$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json) Hash identifier: 0PWLQYYSxQ6yg1sOMggibo7RXa3zITHtSosGnbjM3to= Subject key identifier: D8:59:65:10:2B:FF:C0:3D:6C:4C:DF:12:3A:10:A1:ED:12:70:09:28 Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Certificate serial: 0EE6C3CD4DD597267AA600CF5EA24A4EF35A410C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft Manifest number: 0209 Signing time: Sat 14 Jun 2025 11:31:48 +0000 Manifest this update: Sat 14 Jun 2025 11:26:48 +0000 Manifest next update: Tue 17 Jun 2025 12:13:48 +0000 Files and hashes: 1: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: P4hdS37EWneF08stt5Krg+rWSIKfiKz6ffEd1QqCT5Q=) 2: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: dtLS5bbidtT21n27nBL+s/zO82foGmqUSu20HPr/XU4=) 3: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: WkOEvMx4pLjLVaF0ggIqh7pDPWEbi8P19IogxuTVO3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e6:c3:cd:4d:d5:97:26:7a:a6:00:cf:5e:a2:4a:4e:f3:5a:41:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Validity Not Before: Jun 14 11:26:48 2025 GMT Not After : Jun 17 12:13:48 2025 GMT Subject: CN=D85965102BFFC03D6C4CDF123A10A1ED12700928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:18:92:0c:cf:9f:d1:c9:68:7f:7e:9e:76: 9a:65:38:67:a8:9a:19:84:9b:37:47:30:28:40:a8: 3e:9d:f1:38:26:a9:71:ac:65:76:cd:7b:87:4e:ba: 8a:4e:8e:b4:bf:dc:47:54:51:be:81:f5:38:8a:7e: 75:13:00:4f:ae:b2:10:7e:ff:10:59:51:8b:37:7d: ce:15:b5:a0:62:2e:50:9e:c5:a0:45:46:e6:e9:98: f1:fe:7f:88:53:6f:2a:63:c7:2d:66:db:f1:dd:25: 23:dc:4b:af:c2:be:be:e1:36:b9:07:0b:94:1b:de: 3e:c9:ad:92:26:19:c5:ac:35:02:e8:2c:39:3f:cc: f0:b5:e5:75:20:13:71:29:65:f0:84:52:06:12:62: 8f:b1:3d:aa:b0:16:8a:b2:48:29:46:2f:f8:4a:35: 3c:fd:bd:7f:19:7b:7a:81:0e:dd:5b:f6:5f:e2:d1: fa:ec:39:fd:bd:af:da:bd:6f:38:bc:33:46:3f:5b: 98:55:3d:6f:26:2c:41:c3:55:40:02:aa:a9:11:eb: 89:c2:97:f9:f5:a3:cb:57:4d:3e:14:0f:e3:a5:d9: 53:6c:3e:df:86:bd:d1:6f:28:b8:8f:c1:54:58:b0: f4:02:40:05:d6:35:1a:be:16:4b:70:ae:13:5b:25: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:59:65:10:2B:FF:C0:3D:6C:4C:DF:12:3A:10:A1:ED:12:70:09:28 X509v3 Authority Key Identifier: keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:90:4e:58:b9:71:14:42:45:64:0a:86:ea:fa:a7:fb:78:bc: 5e:79:ed:5e:20:7c:c8:c3:5c:ef:14:cb:8d:50:84:29:f6:82: e3:86:5c:0a:ed:ab:87:3e:05:33:c5:55:13:1b:87:dc:35:88: 65:4e:1e:9a:67:95:85:ec:f6:52:90:75:7e:df:3d:43:c9:dd: e8:c2:78:5d:a8:6a:68:c2:6b:9a:97:19:a4:35:62:91:1a:1a: 2a:34:f8:6a:8d:dc:d2:a8:7b:be:43:4c:0e:bf:f8:50:67:a4: 42:a1:91:4d:a5:08:ab:f8:af:6c:3a:b2:6b:ea:c4:89:ac:58: b6:a2:21:19:5d:19:28:33:30:0b:aa:d9:8b:39:4a:e2:ce:e9: ee:9e:a8:3a:e5:93:ac:c2:f0:ad:53:c8:09:41:f5:0f:58:73: 86:50:2e:37:d9:24:8a:8d:3f:48:3f:69:95:87:5d:ef:94:6b: 1b:78:1b:c1:07:ef:28:fc:ec:35:5f:5a:c4:85:02:24:8e:86: 8c:37:f8:85:02:e5:93:9e:21:48:62:45:3a:a2:8f:ff:34:93: 64:f9:06:4c:48:5a:1d:93:14:24:e7:01:ed:22:cc:b1:b4:a0: dc:7d:31:e8:6d:e2:2e:55:3b:21:e5:8a:8b:41:c5:94:77:fb: fe:b4:65:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDubDzU3VlyZ6pgDPXqJKTvNaQQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5 QTc0NUI1MDAeFw0yNTA2MTQxMTI2NDhaFw0yNTA2MTcxMjEzNDhaMDMxMTAvBgNV BAMTKEQ4NTk2NTEwMkJGRkMwM0Q2QzRDREYxMjNBMTBBMUVEMTI3MDA5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONRiSDM+f0clof36edpplOGeo mhmEmzdHMChAqD6d8TgmqXGsZXbNe4dOuopOjrS/3EdUUb6B9TiKfnUTAE+ushB+ /xBZUYs3fc4VtaBiLlCexaBFRubpmPH+f4hTbypjxy1m2/HdJSPcS6/Cvr7hNrkH C5Qb3j7JrZImGcWsNQLoLDk/zPC15XUgE3EpZfCEUgYSYo+xPaqwFoqySClGL/hK NTz9vX8Ze3qBDt1b9l/i0frsOf29r9q9bzi8M0Y/W5hVPW8mLEHDVUACqqkR64nC l/n1o8tXTT4UD+Ol2VNsPt+GvdFvKLiPwVRYsPQCQAXWNRq+FktwrhNbJbSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2FllECv/wD1sTN8SOhCh7RJwCSgwHwYDVR0j BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0 ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0 NUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdB QjU5QTc0NUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6QTli5cRRCRWQKhur6p/t4vF557V4gfMjD XO8Uy41QhCn2guOGXArtq4c+BTPFVRMbh9w1iGVOHppnlYXs9lKQdX7fPUPJ3ejC eF2oamjCa5qXGaQ1YpEaGio0+GqN3NKoe75DTA6/+FBnpEKhkU2lCKv4r2w6smvq xImsWLaiIRldGSgzMAuq2Ys5SuLO6e6eqDrlk6zC8K1TyAlB9Q9Yc4ZQLjfZJIqN P0g/aZWHXe+Uaxt4G8EH7yj87DVfWsSFAiSOhow3+IUC5ZOeIUhiRTqij/80k2T5 BkxIWh2TFCTnAe0izLG0oNx9Meht4i5VOyHliotBxZR3+/60ZVg= -----END CERTIFICATE-----Generated at Sun Jun 15 23:56:46 2025 by rpki-client