$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: YysEiZCYzthCsq74dj+K5ZSw9ZBhqq56AnzD7ZUNPhk= Subject key identifier: 3B:73:86:CF:1A:FA:81:58:A8:3F:FC:D3:34:09:B8:FD:98:FA:FF:4B Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 13055B17830299BFF2B94B7F3FC4097DCCABA92F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 0177 Signing time: Tue 05 Aug 2025 12:31:58 +0000 Manifest this update: Tue 05 Aug 2025 12:26:58 +0000 Manifest next update: Fri 08 Aug 2025 18:18:58 +0000 Files and hashes: 1: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) 2: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) 3: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) 4: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: J5xxh9VTD9lOwmJBbD/F9H9aIwtP48ORqk2L6CUrYQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:05:5b:17:83:02:99:bf:f2:b9:4b:7f:3f:c4:09:7d:cc:ab:a9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Aug 5 12:26:58 2025 GMT Not After : Aug 8 18:18:58 2025 GMT Subject: CN=3B7386CF1AFA8158A83FFCD33409B8FD98FAFF4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:66:72:c6:f1:0e:b8:39:bf:f5:01:df:78: 80:e9:43:a0:a5:d8:f7:cb:d7:80:d5:e1:dd:cf:d4: da:3d:8f:74:66:e9:0f:4b:c1:ce:f7:b6:e7:db:e4: 87:c0:04:dd:bc:42:fa:bd:d8:27:b6:53:bc:bf:50: ed:2e:ee:00:38:e5:fa:3f:46:14:f8:2b:63:47:3d: d1:85:3b:eb:80:9f:19:da:30:f7:b3:22:e2:ae:51: f7:70:3f:c0:fc:b2:47:74:fe:98:b0:95:b1:02:2c: ff:e7:ed:af:f7:3a:9a:db:ce:f2:c9:ad:29:64:5e: 06:bb:b4:98:c7:53:92:c8:ff:54:93:88:ef:38:94: 3d:ca:92:e1:64:cb:11:0f:6b:cb:ab:59:e4:8d:47: 60:8f:63:2f:09:13:62:ad:99:0a:3b:c5:be:31:11: 8a:12:eb:54:0b:e2:01:1c:67:f4:f9:e0:1f:a6:f6: 88:45:17:d7:0a:63:0c:ab:04:67:35:89:ac:ab:90: 9c:03:2e:14:d4:80:8c:e7:59:c6:02:28:ac:50:fb: cb:b7:72:35:ec:21:1b:9d:14:a1:67:41:df:71:5b: 80:6a:41:0f:c4:4d:64:75:75:6e:44:d9:9d:fb:af: a5:6b:07:86:43:b3:3e:b3:38:64:f0:2a:ac:cb:98: 37:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:86:CF:1A:FA:81:58:A8:3F:FC:D3:34:09:B8:FD:98:FA:FF:4B X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:9c:32:78:9d:39:a7:62:a0:12:25:32:79:be:20:29:81:cd: e2:6e:d2:78:43:f6:c7:6e:28:21:ee:f6:54:c8:8e:01:ee:64: c4:aa:a8:27:67:ab:d2:b2:cc:0e:b9:93:ea:67:8b:3a:41:77: 92:41:23:ab:ba:3f:bd:7e:e7:59:fd:b4:7f:07:5d:19:df:99: 5a:aa:c1:9d:e6:a6:1e:4c:25:9f:47:fd:1d:6b:0b:43:61:79: c4:8c:41:c4:23:b1:3c:e4:df:f7:c1:39:5c:27:fa:79:bf:bc: 81:6e:e1:2b:2b:99:82:9f:a5:74:29:0f:17:61:08:08:92:23: d2:fa:99:e0:34:a2:ef:d3:f8:08:3d:50:3f:5e:a3:65:da:7c: 6a:ba:2b:64:73:35:c2:6f:af:9f:69:f6:2f:6e:5f:27:1c:7a: d6:5d:11:24:e7:15:69:b9:ed:ad:ee:3f:4e:00:8f:db:e0:fe: dd:f0:37:70:be:bc:fb:51:0a:84:73:c2:6d:bf:e1:10:f7:8f: 81:df:de:4a:97:49:4e:b5:c9:a8:9b:75:a0:b2:67:b2:fe:27: 51:84:f0:ad:a9:1e:f5:a1:df:04:e1:75:fc:d0:c3:d7:83:09: 04:fb:d5:9e:77:cb:f0:fc:0e:4d:94:12:7b:fa:43:fc:47:aa: de:32:f4:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwVbF4MCmb/yuUt/P8QJfcyrqS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNTA4MDUxMjI2NThaFw0yNTA4MDgxODE4NThaMDMxMTAvBgNV BAMTKDNCNzM4NkNGMUFGQTgxNThBODNGRkNEMzM0MDlCOEZEOThGQUZGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJWZyxvEOuDm/9QHfeIDpQ6Cl 2PfL14DV4d3P1No9j3Rm6Q9Lwc73tufb5IfABN28Qvq92Ce2U7y/UO0u7gA45fo/ RhT4K2NHPdGFO+uAnxnaMPezIuKuUfdwP8D8skd0/piwlbECLP/n7a/3OprbzvLJ rSlkXga7tJjHU5LI/1STiO84lD3KkuFkyxEPa8urWeSNR2CPYy8JE2KtmQo7xb4x EYoS61QL4gEcZ/T54B+m9ohFF9cKYwyrBGc1iayrkJwDLhTUgIznWcYCKKxQ+8u3 cjXsIRudFKFnQd9xW4BqQQ/ETWR1dW5E2Z37r6VrB4ZDsz6zOGTwKqzLmDe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO3OGzxr6gVioP/zTNAm4/Zj6/0swHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACcMnidOadioBIlMnm+ICmBzeJu0nhD9sdu KCHu9lTIjgHuZMSqqCdnq9KyzA65k+pnizpBd5JBI6u6P71+51n9tH8HXRnfmVqq wZ3mph5MJZ9H/R1rC0NhecSMQcQjsTzk3/fBOVwn+nm/vIFu4SsrmYKfpXQpDxdh CAiSI9L6meA0ou/T+Ag9UD9eo2XafGq6K2RzNcJvr59p9i9uXyccetZdESTnFWm5 7a3uP04Aj9vg/t3wN3C+vPtRCoRzwm2/4RD3j4Hf3kqXSU61yaibdaCyZ7L+J1GE 8K2pHvWh3wThdfzQw9eDCQT71Z53y/D8Dk2UEnv6Q/xHqt4y9Fo= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:18 2025 by rpki-client