$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: pmoHQ4bzh2q/eYCtyg0baZMfoPH+uFC5pqXZRyEMb00= Subject key identifier: 15:6B:37:38:77:C1:7A:80:5B:CD:F0:20:35:F4:25:CA:BA:57:C8:F3 Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 2EC86FEE98D73961CEE5AEE946C2F27F6C45A34A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: D1 Signing time: Tue 29 Apr 2025 18:12:06 +0000 Manifest this update: Tue 29 Apr 2025 18:07:06 +0000 Manifest next update: Sat 03 May 2025 02:53:06 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: CSKax/gX5F0OVRx7/bkta6x/wCbLjQqRJHbI6He1fas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c8:6f:ee:98:d7:39:61:ce:e5:ae:e9:46:c2:f2:7f:6c:45:a3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Apr 29 18:07:06 2025 GMT Not After : May 3 02:53:06 2025 GMT Subject: CN=156B373877C17A805BCDF02035F425CABA57C8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:b1:98:27:e9:a5:f8:ba:3a:35:59:63:42: d9:74:ad:64:19:b9:0a:ea:32:42:bf:ec:ea:0e:d4: 0e:43:f8:ad:84:dd:5c:02:13:bf:f7:2e:50:91:f7: 23:45:f6:6b:97:c6:1a:9b:f5:73:fd:ad:27:75:d4: ef:31:97:4f:3f:77:7d:20:03:d2:66:66:97:e2:ee: ba:32:33:01:cc:d9:05:9b:43:8c:5a:a1:53:cf:1d: 5b:c0:b3:38:69:71:01:cc:e1:6a:46:2b:c6:d0:18: 1e:02:b0:f3:5c:17:7c:8d:53:a7:d2:a4:b5:60:81: b7:02:2a:0c:c7:56:7a:3f:67:8f:1d:f2:aa:d8:b4: ec:c3:bb:72:56:8d:15:c1:62:f2:11:e4:cb:cd:d3: d4:f8:0d:75:1f:16:f9:40:9f:3f:6e:44:9f:a6:82: 12:0b:12:af:f9:55:66:01:4c:53:99:ed:de:cc:b8: fd:5f:7c:80:b0:3c:cd:6d:bd:ca:92:a5:9f:a1:3f: a4:3b:de:c0:12:b9:c4:0d:a5:93:b0:60:0c:e6:24: ba:39:a4:98:52:96:ff:28:a9:15:2e:5a:80:7c:ad: d6:5e:fa:b5:ed:25:9e:a9:08:7a:64:46:95:22:1d: 5b:80:29:66:f3:95:c8:af:e0:02:12:d5:42:ce:11: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6B:37:38:77:C1:7A:80:5B:CD:F0:20:35:F4:25:CA:BA:57:C8:F3 X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:78:27:1d:02:03:5c:fb:c8:01:82:ff:3e:fd:4d:98:84:01: c4:8e:85:07:37:21:75:4b:dd:5a:35:1e:b7:39:04:a4:d9:da: 7e:0a:a8:26:77:17:df:11:45:c3:24:b4:6a:79:fa:4a:fb:40: 1b:4a:f1:58:0f:60:a9:c3:b7:62:da:dc:6e:bc:29:aa:03:68: 01:80:79:7a:fe:5e:49:42:53:12:8c:18:76:e2:bb:0e:6e:cd: e4:a5:ea:0e:dd:a6:62:0b:e3:d3:21:7f:e3:99:4c:6d:ad:51: 4f:70:58:8c:c7:a1:13:53:b3:10:f2:df:2d:37:50:c4:fe:ad: 4a:e1:3b:5f:ce:7a:ec:4d:9c:f6:fc:90:2f:b5:a7:6b:f5:83: e6:a8:15:b8:1f:50:6e:3d:12:87:97:46:5c:4d:6d:54:bf:80: 6d:80:d5:a2:f7:10:45:21:19:b5:a2:d4:73:f1:60:06:f3:4b: 88:ab:e4:d4:ec:dd:80:52:80:40:ed:25:72:7c:f6:3d:1f:2f: 9f:58:45:15:cc:55:f4:14:92:dd:4a:3c:e8:e1:3a:32:fa:95: d4:8b:cf:c3:05:a7:69:f2:68:55:17:5c:b5:d4:b1:cd:cd:f9: 4a:f6:77:3c:77:17:eb:49:64:e1:31:54:01:0e:e6:29:e0:55: 5c:bf:6b:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULshv7pjXOWHO5a7pRsLyf2xFo0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNTA0MjkxODA3MDZaFw0yNTA1MDMwMjUzMDZaMDMxMTAvBgNV BAMTKDE1NkIzNzM4NzdDMTdBODA1QkNERjAyMDM1RjQyNUNBQkE1N0M4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodrGYJ+ml+Lo6NVljQtl0rWQZ uQrqMkK/7OoO1A5D+K2E3VwCE7/3LlCR9yNF9muXxhqb9XP9rSd11O8xl08/d30g A9JmZpfi7royMwHM2QWbQ4xaoVPPHVvAszhpcQHM4WpGK8bQGB4CsPNcF3yNU6fS pLVggbcCKgzHVno/Z48d8qrYtOzDu3JWjRXBYvIR5MvN09T4DXUfFvlAnz9uRJ+m ghILEq/5VWYBTFOZ7d7MuP1ffICwPM1tvcqSpZ+hP6Q73sASucQNpZOwYAzmJLo5 pJhSlv8oqRUuWoB8rdZe+rXtJZ6pCHpkRpUiHVuAKWbzlciv4AIS1ULOEcI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFWs3OHfBeoBbzfAgNfQlyrpXyPMwHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV4Jx0CA1z7yAGC/z79TZiEAcSOhQc3IXVL 3Vo1Hrc5BKTZ2n4KqCZ3F98RRcMktGp5+kr7QBtK8VgPYKnDt2La3G68KaoDaAGA eXr+XklCUxKMGHbiuw5uzeSl6g7dpmIL49Mhf+OZTG2tUU9wWIzHoRNTsxDy3y03 UMT+rUrhO1/OeuxNnPb8kC+1p2v1g+aoFbgfUG49EoeXRlxNbVS/gG2A1aL3EEUh GbWi1HPxYAbzS4ir5NTs3YBSgEDtJXJ89j0fL59YRRXMVfQUkt1KPOjhOjL6ldSL z8MFp2nyaFUXXLXUsc3N+Ur2dzx3F+tJZOExVAEO5ingVVy/a90= -----END CERTIFICATE-----Generated at Wed Apr 30 11:26:40 2025 by rpki-client