$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: UJ4VqFAkgZxVt3P8ZndOKQ5F/ZRyKgeJBgEQeCSb3T4= Subject key identifier: 76:C3:CB:8B:44:89:D6:93:9E:B4:8A:37:A2:15:01:0B:5A:72:6F:AA Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 752D020B2AFECC05B2E6CCCB43E242AB305D8263 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: B5 Signing time: Thu 21 Aug 2025 11:41:37 +0000 Manifest this update: Thu 21 Aug 2025 11:36:37 +0000 Manifest next update: Sun 24 Aug 2025 21:17:37 +0000 Files and hashes: 1: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=) 2: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: HtqI1qPV53m6G7MEk+k4XVSMcLD10U+teFNkSLQSNM8=) 3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2d:02:0b:2a:fe:cc:05:b2:e6:cc:cb:43:e2:42:ab:30:5d:82:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Aug 21 11:36:37 2025 GMT Not After : Aug 24 21:17:37 2025 GMT Subject: CN=76C3CB8B4489D6939EB48A37A215010B5A726FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:e3:d2:29:5e:72:3d:e3:86:a8:e2:ef:b5: ed:64:f0:eb:14:ce:ed:3d:83:f5:aa:c6:58:72:78: ba:8b:02:cb:a5:d5:2f:6b:66:09:2f:f9:02:90:a6: 3c:36:c2:50:c4:cc:52:ae:b4:98:e1:b9:9c:23:5b: 58:69:5f:1b:ce:b9:66:56:8c:9b:20:7b:06:10:0a: aa:17:47:fc:8b:05:d2:0f:65:9e:62:30:57:71:41: 13:fc:5d:dd:73:07:20:e3:c0:ab:bf:f0:78:6e:d2: d6:fd:9d:39:e4:31:f3:36:3c:5c:2b:86:a2:43:50: 73:e5:38:2b:b6:36:99:09:6d:6e:47:e6:4a:e3:1f: fe:8a:27:a1:4d:ea:33:cf:43:79:a9:fc:43:ba:02: ad:b1:16:00:93:08:b0:16:d3:d0:40:7d:5a:f5:cd: f3:e9:d3:4c:04:64:85:4e:07:db:90:b3:71:9b:be: 2a:a4:9c:ac:14:03:58:b4:a0:74:90:22:3d:55:c4: d5:5c:14:0f:04:58:5d:b8:6a:4c:86:4e:d2:fc:c8: 49:39:c1:75:e3:94:d1:9b:12:47:b8:ec:11:38:94: f3:e8:82:1e:15:cd:b8:52:80:af:3c:d7:74:7a:6f: 47:5a:af:58:b8:cf:2d:c1:8e:84:92:07:f7:91:00: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C3:CB:8B:44:89:D6:93:9E:B4:8A:37:A2:15:01:0B:5A:72:6F:AA X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1b:8f:a1:83:57:48:ba:b4:5d:6d:16:6f:1a:24:5d:6a:7a: 90:02:75:4c:d3:42:af:82:11:d3:57:0e:73:eb:0e:9c:68:c7: 47:93:2a:7e:e4:a1:33:0a:6e:d4:18:ef:6f:11:37:4e:fb:f2: 99:59:4c:0b:dc:c8:66:2d:57:1b:7e:02:7f:a4:82:54:78:fa: b2:3a:73:13:46:d9:92:8f:22:31:d0:68:b5:93:da:67:37:69: f7:dd:36:00:3a:c9:ff:0c:34:96:83:7b:62:ed:d7:f3:6d:c9: 4d:8a:b1:c8:f3:ff:68:0e:c6:59:3f:3e:e1:b8:49:a5:e2:a7: 5d:16:1b:c3:9c:9a:29:b2:e9:ba:36:d2:26:a6:e1:59:3d:70: f5:4f:13:c1:cc:3b:72:4c:74:4f:b9:00:4b:19:6c:6f:be:b8: c9:e7:1f:cd:af:0f:51:bc:3e:77:c2:36:1a:04:66:32:7d:c7: f7:b0:df:30:39:18:e8:82:a5:79:b8:46:49:3c:d8:95:43:76: 4b:de:68:4b:96:8e:bb:50:1b:6d:c3:5f:29:3c:99:6e:96:2c: 22:d7:fc:b7:ac:5f:d0:7d:47:83:0a:fb:f9:94:44:05:0f:3d: 7a:d8:7a:0f:db:b9:7c:b3:ee:27:2a:27:1b:f1:cb:e5:5a:95: 4d:ea:45:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdS0CCyr+zAWy5szLQ+JCqzBdgmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTA4MjExMTM2MzdaFw0yNTA4MjQyMTE3MzdaMDMxMTAvBgNV BAMTKDc2QzNDQjhCNDQ4OUQ2OTM5RUI0OEEzN0EyMTUwMTBCNUE3MjZGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUS+PSKV5yPeOGqOLvte1k8OsU zu09g/WqxlhyeLqLAsul1S9rZgkv+QKQpjw2wlDEzFKutJjhuZwjW1hpXxvOuWZW jJsgewYQCqoXR/yLBdIPZZ5iMFdxQRP8Xd1zByDjwKu/8Hhu0tb9nTnkMfM2PFwr hqJDUHPlOCu2NpkJbW5H5krjH/6KJ6FN6jPPQ3mp/EO6Aq2xFgCTCLAW09BAfVr1 zfPp00wEZIVOB9uQs3GbviqknKwUA1i0oHSQIj1VxNVcFA8EWF24akyGTtL8yEk5 wXXjlNGbEke47BE4lPPogh4VzbhSgK8813R6b0dar1i4zy3BjoSSB/eRANDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsPLi0SJ1pOetIo3ohUBC1pyb6owHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACobj6GDV0i6tF1tFm8aJF1qepACdUzTQq+C EdNXDnPrDpxox0eTKn7koTMKbtQY728RN0778plZTAvcyGYtVxt+An+kglR4+rI6 cxNG2ZKPIjHQaLWT2mc3affdNgA6yf8MNJaDe2Lt1/NtyU2Kscjz/2gOxlk/PuG4 SaXip10WG8Ocmimy6bo20iam4Vk9cPVPE8HMO3JMdE+5AEsZbG++uMnnH82vD1G8 PnfCNhoEZjJ9x/ew3zA5GOiCpXm4Rkk82JVDdkveaEuWjrtQG23DXyk8mW6WLCLX /LesX9B9R4MK+/mURAUPPXrYeg/buXyz7icqJxvxy+ValU3qRRg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:19 2025 by rpki-client