$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: G/fc+ostXCTSbqG6EZQQhy2Dhl6p/luSZg+Nzm69nOc= Subject key identifier: 68:6B:FF:6B:DF:20:06:95:D7:70:37:15:B6:F5:B9:2F:63:B2:3A:DB Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 44BB5D5A488E4169182471DD56DC44D9DADC55A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: AE Signing time: Wed 06 Aug 2025 07:51:37 +0000 Manifest this update: Wed 06 Aug 2025 07:46:37 +0000 Manifest next update: Sat 09 Aug 2025 11:32:37 +0000 Files and hashes: 1: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: rl18yQd6wxlyizWU34fOlCBxEyP4AB5Td56nae3pqOU=) 2: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=) 3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bb:5d:5a:48:8e:41:69:18:24:71:dd:56:dc:44:d9:da:dc:55:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Aug 6 07:46:37 2025 GMT Not After : Aug 9 11:32:37 2025 GMT Subject: CN=686BFF6BDF200695D7703715B6F5B92F63B23ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:4c:05:fc:2f:bf:43:f7:1b:0d:4f:5e:5b: 95:3a:4b:66:46:e6:6d:e1:47:fe:75:60:fb:f3:f5: 48:21:9a:47:7b:98:88:bf:6c:5f:2a:e4:ed:36:62: 81:47:7c:c9:b7:3e:0e:27:0f:0e:97:a9:69:61:f4: 0d:31:da:e3:4c:49:ad:a8:27:d4:69:2b:12:83:74: 83:4e:56:7a:88:b5:7a:4a:14:24:17:11:88:d8:23: d4:b1:69:a6:07:d9:ca:b6:46:64:42:87:81:d1:07: 57:df:74:6f:29:e7:aa:a2:29:d8:d5:71:17:74:be: bf:41:b9:60:29:57:4b:73:e4:07:c4:80:19:7d:39: 16:6a:57:e0:55:a4:0a:5b:66:a5:0e:90:58:47:5d: bd:7e:d5:c1:b9:ae:b2:e1:8e:fc:f5:d4:30:06:9a: b2:d9:4d:a7:78:51:c4:a2:26:8b:6c:17:3b:08:b6: 95:10:ae:50:97:9a:2c:3c:a6:4e:70:bc:20:4f:5b: 09:1f:6a:5f:9d:d7:a7:90:06:99:bb:2b:3c:05:81: dd:d2:14:ef:96:9e:30:c1:99:1b:22:c8:c0:b7:2e: 5f:17:79:77:3f:c1:3d:60:df:47:a8:c6:21:e0:f3: 86:75:58:77:24:46:a8:a9:5b:08:7f:2d:30:74:52: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6B:FF:6B:DF:20:06:95:D7:70:37:15:B6:F5:B9:2F:63:B2:3A:DB X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:41:e6:08:c0:ca:da:55:f8:57:6c:cc:af:53:67:04:9f:d9: 52:c9:5f:fa:5c:a5:3c:ad:28:94:c0:06:fe:1c:87:21:9f:fa: b4:24:41:21:50:85:1c:6d:26:7a:34:31:a2:a6:70:2a:7d:d4: 3d:65:84:32:83:0c:40:9d:c6:ea:21:61:01:f1:cc:4a:7a:ce: 8a:bf:04:37:aa:23:f4:5c:01:bc:78:9f:db:0f:92:4f:05:e8: 2b:64:d3:9a:98:82:e7:7e:63:41:4f:84:e1:39:c5:1b:49:bd: 4d:97:6e:04:58:f5:87:fa:55:6b:38:65:9b:a9:8a:c5:e8:aa: a2:88:fd:09:d7:c5:7b:f8:60:50:40:42:c2:50:64:5b:99:62: d3:7d:0f:86:e3:f9:62:a1:13:79:ad:ee:40:00:cc:5b:2b:1b: 5c:7f:13:d5:62:6d:bd:ef:59:0f:df:e7:02:9f:36:22:be:d4: c4:b7:7e:7b:a6:8d:21:56:af:72:77:11:91:0e:54:6b:f8:8a: dd:05:04:71:5f:ca:84:49:1c:22:9b:f0:6a:90:14:bb:f8:45: f4:01:4a:e9:d5:bf:ab:4c:f0:8e:d0:c8:e6:69:94:ce:00:19: c8:e6:a0:d9:0c:3c:2e:06:e6:49:71:f5:98:63:e1:9b:6a:92: 49:ab:79:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLtdWkiOQWkYJHHdVtxE2drcVaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTA4MDYwNzQ2MzdaFw0yNTA4MDkxMTMyMzdaMDMxMTAvBgNV BAMTKDY4NkJGRjZCREYyMDA2OTVENzcwMzcxNUI2RjVCOTJGNjNCMjNBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5UwF/C+/Q/cbDU9eW5U6S2ZG 5m3hR/51YPvz9Ughmkd7mIi/bF8q5O02YoFHfMm3Pg4nDw6XqWlh9A0x2uNMSa2o J9RpKxKDdINOVnqItXpKFCQXEYjYI9SxaaYH2cq2RmRCh4HRB1ffdG8p56qiKdjV cRd0vr9BuWApV0tz5AfEgBl9ORZqV+BVpApbZqUOkFhHXb1+1cG5rrLhjvz11DAG mrLZTad4UcSiJotsFzsItpUQrlCXmiw8pk5wvCBPWwkfal+d16eQBpm7KzwFgd3S FO+WnjDBmRsiyMC3Ll8XeXc/wT1g30eoxiHg84Z1WHckRqipWwh/LTB0UquPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaGv/a98gBpXXcDcVtvW5L2OyOtswHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlB5gjAytpV+FdszK9TZwSf2VLJX/pcpTyt KJTABv4chyGf+rQkQSFQhRxtJno0MaKmcCp91D1lhDKDDECdxuohYQHxzEp6zoq/ BDeqI/RcAbx4n9sPkk8F6Ctk05qYgud+Y0FPhOE5xRtJvU2XbgRY9Yf6VWs4ZZup isXoqqKI/QnXxXv4YFBAQsJQZFuZYtN9D4bj+WKhE3mt7kAAzFsrG1x/E9Vibb3v WQ/f5wKfNiK+1MS3fnumjSFWr3J3EZEOVGv4it0FBHFfyoRJHCKb8GqQFLv4RfQB SunVv6tM8I7QyOZplM4AGcjmoNkMPC4G5klx9Zhj4ZtqkkmreV0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:37 2025 by rpki-client