$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: QSU7XeUoUgLXePuL936sejdqrSqem+2pAz7sCSHVzyA= Subject key identifier: 2A:E2:EA:48:A6:18:D8:C2:5D:59:28:83:04:BF:37:D1:8C:03:B8:DD Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 5F369A77CD17DE045FF20C0EDE3E10019D14C456 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 0363 Signing time: Fri 06 Jun 2025 20:21:27 +0000 Manifest this update: Fri 06 Jun 2025 20:16:27 +0000 Manifest next update: Tue 10 Jun 2025 00:59:27 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) 2: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: AOP1ahktBHUR6T+/D7nESMwn4kTBPUOXzfqSIbWjOOs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:36:9a:77:cd:17:de:04:5f:f2:0c:0e:de:3e:10:01:9d:14:c4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Jun 6 20:16:27 2025 GMT Not After : Jun 10 00:59:27 2025 GMT Subject: CN=2AE2EA48A618D8C25D59288304BF37D18C03B8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:f5:ba:d5:a8:c0:3b:c8:0e:ba:d0:ca:3e: b1:b4:3d:aa:f0:32:ed:54:03:ea:06:8a:7f:42:93: 9a:f9:57:94:97:86:3f:7a:18:ec:db:52:85:3d:9a: 38:bc:b6:58:33:8e:b7:2a:36:36:70:ef:78:a2:f6: 81:58:75:6b:b3:a8:a1:32:19:69:bb:5c:7a:1e:50: 1e:37:40:4f:db:c0:da:5b:e5:8b:06:ad:d9:db:3f: 61:f0:a3:92:dc:5d:a3:9e:1b:25:f0:34:1a:bc:a1: fb:fa:4c:ce:a2:4a:75:7f:b0:8c:ca:61:08:a1:10: cc:b1:e9:4c:62:1a:7f:2d:3e:f5:18:3e:0a:6d:2b: 16:58:11:3f:12:93:bd:9e:14:cc:82:9b:ba:e2:37: 8a:99:01:b5:cc:f2:52:2f:5d:52:18:eb:d7:a1:93: 21:af:e8:3a:2f:00:34:d2:af:20:83:04:6f:87:b9: 5d:cd:10:d2:42:66:b8:6c:2e:06:7b:d3:3b:eb:af: 8d:16:3b:a3:cf:70:5c:ed:4f:ed:c7:18:bb:2f:ed: 38:22:c3:c2:b8:a2:e0:6d:8c:dc:b8:e9:e1:45:7b: 71:05:a4:d2:0f:b6:2e:7b:fc:38:ba:4f:5b:84:a4: f1:4f:2d:da:56:75:83:d8:b6:e9:2f:a3:c3:ef:98: ae:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E2:EA:48:A6:18:D8:C2:5D:59:28:83:04:BF:37:D1:8C:03:B8:DD X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:44:0f:cd:eb:3e:ac:d3:04:e0:76:52:4e:f6:b0:e6:97:64: da:a0:fa:37:92:14:52:66:af:4e:7a:ab:19:f7:43:3d:1f:fd: fd:d8:61:0d:d4:10:9a:02:c3:77:76:8f:d2:0d:00:f1:7e:bc: 53:e1:3d:bc:76:0d:d3:89:36:3c:45:2d:e4:09:91:a6:46:e7: bd:3e:ee:15:54:52:ae:21:5b:01:61:09:30:a3:e0:13:59:cc: 7d:7b:57:08:81:28:67:7a:78:7a:53:55:7f:b9:8f:8d:3c:27: 9f:f8:e8:9d:61:ac:30:86:1a:2e:4d:80:91:23:2e:10:93:f3: 10:4d:1f:95:6f:81:49:bb:7c:18:70:c8:6c:11:36:d3:c7:76: bb:bd:ef:72:c9:a2:e8:aa:b3:30:fc:8d:2f:4f:e2:6c:58:8b: 00:25:53:7c:a8:fc:2e:89:5e:9d:d5:94:25:6a:fc:bd:75:77: 07:c0:d1:b9:d9:bd:ca:a9:67:ce:c0:59:4d:05:5d:09:de:89: 65:23:90:8f:77:d4:40:3c:8e:dc:ae:74:f1:45:66:ec:4a:26: f2:8f:4c:81:55:67:47:e1:60:f7:c0:fd:74:c8:58:67:04:ea: 6b:33:2e:62:95:cd:67:f4:68:ee:3d:db:b3:63:67:48:01:59: 94:36:72:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzaad80X3gRf8gwO3j4QAZ0UxFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTA2MDYyMDE2MjdaFw0yNTA2MTAwMDU5MjdaMDMxMTAvBgNV BAMTKDJBRTJFQTQ4QTYxOEQ4QzI1RDU5Mjg4MzA0QkYzN0QxOEMwM0I4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GPW61ajAO8gOutDKPrG0Parw Mu1UA+oGin9Ck5r5V5SXhj96GOzbUoU9mji8tlgzjrcqNjZw73ii9oFYdWuzqKEy GWm7XHoeUB43QE/bwNpb5YsGrdnbP2Hwo5LcXaOeGyXwNBq8ofv6TM6iSnV/sIzK YQihEMyx6UxiGn8tPvUYPgptKxZYET8Sk72eFMyCm7riN4qZAbXM8lIvXVIY69eh kyGv6DovADTSryCDBG+HuV3NENJCZrhsLgZ70zvrr40WO6PPcFztT+3HGLsv7Tgi w8K4ouBtjNy46eFFe3EFpNIPti57/Di6T1uEpPFPLdpWdYPYtukvo8PvmK5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKuLqSKYY2MJdWSiDBL830YwDuN0wHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtED83rPqzTBOB2Uk72sOaXZNqg+jeSFFJm r056qxn3Qz0f/f3YYQ3UEJoCw3d2j9INAPF+vFPhPbx2DdOJNjxFLeQJkaZG570+ 7hVUUq4hWwFhCTCj4BNZzH17VwiBKGd6eHpTVX+5j408J5/46J1hrDCGGi5NgJEj LhCT8xBNH5VvgUm7fBhwyGwRNtPHdru973LJouiqszD8jS9P4mxYiwAlU3yo/C6J Xp3VlCVq/L11dwfA0bnZvcqpZ87AWU0FXQneiWUjkI931EA8jtyudPFFZuxKJvKP TIFVZ0fhYPfA/XTIWGcE6mszLmKVzWf0aO4927NjZ0gBWZQ2cvQ= -----END CERTIFICATE-----Generated at Sun Jun 8 07:02:09 2025 by rpki-client