$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: ZO6fnpA2aM++noHbscpdioE6NbIG9z4CU1GHcjiwJCs= Subject key identifier: 3C:B4:7F:3D:23:2C:0F:BD:07:64:EC:60:16:33:06:31:3C:72:68:0A Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 635B471E6123805FE54E07930EF36CCBAAE97EE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 036D Signing time: Sun 29 Jun 2025 09:41:19 +0000 Manifest this update: Sun 29 Jun 2025 09:36:19 +0000 Manifest next update: Wed 02 Jul 2025 14:43:19 +0000 Files and hashes: 1: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: dgy1LgS1Kzaf/VCQSkmE+3u6C7DttmtJhYBT1q3UkIQ=) 2: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 14:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5b:47:1e:61:23:80:5f:e5:4e:07:93:0e:f3:6c:cb:aa:e9:7e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Jun 29 09:36:19 2025 GMT Not After : Jul 2 14:43:19 2025 GMT Subject: CN=3CB47F3D232C0FBD0764EC60163306313C72680A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:59:7b:e2:49:a4:32:13:07:7b:4a:4e:b7: 2a:34:04:00:ad:b1:0d:aa:b4:51:e6:2e:5a:77:ad: 2a:25:5e:de:ee:58:69:6a:68:64:f5:ec:b3:72:af: a4:49:3c:88:dc:55:36:3f:66:7f:00:89:8b:b5:e6: 24:2a:7c:e7:f5:e9:6f:d3:b2:a2:97:94:4d:fa:ed: 70:e4:63:0d:5c:63:a2:5f:bd:94:76:c3:b1:83:65: fa:7d:4c:1a:c5:1a:aa:b2:20:a8:39:91:ba:d7:b7: 25:62:ed:c6:6f:7b:61:a0:c1:65:01:14:6d:cc:1f: ff:23:ee:43:78:53:84:a3:54:0b:be:e2:ff:24:89: 35:7a:e8:77:29:14:b9:7a:ad:2a:2a:ed:56:72:bb: 1d:8c:24:b1:5a:ed:f6:fb:29:98:64:10:28:57:5d: c4:6f:f8:09:1b:0b:a0:72:35:4f:bb:57:ce:64:69: 09:d6:18:5c:85:f0:ee:65:c9:12:5c:41:c7:61:9d: 88:4c:d5:d7:00:98:39:c8:7b:95:b6:b6:92:08:97: 0c:39:d9:5f:b0:59:17:72:e3:5b:bb:ee:9c:bd:fd: b6:e6:3d:42:ba:dd:70:88:57:b1:43:0b:75:d7:1e: 43:e2:c2:be:7a:b1:79:50:e6:43:a6:11:64:28:80: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:7F:3D:23:2C:0F:BD:07:64:EC:60:16:33:06:31:3C:72:68:0A X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2f:fb:b9:88:9a:42:b9:55:80:65:2c:ca:94:67:58:90:67: cf:57:19:a1:83:9d:ab:a6:e9:9f:0e:60:3b:27:10:2d:99:95: 81:f1:ce:8e:51:c0:0f:8a:b8:33:e9:09:5c:2b:7e:74:76:74: 67:29:d3:fd:5d:36:cf:6e:21:60:c7:f4:e3:a2:2e:67:e9:ae: c0:7a:d4:d6:ec:89:eb:f5:e6:6e:c6:46:22:15:79:70:01:fd: 36:1b:95:9e:35:da:b7:d9:c0:2d:d8:a1:a8:e0:0a:81:2a:62: 64:43:71:a1:2e:a8:2d:3f:e9:a9:f3:d3:0b:33:76:d2:45:fd: b8:4b:00:7a:3f:a1:3a:cd:43:ae:79:4d:2a:f6:1e:4f:ca:7f: 4d:09:18:a8:fd:15:b9:2c:b7:7e:99:5f:a1:40:74:9c:c0:33: 1c:18:29:ac:ab:d8:b4:31:f1:7f:c8:e0:77:b2:fe:c7:fd:9f: 34:d4:a1:9f:51:6b:bf:62:d4:5e:7c:d0:9b:aa:41:54:3a:c1: 90:3a:94:cc:84:9b:b8:21:9f:5d:61:d8:d3:96:5a:43:b1:27: 4a:1b:d3:ce:80:c3:ff:1f:c6:78:20:c7:5a:f5:ac:2b:0f:67: ed:6e:d2:dd:90:84:cc:07:3c:18:91:38:3f:3c:6e:6b:05:eb: 7b:1b:54:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1tHHmEjgF/lTgeTDvNsy6rpfugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTA2MjkwOTM2MTlaFw0yNTA3MDIxNDQzMTlaMDMxMTAvBgNV BAMTKDNDQjQ3RjNEMjMyQzBGQkQwNzY0RUM2MDE2MzMwNjMxM0M3MjY4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8Fl74kmkMhMHe0pOtyo0BACt sQ2qtFHmLlp3rSolXt7uWGlqaGT17LNyr6RJPIjcVTY/Zn8AiYu15iQqfOf16W/T sqKXlE367XDkYw1cY6JfvZR2w7GDZfp9TBrFGqqyIKg5kbrXtyVi7cZve2GgwWUB FG3MH/8j7kN4U4SjVAu+4v8kiTV66HcpFLl6rSoq7VZyux2MJLFa7fb7KZhkEChX XcRv+AkbC6ByNU+7V85kaQnWGFyF8O5lyRJcQcdhnYhM1dcAmDnIe5W2tpIIlww5 2V+wWRdy41u77py9/bbmPUK63XCIV7FDC3XXHkPiwr56sXlQ5kOmEWQogPufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLR/PSMsD70HZOxgFjMGMTxyaAowHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcv+7mImkK5VYBlLMqUZ1iQZ89XGaGDnaum 6Z8OYDsnEC2ZlYHxzo5RwA+KuDPpCVwrfnR2dGcp0/1dNs9uIWDH9OOiLmfprsB6 1Nbsiev15m7GRiIVeXAB/TYblZ412rfZwC3YoajgCoEqYmRDcaEuqC0/6anz0wsz dtJF/bhLAHo/oTrNQ655TSr2Hk/Kf00JGKj9Fbkst36ZX6FAdJzAMxwYKayr2LQx 8X/I4Hey/sf9nzTUoZ9Ra79i1F580JuqQVQ6wZA6lMyEm7ghn11h2NOWWkOxJ0ob 086Aw/8fxnggx1r1rCsPZ+1u0t2QhMwHPBiROD88bmsF63sbVII= -----END CERTIFICATE-----Generated at Tue Jul 1 08:27:50 2025 by rpki-client