$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: JOzAAoNIsGrqymwFh8i8Uoj6uAfVKhrzJ/WmTBzJ59E= Subject key identifier: 66:08:39:DE:C2:87:4E:DF:1B:A7:2A:86:9A:81:A4:7A:6A:FE:95:0D Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 1BB4C4476F22FA5471848892A012659E6182F7B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: BC Signing time: Sat 06 Sep 2025 11:11:35 +0000 Manifest this update: Sat 06 Sep 2025 11:06:35 +0000 Manifest next update: Tue 09 Sep 2025 21:19:35 +0000 Files and hashes: 1: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: JeS6jwmLPgJfMbwHCKxku+9pn/eMa38Fm1K50N4rp2M=) 2: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=) 3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b4:c4:47:6f:22:fa:54:71:84:88:92:a0:12:65:9e:61:82:f7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Sep 6 11:06:35 2025 GMT Not After : Sep 9 21:19:35 2025 GMT Subject: CN=660839DEC2874EDF1BA72A869A81A47A6AFE950D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:66:68:20:7d:08:0a:51:ba:e9:41:85:76:84: 83:5a:57:34:cd:34:e8:bd:c2:ca:c7:25:ae:cc:3e: 91:51:d9:73:4e:50:26:f5:b1:ae:b0:04:d2:dc:00: b0:1f:55:a4:c5:b4:b7:9c:7e:30:02:5e:c2:37:59: ee:45:48:73:b8:79:33:60:2e:e9:80:7f:7a:a3:91: 55:b1:61:29:ff:1f:b5:76:7e:a9:eb:91:ec:b4:d5: 15:4a:34:ec:a5:48:17:df:0a:13:0d:71:b3:a5:6e: 28:95:34:90:d2:fa:37:e0:43:6f:3c:77:fc:51:30: 4a:55:f0:db:cc:be:c0:8b:d3:e4:ee:1d:5c:a1:71: c0:44:96:7e:a5:91:03:bc:71:00:5d:49:62:20:c6: b6:d3:bc:fe:6e:12:34:d2:96:a7:70:f0:03:de:26: 68:3b:47:ac:43:c7:81:72:83:06:25:e4:31:4b:dd: db:c0:11:e6:65:6a:fb:2d:85:29:5c:c5:08:d5:86: a5:b1:85:70:dd:49:f1:89:fa:45:c1:3a:3b:be:6e: d6:5f:9a:11:0b:84:ce:03:34:03:22:b7:2b:11:23: 17:6f:ed:60:7c:7b:fe:f6:11:82:75:cb:e4:8d:c2: a9:04:09:ea:df:1d:b1:a4:99:9a:1a:a7:c6:01:31: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:08:39:DE:C2:87:4E:DF:1B:A7:2A:86:9A:81:A4:7A:6A:FE:95:0D X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fa:33:21:31:69:2f:9a:fc:ea:44:a3:8d:75:94:0e:f6:13: f8:6a:97:86:91:dd:45:96:01:8c:85:cf:f0:31:30:86:ad:f8: 7e:e4:22:17:75:13:cc:fb:28:9f:1f:cd:02:9b:0c:07:3d:4e: e3:2f:7f:cd:d9:5c:65:16:19:7a:cf:61:89:a1:a4:97:58:0c: 42:13:b8:95:8a:79:21:27:47:58:12:c1:10:a6:1f:23:22:c9: aa:31:ef:1b:2c:ff:41:6b:1d:ab:12:bf:a7:1f:45:d5:ff:ea: c0:c2:86:c7:92:db:38:27:a3:7a:b6:4c:95:39:a3:40:46:1a: 3c:d2:87:b5:b8:d9:db:32:88:5b:99:a7:e1:8e:eb:80:c2:a2: 65:7a:f8:69:4b:ae:50:a3:fb:0d:d4:20:d5:b8:c1:ca:a9:12: 69:c7:92:2d:bf:24:fe:9f:bb:5e:fe:b4:98:9d:e6:1b:ad:0d: 5d:a6:eb:e3:54:7f:0a:34:7d:dc:e2:0b:5b:04:44:41:ad:f4: be:8d:64:65:36:3c:0f:66:e9:49:3e:47:40:9a:58:bb:55:2b: f4:8f:fe:b2:c2:eb:86:9a:76:15:9f:9f:64:e3:5b:e6:2f:ff: 91:a0:ee:aa:fe:a2:94:68:0a:2c:5b:b0:15:cf:c7:16:95:bf: 95:27:00:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7TER28i+lRxhIiSoBJlnmGC97UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTA5MDYxMTA2MzVaFw0yNTA5MDkyMTE5MzVaMDMxMTAvBgNV BAMTKDY2MDgzOURFQzI4NzRFREYxQkE3MkE4NjlBODFBNDdBNkFGRTk1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlZmggfQgKUbrpQYV2hINaVzTN NOi9wsrHJa7MPpFR2XNOUCb1sa6wBNLcALAfVaTFtLecfjACXsI3We5FSHO4eTNg LumAf3qjkVWxYSn/H7V2fqnrkey01RVKNOylSBffChMNcbOlbiiVNJDS+jfgQ288 d/xRMEpV8NvMvsCL0+TuHVyhccBEln6lkQO8cQBdSWIgxrbTvP5uEjTSlqdw8APe Jmg7R6xDx4FygwYl5DFL3dvAEeZlavsthSlcxQjVhqWxhXDdSfGJ+kXBOju+btZf mhELhM4DNAMitysRIxdv7WB8e/72EYJ1y+SNwqkECerfHbGkmZoap8YBMbfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgg53sKHTt8bpyqGmoGkemr+lQ0wHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn6MyExaS+a/OpEo411lA72E/hql4aR3UWW AYyFz/AxMIat+H7kIhd1E8z7KJ8fzQKbDAc9TuMvf83ZXGUWGXrPYYmhpJdYDEIT uJWKeSEnR1gSwRCmHyMiyaox7xss/0FrHasSv6cfRdX/6sDChseS2zgno3q2TJU5 o0BGGjzSh7W42dsyiFuZp+GO64DComV6+GlLrlCj+w3UINW4wcqpEmnHki2/JP6f u17+tJid5hutDV2m6+NUfwo0fdziC1sEREGt9L6NZGU2PA9m6Uk+R0CaWLtVK/SP /rLC64aadhWfn2TjW+Yv/5Gg7qr+opRoCixbsBXPxxaVv5UnAMg= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:26 2025 by rpki-client