$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: GFPp1N+vqmr6BOPo9RyrWcEGdOxkZpkqu5L33faYc4k= Subject key identifier: 11:7F:73:79:20:45:53:FB:DB:49:77:45:58:40:C8:D7:84:1E:8F:DF Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 1DED881C0CF9BDFAACAF5297E89C5A59F07FEEC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 01EB Signing time: Wed 22 Oct 2025 12:01:07 +0000 Manifest this update: Wed 22 Oct 2025 11:56:07 +0000 Manifest next update: Sat 25 Oct 2025 12:31:07 +0000 Files and hashes: 1: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) 2: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: feBkesVH+5mt8js5C+g+Qa3G000IGUtcMhU5MPc6bVo=) 3: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 12:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ed:88:1c:0c:f9:bd:fa:ac:af:52:97:e8:9c:5a:59:f0:7f:ee:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Oct 22 11:56:07 2025 GMT Not After : Oct 25 12:31:07 2025 GMT Subject: CN=117F7379204553FBDB4977455840C8D7841E8FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:b2:c6:48:be:b0:8c:f1:6d:56:64:b7:b9: f7:f7:b0:89:3c:19:36:21:b1:0e:e7:46:bb:f9:3b: 2a:6d:e3:21:db:38:da:06:8a:21:00:7d:bc:cd:2f: 5e:e3:52:5c:76:53:c0:cd:f7:29:09:ee:95:e7:45: 55:4c:a6:4f:c8:d9:01:e2:53:1a:a7:43:9b:3a:b3: 21:21:82:0d:c9:cf:77:3d:84:db:f8:00:fc:4b:24: 76:0f:ef:f7:f0:f3:35:b2:49:69:b8:71:7d:99:b0: b4:d5:fb:cd:93:e4:47:49:d7:0b:3c:58:e9:6f:e9: c7:cb:65:cf:51:95:94:ea:ed:67:40:ad:05:5b:55: 97:4a:21:f1:39:15:4c:02:84:f5:f5:d8:49:19:9c: ba:d0:08:97:17:16:28:d7:2b:15:05:34:05:fe:c5: 02:28:42:f3:d9:2a:8d:94:9b:9d:85:f5:41:e6:84: e8:26:d8:aa:56:a5:ef:d1:d0:54:8e:b5:de:39:95: 09:1f:30:17:ce:26:ba:fe:9d:95:39:7a:61:5f:ad: df:59:b4:35:d9:f3:80:17:76:da:8c:97:0a:3e:94: 3a:a1:54:39:35:a3:1f:19:7b:6b:b5:42:ee:76:67: a4:6c:c1:f0:e9:f3:ff:af:5a:25:d8:5b:8c:be:3e: 70:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7F:73:79:20:45:53:FB:DB:49:77:45:58:40:C8:D7:84:1E:8F:DF X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:42:28:56:b9:c3:44:a5:ff:5d:50:85:d4:81:7d:79:f5:4f: 10:2f:f3:29:96:31:52:1d:66:78:b6:82:df:46:cd:5d:06:bc: f8:42:38:b0:c0:36:12:46:4e:4e:af:0a:b3:02:da:4a:df:0b: 14:9e:ec:f6:f6:fb:8a:33:4e:bf:26:b7:b9:f2:26:2d:40:69: aa:a7:95:ae:e6:28:91:7c:66:b5:9a:ae:60:d1:73:75:e2:98: 2b:52:2e:18:7c:4e:d3:6e:64:26:00:54:cc:9f:8e:0e:96:4c: b1:af:f0:ca:6c:88:cd:33:ca:7c:7e:e3:1c:0b:72:27:3b:8d: d1:eb:22:bc:a6:11:c6:c6:7a:96:1c:2b:cf:ce:67:67:6c:31: ab:b6:d3:68:53:fa:23:20:52:91:fd:0b:a4:e5:a8:03:2e:39: 22:90:1e:ea:81:09:22:6e:cb:af:f8:d1:4a:81:71:bc:64:83: ae:30:d6:43:e4:0f:1c:70:27:5f:8a:ef:ef:41:16:8d:fd:61: 42:f8:aa:6b:0d:b3:bb:42:03:00:4d:1b:07:8d:61:fb:9a:0d: 1b:7b:37:19:ae:ec:55:24:b1:62:a8:9b:5c:38:a7:5e:ac:2e: 46:f9:68:e6:fb:d4:f5:40:9d:36:19:9b:5c:0c:ca:25:98:59: 6f:21:56:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHe2IHAz5vfqsr1KX6JxaWfB/7sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTEwMjIxMTU2MDdaFw0yNTEwMjUxMjMxMDdaMDMxMTAvBgNV BAMTKDExN0Y3Mzc5MjA0NTUzRkJEQjQ5Nzc0NTU4NDBDOEQ3ODQxRThGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+LLGSL6wjPFtVmS3uff3sIk8 GTYhsQ7nRrv5Oypt4yHbONoGiiEAfbzNL17jUlx2U8DN9ykJ7pXnRVVMpk/I2QHi UxqnQ5s6syEhgg3Jz3c9hNv4APxLJHYP7/fw8zWySWm4cX2ZsLTV+82T5EdJ1ws8 WOlv6cfLZc9RlZTq7WdArQVbVZdKIfE5FUwChPX12EkZnLrQCJcXFijXKxUFNAX+ xQIoQvPZKo2Um52F9UHmhOgm2KpWpe/R0FSOtd45lQkfMBfOJrr+nZU5emFfrd9Z tDXZ84AXdtqMlwo+lDqhVDk1ox8Ze2u1Qu52Z6RswfDp8/+vWiXYW4y+PnCNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEX9zeSBFU/vbSXdFWEDI14Qej98wHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVCKFa5w0Sl/11QhdSBfXn1TxAv8ymWMVId Zni2gt9GzV0GvPhCOLDANhJGTk6vCrMC2krfCxSe7Pb2+4ozTr8mt7nyJi1Aaaqn la7mKJF8ZrWarmDRc3XimCtSLhh8TtNuZCYAVMyfjg6WTLGv8MpsiM0zynx+4xwL cic7jdHrIrymEcbGepYcK8/OZ2dsMau202hT+iMgUpH9C6TlqAMuOSKQHuqBCSJu y6/40UqBcbxkg64w1kPkDxxwJ1+K7+9BFo39YUL4qmsNs7tCAwBNGweNYfuaDRt7 Nxmu7FUksWKom1w4p16sLkb5aOb71PVAnTYZm1wMyiWYWW8hVhw= -----END CERTIFICATE-----Generated at Thu Oct 23 20:05:09 2025 by rpki-client