$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: MiqS92Oi1A8DG9hRYEVtjHVsIX13HtKg3GmhXOLYDGE= Subject key identifier: E2:88:4A:CD:F5:13:F5:B2:95:14:0A:82:49:59:0E:F8:30:93:A0:D3 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 3AA7591DE356375FEF31767F1ED63BCF0F2B324D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 0468 Signing time: Mon 30 Jun 2025 08:11:06 +0000 Manifest this update: Mon 30 Jun 2025 08:06:06 +0000 Manifest next update: Thu 03 Jul 2025 19:16:06 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) 3: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) 4: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=) 6: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: f+n9TCy9TnQ8JoRdudHHN/qITvu9e54BGaiC7N51oL0=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 19:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a7:59:1d:e3:56:37:5f:ef:31:76:7f:1e:d6:3b:cf:0f:2b:32:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Jun 30 08:06:06 2025 GMT Not After : Jul 3 19:16:06 2025 GMT Subject: CN=E2884ACDF513F5B295140A8249590EF83093A0D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:73:3e:a5:ac:47:cf:98:bf:da:99:c0:fe: 38:65:76:5a:36:ff:5f:a3:b9:43:24:cc:7d:62:54: 14:1f:e0:36:04:f2:46:ee:2c:e2:bb:ea:1f:e0:35: f4:2e:50:5a:74:b6:3e:68:63:5f:4f:14:8d:5c:3c: 35:6c:0b:30:5f:c0:8c:30:2a:c8:12:c2:85:98:a6: 91:8e:2b:51:61:d9:b7:51:75:04:a0:9e:43:67:03: 03:60:58:93:11:6d:df:ba:8d:02:c9:b8:78:86:d9: 02:ab:cb:75:a0:04:35:8c:7f:98:87:de:82:6d:a0: b3:25:d7:0f:f9:61:4e:74:6c:2a:ce:7a:07:5c:be: fa:4e:21:f0:db:1d:ec:aa:cb:cf:eb:60:de:74:bd: 57:e2:fb:33:9c:60:7f:13:64:62:79:6d:61:0a:4e: 3c:66:52:36:92:5c:48:7b:64:93:ac:28:ce:5c:27: c3:0e:0c:fa:7d:a8:3e:00:31:1c:05:57:45:ed:25: 81:bd:91:13:a9:c3:13:3b:7d:6c:38:71:fd:06:37: b8:32:78:d4:8e:f9:1b:63:e9:b5:69:bb:f7:76:cc: 4a:e0:6e:d6:71:26:08:c9:04:c4:43:13:2b:69:f9: 56:bc:d1:4f:03:0c:75:f6:81:a9:7e:09:5f:d2:a7: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:88:4A:CD:F5:13:F5:B2:95:14:0A:82:49:59:0E:F8:30:93:A0:D3 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:87:3a:67:1b:11:a0:8b:c4:a9:d8:15:b1:35:ba:2d:ce:54: 88:12:f6:48:fa:e1:1e:fe:1d:e2:0d:9b:3d:f3:bb:bd:a5:2d: 3d:bd:15:84:43:e4:bf:38:b8:bc:9b:6d:16:a0:8a:b6:31:33: cc:36:1f:0f:6d:0d:5c:02:93:1d:9a:73:24:a6:ba:a1:43:5c: 30:46:39:b0:f5:15:05:74:77:ca:d8:38:53:ff:43:c7:11:33: 91:cc:66:9d:64:e2:47:11:a9:ae:9d:da:f7:74:c3:c1:5f:c2: bb:ac:8d:1a:4c:4a:fa:f3:25:a3:8d:9f:1c:1d:29:ee:e4:10: 3d:2a:54:49:bb:4d:2e:df:c0:79:9a:e2:53:e3:af:1c:78:8e: 0c:51:dd:57:f2:a2:2d:ad:db:2a:d0:f9:79:6b:55:6a:03:3f: 76:11:15:99:98:a6:b4:85:b1:15:51:44:12:01:35:23:0c:fb: 07:64:7a:f3:79:e7:34:7d:ae:c0:44:a5:ed:85:8f:56:81:76: f1:3d:6f:a3:36:0e:3d:04:59:e8:17:f2:99:31:77:2a:2b:68: c9:99:94:3a:84:7f:26:cb:49:ac:dd:36:a0:ed:b4:35:9e:61: 0a:cd:7c:70:85:20:f8:52:ef:01:99:a4:0b:4e:e6:4e:8c:61: a7:df:33:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqdZHeNWN1/vMXZ/HtY7zw8rMk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTA2MzAwODA2MDZaFw0yNTA3MDMxOTE2MDZaMDMxMTAvBgNV BAMTKEUyODg0QUNERjUxM0Y1QjI5NTE0MEE4MjQ5NTkwRUY4MzA5M0EwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BHM+paxHz5i/2pnA/jhldlo2 /1+juUMkzH1iVBQf4DYE8kbuLOK76h/gNfQuUFp0tj5oY19PFI1cPDVsCzBfwIww KsgSwoWYppGOK1Fh2bdRdQSgnkNnAwNgWJMRbd+6jQLJuHiG2QKry3WgBDWMf5iH 3oJtoLMl1w/5YU50bCrOegdcvvpOIfDbHeyqy8/rYN50vVfi+zOcYH8TZGJ5bWEK TjxmUjaSXEh7ZJOsKM5cJ8MODPp9qD4AMRwFV0XtJYG9kROpwxM7fWw4cf0GN7gy eNSO+Rtj6bVpu/d2zErgbtZxJgjJBMRDEytp+Va80U8DDHX2gal+CV/Sp749AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ohKzfUT9bKVFAqCSVkO+DCToNMwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmHOmcbEaCLxKnYFbE1ui3OVIgS9kj64R7+ HeINmz3zu72lLT29FYRD5L84uLybbRagirYxM8w2Hw9tDVwCkx2acySmuqFDXDBG ObD1FQV0d8rYOFP/Q8cRM5HMZp1k4kcRqa6d2vd0w8FfwrusjRpMSvrzJaONnxwd Ke7kED0qVEm7TS7fwHma4lPjrxx4jgxR3Vfyoi2t2yrQ+XlrVWoDP3YRFZmYprSF sRVRRBIBNSMM+wdkevN55zR9rsBEpe2Fj1aBdvE9b6M2Dj0EWegX8pkxdyoraMmZ lDqEfybLSazdNqDttDWeYQrNfHCFIPhS7wGZpAtO5k6MYaffM1Y= -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:59 2025 by rpki-client