$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: 0IEl5xHfmXahhi4FVoPmGiX50RNNGUQniHCNgz1frhw= Subject key identifier: 42:55:27:F9:40:67:82:EF:E4:BE:A7:D0:56:9A:2F:57:95:83:6F:F5 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 509BB179B4688ADFB392EE9F4843F0DB4A07457D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 0486 Signing time: Wed 03 Sep 2025 14:01:07 +0000 Manifest this update: Wed 03 Sep 2025 13:56:07 +0000 Manifest next update: Sat 06 Sep 2025 18:55:07 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: Y0rrkZCRdpa/B77qFIrVfyCAgHIBXC4NDZEh6nuDbKU=) 2: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) 3: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 6: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) 7: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9b:b1:79:b4:68:8a:df:b3:92:ee:9f:48:43:f0:db:4a:07:45:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Sep 3 13:56:07 2025 GMT Not After : Sep 6 18:55:07 2025 GMT Subject: CN=425527F9406782EFE4BEA7D0569A2F5795836FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:63:5b:11:d6:96:b2:27:d2:55:60:ac:71: d3:af:12:75:34:fa:3c:89:13:21:e3:dd:5e:44:73: 56:8b:56:64:5a:d6:cb:9e:f0:e9:49:11:af:38:a2: 02:a3:55:0e:86:29:15:3e:0d:e2:a9:06:1b:16:b6: 12:56:7b:9c:47:86:54:79:ea:39:74:ca:2f:3a:ec: d5:35:01:5e:fd:0f:18:49:04:97:f5:7c:3e:59:06: 87:26:94:f2:bf:2b:c5:4f:26:3c:43:b9:1c:25:5a: 0e:ba:38:c9:bb:84:51:d9:43:83:5d:16:5e:7e:b0: 35:53:e9:b5:f6:2c:43:2a:78:0f:62:89:c3:0f:e2: e0:d8:23:8f:d7:14:d0:d2:45:a4:04:2d:97:5a:86: 50:8d:d6:ad:63:7f:67:e6:87:55:ae:95:04:8f:ce: c7:99:07:e6:d7:5c:3d:a7:c4:d6:b5:0b:e3:c7:6b: 6a:b8:2e:a2:a7:18:2b:be:1b:b8:1f:15:fe:43:6f: de:0e:02:1d:2d:c9:a3:aa:23:25:ae:2a:5c:5d:86: c6:bd:07:5f:96:da:10:d0:b8:0a:37:f9:ca:3b:59: e4:3c:32:a3:6a:a2:b3:4a:28:a2:94:be:51:b9:8c: 82:4c:24:86:88:2f:b8:a5:a3:d2:0a:6a:92:93:c9: 77:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:27:F9:40:67:82:EF:E4:BE:A7:D0:56:9A:2F:57:95:83:6F:F5 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:94:1c:f5:33:26:cb:6a:16:57:f2:21:eb:82:43:6f:8e:51: 43:02:b4:54:8b:b5:c6:ac:42:7d:2b:68:b5:1f:28:23:98:68: dc:bf:10:9c:f2:1b:2e:8f:80:00:61:fd:a0:a7:c6:91:57:04: ec:34:ba:db:04:41:0c:06:15:5d:d7:de:fd:b0:4b:41:ea:5e: f0:f3:4a:27:99:0d:ef:8c:9c:6c:d3:aa:06:3e:62:ad:17:65: 39:ec:c3:d5:c8:ec:53:4a:f5:95:52:7b:22:4a:e2:3c:6e:45: d5:24:9b:6f:43:79:43:63:2b:bf:e0:4e:2c:6b:65:de:47:7f: 10:2d:8d:31:36:f3:56:94:05:2c:bd:e7:f8:2a:37:17:22:7d: 7c:d1:8e:4b:8a:32:4b:b1:44:57:75:05:94:46:f1:ef:69:eb: 2c:20:bc:8d:06:d8:ae:b8:ca:0a:d1:11:9b:2d:c7:c3:df:ea: 90:37:a9:c8:54:ca:01:38:ac:01:48:0c:4e:5d:3b:47:f7:fd: e5:52:03:8d:f6:c7:62:92:7f:1d:a3:d5:33:07:87:6e:c5:70: 30:69:af:ee:d3:d5:92:2e:51:cf:85:ff:af:73:74:46:79:dc: 7b:38:28:6c:af:25:2b:55:fe:62:ae:8a:47:87:7a:2f:9e:9e: 20:26:a5:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJuxebRoit+zku6fSEPw20oHRX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTA5MDMxMzU2MDdaFw0yNTA5MDYxODU1MDdaMDMxMTAvBgNV BAMTKDQyNTUyN0Y5NDA2NzgyRUZFNEJFQTdEMDU2OUEyRjU3OTU4MzZGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYkmNbEdaWsifSVWCscdOvEnU0 +jyJEyHj3V5Ec1aLVmRa1sue8OlJEa84ogKjVQ6GKRU+DeKpBhsWthJWe5xHhlR5 6jl0yi867NU1AV79DxhJBJf1fD5ZBocmlPK/K8VPJjxDuRwlWg66OMm7hFHZQ4Nd Fl5+sDVT6bX2LEMqeA9iicMP4uDYI4/XFNDSRaQELZdahlCN1q1jf2fmh1WulQSP zseZB+bXXD2nxNa1C+PHa2q4LqKnGCu+G7gfFf5Db94OAh0tyaOqIyWuKlxdhsa9 B1+W2hDQuAo3+co7WeQ8MqNqorNKKKKUvlG5jIJMJIaIL7ilo9IKapKTyXeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlUn+UBngu/kvqfQVpovV5WDb/UwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmUHPUzJstqFlfyIeuCQ2+OUUMCtFSLtcas Qn0raLUfKCOYaNy/EJzyGy6PgABh/aCnxpFXBOw0utsEQQwGFV3X3v2wS0HqXvDz SieZDe+MnGzTqgY+Yq0XZTnsw9XI7FNK9ZVSeyJK4jxuRdUkm29DeUNjK7/gTixr Zd5HfxAtjTE281aUBSy95/gqNxcifXzRjkuKMkuxRFd1BZRG8e9p6ywgvI0G2K64 ygrREZstx8Pf6pA3qchUygE4rAFIDE5dO0f3/eVSA432x2KSfx2j1TMHh27FcDBp r+7T1ZIuUc+F/69zdEZ53Hs4KGyvJStV/mKuikeHei+eniAmpaY= -----END CERTIFICATE-----Generated at Thu Sep 4 06:58:53 2025 by rpki-client