:63:e9:ac:8e:d6:c1:69:32:db:4a:79:12: 00:6b:7f:d1:60:a0:d6:20:7c:97:ce:ef:54:70:97:7e:33:fc: c9:d3:e9:68:05:25:60:d8:2a:d7:8e:92:a1:f1:be:cb:d9:2c: 18:b8:04:b7:a2:c2:7a:8a:b5:39:65:63:cc:c8:db:93:3f:a8: 6b:74:9c:57:22:5f:85:7b:fe:4e:7a:6f:f2:18:f9:f6:ae:26: 99:51:da:33:80:7d:d3:19:2f:af:76:70:e1:f3:35:b6:8f:c9: c7:47:6d:8a:21:26:04:c2:34:06:1a:12:7c:43:dc:71:26:4b: 4d:e9:72:3c:8b:d3:cd:8a:56:08:eb:14:a9:1d:83:a6:43:18: 9f:a3:56:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNa3xdFfgvzhWNTr+VKS1Z4YudYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5 NDc5OUFBNjAeFw0yNTA5MDUwMjA1NDRaFw0yNTA5MDgwOTUxNDRaMDMxMTAvBgNV BAMTKEVGREQzQjQ4MkZGMEIxQ0U3NTA5QjhFQUIyMzIyNTJDQ0JEMTI4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjaRmUrYcFMtFt6HuHN0jzFNCs 2mR33kOSH6c2FOEDg7i4sCvlkK2Ke1YIgFs5Dz7RC8cEZgve7GUvG3boqRBOLgo0 EvZXdci1NVPwD1rdGZCoGhwpnUdar7zjI8qEKsqRUwoOkTqFqffj/gsK/i00x5gb 09i7kxcVdYTnieVGZKyUkaKhmyCmAY2ub3LgjzuQlmCSd6DJZgsHR7ju3ZXg4C/W Wgtv/7az9BfdVOlBAKka4urwHzRUqHNg60NchfB4SF9UlLSyyyC58tyQX04bufVS qbrVbgI9VwC3lucMiL27pO5bct781jihrDc7yKgI7utKKDfojP2VKIjC6uTPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7907SC/wsc51CbjqsjIlLMvRKPIwHwYDVR0j BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3 ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5 OUFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI4MWJjZWEtYjcwZi00Mzc0LTky NGItYjZjNzc4MTA5ODM3LzAvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0 QUU5NDc5OUFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa/Y0z/PmWyb6CnL5/LrqerEztaNJS8ztQ7 rdsrd4djDI9KgpbYljwlWbG7Hw1uWOt8s7XB+WbvIryzT5alGK9163hpB/gM8XEQ B/xmGXPOQekv7/TEuIp06Xdj93amk+fqsqDTTt0rxogBctINLCoix2PprI7WwWky 20p5EgBrf9FgoNYgfJfO71Rwl34z/MnT6WgFJWDYKteOkqHxvsvZLBi4BLeiwnqK tTllY8zI25M/qGt0nFciX4V7/k56b/IY+fauJplR2jOAfdMZL692cOHzNbaPycdH bYohJgTCNAYaEnxD3HEmS03pcjyL082KVgjrFKkdg6ZDGJ+jVvo= -----END CERTIFICATE-----Generated at Fri Sep 5 12:43:49 2025 by rpki-client