$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json) Hash identifier: aeOh+jRoTpQRp5KBfBJdoBRsP9XRQqf3ET3Qja1NLpg= Subject key identifier: 68:89:04:DA:0C:82:BA:AC:E8:87:7B:A4:1B:98:20:3F:25:C8:E2:02 Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Certificate serial: 39CB04E0A49C387C69E16347F08BC2B012CD74AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft Manifest number: 04C5 Signing time: Wed 06 Aug 2025 21:21:03 +0000 Manifest this update: Wed 06 Aug 2025 21:16:03 +0000 Manifest next update: Sun 10 Aug 2025 00:35:03 +0000 Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: HGaUupiwBMRgc3vl/mTuFVsPUsVb9CpfujZAdVqEpN8=) 2: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=) 3: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=) 4: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cb:04:e0:a4:9c:38:7c:69:e1:63:47:f0:8b:c2:b0:12:cd:74:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Validity Not Before: Aug 6 21:16:03 2025 GMT Not After : Aug 10 00:35:03 2025 GMT Subject: CN=688904DA0C82BAACE8877BA41B98203F25C8E202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:b0:05:b8:e7:e4:59:68:fe:6a:8a:c8:c2: a2:d4:3f:11:bf:ce:7c:25:78:e0:b1:5b:10:66:00: 78:8f:7b:83:9f:e2:de:9c:4c:47:c8:3e:93:f6:7b: 1f:b6:4f:b8:b7:12:58:a9:d6:75:2c:02:9d:01:a4: 2f:93:a6:a4:52:1c:90:fe:76:44:6e:6e:3d:62:ba: 54:9a:99:d8:dd:3f:80:40:52:a3:d9:ab:7b:72:15: f8:53:03:4b:32:ad:e6:59:36:de:df:63:53:1e:39: 35:fd:fb:e5:ce:86:7b:fc:f0:82:28:e4:df:70:7c: 06:2b:ab:5d:f4:ea:a7:b3:24:d4:6b:45:6d:1e:63: 2b:4c:93:68:52:6a:ff:21:74:70:b9:09:36:4c:2e: 15:1a:b7:3d:90:30:6c:14:57:71:c7:54:ed:40:19: 65:ac:6e:eb:2c:0b:56:69:eb:44:0b:50:bb:03:8d: fd:5c:3a:56:7a:6a:83:e9:d9:c0:0f:70:47:8f:3a: 5b:3c:e7:c8:71:8d:01:c7:cf:c5:72:69:e9:f1:54: 88:81:97:4f:62:aa:86:7a:d0:8c:1a:84:fa:79:2e: 21:7c:16:ac:01:ab:65:89:93:09:34:08:d1:31:e9: 4f:f8:d0:67:d6:99:80:16:67:c3:c7:cf:e0:d0:12: d0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:89:04:DA:0C:82:BA:AC:E8:87:7B:A4:1B:98:20:3F:25:C8:E2:02 X509v3 Authority Key Identifier: keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b2:ce:83:b2:28:db:fa:7a:62:c6:0e:b1:7c:53:66:a6:ec: 6d:e3:43:77:bb:94:ec:a4:68:01:51:15:91:05:38:12:a1:80: 63:52:d0:12:08:88:14:a0:6b:91:96:44:fc:26:0a:07:71:32: 13:34:8b:d8:63:35:e8:16:6b:63:d9:8f:73:57:7c:fe:87:56: 9c:c4:3a:9d:60:7d:cb:0d:cb:95:5b:91:dc:87:26:eb:2a:73: a1:4e:a5:60:24:51:23:9c:a4:75:18:49:0b:06:d7:c7:32:ae: e8:11:b6:06:7e:43:bf:b0:e1:41:fe:dc:eb:eb:1b:4f:d5:3a: 20:74:d7:58:11:cf:96:00:2e:1d:f5:e0:39:9c:0d:ff:b4:0b: f7:0d:2d:d4:0a:26:7d:11:64:f1:c0:5c:b7:fd:85:ac:cc:9f: f2:04:5f:52:c5:b8:4c:58:05:8c:b3:78:c3:73:05:7f:d4:88: dc:57:90:71:92:8e:c6:e7:1c:48:83:81:e2:e3:d5:9d:d6:00: 3a:6b:af:07:d6:6a:de:c3:a5:27:9e:b0:ef:4b:52:23:de:93: de:31:49:d0:2f:56:07:2b:e6:4d:be:ee:2a:49:5e:33:83:86: 80:ad:d1:72:76:1f:5f:24:f3:77:68:4d:e5:77:f5:19:6a:9e: 63:33:54:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcsE4KScOHxp4WNH8IvCsBLNdKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy NDE4N0Q1OTAeFw0yNTA4MDYyMTE2MDNaFw0yNTA4MTAwMDM1MDNaMDMxMTAvBgNV BAMTKDY4ODkwNERBMEM4MkJBQUNFODg3N0JBNDFCOTgyMDNGMjVDOEUyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLELAFuOfkWWj+aorIwqLUPxG/ znwleOCxWxBmAHiPe4Of4t6cTEfIPpP2ex+2T7i3Elip1nUsAp0BpC+TpqRSHJD+ dkRubj1iulSamdjdP4BAUqPZq3tyFfhTA0syreZZNt7fY1MeOTX9++XOhnv88IIo 5N9wfAYrq1306qezJNRrRW0eYytMk2hSav8hdHC5CTZMLhUatz2QMGwUV3HHVO1A GWWsbussC1Zp60QLULsDjf1cOlZ6aoPp2cAPcEePOls858hxjQHHz8VyaenxVIiB l09iqoZ60IwahPp5LiF8FqwBq2WJkwk0CNEx6U/40GfWmYAWZ8PHz+DQEtA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaIkE2gyCuqzoh3ukG5ggPyXI4gIwHwYDVR0j BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4 N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4 RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCyzoOyKNv6emLGDrF8U2am7G3jQ3e7lOyk aAFRFZEFOBKhgGNS0BIIiBSga5GWRPwmCgdxMhM0i9hjNegWa2PZj3NXfP6HVpzE Op1gfcsNy5VbkdyHJusqc6FOpWAkUSOcpHUYSQsG18cyrugRtgZ+Q7+w4UH+3Ovr G0/VOiB011gRz5YALh314DmcDf+0C/cNLdQKJn0RZPHAXLf9hazMn/IEX1LFuExY BYyzeMNzBX/UiNxXkHGSjsbnHEiDgeLj1Z3WADprrwfWat7DpSeesO9LUiPek94x SdAvVgcr5k2+7ipJXjODhoCt0XJ2H18k83doTeV39RlqnmMzVNc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:16:27 2025 by rpki-client