$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: KMbWox2l3RHHTm+/UxwaVyBE4NMlu4SY1LsvXbwK1NA= Subject key identifier: 40:08:7D:08:DC:BB:C1:D4:5D:F3:7E:98:F6:8E:BB:BE:25:16:D9:1B Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 350CFDC20604D763EA8D379BFB0E7897945D5B21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 01EA Signing time: Mon 20 Oct 2025 05:01:08 +0000 Manifest this update: Mon 20 Oct 2025 04:56:08 +0000 Manifest next update: Thu 23 Oct 2025 11:57:08 +0000 Files and hashes: 1: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) 2: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: 2vleOaygo1ppNMyJ7yO2DN62VQGstGIw4CzAWwVoiaY=) 3: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0c:fd:c2:06:04:d7:63:ea:8d:37:9b:fb:0e:78:97:94:5d:5b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Oct 20 04:56:08 2025 GMT Not After : Oct 23 11:57:08 2025 GMT Subject: CN=40087D08DCBBC1D45DF37E98F68EBBBE2516D91B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c3:66:cf:bb:98:e6:a3:dc:76:c6:41:63:78: 1e:06:ba:47:ca:4b:49:dd:93:62:06:1c:64:45:bb: 79:46:58:eb:0e:d2:fe:10:cb:43:05:b7:ac:7c:2f: f9:6d:d5:9f:5d:74:5d:da:10:d8:0a:94:54:ab:cb: b9:27:16:ce:85:3c:0b:3f:f3:17:60:85:c7:ce:6d: d8:51:4c:e8:fb:d1:ee:32:17:08:b8:20:10:c5:0d: 48:e0:96:d3:cd:f2:9d:90:e7:ff:a9:c5:85:9e:89: fa:01:b6:36:d6:7b:dd:fb:db:ae:74:99:53:33:a5: 53:21:2a:62:a6:1c:53:da:06:5c:e2:7e:9f:d4:c9: 14:ca:34:76:ba:b8:b4:b9:ba:2d:fe:ca:9f:3a:13: 5b:16:f4:3f:d7:d7:6e:1f:d7:ad:42:16:cd:21:7f: 01:de:3e:41:92:7c:b9:64:01:e6:6c:8d:85:65:7f: 98:b3:51:d4:97:b3:80:fe:f2:63:8d:26:de:ff:2a: 94:b9:2f:8b:be:2c:7b:d7:06:4d:53:03:c9:6c:9d: ee:e6:c3:48:68:38:9f:7e:02:77:60:75:fe:22:57: ab:70:c0:43:02:fc:63:22:37:6a:be:24:c0:44:1d: bd:5e:1a:46:a8:30:78:52:1c:52:0f:f8:72:95:77: 7f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:08:7D:08:DC:BB:C1:D4:5D:F3:7E:98:F6:8E:BB:BE:25:16:D9:1B X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:a3:8a:69:e9:05:ef:0c:13:8d:8f:e0:92:e9:12:06:7f:36: be:4c:06:f5:9c:8b:af:e0:f9:38:44:cc:e3:9a:04:b5:fd:bd: 84:28:ae:bc:b0:b6:a5:51:ab:c8:76:13:71:e7:03:45:9f:58: 19:c4:b4:cf:03:14:17:d2:dd:57:37:af:dc:f3:61:d0:b1:f4: bb:91:e0:89:a8:22:eb:93:a9:d2:cb:96:55:e3:ca:9d:ae:f4: 73:a6:2a:45:49:34:56:c2:32:86:fb:b8:5a:68:dd:57:05:34: 76:fb:37:3c:8b:9e:74:6b:a4:19:1d:97:81:cd:4e:78:a6:dd: fd:51:2b:79:e3:ce:ec:ae:61:4b:43:2f:0c:06:6e:93:34:3c: bd:95:94:dd:61:3f:e8:82:70:05:71:7a:b3:ac:ed:bb:cc:f5: 2c:a1:89:06:fa:1f:fa:3e:e1:cd:f4:80:f3:85:e3:a1:09:85: ec:ba:b4:b1:e8:3b:6a:3d:01:c1:9c:8a:33:f7:e2:54:c9:02: c5:9c:d0:13:f3:07:d9:ab:81:32:62:76:b7:0a:38:23:bd:ab: ff:4a:09:c9:40:fe:69:d1:10:cd:f0:ca:42:5f:af:47:70:39: 45:22:eb:b7:eb:ee:e7:04:f5:8c:15:87:1d:ea:51:80:48:a1: b4:f4:3a:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQz9wgYE12PqjTeb+w54l5RdWyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTEwMjAwNDU2MDhaFw0yNTEwMjMxMTU3MDhaMDMxMTAvBgNV BAMTKDQwMDg3RDA4RENCQkMxRDQ1REYzN0U5OEY2OEVCQkJFMjUxNkQ5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1w2bPu5jmo9x2xkFjeB4GukfK S0ndk2IGHGRFu3lGWOsO0v4Qy0MFt6x8L/lt1Z9ddF3aENgKlFSry7knFs6FPAs/ 8xdghcfObdhRTOj70e4yFwi4IBDFDUjgltPN8p2Q5/+pxYWeifoBtjbWe9372650 mVMzpVMhKmKmHFPaBlzifp/UyRTKNHa6uLS5ui3+yp86E1sW9D/X124f161CFs0h fwHePkGSfLlkAeZsjYVlf5izUdSXs4D+8mONJt7/KpS5L4u+LHvXBk1TA8lsne7m w0hoOJ9+Andgdf4iV6twwEMC/GMiN2q+JMBEHb1eGkaoMHhSHFIP+HKVd3/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAh9CNy7wdRd836Y9o67viUW2RswHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMujimnpBe8ME42P4JLpEgZ/Nr5MBvWci6/g +ThEzOOaBLX9vYQorrywtqVRq8h2E3HnA0WfWBnEtM8DFBfS3Vc3r9zzYdCx9LuR 4ImoIuuTqdLLllXjyp2u9HOmKkVJNFbCMob7uFpo3VcFNHb7NzyLnnRrpBkdl4HN Tnim3f1RK3njzuyuYUtDLwwGbpM0PL2VlN1hP+iCcAVxerOs7bvM9SyhiQb6H/o+ 4c30gPOF46EJhey6tLHoO2o9AcGcijP34lTJAsWc0BPzB9mrgTJidrcKOCO9q/9K CclA/mnREM3wykJfr0dwOUUi67fr7ucE9YwVhx3qUYBIobT0OnA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:09 2025 by rpki-client