$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: c6Qz0rEv0zNb1Q5wU18NtF59j4a2imhXVT4aQzSGVbQ= Subject key identifier: E9:06:46:2D:B8:55:5B:E3:1A:27:75:6C:8D:81:C5:E5:F3:D8:35:78 Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 085C044DD2BAB81964DDDBFC3A3D76E98D6B2AED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 01EE Signing time: Sat 14 Jun 2025 16:21:28 +0000 Manifest this update: Sat 14 Jun 2025 16:16:28 +0000 Manifest next update: Tue 17 Jun 2025 21:59:28 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: 2PplIdPJBt8Wd0JS4fcV6AXW2MIJshNp6L2Nx2tDwls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5c:04:4d:d2:ba:b8:19:64:dd:db:fc:3a:3d:76:e9:8d:6b:2a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: Jun 14 16:16:28 2025 GMT Not After : Jun 17 21:59:28 2025 GMT Subject: CN=E906462DB8555BE31A27756C8D81C5E5F3D83578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:d6:af:54:45:ac:44:db:04:52:2c:02:8f: 2c:a8:86:6a:02:17:4d:02:73:e0:b9:6d:ee:ca:85: 4e:00:63:d7:ed:67:6c:10:1c:6b:00:81:5f:8a:be: 81:43:78:c2:b4:21:00:08:3f:1a:0d:e3:62:04:c8: a5:93:e8:ae:f6:27:00:43:b7:89:4f:a0:f7:25:17: e0:7e:46:53:17:b0:99:95:75:c9:6f:30:f9:6e:6d: b4:21:88:42:a7:06:41:48:a6:f0:a7:a9:47:b8:3d: 5d:e7:a7:4e:15:de:23:30:0c:38:e3:27:f1:34:06: 60:cb:ab:2a:87:51:ba:a2:72:6a:3e:07:98:4f:8a: ca:56:16:26:5a:fe:91:7c:75:65:1a:1d:6d:b6:d7: b7:44:de:0f:3e:58:f9:3b:12:4e:e8:2c:7b:09:15: b0:70:9b:94:13:e2:85:d9:45:ba:84:89:3a:fb:51: 28:ea:c9:ee:33:41:a5:8c:18:da:b4:b7:72:0f:40: 1d:81:51:75:53:ee:31:da:ce:0d:cc:06:2b:5a:49: 9d:5f:28:db:68:94:68:75:ee:44:51:78:c8:90:f8: 4d:31:96:b3:72:3a:af:36:46:52:18:2e:bb:0f:bb: ba:2e:c7:c7:59:57:65:c8:0a:f3:a6:42:bb:80:30: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:06:46:2D:B8:55:5B:E3:1A:27:75:6C:8D:81:C5:E5:F3:D8:35:78 X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a6:12:cc:01:73:76:5b:b2:1e:7e:6d:69:7a:d5:ee:d3:9a: a7:69:f7:73:e1:60:3f:63:00:a7:5f:6f:30:a1:5b:4d:37:b0: ab:3f:2c:80:0c:02:b4:a8:80:46:d9:16:ff:51:ce:8a:ae:ce: 31:79:37:1b:5c:1b:7a:99:a4:07:47:d7:48:07:7e:1c:22:e3: 02:e5:bc:40:bf:71:2b:4d:f9:79:59:aa:bf:11:5d:70:7d:09: fe:35:ab:99:37:18:57:9b:c4:28:77:1f:ea:80:7b:fb:8d:0b: 2b:83:a7:67:c7:d4:4b:be:32:75:81:3b:45:4a:b6:25:c3:14: f9:bf:ec:01:49:80:2a:b3:f6:e6:10:c0:f8:e4:8f:f9:d7:5f: 70:43:f1:10:b2:d2:b2:41:72:8b:b2:33:2e:bb:a7:3f:8d:61: 50:bc:b6:21:db:70:7c:2c:85:d5:72:c1:39:77:44:16:55:fe: 75:24:20:bd:70:0e:c7:e3:fc:f4:6a:83:46:80:23:bc:ca:8c: 99:0e:0d:19:af:f5:42:d8:1c:35:8f:da:1e:d5:57:54:72:f3: e3:2e:10:8c:32:39:b2:5a:a0:d3:36:56:f0:83:d0:b7:24:84: 88:52:e0:a1:d0:bb:9c:f7:38:4d:ca:fd:cc:56:32:c9:7d:ea: 08:fe:a1:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFwETdK6uBlk3dv8Oj126Y1rKu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNTA2MTQxNjE2MjhaFw0yNTA2MTcyMTU5MjhaMDMxMTAvBgNV BAMTKEU5MDY0NjJEQjg1NTVCRTMxQTI3NzU2QzhEODFDNUU1RjNEODM1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIg9avVEWsRNsEUiwCjyyohmoC F00Cc+C5be7KhU4AY9ftZ2wQHGsAgV+KvoFDeMK0IQAIPxoN42IEyKWT6K72JwBD t4lPoPclF+B+RlMXsJmVdclvMPlubbQhiEKnBkFIpvCnqUe4PV3np04V3iMwDDjj J/E0BmDLqyqHUbqicmo+B5hPispWFiZa/pF8dWUaHW2217dE3g8+WPk7Ek7oLHsJ FbBwm5QT4oXZRbqEiTr7USjqye4zQaWMGNq0t3IPQB2BUXVT7jHazg3MBitaSZ1f KNtolGh17kRReMiQ+E0xlrNyOq82RlIYLrsPu7oux8dZV2XICvOmQruAMCznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6QZGLbhVW+MaJ3VsjYHF5fPYNXgwHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIumEswBc3Zbsh5+bWl61e7Tmqdp93PhYD9j AKdfbzChW003sKs/LIAMArSogEbZFv9RzoquzjF5NxtcG3qZpAdH10gHfhwi4wLl vEC/cStN+XlZqr8RXXB9Cf41q5k3GFebxCh3H+qAe/uNCyuDp2fH1Eu+MnWBO0VK tiXDFPm/7AFJgCqz9uYQwPjkj/nXX3BD8RCy0rJBcouyMy67pz+NYVC8tiHbcHws hdVywTl3RBZV/nUkIL1wDsfj/PRqg0aAI7zKjJkODRmv9ULYHDWP2h7VV1Ry8+Mu EIwyObJaoNM2VvCD0LckhIhS4KHQu5z3OE3K/cxWMsl96gj+oQc= -----END CERTIFICATE-----Generated at Mon Jun 16 10:42:36 2025 by rpki-client