$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: 6Eg1dqUt/s65K1Y9wNNGMx2P3qDQV0hVGlHMZz8ANZg= Subject key identifier: 5B:29:CB:5B:D6:FC:E5:DA:ED:24:81:1E:4C:00:00:E3:5A:0A:8F:DF Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 0FD40B2A434EECA14DE35EE3234B28D2B7B4A207 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 01AA Signing time: Wed 04 Jun 2025 23:51:05 +0000 Manifest this update: Wed 04 Jun 2025 23:46:05 +0000 Manifest next update: Sun 08 Jun 2025 04:06:05 +0000 Files and hashes: 1: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: PnooExtXULQNtC7kT+QlUO9aWVZkNas5LdJZ6cSCIfo=) 2: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: EQ47BFmree/6wdv1GDRqzCKoMY+j/H0w8lR2qn9uxgM=) 3: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: d9wnvNvm/zm0yFS8JdHD7q5rQ4vDsc+fn0FbS71eAF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d4:0b:2a:43:4e:ec:a1:4d:e3:5e:e3:23:4b:28:d2:b7:b4:a2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Jun 4 23:46:05 2025 GMT Not After : Jun 8 04:06:05 2025 GMT Subject: CN=5B29CB5BD6FCE5DAED24811E4C0000E35A0A8FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:93:f3:7c:74:76:ee:7a:ef:14:26:82:60: 04:1b:ca:ec:79:1a:5d:9d:b9:0a:e7:9f:71:cd:52: ae:cb:60:6c:70:26:5f:68:89:da:b7:7d:97:4f:cc: c9:ed:ee:7c:ee:0b:5a:92:ab:bd:6f:7a:7b:25:95: c8:92:bc:67:c6:c9:79:98:68:34:f5:cb:99:8a:e7: 6c:64:0c:59:4f:4a:1f:b9:25:6a:86:b6:4e:df:72: 72:76:0c:0d:04:74:b4:37:ce:d8:6c:3b:74:58:fe: 22:df:5b:8b:d4:0d:9f:77:00:6c:4d:70:4c:0b:f9: c3:fc:aa:67:f5:05:63:70:fd:fe:6e:e3:22:c4:dc: 19:8e:69:e6:4c:61:e6:c4:85:9e:13:36:f5:30:63: b1:53:3b:7a:c5:46:fd:6f:85:da:9e:e9:56:74:d5: 44:7b:71:f6:83:6d:40:3e:71:ac:ed:96:31:a6:a5: 37:54:77:5f:f6:3c:37:75:40:70:5b:5c:53:25:8e: 68:30:ee:26:2e:79:c8:47:0c:f1:d8:20:8a:4f:08: 7c:a1:c7:93:c6:d5:99:e7:33:e1:33:5b:92:65:dc: b9:1f:73:c1:d0:e1:26:d2:9a:fd:58:b5:87:b3:1f: 53:1d:47:12:2d:7d:47:37:28:67:61:91:1d:55:e1: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:29:CB:5B:D6:FC:E5:DA:ED:24:81:1E:4C:00:00:E3:5A:0A:8F:DF X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:53:0b:e9:2b:92:b6:aa:f9:82:34:80:c6:2c:b5:bf:44:13: b3:1f:b3:f9:9f:f4:bf:fa:ae:07:b0:dc:ad:4c:90:e0:c6:4b: b4:9f:70:52:41:5d:36:cb:75:0a:da:e4:1e:c8:05:cf:09:73: bd:4a:45:45:a4:9d:7b:ea:93:08:dc:f2:c5:05:20:67:4a:ef: 2a:88:e9:0e:4d:c9:5b:f2:b8:ed:f7:77:bf:81:ce:ca:e1:fe: bd:6d:47:12:11:e3:60:6e:53:23:a8:03:53:5a:ef:e3:ac:db: a4:95:64:c7:8e:87:73:c2:ae:a5:a4:bd:91:7a:14:07:db:45: 6b:a6:d0:2f:28:3d:22:03:af:32:40:f5:19:09:8f:76:62:2a: e7:1e:e9:09:64:1d:44:b1:ca:bd:34:be:6c:44:c3:7c:d8:b5: 7b:bf:56:dc:e6:9a:15:28:40:f3:90:5c:6a:96:15:bf:d7:6c: d4:56:4c:b1:ad:f3:c0:be:4c:e1:43:91:1c:e1:1a:0a:b3:bf: 2a:8a:03:4d:bc:1a:7a:0b:d3:62:6b:49:71:c5:ef:be:be:38: 09:ff:9c:3a:6a:bd:33:f0:43:9b:e6:21:ee:13:15:27:75:23: c1:8d:34:73:aa:5b:9f:f0:e1:3e:cc:67:ec:4f:a0:fa:c3:0e: c8:7d:36:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9QLKkNO7KFN417jI0so0re0ogcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTA2MDQyMzQ2MDVaFw0yNTA2MDgwNDA2MDVaMDMxMTAvBgNV BAMTKDVCMjlDQjVCRDZGQ0U1REFFRDI0ODExRTRDMDAwMEUzNUEwQThGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2pPzfHR27nrvFCaCYAQbyux5 Gl2duQrnn3HNUq7LYGxwJl9oidq3fZdPzMnt7nzuC1qSq71vensllciSvGfGyXmY aDT1y5mK52xkDFlPSh+5JWqGtk7fcnJ2DA0EdLQ3zthsO3RY/iLfW4vUDZ93AGxN cEwL+cP8qmf1BWNw/f5u4yLE3BmOaeZMYebEhZ4TNvUwY7FTO3rFRv1vhdqe6VZ0 1UR7cfaDbUA+caztljGmpTdUd1/2PDd1QHBbXFMljmgw7iYuechHDPHYIIpPCHyh x5PG1ZnnM+EzW5Jl3Lkfc8HQ4SbSmv1YtYezH1MdRxItfUc3KGdhkR1V4XVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWynLW9b85drtJIEeTAAA41oKj98wHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdTC+krkraq+YI0gMYstb9EE7Mfs/mf9L/6 rgew3K1MkODGS7SfcFJBXTbLdQra5B7IBc8Jc71KRUWknXvqkwjc8sUFIGdK7yqI 6Q5NyVvyuO33d7+Bzsrh/r1tRxIR42BuUyOoA1Na7+Os26SVZMeOh3PCrqWkvZF6 FAfbRWum0C8oPSIDrzJA9RkJj3ZiKuce6QlkHUSxyr00vmxEw3zYtXu/VtzmmhUo QPOQXGqWFb/XbNRWTLGt88C+TOFDkRzhGgqzvyqKA028GnoL02JrSXHF776+OAn/ nDpqvTPwQ5vmIe4TFSd1I8GNNHOqW5/w4T7MZ+xPoPrDDsh9Nlg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:35 2025 by rpki-client