$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: eRWk5O32yILQnkzV7K7iTIzQFa6vZCxhVYDCiyZxdHg= Subject key identifier: 15:E3:C9:B3:ED:54:6F:59:AF:59:46:19:C4:8E:72:C1:1F:3A:EA:A6 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 3416C2AAB4D27C1EC1EF5F7DC04BC80D6E578178 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 038B Signing time: Thu 04 Sep 2025 22:01:23 +0000 Manifest this update: Thu 04 Sep 2025 21:56:23 +0000 Manifest next update: Mon 08 Sep 2025 05:48:23 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) 2: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: qwBsVqcRcI5g4V4rmTweAnnOx+SG7NuNKDtIwZLYnss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:16:c2:aa:b4:d2:7c:1e:c1:ef:5f:7d:c0:4b:c8:0d:6e:57:81:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Sep 4 21:56:23 2025 GMT Not After : Sep 8 05:48:23 2025 GMT Subject: CN=15E3C9B3ED546F59AF594619C48E72C11F3AEAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:72:00:7a:df:e2:8b:32:10:79:66:88:a8:6e: 5a:b2:28:59:cf:16:f2:07:f1:fe:9b:7b:4a:f8:3d: 93:d3:4f:74:32:c5:d1:6f:70:15:3b:89:aa:35:bb: 57:90:bc:4e:8e:d8:99:75:c6:5b:bc:d8:19:00:42: f1:57:1b:31:82:74:12:dc:80:18:96:2b:4f:8b:37: 40:93:b4:04:5d:a6:95:c9:b2:7f:14:4c:72:a4:56: 9e:9c:09:ec:dd:f0:63:ad:a9:bc:18:8d:35:eb:e9: 8c:93:8e:28:7e:1a:57:7f:2f:e6:02:1e:8e:77:a0: 38:ba:2f:20:b4:31:6a:2f:0d:67:0d:20:54:f7:d2: 9d:65:81:e7:f7:cb:e0:1f:9d:3c:9e:bf:fa:a8:b6: 1a:44:31:e4:26:58:69:35:58:66:0c:be:3d:5e:8e: 4f:6e:e9:58:d2:6e:55:5c:8d:a2:11:e9:30:7b:d9: e1:91:25:c1:98:e8:0c:39:b4:e3:4a:61:29:26:3c: 62:35:b0:71:61:cc:7e:41:dc:0c:52:cf:47:7e:78: c5:84:8b:57:61:1f:c1:ac:80:0f:b3:4b:32:6e:f5: ef:fc:09:5d:40:f1:8e:e7:cc:d0:97:fe:e2:ae:cb: e9:aa:db:20:1e:b2:bd:e6:0e:0f:40:d5:fb:ba:1c: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E3:C9:B3:ED:54:6F:59:AF:59:46:19:C4:8E:72:C1:1F:3A:EA:A6 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2d:3f:56:32:18:e9:0a:fc:56:86:41:7a:cd:4b:ea:6d:b7: 73:0f:04:a5:8a:5f:fc:a8:3a:ec:95:84:5f:79:2e:47:73:2c: 93:d9:95:0c:37:1f:1d:d4:40:b8:04:35:c5:c1:5d:ea:dd:5e: 0d:17:b6:ac:7b:c4:99:bd:a7:46:44:45:ed:70:8e:32:5c:ca: 30:35:1d:d1:f2:94:68:40:58:ab:01:75:92:7f:ff:d0:22:51: 71:b7:90:54:d3:10:e1:ea:7a:5e:86:82:9b:35:3a:7f:78:b7: fd:4a:00:91:36:97:27:b9:8c:ab:50:a9:1a:92:d8:0b:d1:a3: f7:a9:a1:f9:a3:5a:8c:e1:4d:a5:23:66:35:f1:53:cf:62:16: 6a:d1:e4:42:ae:17:50:04:7e:06:78:a4:67:ff:d8:7b:58:cb: c0:e6:a4:e1:66:71:51:88:d0:c3:16:01:a6:73:a0:f9:59:e6: 8b:7d:9f:ae:92:e5:ea:51:5e:0b:5e:dd:78:f5:9f:6d:8d:e5: 43:b0:49:ef:7f:e2:5b:3d:d9:72:ba:b9:49:49:28:1b:ef:cb: 5b:bd:a4:d9:0e:00:3a:92:be:2d:0c:e6:aa:0c:12:99:7a:fc: 93:09:c8:c3:0c:a1:1f:9c:4b:3c:9a:34:0c:9f:e7:c7:4b:8e: 73:44:34:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBbCqrTSfB7B7199wEvIDW5XgXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTA5MDQyMTU2MjNaFw0yNTA5MDgwNTQ4MjNaMDMxMTAvBgNV BAMTKDE1RTNDOUIzRUQ1NDZGNTlBRjU5NDYxOUM0OEU3MkMxMUYzQUVBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDocgB63+KLMhB5ZoioblqyKFnP FvIH8f6be0r4PZPTT3QyxdFvcBU7iao1u1eQvE6O2Jl1xlu82BkAQvFXGzGCdBLc gBiWK0+LN0CTtARdppXJsn8UTHKkVp6cCezd8GOtqbwYjTXr6YyTjih+Gld/L+YC Ho53oDi6LyC0MWovDWcNIFT30p1lgef3y+AfnTyev/qothpEMeQmWGk1WGYMvj1e jk9u6VjSblVcjaIR6TB72eGRJcGY6Aw5tONKYSkmPGI1sHFhzH5B3AxSz0d+eMWE i1dhH8GsgA+zSzJu9e/8CV1A8Y7nzNCX/uKuy+mq2yAesr3mDg9A1fu6HHMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFePJs+1Ub1mvWUYZxI5ywR866qYwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMtP1YyGOkK/FaGQXrNS+ptt3MPBKWKX/yo OuyVhF95LkdzLJPZlQw3Hx3UQLgENcXBXerdXg0Xtqx7xJm9p0ZERe1wjjJcyjA1 HdHylGhAWKsBdZJ//9AiUXG3kFTTEOHqel6Ggps1On94t/1KAJE2lye5jKtQqRqS 2AvRo/epofmjWozhTaUjZjXxU89iFmrR5EKuF1AEfgZ4pGf/2HtYy8DmpOFmcVGI 0MMWAaZzoPlZ5ot9n66S5epRXgte3Xj1n22N5UOwSe9/4ls92XK6uUlJKBvvy1u9 pNkOADqSvi0M5qoMEpl6/JMJyMMMoR+cSzyaNAyf58dLjnNEND8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:11 2025 by rpki-client