$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: 5tKbG/pOO/8LqYXp3sXKfd9InNGxfOizuuF2GKJGUAI= Subject key identifier: 50:25:6C:5D:C6:82:CA:8F:A5:1F:CD:C0:9D:EE:2A:39:CF:8D:7E:F3 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 36632F6AD891DC113F5C8FEEA0E1A6783BA720A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 0478 Signing time: Tue 05 Aug 2025 20:21:13 +0000 Manifest this update: Tue 05 Aug 2025 20:16:13 +0000 Manifest next update: Fri 08 Aug 2025 22:46:13 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: 6ZCqIQuLbCvOQc1b/1CtwlRPbcfkWS+s4fDVR2ehH0Y=) 2: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=) 3: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 6: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:63:2f:6a:d8:91:dc:11:3f:5c:8f:ee:a0:e1:a6:78:3b:a7:20:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Aug 5 20:16:13 2025 GMT Not After : Aug 8 22:46:13 2025 GMT Subject: CN=50256C5DC682CA8FA51FCDC09DEE2A39CF8D7EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:c1:70:ea:31:ea:e0:30:90:4f:92:4f:c5: 78:9c:fe:af:16:6f:92:49:51:d5:ec:22:5f:34:d9: b4:f2:6a:84:84:cf:d8:8a:01:1f:d9:b7:d3:39:c0: b9:43:73:64:d4:51:77:ce:c5:be:a7:f0:18:55:52: be:33:99:62:3c:f1:6e:04:0b:ba:c1:91:3b:67:b5: d0:6e:37:8d:61:4b:87:d7:a5:a2:f8:3a:66:62:d3: 5c:1e:2d:c5:34:89:27:a3:19:eb:7c:25:e6:90:63: fc:80:6e:51:61:f5:52:da:e2:9b:a4:b3:8a:57:74: a9:e9:01:65:72:9d:8c:28:2c:a3:52:12:7f:91:21: bd:13:5f:96:92:c2:6c:7e:be:3c:5e:e0:4a:2f:fb: b6:10:7f:9d:5f:b0:40:6a:51:ce:d8:d2:74:0f:bf: 8e:42:14:b5:49:96:42:af:f7:0c:85:37:10:b9:e0: f5:be:b6:b8:3c:87:69:2a:a3:b4:ff:3d:e4:7b:df: f2:da:90:9c:7c:f4:d2:fb:45:95:ca:91:df:e2:f6: d6:99:60:4a:ce:9e:e1:59:8c:d0:98:7d:f1:1a:23: 57:cc:00:98:cd:04:b5:12:b2:12:a2:5b:a7:67:17: 56:df:81:16:e8:c6:a5:e9:f4:1a:d4:2d:62:a7:f7: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:25:6C:5D:C6:82:CA:8F:A5:1F:CD:C0:9D:EE:2A:39:CF:8D:7E:F3 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:bb:5b:eb:e7:59:f0:93:d0:7f:27:dd:1a:3e:d1:4a:76:ef: ed:ef:b2:c9:45:ff:ca:92:4f:25:3b:49:74:51:6c:12:85:4e: cb:47:ce:15:92:21:81:6f:ca:92:a9:c4:ec:4c:85:9e:41:86: 76:04:ff:87:d2:57:31:86:78:12:91:23:30:7a:95:94:ea:2f: 4c:4f:cc:75:a3:cd:a8:65:9d:3a:69:00:f8:3e:96:7a:06:1e: cb:2e:5b:36:f0:9c:46:e4:47:20:48:5c:d6:9d:32:85:a3:6a: 12:a9:fa:39:54:a9:7e:e0:a5:7c:df:4e:89:8b:14:42:83:32: ae:ea:b3:31:7c:32:97:6d:f3:3d:e6:2e:7f:d5:71:3d:17:0f: 84:64:e3:af:b7:7b:1f:c3:04:9d:2e:31:13:ee:79:14:36:8b: a0:4a:eb:71:a3:3e:59:5e:f8:82:e8:87:07:fa:f5:1e:b1:8b: d3:b5:44:1b:6b:06:08:3e:92:89:f0:39:2c:d4:ac:9f:38:f0: ea:4e:2b:7b:7f:cd:8b:35:20:6a:80:62:45:59:65:11:e9:2a: 6c:cd:a2:cd:16:77:34:2c:d5:17:12:15:83:7a:43:09:1c:d9: 12:3e:a7:08:76:44:c2:9a:38:10:5b:25:3a:59:c9:c6:75:74: 5b:ff:b9:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmMvatiR3BE/XI/uoOGmeDunIKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTA4MDUyMDE2MTNaFw0yNTA4MDgyMjQ2MTNaMDMxMTAvBgNV BAMTKDUwMjU2QzVEQzY4MkNBOEZBNTFGQ0RDMDlERUUyQTM5Q0Y4RDdFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxsFw6jHq4DCQT5JPxXic/q8W b5JJUdXsIl802bTyaoSEz9iKAR/Zt9M5wLlDc2TUUXfOxb6n8BhVUr4zmWI88W4E C7rBkTtntdBuN41hS4fXpaL4OmZi01weLcU0iSejGet8JeaQY/yAblFh9VLa4puk s4pXdKnpAWVynYwoLKNSEn+RIb0TX5aSwmx+vjxe4Eov+7YQf51fsEBqUc7Y0nQP v45CFLVJlkKv9wyFNxC54PW+trg8h2kqo7T/PeR73/LakJx89NL7RZXKkd/i9taZ YErOnuFZjNCYffEaI1fMAJjNBLUSshKiW6dnF1bfgRboxqXp9BrULWKn90J1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUCVsXcaCyo+lH83Ane4qOc+NfvMwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADa7W+vnWfCT0H8n3Ro+0Up27+3vsslF/8qS TyU7SXRRbBKFTstHzhWSIYFvypKpxOxMhZ5BhnYE/4fSVzGGeBKRIzB6lZTqL0xP zHWjzahlnTppAPg+lnoGHssuWzbwnEbkRyBIXNadMoWjahKp+jlUqX7gpXzfTomL FEKDMq7qszF8Mpdt8z3mLn/VcT0XD4Rk46+3ex/DBJ0uMRPueRQ2i6BK63GjPlle +ILohwf69R6xi9O1RBtrBgg+konwOSzUrJ848OpOK3t/zYs1IGqAYkVZZRHpKmzN os0WdzQs1RcSFYN6Qwkc2RI+pwh2RMKaOBBbJTpZycZ1dFv/uYU= -----END CERTIFICATE-----Generated at Thu Aug 7 20:26:15 2025 by rpki-client