$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: +7T0HHQnNEokMwEmj+iZuqAxK1c60zbonESRwwihjg8= Subject key identifier: C9:9A:DF:61:76:1D:BD:E7:33:EA:10:47:D5:4C:6A:1A:28:2D:F5:B7 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 77EF4F0AF008D602574D626210F1E42ECC8A04BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 0367 Signing time: Mon 16 Jun 2025 02:11:21 +0000 Manifest this update: Mon 16 Jun 2025 02:06:20 +0000 Manifest next update: Thu 19 Jun 2025 07:29:20 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) 2: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: tZwMG0SCaXl0JOlvC5Fk2Z7ucOSSqNx9e9OppRrIKZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ef:4f:0a:f0:08:d6:02:57:4d:62:62:10:f1:e4:2e:cc:8a:04:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Jun 16 02:06:20 2025 GMT Not After : Jun 19 07:29:20 2025 GMT Subject: CN=C99ADF61761DBDE733EA1047D54C6A1A282DF5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:29:7b:f9:b7:0b:94:21:12:3c:60:8b:30: 15:ce:3e:4d:9d:be:01:a4:72:ee:ad:06:c2:3a:19: 11:c5:cd:19:35:a8:cb:19:47:9c:96:45:6b:ba:b4: 6e:80:3a:9e:46:d5:9d:19:8a:62:5d:11:e6:d9:15: 8d:aa:99:9a:34:5d:6f:02:84:80:1b:c7:b4:09:97: 4e:ab:b7:51:e8:18:97:3c:cf:fa:01:3d:a7:84:97: da:ca:49:dd:a0:db:17:e5:d2:34:4b:40:d5:9b:52: 31:a6:48:28:06:b3:f5:ba:d7:8a:c9:c8:cc:6a:a6: ad:0c:81:8d:f4:6b:08:42:2e:ca:96:70:c5:2c:20: a3:50:58:40:ab:a9:76:7a:b8:e0:80:36:47:dd:2a: af:ea:eb:e8:fb:e1:3d:15:ea:4c:70:1d:bd:48:ee: 6a:11:d4:7a:e7:6c:37:2a:4f:9f:59:5d:63:0a:b5: 85:67:3a:a7:e5:1f:e6:fd:a7:03:bc:f2:f4:39:de: af:dd:c2:b3:ff:b8:47:68:f2:ed:96:1b:be:9f:7c: e4:2d:5f:db:c8:ee:33:11:08:c4:4b:6a:4e:b9:76: a7:0f:ca:4a:cc:a2:ca:85:be:b4:f2:1d:de:7f:42: e7:20:40:a6:ab:80:86:90:8a:22:e6:81:60:9e:0b: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:DF:61:76:1D:BD:E7:33:EA:10:47:D5:4C:6A:1A:28:2D:F5:B7 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:86:49:e3:46:bf:52:20:68:86:d6:43:0b:0c:cd:79:32:98: 0b:ad:12:95:41:60:a9:d1:93:a3:9d:0b:81:65:38:d2:7f:ad: e8:1d:a7:34:7c:90:48:9c:7a:a6:0b:30:9c:eb:20:4b:0e:3f: bb:a6:e5:bc:e2:11:50:2c:da:7e:1e:7d:4b:d4:e5:49:1f:41: a6:e2:f0:90:18:db:bd:49:97:0d:e7:ad:ad:b0:8c:eb:80:f3: 02:82:19:12:f5:bd:fb:2d:2a:dd:a4:cf:25:4e:46:a6:ee:68: 75:9a:20:79:4a:7c:85:cc:c5:e6:69:cb:99:67:87:6c:e8:1c: 3b:29:a2:cd:f2:c7:41:9f:ac:94:56:ad:0c:5b:ee:45:4b:c6: 68:78:d5:7b:93:37:21:97:70:aa:97:a6:78:14:3f:73:38:fd: 92:56:f9:37:51:de:11:26:39:62:30:13:eb:81:02:ee:fa:99: ff:41:d4:fd:f6:c3:ce:9e:c3:a7:23:27:29:0d:04:31:6b:bf: c2:25:b8:16:0e:d3:7e:c3:96:c6:83:01:58:7d:ec:c4:fa:9c: f9:36:16:fd:d2:ae:fa:06:cd:9c:a4:53:c1:30:ee:20:94:27: 69:ac:7a:3b:d0:f1:f7:70:98:37:0c:f1:f7:ab:83:01:f0:df: bf:b0:cb:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+9PCvAI1gJXTWJiEPHkLsyKBL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTA2MTYwMjA2MjBaFw0yNTA2MTkwNzI5MjBaMDMxMTAvBgNV BAMTKEM5OUFERjYxNzYxREJERTczM0VBMTA0N0Q1NEM2QTFBMjgyREY1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCyl7+bcLlCESPGCLMBXOPk2d vgGkcu6tBsI6GRHFzRk1qMsZR5yWRWu6tG6AOp5G1Z0ZimJdEebZFY2qmZo0XW8C hIAbx7QJl06rt1HoGJc8z/oBPaeEl9rKSd2g2xfl0jRLQNWbUjGmSCgGs/W614rJ yMxqpq0MgY30awhCLsqWcMUsIKNQWECrqXZ6uOCANkfdKq/q6+j74T0V6kxwHb1I 7moR1HrnbDcqT59ZXWMKtYVnOqflH+b9pwO88vQ53q/dwrP/uEdo8u2WG76ffOQt X9vI7jMRCMRLak65dqcPykrMosqFvrTyHd5/QucgQKargIaQiiLmgWCeC/3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZrfYXYdvecz6hBH1UxqGigt9bcwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWGSeNGv1IgaIbWQwsMzXkymAutEpVBYKnR k6OdC4FlONJ/regdpzR8kEiceqYLMJzrIEsOP7um5bziEVAs2n4efUvU5UkfQabi 8JAY271Jlw3nra2wjOuA8wKCGRL1vfstKt2kzyVORqbuaHWaIHlKfIXMxeZpy5ln h2zoHDspos3yx0GfrJRWrQxb7kVLxmh41XuTNyGXcKqXpngUP3M4/ZJW+TdR3hEm OWIwE+uBAu76mf9B1P32w86ew6cjJykNBDFrv8IluBYO037DlsaDAVh97MT6nPk2 Fv3SrvoGzZykU8Ew7iCUJ2msejvQ8fdwmDcM8fergwHw37+wywI= -----END CERTIFICATE-----Generated at Mon Jun 16 20:54:57 2025 by rpki-client