$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: YjJfdjDpaQ3/7nOHON6iy/l2a4Exlip94SWzLT7VpgE= Subject key identifier: A7:B8:C2:51:66:EE:F6:49:AD:DA:EF:64:80:C7:63:82:90:F9:41:33 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 7E12DE051C3F542685C4DF4D2683C38178D25C35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 0489 Signing time: Mon 28 Apr 2025 22:10:58 +0000 Manifest this update: Mon 28 Apr 2025 22:05:58 +0000 Manifest next update: Fri 02 May 2025 07:13:58 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: CebFuCQVU5ue1RBkOzERlrdbCdc6lbEN9yKLTSTqMFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:12:de:05:1c:3f:54:26:85:c4:df:4d:26:83:c3:81:78:d2:5c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Apr 28 22:05:58 2025 GMT Not After : May 2 07:13:58 2025 GMT Subject: CN=A7B8C25166EEF649ADDAEF6480C7638290F94133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:10:87:93:ad:95:f3:90:ce:08:07:65:6f: 18:fa:13:a5:19:c3:30:f5:01:6c:68:cf:9c:cb:71: 7e:bb:99:70:6f:12:22:df:a3:b3:7c:1f:d6:f4:ed: c4:7d:09:47:09:40:dd:cc:00:68:8b:48:32:b3:f6: 06:2c:24:e5:cc:4a:69:66:b1:ab:ba:b6:6d:98:bd: 85:fe:91:83:24:32:81:b7:a2:df:b0:4b:a3:d7:a7: c3:3e:fc:d6:da:a1:2c:f7:03:77:7c:19:02:a7:eb: cc:31:07:0a:54:a3:56:f2:cb:91:f6:80:b8:ca:af: f3:fe:79:e7:48:e8:1f:1e:d5:f9:83:8a:58:0b:d2: ad:08:16:75:99:71:d7:35:ca:ee:75:2b:72:82:30: ab:32:3e:40:48:09:77:2d:4e:9e:21:64:69:88:81: ab:f5:35:0d:c7:be:2e:2a:fc:6f:52:c4:98:21:d3: dd:d1:dc:63:3c:27:03:66:1a:81:39:6d:cf:fb:1f: 98:3b:3d:28:9c:18:6c:0f:e8:15:d1:40:1b:96:b4: da:4e:27:3e:e7:22:01:5c:a4:61:df:92:a7:97:16: b3:fb:eb:50:c7:b4:90:31:bb:14:63:5e:84:57:14: 60:8d:6e:a8:19:80:2f:28:71:d9:d3:15:b0:74:2e: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B8:C2:51:66:EE:F6:49:AD:DA:EF:64:80:C7:63:82:90:F9:41:33 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:6f:ec:0e:51:d1:30:c2:ad:1c:f7:05:29:8d:49:d4:7b:d8: 74:39:8a:99:b9:4c:a8:7e:d8:d3:c0:43:75:ec:ff:97:11:19: dc:54:ea:7c:a3:6c:73:77:7a:80:46:19:34:a2:18:2e:b4:b8: 89:c1:04:07:8e:58:62:16:a5:2f:19:3f:7c:62:c9:b4:e4:bc: 1b:8a:bf:ee:f2:85:c1:8e:86:96:33:12:1b:4c:0d:ea:8f:b9: cc:fd:d4:e4:3f:3e:f9:2b:ed:ea:15:1c:24:e9:f4:58:9e:6c: 96:0b:7c:e0:28:87:13:31:95:b7:b9:79:f1:53:5c:1d:27:17: 99:8c:df:cb:0c:e0:9a:09:18:f1:f6:03:81:98:ec:ee:d1:24: 01:03:a7:9a:2c:8e:7d:ef:2a:2f:1b:56:ad:7b:fa:d8:a0:41: 52:8b:f1:dc:30:ad:96:93:5c:d8:50:a3:38:72:d9:a2:72:87: fc:00:aa:a4:43:1c:b2:e8:0d:da:16:e6:6d:84:f7:71:a5:94: 3f:e2:e2:8e:bf:34:60:79:8f:27:dc:ac:ed:9b:7b:c7:d6:44: 41:c3:95:7f:f1:94:47:fb:1d:a7:94:2b:44:9d:b9:39:06:a9: d3:cb:39:1d:e9:21:59:93:54:e0:4d:e1:17:85:d7:11:4e:c1: db:1d:59:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhLeBRw/VCaFxN9NJoPDgXjSXDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTA0MjgyMjA1NThaFw0yNTA1MDIwNzEzNThaMDMxMTAvBgNV BAMTKEE3QjhDMjUxNjZFRUY2NDlBRERBRUY2NDgwQzc2MzgyOTBGOTQxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvphCHk62V85DOCAdlbxj6E6UZ wzD1AWxoz5zLcX67mXBvEiLfo7N8H9b07cR9CUcJQN3MAGiLSDKz9gYsJOXMSmlm sau6tm2YvYX+kYMkMoG3ot+wS6PXp8M+/NbaoSz3A3d8GQKn68wxBwpUo1byy5H2 gLjKr/P+eedI6B8e1fmDilgL0q0IFnWZcdc1yu51K3KCMKsyPkBICXctTp4hZGmI gav1NQ3Hvi4q/G9SxJgh093R3GM8JwNmGoE5bc/7H5g7PSicGGwP6BXRQBuWtNpO Jz7nIgFcpGHfkqeXFrP761DHtJAxuxRjXoRXFGCNbqgZgC8ocdnTFbB0LuBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp7jCUWbu9kmt2u9kgMdjgpD5QTMwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtv7A5R0TDCrRz3BSmNSdR72HQ5ipm5TKh+ 2NPAQ3Xs/5cRGdxU6nyjbHN3eoBGGTSiGC60uInBBAeOWGIWpS8ZP3xiybTkvBuK v+7yhcGOhpYzEhtMDeqPucz91OQ/Pvkr7eoVHCTp9FiebJYLfOAohxMxlbe5efFT XB0nF5mM38sM4JoJGPH2A4GY7O7RJAEDp5osjn3vKi8bVq17+tigQVKL8dwwrZaT XNhQozhy2aJyh/wAqqRDHLLoDdoW5m2E93GllD/i4o6/NGB5jyfcrO2be8fWREHD lX/xlEf7HaeUK0SduTkGqdPLOR3pIVmTVOBN4ReF1xFOwdsdWT8= -----END CERTIFICATE-----Generated at Wed Apr 30 14:07:09 2025 by rpki-client