$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: ifvOQM4U4ZN+qAwfgsgN/0GGIHeyy/Sm0/k/sc+klTU= Subject key identifier: 20:1D:90:5B:24:7B:3C:72:5C:BB:04:00:D1:BE:4E:96:FB:F6:ED:5E Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 3F89868EF570CCEE44487431A75E61AA803C212D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 0162 Signing time: Wed 18 Jun 2025 11:01:56 +0000 Manifest this update: Wed 18 Jun 2025 10:56:56 +0000 Manifest next update: Sat 21 Jun 2025 16:46:56 +0000 Files and hashes: 1: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) 2: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) 3: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) 4: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: d8UzlFZikdJbBFjc6W3C7G0KFi83XK9RB8CWUp3QAL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:89:86:8e:f5:70:cc:ee:44:48:74:31:a7:5e:61:aa:80:3c:21:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Jun 18 10:56:56 2025 GMT Not After : Jun 21 16:46:56 2025 GMT Subject: CN=201D905B247B3C725CBB0400D1BE4E96FBF6ED5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:41:68:a7:c3:6c:ba:66:cc:4a:09:f6:8f: fb:59:1d:a2:c3:11:5e:76:78:60:ac:55:ae:25:1e: 61:0f:52:9a:c0:ce:ac:0e:c4:ca:3c:df:8b:85:a3: c0:ae:05:4f:6c:43:27:db:dc:c0:6e:c0:2b:6b:26: 63:77:3a:1a:fb:fe:71:c0:61:e9:b6:23:cf:4d:aa: 88:d9:27:1a:e0:0f:ab:b2:3d:6a:7c:ff:9f:57:c7: 24:91:b8:87:2f:ee:8a:68:84:6f:ce:7e:49:59:f0: bd:b9:4f:26:c1:57:4f:02:84:ef:40:e8:7e:0b:1d: 6a:3c:d9:40:fb:b1:d2:87:fd:d3:f1:0b:7a:19:cb: be:6d:73:57:43:3b:b7:23:53:99:9a:96:57:e7:3a: af:4a:8c:16:be:a2:3c:73:68:fa:4c:01:d9:c7:43: 9c:1e:12:b2:b1:0c:da:2b:6b:cc:8a:6c:78:fb:2d: 16:f2:29:cf:71:15:6d:fa:fc:b7:fb:7d:bf:39:56: cf:4f:32:e7:ba:df:88:d3:73:a1:7d:ed:52:98:95: 43:87:aa:97:0a:73:a5:a5:45:d3:70:24:b5:73:71: 3f:b8:5e:7c:49:1c:ae:d6:06:c0:4f:fe:0c:88:fc: 00:61:c5:b2:0f:4e:3c:08:d9:1b:91:5c:84:82:5a: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1D:90:5B:24:7B:3C:72:5C:BB:04:00:D1:BE:4E:96:FB:F6:ED:5E X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:69:6e:b1:a4:d5:10:95:38:40:6c:4d:48:a6:50:ee:4b:2f: b2:43:bb:cb:99:e9:4b:25:79:79:b0:5c:7b:75:ac:58:fc:b9: 79:71:57:8a:8b:b5:61:dc:d0:2a:2b:f0:48:d4:75:83:a3:56: ca:a5:fa:a7:a2:e3:44:15:9c:2c:8c:df:65:b8:aa:ab:d4:ac: d0:83:aa:e4:0c:4c:1e:4b:4d:34:43:f5:bb:7b:3d:85:ad:38: d5:b9:d6:d1:a8:58:b2:18:d4:84:4d:4a:63:6c:b9:95:3b:d7: f2:02:93:45:5f:6f:41:b4:a4:0a:6a:05:2c:97:a0:81:9d:2e: f5:0e:12:f6:be:fb:35:e1:7b:d7:d9:5b:ec:ee:b7:28:ce:35: 82:44:cb:5e:e3:97:88:66:68:a5:c6:df:3d:fa:6f:a5:ee:7d: 1a:41:8b:85:0f:fe:d4:7f:bc:92:c9:e2:bf:67:de:14:34:85: f8:9a:87:e8:58:09:ab:b2:a4:43:d2:f2:d5:46:6c:9a:c4:9f: 3e:6a:32:3a:3d:ed:12:15:12:a5:f4:7c:74:35:dd:7f:ca:9d: c9:c9:39:df:73:f0:88:90:55:81:dd:2d:c9:8c:e8:b3:00:45: c3:d3:8c:c7:b9:d8:b0:a0:dd:76:8c:f6:c9:bb:4c:1f:d0:da: 4b:e0:7b:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4mGjvVwzO5ESHQxp15hqoA8IS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNTA2MTgxMDU2NTZaFw0yNTA2MjExNjQ2NTZaMDMxMTAvBgNV BAMTKDIwMUQ5MDVCMjQ3QjNDNzI1Q0JCMDQwMEQxQkU0RTk2RkJGNkVENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JkFop8NsumbMSgn2j/tZHaLD EV52eGCsVa4lHmEPUprAzqwOxMo834uFo8CuBU9sQyfb3MBuwCtrJmN3Ohr7/nHA Yem2I89NqojZJxrgD6uyPWp8/59XxySRuIcv7opohG/OfklZ8L25TybBV08ChO9A 6H4LHWo82UD7sdKH/dPxC3oZy75tc1dDO7cjU5mallfnOq9KjBa+ojxzaPpMAdnH Q5weErKxDNora8yKbHj7LRbyKc9xFW36/Lf7fb85Vs9PMue634jTc6F97VKYlUOH qpcKc6WlRdNwJLVzcT+4XnxJHK7WBsBP/gyI/ABhxbIPTjwI2RuRXISCWuPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIB2QWyR7PHJcuwQA0b5Olvv27V4wHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVpbrGk1RCVOEBsTUimUO5LL7JDu8uZ6Usl eXmwXHt1rFj8uXlxV4qLtWHc0Cor8EjUdYOjVsql+qei40QVnCyM32W4qqvUrNCD quQMTB5LTTRD9bt7PYWtONW51tGoWLIY1IRNSmNsuZU71/ICk0Vfb0G0pApqBSyX oIGdLvUOEva++zXhe9fZW+zutyjONYJEy17jl4hmaKXG3z36b6XufRpBi4UP/tR/ vJLJ4r9n3hQ0hfiah+hYCauypEPS8tVGbJrEnz5qMjo97RIVEqX0fHQ13X/KncnJ Od9z8IiQVYHdLcmM6LMARcPTjMe52LCg3XaM9sm7TB/Q2kvgey8= -----END CERTIFICATE-----Generated at Wed Jun 18 17:33:23 2025 by rpki-client