$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: JvjtKpmBz73RMyNalo1i1+6KgeodACUrHZD/ie5rhSc= Subject key identifier: BC:47:0E:CE:7C:C9:83:5A:46:23:7F:CD:9B:C6:DA:DF:A7:07:4B:D9 Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 8EEC59C42B426C62669990A1B412778BFEDE2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 0148 Signing time: Thu 24 Apr 2025 20:11:57 +0000 Manifest this update: Thu 24 Apr 2025 20:06:57 +0000 Manifest next update: Mon 28 Apr 2025 01:33:57 +0000 Files and hashes: 1: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: JuS58nwIFEr99TtzzwYJ5O+xkd4YGDoi2DQG7l4BkPY=) 2: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) 3: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: Rsp0inkAe4x/F4hisAzY5o/UwhJ2oK1k5juyxF64B0U=) 4: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8e:ec:59:c4:2b:42:6c:62:66:99:90:a1:b4:12:77:8b:fe:de:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Apr 24 20:06:57 2025 GMT Not After : Apr 28 01:33:57 2025 GMT Subject: CN=BC470ECE7CC9835A46237FCD9BC6DADFA7074BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:69:7d:d2:32:ed:18:65:39:f9:bc:b9:7b: 4f:bc:67:ed:a5:db:7c:85:74:48:5a:74:54:c7:a5: c2:56:ab:2d:b9:7b:3b:e3:3c:ed:95:d3:35:f1:a7: 6a:b7:e0:3c:0f:15:53:30:98:94:e3:b4:f4:30:71: d2:96:66:23:f2:7a:d1:c9:93:21:21:cb:19:50:f5: 24:dc:b3:35:1b:15:52:d9:ad:46:dc:3d:dc:57:68: 42:a3:1e:d9:99:12:44:ab:a5:df:b2:be:90:43:1e: 4a:8d:5f:c7:8d:fb:15:2d:0c:b7:9e:f6:c7:14:0b: 93:3d:82:1e:e1:9a:e5:4e:9d:48:75:d4:b6:a5:82: 1d:ac:e7:28:16:d4:87:dc:0f:59:eb:25:39:da:d5: 81:94:1d:12:87:90:ee:27:bc:7f:d5:53:e2:3b:3f: 56:8d:d1:5e:d4:36:e3:bd:9e:bf:3c:27:ff:a9:2d: 56:8f:c2:6a:9e:83:7e:e7:10:ba:da:ef:bb:b7:49: 5a:a7:43:66:53:dc:ad:4e:50:2e:3e:5d:d6:d9:23: ea:d7:d5:df:a4:9d:32:f0:bd:9b:31:b0:ba:08:78: 70:4f:02:5a:c9:9d:a5:9c:ec:45:e8:81:6c:8a:a8: 4c:69:c5:67:d3:04:99:23:8f:40:d4:a2:81:d7:51: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:47:0E:CE:7C:C9:83:5A:46:23:7F:CD:9B:C6:DA:DF:A7:07:4B:D9 X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d1:0b:24:20:7c:11:a1:67:9b:94:2b:1b:8a:42:36:e8:1a: c3:3f:01:32:e4:d3:33:d6:5e:81:d3:7c:22:c0:5a:bd:0f:27: 2e:bb:74:f3:b2:4b:70:f8:8e:85:ba:0f:ed:0b:9a:35:05:16: fc:13:db:8a:be:ad:12:a2:86:f1:45:fc:d6:81:7c:1c:ee:ee: 03:6f:36:d8:94:1b:7b:3f:62:4b:3c:6c:68:dc:22:37:6c:42: af:c3:e7:9d:6c:5d:b7:72:a2:25:74:78:0c:f1:86:86:9d:0b: 02:c0:5e:1d:a8:65:a5:98:a6:9f:18:b1:05:74:66:db:9e:40: d3:98:30:eb:f2:39:4f:d4:79:25:59:08:82:6c:80:07:da:69: c0:d2:5f:d5:1d:70:81:1f:01:df:d1:ab:d5:59:75:9d:87:b2: 45:7c:1e:46:a9:f7:87:18:07:2d:1f:87:15:7a:7e:8c:bc:53: d1:d2:0f:b4:90:cb:03:3b:69:c3:5c:57:68:f3:6d:7d:11:1b: d0:3e:69:0c:8c:62:6e:99:0e:8d:17:95:b7:ba:e6:f2:1b:ac: 48:01:fe:1d:ea:52:96:4a:f8:eb:f6:3e:41:16:06:38:e4:e0: 3e:b6:49:fa:a9:64:af:b7:1e:44:cf:7b:76:8a:98:1a:84:86: 2a:51:6b:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAI7sWcQrQmxiZpmQobQSd4v+3iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNTA0MjQyMDA2NTdaFw0yNTA0MjgwMTMzNTdaMDMxMTAvBgNV BAMTKEJDNDcwRUNFN0NDOTgzNUE0NjIzN0ZDRDlCQzZEQURGQTcwNzRCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0Gl90jLtGGU5+by5e0+8Z+2l 23yFdEhadFTHpcJWqy25ezvjPO2V0zXxp2q34DwPFVMwmJTjtPQwcdKWZiPyetHJ kyEhyxlQ9STcszUbFVLZrUbcPdxXaEKjHtmZEkSrpd+yvpBDHkqNX8eN+xUtDLee 9scUC5M9gh7hmuVOnUh11Lalgh2s5ygW1IfcD1nrJTna1YGUHRKHkO4nvH/VU+I7 P1aN0V7UNuO9nr88J/+pLVaPwmqeg37nELra77u3SVqnQ2ZT3K1OUC4+XdbZI+rX 1d+knTLwvZsxsLoIeHBPAlrJnaWc7EXogWyKqExpxWfTBJkjj0DUooHXUd81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvEcOznzJg1pGI3/Nm8ba36cHS9kwHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDRCyQgfBGhZ5uUKxuKQjboGsM/ATLk0zPW XoHTfCLAWr0PJy67dPOyS3D4joW6D+0LmjUFFvwT24q+rRKihvFF/NaBfBzu7gNv NtiUG3s/Yks8bGjcIjdsQq/D551sXbdyoiV0eAzxhoadCwLAXh2oZaWYpp8YsQV0 ZtueQNOYMOvyOU/UeSVZCIJsgAfaacDSX9UdcIEfAd/Rq9VZdZ2HskV8Hkap94cY By0fhxV6foy8U9HSD7SQywM7acNcV2jzbX0RG9A+aQyMYm6ZDo0Xlbe65vIbrEgB /h3qUpZK+Ov2PkEWBjjk4D62SfqpZK+3HkTPe3aKmBqEhipRa2k= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net