$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: l58tUh9uErR+xeYLcGy7AcLDCCz+aGlNKAYU40xYUPE= Subject key identifier: 92:A2:10:9B:26:86:80:9B:DE:21:99:4D:DB:5F:2B:7D:16:8E:D7:43 Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 20CE47FFD79D51B700D1FDF0769061B697B48299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 01D6 Signing time: Fri 05 Sep 2025 12:51:06 +0000 Manifest this update: Fri 05 Sep 2025 12:46:06 +0000 Manifest next update: Tue 09 Sep 2025 00:45:06 +0000 Files and hashes: 1: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) 2: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) 3: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: JxYsvrwBJy2if//ka7bTbXqAbPPhzqVg/taPuzPU1nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ce:47:ff:d7:9d:51:b7:00:d1:fd:f0:76:90:61:b6:97:b4:82:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Sep 5 12:46:06 2025 GMT Not After : Sep 9 00:45:06 2025 GMT Subject: CN=92A2109B2686809BDE21994DDB5F2B7D168ED743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c9:7a:3d:65:bf:e7:f8:18:c9:b4:9a:2b:b5: b1:44:1f:07:1f:5f:93:3d:db:a8:d1:16:c2:f8:c4: 3f:6f:f0:69:d9:3c:b3:a1:e2:37:09:57:5f:fd:16: 39:2d:2d:2a:26:01:54:5c:90:2e:aa:4e:b0:a2:e9: ca:b2:25:aa:21:83:c8:07:af:62:f3:e0:c7:30:db: 38:b5:ac:2f:b8:96:d2:dd:fc:36:30:32:72:62:80: 6a:ed:16:57:3b:7c:46:36:94:e7:13:fb:f9:df:90: 31:60:3f:b2:ee:78:c8:8c:03:b0:5c:9b:b8:13:20: a4:38:01:53:8c:df:2e:7a:93:3f:26:b2:87:3a:44: 21:bd:40:8a:eb:9e:eb:bc:9c:a3:75:99:95:62:a5: ce:ac:42:af:f3:82:a6:af:6d:3e:41:68:5c:30:66: e5:c9:da:75:92:5f:8f:22:6a:89:3a:52:42:5c:e5: 6f:06:08:74:00:55:15:61:53:64:fd:a0:dc:5c:12: 5a:7b:cc:93:f3:46:e1:75:36:ae:c2:69:55:3d:8c: 68:b7:df:18:f2:30:94:ae:52:0d:85:d7:c1:bc:cb: fc:a8:c8:e9:4c:80:94:af:16:9c:f6:39:9d:dd:3c: 85:bb:5e:66:f7:5b:77:df:8c:31:62:08:c8:d6:10: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A2:10:9B:26:86:80:9B:DE:21:99:4D:DB:5F:2B:7D:16:8E:D7:43 X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2e:0a:bd:e4:9e:78:49:cf:e6:57:78:f5:03:44:1a:90:69: b1:ed:b9:28:7f:39:73:f1:f0:7d:c3:96:89:96:70:f5:95:c1: 07:67:f7:29:3c:0d:27:57:92:e3:e7:72:06:06:77:bf:dc:63: e9:6e:31:c2:2a:b8:3a:6c:01:ef:e9:95:c6:13:81:fc:2e:05: a0:e0:58:c8:04:37:e5:eb:16:01:bb:6c:cf:f4:c5:a8:24:18: 23:43:01:c2:75:6d:7a:46:be:2e:b5:47:51:60:14:3f:1f:ed: da:31:b8:df:35:60:24:b7:38:06:9d:84:07:e8:bc:b5:3e:52: 73:13:ff:f6:22:6c:82:6c:ea:f4:3e:30:bd:85:32:a5:62:90: dd:37:7b:e6:2a:ce:e9:fb:d6:5e:26:a3:e3:e2:2e:7b:01:b7: e9:d3:14:bd:b3:b6:c2:11:c2:de:9b:cb:58:8c:b2:64:1d:d4: 58:ae:51:57:0d:8d:f0:1b:cd:ec:f5:b8:5c:d0:5a:0f:a2:ad: e6:d5:5e:82:b6:de:04:b7:5c:de:fb:e9:60:b2:6a:b9:8a:73: 43:1b:15:00:5b:c7:3d:af:cf:88:c9:c4:d4:0a:33:76:83:1f: 7c:dc:8a:8c:5c:ab:07:1c:d0:bb:29:58:b0:c4:25:f8:f8:94: 41:63:76:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIM5H/9edUbcA0f3wdpBhtpe0gpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTA5MDUxMjQ2MDZaFw0yNTA5MDkwMDQ1MDZaMDMxMTAvBgNV BAMTKDkyQTIxMDlCMjY4NjgwOUJERTIxOTk0RERCNUYyQjdEMTY4RUQ3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1yXo9Zb/n+BjJtJortbFEHwcf X5M926jRFsL4xD9v8GnZPLOh4jcJV1/9FjktLSomAVRckC6qTrCi6cqyJaohg8gH r2Lz4Mcw2zi1rC+4ltLd/DYwMnJigGrtFlc7fEY2lOcT+/nfkDFgP7LueMiMA7Bc m7gTIKQ4AVOM3y56kz8msoc6RCG9QIrrnuu8nKN1mZVipc6sQq/zgqavbT5BaFww ZuXJ2nWSX48iaok6UkJc5W8GCHQAVRVhU2T9oNxcElp7zJPzRuF1Nq7CaVU9jGi3 3xjyMJSuUg2F18G8y/yoyOlMgJSvFpz2OZ3dPIW7Xmb3W3ffjDFiCMjWEF39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkqIQmyaGgJveIZlN218rfRaO10MwHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0uCr3knnhJz+ZXePUDRBqQabHtuSh/OXPx 8H3DlomWcPWVwQdn9yk8DSdXkuPncgYGd7/cY+luMcIquDpsAe/plcYTgfwuBaDg WMgEN+XrFgG7bM/0xagkGCNDAcJ1bXpGvi61R1FgFD8f7doxuN81YCS3OAadhAfo vLU+UnMT//YibIJs6vQ+ML2FMqVikN03e+Yqzun71l4mo+PiLnsBt+nTFL2ztsIR wt6by1iMsmQd1FiuUVcNjfAbzez1uFzQWg+irebVXoK23gS3XN776WCyarmKc0Mb FQBbxz2vz4jJxNQKM3aDH3zcioxcqwcc0LspWLDEJfj4lEFjdvY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:24 2025 by rpki-client