$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: bHts6usqM2IrX7/2txiLW9Jqe9KpgmWc24mInsC5dNQ= Subject key identifier: 6C:1B:3E:4D:80:C0:B0:EE:50:C5:D0:23:9F:BD:55:09:B1:CD:F9:5E Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 07EBB48236D6FCA3C132BC91DCCA310D7EFA66A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 047F Signing time: Thu 21 Aug 2025 00:21:06 +0000 Manifest this update: Thu 21 Aug 2025 00:16:06 +0000 Manifest next update: Sun 24 Aug 2025 09:21:06 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 2: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 4: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) 5: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) 6: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: 0tAiQnDpAD4vuBc+29DniIEnxoCKujAxnKk88cmRoxQ=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 09:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:eb:b4:82:36:d6:fc:a3:c1:32:bc:91:dc:ca:31:0d:7e:fa:66:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Aug 21 00:16:06 2025 GMT Not After : Aug 24 09:21:06 2025 GMT Subject: CN=6C1B3E4D80C0B0EE50C5D0239FBD5509B1CDF95E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:68:5c:00:73:e7:c2:41:16:90:9b:f7:f3: 59:25:ff:49:09:a6:05:78:2e:85:d8:f0:a0:88:68: de:7f:ef:5b:93:98:fd:e6:e7:15:ec:eb:5d:26:d2: e8:78:16:7f:e1:8b:b9:d7:b3:88:ba:d6:d6:b7:73: c3:29:3a:13:d3:8a:51:14:d0:1f:28:5d:e7:eb:3c: de:a4:52:13:a7:49:cb:6c:93:81:66:61:a8:9c:5d: 62:80:35:8f:e4:83:d9:95:fa:98:e0:fb:75:57:43: 20:4f:26:28:ca:c2:ee:04:6e:38:0d:1a:f6:1e:3a: 32:aa:92:7a:62:ef:e7:c1:c6:e7:43:3b:10:bf:e5: d1:cb:2b:a8:21:e6:39:7f:e0:e5:78:19:b9:45:d2: 23:00:dd:f9:70:bf:a0:a2:2f:9f:14:17:b4:69:7e: a0:79:58:46:b0:20:ac:4b:91:b3:1d:1b:2c:1a:85: 4a:9b:9b:1b:6c:ca:ba:a3:fb:74:06:e9:90:fd:6e: 32:73:d8:16:0f:4a:5b:ee:b6:ad:31:11:e8:5f:86: 6c:35:09:e9:2f:a2:28:13:79:f9:e6:6e:40:3f:c2: 9c:6b:cd:f8:26:b3:1c:77:32:28:12:ed:bf:31:71: c3:b9:ed:55:a5:a0:cc:1f:9d:a8:50:cb:ba:91:6c: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1B:3E:4D:80:C0:B0:EE:50:C5:D0:23:9F:BD:55:09:B1:CD:F9:5E X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a8:e9:0b:d3:8f:9b:24:d4:15:65:b4:92:a2:b7:bc:39:ef: 49:13:4d:45:8e:a2:e7:8c:78:e1:81:27:ee:1b:e1:03:69:86: 6f:ab:25:a7:ca:87:24:59:10:9b:7d:49:29:14:d7:ea:5a:a5: f4:60:a1:ff:1c:7b:5e:ad:48:24:41:f8:22:17:5e:a0:1a:86: 90:20:98:a9:26:e8:02:3d:ab:b9:d6:9f:fa:6a:01:fa:be:53: 83:30:0a:60:3e:18:f6:94:cc:f3:71:43:fb:16:0f:e0:c5:5a: c3:ec:80:fe:0a:3c:dd:14:2c:43:2e:74:e0:99:8b:2b:0b:db: 7d:c7:a4:a5:5e:16:ab:d6:9d:66:5d:92:8e:10:a9:ad:69:d1: 86:21:14:f3:f3:38:93:ef:b6:e9:d7:21:dd:ba:0d:bc:4a:1a: 97:64:7b:ee:bd:20:7e:c8:43:06:f5:ea:63:14:b1:b1:10:96: d3:16:15:be:2e:20:66:68:eb:27:20:be:39:ef:1b:39:c2:c6: 5d:75:7e:ca:4d:65:01:15:0b:24:5e:db:69:a4:41:07:e9:0f: cc:7d:01:3a:05:8c:da:4b:fb:81:01:b6:dd:eb:e9:80:c1:83: de:cc:eb:58:11:5d:45:38:a8:8a:5b:56:41:04:e9:46:dc:54: 9f:8d:62:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+u0gjbW/KPBMryR3MoxDX76ZqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTA4MjEwMDE2MDZaFw0yNTA4MjQwOTIxMDZaMDMxMTAvBgNV BAMTKDZDMUIzRTREODBDMEIwRUU1MEM1RDAyMzlGQkQ1NTA5QjFDREY5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1WhcAHPnwkEWkJv381kl/0kJ pgV4LoXY8KCIaN5/71uTmP3m5xXs610m0uh4Fn/hi7nXs4i61ta3c8MpOhPTilEU 0B8oXefrPN6kUhOnSctsk4FmYaicXWKANY/kg9mV+pjg+3VXQyBPJijKwu4EbjgN GvYeOjKqknpi7+fBxudDOxC/5dHLK6gh5jl/4OV4GblF0iMA3flwv6CiL58UF7Rp fqB5WEawIKxLkbMdGywahUqbmxtsyrqj+3QG6ZD9bjJz2BYPSlvutq0xEehfhmw1 CekvoigTefnmbkA/wpxrzfgmsxx3MigS7b8xccO57VWloMwfnahQy7qRbJKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbBs+TYDAsO5QxdAjn71VCbHN+V4wHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+o6QvTj5sk1BVltJKit7w570kTTUWOoueM eOGBJ+4b4QNphm+rJafKhyRZEJt9SSkU1+papfRgof8ce16tSCRB+CIXXqAahpAg mKkm6AI9q7nWn/pqAfq+U4MwCmA+GPaUzPNxQ/sWD+DFWsPsgP4KPN0ULEMudOCZ iysL233HpKVeFqvWnWZdko4Qqa1p0YYhFPPzOJPvtunXId26DbxKGpdke+69IH7I Qwb16mMUsbEQltMWFb4uIGZo6ycgvjnvGznCxl11fspNZQEVCyRe22mkQQfpD8x9 AToFjNpL+4EBtt3r6YDBg97M61gRXUU4qIpbVkEE6UbcVJ+NYsA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:30 2025 by rpki-client