$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json) Hash identifier: NDLK9DjOKkp743c24juW0ttqplprqF03c9w83ZybELo= Subject key identifier: 13:A8:6D:D3:44:84:A1:99:4F:C9:73:A5:E5:24:52:86:77:65:82:74 Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Certificate serial: 7BA0861BE0D03999766D6D9B56408A03C4186DE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft Manifest number: 0220 Signing time: Tue 05 Aug 2025 12:01:54 +0000 Manifest this update: Tue 05 Aug 2025 11:56:54 +0000 Manifest next update: Fri 08 Aug 2025 18:02:54 +0000 Files and hashes: 1: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: WkOEvMx4pLjLVaF0ggIqh7pDPWEbi8P19IogxuTVO3k=) 2: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: SkEj+VrqROZ6ec2B7PSHWRoFEm/LNoxvJd9+DlyKBbM=) 3: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: P4hdS37EWneF08stt5Krg+rWSIKfiKz6ffEd1QqCT5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a0:86:1b:e0:d0:39:99:76:6d:6d:9b:56:40:8a:03:c4:18:6d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Validity Not Before: Aug 5 11:56:54 2025 GMT Not After : Aug 8 18:02:54 2025 GMT Subject: CN=13A86DD34484A1994FC973A5E524528677658274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:fe:20:9e:0e:6a:b7:cc:22:72:1b:bd:a3: 01:37:8e:fb:a0:02:a5:20:d3:e4:27:73:9f:5c:e6: 51:ba:fe:9f:84:9b:c1:41:ae:ad:9d:43:2e:d6:c0: 9b:76:3b:2f:49:7c:cb:81:e9:8a:1b:95:90:cd:b5: df:b9:a6:e3:5e:fb:73:40:6a:0f:e8:64:42:c3:89: 17:66:3e:47:85:39:71:cb:7d:59:b2:21:b2:77:46: 2d:aa:50:e6:79:cb:d8:92:f4:81:64:02:15:11:50: c3:be:d2:9b:4c:dd:e3:b8:97:b9:b8:e7:e4:ee:3c: fc:c7:6b:18:27:c6:53:a1:83:22:f6:2b:6f:d6:cd: af:e5:52:f2:e7:8c:82:2d:4e:01:c3:ff:5a:17:33: 3c:fd:1c:e9:34:f4:3f:c1:df:25:a2:aa:d4:71:49: 26:6a:ec:d8:cb:04:f9:fc:6c:a8:d8:2a:93:18:32: e4:e5:de:bd:cd:34:83:55:4b:a7:8f:df:8c:c4:c1: 52:06:d5:96:bf:41:8e:25:47:82:29:ae:8e:87:a7: b8:ba:52:88:66:fc:fc:56:d3:ae:7c:27:32:ff:c0: fe:17:0e:e2:23:a6:3e:3d:26:a5:48:c0:53:a4:c3: 11:dd:df:5b:6e:2f:33:16:2d:c3:d0:98:8c:f9:0e: d2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A8:6D:D3:44:84:A1:99:4F:C9:73:A5:E5:24:52:86:77:65:82:74 X509v3 Authority Key Identifier: keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:53:6b:96:9e:a6:1a:35:50:6c:81:58:41:4a:d7:11:b3:32: b9:47:5c:4c:89:ab:ad:68:f4:9f:7e:01:2a:f9:85:58:12:31: d1:bd:ae:bd:3a:f6:ac:c2:c5:ea:25:9f:57:bb:ab:a2:26:33: 27:22:88:a5:b9:79:25:30:07:20:99:61:c7:f5:a0:63:cc:45: 30:d7:46:54:d4:8c:f0:b0:5c:ca:c0:80:19:a0:18:f9:4b:05: 12:bb:1c:ae:e6:a0:e2:44:3a:f8:ca:1c:a5:71:d4:4a:ac:38: 0d:d4:6d:9c:6b:82:5b:93:99:67:a7:3e:76:f8:94:67:d9:40: cb:0d:0e:70:94:99:35:ea:c5:05:2a:89:2f:33:41:7c:34:81: d9:9f:bd:4a:51:60:a5:73:25:b6:ab:c9:fc:77:07:b6:f3:6d: d9:1d:c0:d3:14:e7:f2:0e:b6:4c:e8:55:d0:6a:08:5c:04:43: f6:84:f0:14:41:41:b8:39:77:f2:39:df:85:f2:0b:4c:a5:8c: 1a:a9:fc:9a:4a:8b:c7:59:3c:09:6f:8e:2b:54:1b:78:00:fa: a1:c8:01:d2:49:93:d1:4a:f3:0d:34:2b:3e:8a:ec:e6:9b:01: da:dd:41:d5:f1:ae:ab:9b:9f:df:ff:89:b5:7e:66:9e:37:15: d7:01:b8:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6CGG+DQOZl2bW2bVkCKA8QYbekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5 QTc0NUI1MDAeFw0yNTA4MDUxMTU2NTRaFw0yNTA4MDgxODAyNTRaMDMxMTAvBgNV BAMTKDEzQTg2REQzNDQ4NEExOTk0RkM5NzNBNUU1MjQ1Mjg2Nzc2NTgyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcv4gng5qt8wichu9owE3jvug AqUg0+Qnc59c5lG6/p+Em8FBrq2dQy7WwJt2Oy9JfMuB6YoblZDNtd+5puNe+3NA ag/oZELDiRdmPkeFOXHLfVmyIbJ3Ri2qUOZ5y9iS9IFkAhURUMO+0ptM3eO4l7m4 5+TuPPzHaxgnxlOhgyL2K2/Wza/lUvLnjIItTgHD/1oXMzz9HOk09D/B3yWiqtRx SSZq7NjLBPn8bKjYKpMYMuTl3r3NNINVS6eP34zEwVIG1Za/QY4lR4Ipro6Hp7i6 Uohm/PxW0658JzL/wP4XDuIjpj49JqVIwFOkwxHd31tuLzMWLcPQmIz5DtLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE6ht00SEoZlPyXOl5SRShndlgnQwHwYDVR0j BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0 ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0 NUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdB QjU5QTc0NUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpTa5aepho1UGyBWEFK1xGzMrlHXEyJq61o 9J9+ASr5hVgSMdG9rr069qzCxeoln1e7q6ImMyciiKW5eSUwByCZYcf1oGPMRTDX RlTUjPCwXMrAgBmgGPlLBRK7HK7moOJEOvjKHKVx1EqsOA3UbZxrgluTmWenPnb4 lGfZQMsNDnCUmTXqxQUqiS8zQXw0gdmfvUpRYKVzJbaryfx3B7bzbdkdwNMU5/IO tkzoVdBqCFwEQ/aE8BRBQbg5d/I534XyC0yljBqp/JpKi8dZPAlvjitUG3gA+qHI AdJJk9FK8w00Kz6K7OabAdrdQdXxrqubn9//ibV+Zp43FdcBuJY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:11 2025 by rpki-client