$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: FB27tS1yKq/mFfKCULPA8p5VjMQy3dEG3YmugGUylsM= Subject key identifier: 4F:85:31:56:50:DC:96:2C:FD:DD:2C:59:D2:1E:ED:73:56:44:A0:B6 Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 3294399EB588ED19A6BA86BD471D99DD11D19381 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 01D6 Signing time: Wed 06 Aug 2025 06:20:54 +0000 Manifest this update: Wed 06 Aug 2025 06:15:54 +0000 Manifest next update: Sat 09 Aug 2025 07:12:54 +0000 Files and hashes: 1: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: mrvSZmJufpJfUOKtyw6rr/kef40ObRN7eZr0/mbwGI4=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: YpgQnQU5lvkeRKFK74g+rncTHe8QCPlhwaAIMSjOHQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:94:39:9e:b5:88:ed:19:a6:ba:86:bd:47:1d:99:dd:11:d1:93:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Aug 6 06:15:54 2025 GMT Not After : Aug 9 07:12:54 2025 GMT Subject: CN=4F85315650DC962CFDDD2C59D21EED735644A0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:96:fd:4b:c3:c1:03:3b:ff:87:f3:c4:40: b5:a2:e2:c8:2a:e8:bc:61:52:85:d3:3c:a0:d7:dd: 4b:96:34:c7:ee:6f:b2:62:da:44:b4:9a:c3:43:12: 62:bb:3a:f6:b4:86:17:61:56:8a:4b:82:09:24:42: 1a:1e:12:0d:4d:b9:ad:92:b2:f0:74:8e:f2:f6:1f: 57:95:a3:e6:d4:7b:7b:1b:da:8e:a0:dd:95:89:17: cb:ff:1f:9d:57:5b:1d:fd:fe:35:90:e5:2a:7d:72: 01:91:b0:a1:bb:41:9a:a9:82:47:77:c0:58:78:d7: f4:64:53:7b:7c:f8:20:40:8c:ff:64:bf:7b:18:d3: fa:e3:e4:62:94:58:f9:52:cc:6f:30:a8:8e:0c:c9: ca:cf:9f:5a:a4:c7:34:fe:4a:bd:cc:33:a7:4e:93: 9c:e5:ae:39:63:f5:ad:1b:54:d2:96:0c:1b:d4:6c: 6d:79:00:43:58:77:cc:9c:c3:49:14:bc:8b:2f:89: d9:92:f2:96:1e:c1:5a:60:6e:4c:48:5b:fb:e0:bd: fc:2f:0a:90:59:be:77:0b:2b:5a:58:07:49:44:e9: c5:f3:40:3e:c3:37:a7:d1:80:1b:a4:f9:75:59:ab: 95:01:b3:c8:c9:75:3d:5b:5e:8e:aa:9b:b2:62:a7: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:85:31:56:50:DC:96:2C:FD:DD:2C:59:D2:1E:ED:73:56:44:A0:B6 X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ca:e4:b9:08:4e:86:84:6a:f3:92:a0:e0:2b:ef:4b:2a:c7: 26:01:8d:73:07:a5:ba:71:56:f0:68:da:03:0f:5c:a8:a0:dc: f2:2a:75:9c:88:ce:02:2f:00:c9:e6:68:88:75:d8:47:26:00: c3:f4:83:1e:d6:38:81:d9:fe:7a:13:5f:bb:33:94:dd:23:12: d6:67:05:a3:ec:c0:f9:4a:f5:1d:84:f8:65:25:00:6f:c4:43: 9a:d4:9e:ac:3b:e0:6a:36:8b:90:b5:6f:89:c5:c3:d8:2b:d8: 7a:6d:1c:31:db:39:6e:e6:4f:85:65:59:ee:28:69:f2:d8:9e: af:0b:75:3d:38:5a:16:f0:a2:e2:9d:b0:dc:eb:b1:ce:17:22: 8a:82:55:4c:1e:8a:61:c9:d4:bb:55:8b:ff:02:39:28:09:3f: e8:0e:71:82:e6:d0:96:bf:d8:10:a4:ea:b2:76:a4:bd:de:80: 27:6e:cd:ee:d4:5b:b2:59:ee:61:61:6c:dc:9a:70:99:94:1c: 8d:84:27:f7:7e:61:1b:d9:a7:eb:c1:8d:e3:34:41:a5:c0:c2: 2a:2d:39:65:83:b1:7d:a1:13:8c:db:14:26:29:ab:01:71:46: 90:7e:b3:8f:6e:04:13:b7:33:ef:13:47:3d:52:15:c7:64:b1: a9:6b:45:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpQ5nrWI7Rmmuoa9Rx2Z3RHRk4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNTA4MDYwNjE1NTRaFw0yNTA4MDkwNzEyNTRaMDMxMTAvBgNV BAMTKDRGODUzMTU2NTBEQzk2MkNGREREMkM1OUQyMUVFRDczNTY0NEEwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQZb9S8PBAzv/h/PEQLWi4sgq 6LxhUoXTPKDX3UuWNMfub7Ji2kS0msNDEmK7Ova0hhdhVopLggkkQhoeEg1Nua2S svB0jvL2H1eVo+bUe3sb2o6g3ZWJF8v/H51XWx39/jWQ5Sp9cgGRsKG7QZqpgkd3 wFh41/RkU3t8+CBAjP9kv3sY0/rj5GKUWPlSzG8wqI4MycrPn1qkxzT+Sr3MM6dO k5zlrjlj9a0bVNKWDBvUbG15AENYd8ycw0kUvIsvidmS8pYewVpgbkxIW/vgvfwv CpBZvncLK1pYB0lE6cXzQD7DN6fRgBuk+XVZq5UBs8jJdT1bXo6qm7JipyErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT4UxVlDcliz93SxZ0h7tc1ZEoLYwHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/K5LkIToaEavOSoOAr70sqxyYBjXMHpbpx VvBo2gMPXKig3PIqdZyIzgIvAMnmaIh12EcmAMP0gx7WOIHZ/noTX7szlN0jEtZn BaPswPlK9R2E+GUlAG/EQ5rUnqw74Go2i5C1b4nFw9gr2HptHDHbOW7mT4VlWe4o afLYnq8LdT04WhbwouKdsNzrsc4XIoqCVUweimHJ1LtVi/8COSgJP+gOcYLm0Ja/ 2BCk6rJ2pL3egCduze7UW7JZ7mFhbNyacJmUHI2EJ/d+YRvZp+vBjeM0QaXAwiot OWWDsX2hE4zbFCYpqwFxRpB+s49uBBO3M+8TRz1SFcdksalrRS8= -----END CERTIFICATE-----Generated at Thu Aug 7 17:24:56 2025 by rpki-client