$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: /DSjh4V5fxRQCx9y5nuZUORs9oq0wdn/SbTBnTphSqc= Subject key identifier: 20:FC:A4:0F:5A:F7:5A:C5:79:CB:7D:D5:FB:49:28:BC:F0:55:7C:56 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 69D83A1B9486CB1ECF67E11B1F691963BB2BB18F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 0385 Signing time: Thu 21 Aug 2025 23:41:25 +0000 Manifest this update: Thu 21 Aug 2025 23:36:25 +0000 Manifest next update: Mon 25 Aug 2025 06:38:25 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) 2: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: 7plB3jx5iYBsKUQnNZCfgoPqIMinsIKRhikKNsqnv1c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d8:3a:1b:94:86:cb:1e:cf:67:e1:1b:1f:69:19:63:bb:2b:b1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Aug 21 23:36:25 2025 GMT Not After : Aug 25 06:38:25 2025 GMT Subject: CN=20FCA40F5AF75AC579CB7DD5FB4928BCF0557C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:a8:80:99:9f:da:09:d2:d3:4d:03:6f:de: 16:d1:4d:ff:13:55:3a:db:7e:39:7f:cb:6f:f5:91: b7:00:fc:ae:86:b1:b4:80:b4:3b:9e:4c:84:16:91: d6:88:9c:c7:1f:26:74:ef:e7:8c:93:bd:7a:6b:b6: 61:92:6f:fd:f7:00:70:66:a9:a8:a7:6c:98:75:8c: 6f:de:4c:ed:82:fb:1d:59:35:a0:b0:2b:05:ac:67: 16:c8:22:ed:ca:f6:fa:77:f4:c9:79:ac:d0:40:3d: 06:f7:46:9c:e2:ca:f5:35:4e:53:90:0a:47:50:b5: 3f:b6:0f:f8:c2:8b:d0:ca:31:07:4b:07:bc:3d:75: b3:5c:b5:ac:78:ad:bf:82:aa:04:0c:79:2e:04:f2: 97:67:02:fd:93:84:6a:41:ae:f3:14:da:96:f4:31: da:55:94:fd:ca:88:e2:5c:b5:0c:e6:16:63:ff:28: 61:55:09:cc:38:1d:ce:38:59:11:6a:18:2c:c2:77: 21:06:cf:33:a6:60:12:a7:49:02:1c:68:91:b7:56: f3:5e:f2:07:0e:02:72:1e:76:ff:17:ba:e3:a6:a2: 92:93:f1:f2:36:f6:e6:ae:5b:2e:98:6c:cd:df:86: eb:e1:96:fc:09:1b:5a:09:3a:80:6a:11:39:d8:81: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FC:A4:0F:5A:F7:5A:C5:79:CB:7D:D5:FB:49:28:BC:F0:55:7C:56 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5e:82:84:c9:1e:11:4a:5c:77:89:cc:60:7b:74:1c:b7:69: 26:eb:5d:93:95:b2:ed:98:9b:db:f4:b4:0c:08:95:d9:81:e2: aa:85:59:35:3c:89:a6:37:7a:41:30:70:32:a0:94:39:c6:3b: cc:d6:09:31:fe:10:d9:85:6e:f4:cc:07:ed:2f:20:99:61:26: 6f:48:13:b9:f1:32:95:69:6b:3d:f4:e2:d1:a2:eb:52:7d:ed: ae:ba:93:a2:21:7e:8c:30:98:71:4f:aa:2f:28:2d:00:b2:69: f0:3c:32:99:e2:53:8f:fc:aa:51:8f:45:77:bd:80:9a:f9:40: 50:31:3f:ff:b4:35:b5:33:2c:e1:91:91:61:83:72:09:3d:cb: c1:24:2a:70:f3:04:d1:1f:c1:7a:0c:ae:bd:65:0c:c1:fd:cb: 05:f5:05:f1:10:3c:e8:af:3c:dd:be:d2:ee:39:0f:d6:b6:3d: 36:75:a0:ea:6f:b2:72:05:fd:93:bd:d2:e3:83:45:5b:ae:27: a6:a1:ac:36:c1:1a:b2:9b:44:65:fe:f1:86:7d:2a:75:d5:42: e8:0a:c6:59:61:17:33:90:69:05:97:da:bc:b7:28:48:06:eb: 38:b9:18:57:3c:d4:8c:54:2b:f9:07:30:c7:42:4a:c7:54:17: 4c:2e:87:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadg6G5SGyx7PZ+EbH2kZY7srsY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTA4MjEyMzM2MjVaFw0yNTA4MjUwNjM4MjVaMDMxMTAvBgNV BAMTKDIwRkNBNDBGNUFGNzVBQzU3OUNCN0RENUZCNDkyOEJDRjA1NTdDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1KiAmZ/aCdLTTQNv3hbRTf8T VTrbfjl/y2/1kbcA/K6GsbSAtDueTIQWkdaInMcfJnTv54yTvXprtmGSb/33AHBm qainbJh1jG/eTO2C+x1ZNaCwKwWsZxbIIu3K9vp39Ml5rNBAPQb3RpziyvU1TlOQ CkdQtT+2D/jCi9DKMQdLB7w9dbNctax4rb+CqgQMeS4E8pdnAv2ThGpBrvMU2pb0 MdpVlP3KiOJctQzmFmP/KGFVCcw4Hc44WRFqGCzCdyEGzzOmYBKnSQIcaJG3VvNe 8gcOAnIedv8XuuOmopKT8fI29uauWy6YbM3fhuvhlvwJG1oJOoBqETnYgfCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIPykD1r3WsV5y33V+0kovPBVfFYwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBegoTJHhFKXHeJzGB7dBy3aSbrXZOVsu2Y m9v0tAwIldmB4qqFWTU8iaY3ekEwcDKglDnGO8zWCTH+ENmFbvTMB+0vIJlhJm9I E7nxMpVpaz304tGi61J97a66k6IhfowwmHFPqi8oLQCyafA8MpniU4/8qlGPRXe9 gJr5QFAxP/+0NbUzLOGRkWGDcgk9y8EkKnDzBNEfwXoMrr1lDMH9ywX1BfEQPOiv PN2+0u45D9a2PTZ1oOpvsnIF/ZO90uODRVuuJ6ahrDbBGrKbRGX+8YZ9KnXVQugK xllhFzOQaQWX2ry3KEgG6zi5GFc81IxUK/kHMMdCSsdUF0wuh50= -----END CERTIFICATE-----Generated at Sat Aug 23 17:48:34 2025 by rpki-client