$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: KkOSVOXjCe0mB1pBLuO/+BvsAhijIJU1rzEqKwHzpvY= Subject key identifier: 68:FA:7B:C3:5A:4E:F6:41:02:23:91:26:E6:D8:0A:5F:57:85:15:95 Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 57C7FF4CD1B2EDCE810CEF8FA4F5ECC2D902C5E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: FD Signing time: Tue 05 Aug 2025 08:12:08 +0000 Manifest this update: Tue 05 Aug 2025 08:07:08 +0000 Manifest next update: Fri 08 Aug 2025 10:30:08 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: WdrE5opFOhSyp33vKdQd/2MPiHPFPLal9aVYM6dOrSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c7:ff:4c:d1:b2:ed:ce:81:0c:ef:8f:a4:f5:ec:c2:d9:02:c5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: Aug 5 08:07:08 2025 GMT Not After : Aug 8 10:30:08 2025 GMT Subject: CN=68FA7BC35A4EF64102239126E6D80A5F57851595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:45:e7:3f:36:a3:6c:92:29:e0:cd:3c:bb: e0:d5:b7:94:3b:85:d1:7d:26:c5:1d:b2:b9:c5:1a: 98:f7:ab:7e:c9:e9:2b:36:93:6a:bf:29:0d:7e:a2: 9a:69:48:58:83:90:b6:4b:d1:3e:23:33:c8:92:99: d9:ca:e4:c4:49:53:df:40:e8:6b:ee:90:1a:c4:dc: 5c:3b:7a:97:a9:37:73:40:b7:0c:ba:e6:f8:e0:aa: 53:39:91:a1:ad:01:2a:2d:74:cb:1d:86:10:5d:cd: 60:fc:44:7b:21:5b:f5:30:03:9d:9f:ed:31:ec:d0: fe:14:b8:d5:43:16:17:39:56:78:68:b3:7f:94:85: aa:86:4a:49:30:50:4e:dc:96:65:1e:a6:4e:bf:33: 59:ae:e9:b8:06:b8:6c:6e:84:dd:44:fc:90:c7:63: 5d:23:24:11:54:7c:0b:61:04:58:dc:a1:f1:f6:9e: b4:9d:70:65:35:35:35:75:16:09:17:4c:4b:ec:8b: 71:85:2c:63:c8:85:60:47:93:f5:5f:f9:ce:eb:f6: fe:11:84:b9:89:2c:56:62:e2:cb:f8:92:58:dc:3d: 4e:00:3e:9f:ec:af:c8:3d:16:ee:e6:df:d5:bb:c7: 2b:d2:b1:f9:7b:02:ec:9a:66:2a:9b:0b:47:9c:ef: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:7B:C3:5A:4E:F6:41:02:23:91:26:E6:D8:0A:5F:57:85:15:95 X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0a:e0:a5:c3:d9:43:58:22:92:42:bc:91:c3:9d:ec:18:2a: 53:51:b9:4c:f0:cf:8f:8b:2e:68:05:e7:08:1d:f8:2b:22:3e: 8e:fb:00:a6:5e:31:16:89:b4:a2:28:93:85:a3:94:d9:fa:69: 29:c6:7c:90:9b:93:41:5a:bc:45:c1:98:1e:b3:2d:73:bf:ca: b6:c2:2d:80:93:73:aa:5f:13:62:4c:19:7a:e2:52:9d:eb:dd: 2a:94:c9:a5:ef:ed:41:5e:2a:03:fd:76:d2:4f:a5:af:7f:13: 48:dc:e7:97:50:8a:31:ef:29:c6:8e:56:ac:f1:ed:d1:fb:ec: 4a:d4:78:82:f7:70:90:9c:b7:08:fb:73:a9:2d:01:ef:69:be: 53:48:14:43:4a:88:c7:7c:3c:af:b2:45:f5:51:4f:79:23:7c: 70:43:be:78:5b:c2:5b:83:5e:5c:c4:8b:23:33:24:64:6b:54: 02:48:f2:1f:f3:30:fe:9e:80:75:91:a1:4a:6d:c0:aa:36:24: 90:88:ce:7c:95:42:e9:87:7a:17:b1:a6:dd:fc:d4:88:34:27: c4:87:5a:78:71:1a:47:58:a7:85:d7:9c:41:ec:b1:34:69:c0: cc:43:a3:b8:96:cd:e3:4c:ab:2c:cc:6a:2b:b8:5b:a3:9f:90: 00:af:27:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8f/TNGy7c6BDO+PpPXswtkCxeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNTA4MDUwODA3MDhaFw0yNTA4MDgxMDMwMDhaMDMxMTAvBgNV BAMTKDY4RkE3QkMzNUE0RUY2NDEwMjIzOTEyNkU2RDgwQTVGNTc4NTE1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxkXnPzajbJIp4M08u+DVt5Q7 hdF9JsUdsrnFGpj3q37J6Ss2k2q/KQ1+opppSFiDkLZL0T4jM8iSmdnK5MRJU99A 6GvukBrE3Fw7epepN3NAtwy65vjgqlM5kaGtASotdMsdhhBdzWD8RHshW/UwA52f 7THs0P4UuNVDFhc5Vnhos3+UhaqGSkkwUE7clmUepk6/M1mu6bgGuGxuhN1E/JDH Y10jJBFUfAthBFjcofH2nrSdcGU1NTV1FgkXTEvsi3GFLGPIhWBHk/Vf+c7r9v4R hLmJLFZi4sv4kljcPU4APp/sr8g9Fu7m39W7xyvSsfl7AuyaZiqbC0ec759DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPp7w1pO9kECI5Em5tgKX1eFFZUwHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEK4KXD2UNYIpJCvJHDnewYKlNRuUzwz4+L LmgF5wgd+CsiPo77AKZeMRaJtKIok4WjlNn6aSnGfJCbk0FavEXBmB6zLXO/yrbC LYCTc6pfE2JMGXriUp3r3SqUyaXv7UFeKgP9dtJPpa9/E0jc55dQijHvKcaOVqzx 7dH77ErUeIL3cJCctwj7c6ktAe9pvlNIFENKiMd8PK+yRfVRT3kjfHBDvnhbwluD XlzEiyMzJGRrVAJI8h/zMP6egHWRoUptwKo2JJCIznyVQumHehexpt381Ig0J8SH WnhxGkdYp4XXnEHssTRpwMxDo7iWzeNMqyzMaiu4W6OfkACvJ9w= -----END CERTIFICATE-----Generated at Thu Aug 7 03:16:12 2025 by rpki-client