$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: rbUx+OGRlqFfdl8S2OjhUVXX5p4qo/cDJySD1onPAUI= Subject key identifier: 7C:97:6A:7F:27:9C:16:D0:EF:B0:4F:8D:7C:80:0C:C8:2F:3E:F1:03 Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 3187C3AB948CAA0A73DB5105F2BEE0885AFC15B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 01D0 Signing time: Fri 22 Aug 2025 22:11:05 +0000 Manifest this update: Fri 22 Aug 2025 22:06:05 +0000 Manifest next update: Tue 26 Aug 2025 07:02:05 +0000 Files and hashes: 1: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) 2: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: LvBE1eZOT6JZboCymSx2HJqdxbVvai8fxEAQUq4wBjU=) 3: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:87:c3:ab:94:8c:aa:0a:73:db:51:05:f2:be:e0:88:5a:fc:15:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Aug 22 22:06:05 2025 GMT Not After : Aug 26 07:02:05 2025 GMT Subject: CN=7C976A7F279C16D0EFB04F8D7C800CC82F3EF103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:0d:d0:9c:83:d1:37:1f:55:58:fa:88:8d: 84:22:32:35:95:77:a0:8c:a8:3e:e5:86:85:54:cb: c3:82:b6:63:37:b6:93:b5:aa:fe:c2:08:6c:5e:20: 36:a9:83:c5:ca:d9:47:d9:f3:90:ec:4e:3a:0f:71: ff:6a:80:5d:6e:d2:17:f6:63:51:6e:9f:1b:4a:e6: cb:92:5d:dc:1d:20:ce:b1:4a:68:8c:f5:5e:d1:f5: e7:72:58:2b:0a:f6:fb:31:e5:eb:29:ba:b5:b7:83: 53:36:ae:32:eb:5f:6b:14:d1:5c:88:ad:dd:40:b9: 24:0f:6f:8b:af:ca:73:ef:26:90:b3:4d:98:b4:14: a2:6a:c8:48:de:a1:ca:a6:86:c1:05:8b:00:cd:0e: 0b:e8:19:6f:b6:75:69:0f:72:81:ee:68:28:39:5e: b4:c3:72:e4:cf:f4:eb:42:08:f5:59:ff:62:d8:8c: 50:5e:c7:18:9b:4c:c0:5d:6e:88:aa:cf:76:ae:8b: e1:1e:72:84:04:40:d6:90:e4:38:15:b6:03:32:5e: 40:ad:06:87:37:e9:29:37:4b:09:44:24:ad:36:6e: 4f:08:ca:c8:b4:e8:06:11:5c:49:af:6b:22:d8:03: a4:b7:a3:0e:35:9c:5d:3e:9a:45:1b:0c:89:e1:4a: 72:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:97:6A:7F:27:9C:16:D0:EF:B0:4F:8D:7C:80:0C:C8:2F:3E:F1:03 X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d3:12:0d:5e:c5:7f:4d:b0:8d:07:e0:c0:a7:40:75:84:f1: a8:72:19:28:7b:05:72:e7:80:3f:29:a3:77:74:5b:9c:af:0d: e8:d6:e5:79:16:95:6a:8a:64:9f:fc:3c:4a:6d:ac:3a:49:82: fd:77:38:13:62:52:51:78:37:df:84:1e:a3:2f:8f:80:9b:4d: 6d:fa:a0:61:69:95:10:e6:f8:a3:ce:0c:3c:31:cc:58:d1:7b: 3a:79:6d:6c:89:eb:ae:e6:c3:75:65:76:d3:5f:b2:ed:b8:2f: d5:f3:2b:e3:e7:65:2a:56:32:18:3d:55:74:5e:64:e6:b9:67: 54:8a:e7:fe:20:69:f1:3b:c0:ef:3a:7e:48:39:04:b8:97:98: fa:94:4e:54:46:da:90:59:f1:de:36:3e:3a:98:f4:2e:38:8d: d0:4f:44:97:65:5d:2f:a5:02:0c:1b:82:a6:3b:7d:ac:0c:0e: 18:2c:f5:17:d0:42:ad:b6:bc:78:ac:62:55:d7:40:d8:a0:5a: 15:c0:cc:9f:f2:fa:f8:e1:e9:e8:94:83:30:ae:b1:b8:41:6c: 57:89:15:e9:9b:4c:ad:99:c2:b8:dc:fc:24:1a:5e:e7:26:35: 45:d8:56:84:3c:f2:4b:51:0a:5b:e4:fe:8c:d0:c6:72:35:5c: 40:01:ef:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYfDq5SMqgpz21EF8r7giFr8FbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTA4MjIyMjA2MDVaFw0yNTA4MjYwNzAyMDVaMDMxMTAvBgNV BAMTKDdDOTc2QTdGMjc5QzE2RDBFRkIwNEY4RDdDODAwQ0M4MkYzRUYxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OQ3QnIPRNx9VWPqIjYQiMjWV d6CMqD7lhoVUy8OCtmM3tpO1qv7CCGxeIDapg8XK2UfZ85DsTjoPcf9qgF1u0hf2 Y1FunxtK5suSXdwdIM6xSmiM9V7R9edyWCsK9vsx5espurW3g1M2rjLrX2sU0VyI rd1AuSQPb4uvynPvJpCzTZi0FKJqyEjeocqmhsEFiwDNDgvoGW+2dWkPcoHuaCg5 XrTDcuTP9OtCCPVZ/2LYjFBexxibTMBdboiqz3aui+EecoQEQNaQ5DgVtgMyXkCt Boc36Sk3SwlEJK02bk8Iysi06AYRXEmvayLYA6S3ow41nF0+mkUbDInhSnKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJdqfyecFtDvsE+NfIAMyC8+8QMwHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALTEg1exX9NsI0H4MCnQHWE8ahyGSh7BXLn gD8po3d0W5yvDejW5XkWlWqKZJ/8PEptrDpJgv13OBNiUlF4N9+EHqMvj4CbTW36 oGFplRDm+KPODDwxzFjRezp5bWyJ667mw3VldtNfsu24L9XzK+PnZSpWMhg9VXRe ZOa5Z1SK5/4gafE7wO86fkg5BLiXmPqUTlRG2pBZ8d42PjqY9C44jdBPRJdlXS+l AgwbgqY7fawMDhgs9RfQQq22vHisYlXXQNigWhXAzJ/y+vjh6eiUgzCusbhBbFeJ FembTK2Zwrjc/CQaXucmNUXYVoQ88ktRClvk/ozQxnI1XEAB72c= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:25 2025 by rpki-client