$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: cwEb/K6EwAPktdb33n457euCo1QcR4c6Gfwf3ZyTuyA= Subject key identifier: 42:83:E6:05:4A:6C:9C:01:5B:4F:B0:F1:81:8B:1C:7D:11:50:6D:D3 Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 4417D887C112525977F7AC6F3B2B4E5F01992C5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 0205 Signing time: Wed 06 Aug 2025 04:11:34 +0000 Manifest this update: Wed 06 Aug 2025 04:06:34 +0000 Manifest next update: Sat 09 Aug 2025 04:12:34 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: xdjX4onlSGOFR+tLh5istBTy6xyoyIFno5D89Q/aLno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:17:d8:87:c1:12:52:59:77:f7:ac:6f:3b:2b:4e:5f:01:99:2c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Aug 6 04:06:34 2025 GMT Not After : Aug 9 04:12:34 2025 GMT Subject: CN=4283E6054A6C9C015B4FB0F1818B1C7D11506DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:29:98:44:f8:57:3f:a3:00:97:8f:1f:f8: aa:d1:3d:74:de:6f:59:22:d7:99:88:a8:06:90:b7: b8:f9:8f:6b:b9:4a:9e:74:2f:12:a4:f9:6c:78:0d: 56:16:ae:49:78:3f:9a:5f:44:59:48:b0:00:57:8f: 6b:a9:8c:67:6d:42:8b:2d:a5:a3:ca:31:e2:ec:d4: 75:ca:1d:11:ea:0b:72:4b:06:e2:0c:31:23:4b:19: 07:da:81:c6:4e:7b:2d:b6:87:25:e5:2e:a0:3c:9c: 29:c4:e7:53:7f:48:a7:57:c1:22:fa:2c:ab:b3:eb: c7:74:e7:ce:3f:65:11:92:f7:b9:1e:1f:17:53:c3: 08:e7:47:3b:73:e0:6c:32:d9:8e:90:96:c5:0a:86: 8e:f1:55:b4:69:c3:09:f7:4d:ab:4a:88:50:dd:8d: 94:ab:ac:7c:8f:64:4f:20:30:84:88:df:c7:db:2f: ec:f6:47:45:c7:3c:81:03:f3:12:b5:04:8b:ef:ca: fa:26:52:09:cf:63:6e:e7:27:a5:d3:6d:a7:59:2e: 94:a6:0c:e0:1a:0c:c0:7e:b4:51:7a:8a:78:e9:a6: 6a:e5:dd:c5:d3:31:c6:11:bb:97:6e:e3:9c:68:39: 2c:a0:6b:45:98:28:af:16:d2:b6:2a:c4:f1:84:63: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:83:E6:05:4A:6C:9C:01:5B:4F:B0:F1:81:8B:1C:7D:11:50:6D:D3 X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c8:6a:82:6c:7d:88:40:3b:f7:83:a0:13:f6:9e:03:d6:3b: 70:db:66:03:d3:8d:f8:49:1d:29:fa:3f:68:52:a2:a2:9f:58: 70:df:0f:40:24:50:81:b7:79:32:1a:c6:de:4e:68:5e:37:9a: d9:aa:8c:cc:43:4c:89:bb:c0:7e:a6:f5:75:36:3d:fc:90:d8: 42:75:07:3c:bf:d4:71:4d:72:ac:8a:b4:fe:ba:af:4e:3b:e5: 48:ff:a0:73:d3:61:d5:7b:2c:88:c9:d2:75:57:d6:4e:3b:22: aa:d0:da:3a:6b:d2:9c:ef:f2:da:8a:19:b4:02:54:57:d3:6f: f5:a0:67:6d:5e:f3:74:36:3e:28:51:e2:b4:cc:ab:21:8f:ae: be:35:80:a9:e7:67:3b:98:57:13:30:89:0c:1b:95:e9:d3:de: 47:53:a0:2d:0b:31:19:9e:0f:83:0c:c9:c7:f5:73:60:47:67: 0f:30:50:0b:2f:25:b8:97:21:5b:2b:dc:f7:7e:d6:8a:8b:92: f3:d7:92:fa:06:59:67:01:4d:27:de:f1:cd:26:78:82:9c:a8: 1a:2d:8b:03:60:5c:c7:1d:27:65:3c:4a:9d:7e:15:bb:eb:9f: 51:f7:7d:5b:b0:9f:27:fb:0f:23:c0:99:8a:9c:54:c3:22:f0: 63:da:72:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBfYh8ESUll396xvOytOXwGZLFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTA4MDYwNDA2MzRaFw0yNTA4MDkwNDEyMzRaMDMxMTAvBgNV BAMTKDQyODNFNjA1NEE2QzlDMDE1QjRGQjBGMTgxOEIxQzdEMTE1MDZERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1ymYRPhXP6MAl48f+KrRPXTe b1ki15mIqAaQt7j5j2u5Sp50LxKk+Wx4DVYWrkl4P5pfRFlIsABXj2upjGdtQost paPKMeLs1HXKHRHqC3JLBuIMMSNLGQfagcZOey22hyXlLqA8nCnE51N/SKdXwSL6 LKuz68d0584/ZRGS97keHxdTwwjnRztz4Gwy2Y6QlsUKho7xVbRpwwn3TatKiFDd jZSrrHyPZE8gMISI38fbL+z2R0XHPIED8xK1BIvvyvomUgnPY27nJ6XTbadZLpSm DOAaDMB+tFF6injppmrl3cXTMcYRu5du45xoOSyga0WYKK8W0rYqxPGEYzsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQoPmBUpsnAFbT7DxgYscfRFQbdMwHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDIaoJsfYhAO/eDoBP2ngPWO3DbZgPTjfhJ HSn6P2hSoqKfWHDfD0AkUIG3eTIaxt5OaF43mtmqjMxDTIm7wH6m9XU2PfyQ2EJ1 Bzy/1HFNcqyKtP66r0475Uj/oHPTYdV7LIjJ0nVX1k47IqrQ2jpr0pzv8tqKGbQC VFfTb/WgZ21e83Q2PihR4rTMqyGPrr41gKnnZzuYVxMwiQwblenT3kdToC0LMRme D4MMycf1c2BHZw8wUAsvJbiXIVsr3Pd+1oqLkvPXkvoGWWcBTSfe8c0meIKcqBot iwNgXMcdJ2U8Sp1+Fbvrn1H3fVuwnyf7DyPAmYqcVMMi8GPacqI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:57 2025 by rpki-client