$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: cKE+EO+4PS5oR2ek4KRPrkAWMZLiDxQE9kGA15rPLbY= Subject key identifier: 72:FB:FF:FE:5B:00:6E:AB:81:CF:AE:78:E6:7B:11:2C:B0:90:48:ED Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 4D140AFB435E6689FF0AD3E6BA47390A42EF79D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 01C7 Signing time: Wed 06 Aug 2025 16:41:07 +0000 Manifest this update: Wed 06 Aug 2025 16:36:07 +0000 Manifest next update: Sat 09 Aug 2025 20:10:07 +0000 Files and hashes: 1: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: EQ47BFmree/6wdv1GDRqzCKoMY+j/H0w8lR2qn9uxgM=) 2: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: ywvNrlRkjj3E68qqL1nH0Uv7d8cgYHdCOtG+Et4Dxcg=) 3: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: PnooExtXULQNtC7kT+QlUO9aWVZkNas5LdJZ6cSCIfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:14:0a:fb:43:5e:66:89:ff:0a:d3:e6:ba:47:39:0a:42:ef:79:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Aug 6 16:36:07 2025 GMT Not After : Aug 9 20:10:07 2025 GMT Subject: CN=72FBFFFE5B006EAB81CFAE78E67B112CB09048ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:d1:cf:14:b0:86:61:ce:0a:4e:f5:da:08: 66:92:1e:db:55:92:41:57:13:3c:f9:02:95:43:d8: 7e:19:ae:92:dc:bf:2c:f3:67:86:86:03:1f:ca:d9: b2:84:e1:e4:f7:df:cc:a6:a3:78:86:ca:5e:f5:02: e9:5d:bb:6b:71:1b:78:fd:34:5b:89:ce:31:3d:7e: 28:dd:81:b8:f8:11:b6:0b:c1:33:70:25:2e:5f:9a: a9:40:98:3d:44:38:66:c2:8c:07:53:6e:d3:01:f4: 5d:3a:1a:c3:33:67:2d:7f:97:23:d9:5a:d9:62:05: 0b:85:74:98:a8:80:73:68:73:aa:92:9d:91:3d:45: e7:f9:f8:10:c7:0d:49:3e:86:cd:32:52:d6:8a:8b: 59:75:db:4c:e1:f0:bb:dc:ec:65:d1:af:4e:04:b4: de:fc:67:85:2f:51:fd:b5:4b:a7:d8:b1:a2:32:60: 86:17:43:6d:97:1d:ca:37:7f:f6:61:25:ee:89:d4: 7d:ba:50:a3:9a:ce:38:bf:be:a8:86:da:2c:21:7c: 25:de:4b:fe:c4:7d:b8:10:42:a5:47:bf:5e:4a:e0: 11:f4:f0:98:80:19:4f:94:e3:3c:a1:c5:24:8c:f4: 54:e4:38:1b:a9:1f:df:a6:66:e7:2a:ed:61:a4:2c: 1e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FB:FF:FE:5B:00:6E:AB:81:CF:AE:78:E6:7B:11:2C:B0:90:48:ED X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:79:9f:f7:80:83:82:72:ad:f0:94:39:90:88:6e:5e:9b:d6: dd:64:7a:48:b1:70:c9:ed:f5:d8:54:d0:f8:b9:2f:11:cf:97: d2:e8:85:50:a5:81:ff:0e:ba:3c:59:7f:64:04:fd:21:a7:7d: 62:c2:55:22:63:60:38:0d:d2:85:b4:ea:13:33:72:60:85:a8: dc:0e:84:1a:df:6d:31:43:cd:ec:79:61:81:cc:42:cd:5e:be: d1:5a:21:30:0d:98:ed:f2:8c:1e:79:8f:1a:52:77:1e:94:5e: 47:4c:e9:bd:41:69:df:fc:5c:5b:c7:75:61:48:9d:75:49:94: 20:87:45:d9:6d:63:07:c0:96:40:f6:3c:39:13:df:ac:62:da: 28:f1:c7:6a:7d:2c:2a:b8:da:e8:2e:9b:16:a1:3b:f8:98:f1: c7:0d:6a:9e:d9:5d:86:46:b3:7d:fa:17:98:7e:fe:22:42:7d: da:42:b7:5a:24:78:36:b8:02:f5:b5:38:11:2e:51:58:0c:64: 0d:54:df:d7:11:26:2b:82:dd:29:b5:e9:a5:3d:a6:b7:61:18: 78:07:24:6a:c3:6e:10:86:9a:74:f4:5b:04:f5:36:c3:66:e0: 41:79:69:d7:9d:d2:c2:64:aa:9c:13:8c:6f:8c:bd:4d:25:ba: ba:d0:e8:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRQK+0NeZon/CtPmukc5CkLvedUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTA4MDYxNjM2MDdaFw0yNTA4MDkyMDEwMDdaMDMxMTAvBgNV BAMTKDcyRkJGRkZFNUIwMDZFQUI4MUNGQUU3OEU2N0IxMTJDQjA5MDQ4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5dHPFLCGYc4KTvXaCGaSHttV kkFXEzz5ApVD2H4ZrpLcvyzzZ4aGAx/K2bKE4eT338ymo3iGyl71Auldu2txG3j9 NFuJzjE9fijdgbj4EbYLwTNwJS5fmqlAmD1EOGbCjAdTbtMB9F06GsMzZy1/lyPZ WtliBQuFdJiogHNoc6qSnZE9Ref5+BDHDUk+hs0yUtaKi1l120zh8Lvc7GXRr04E tN78Z4UvUf21S6fYsaIyYIYXQ22XHco3f/ZhJe6J1H26UKOazji/vqiG2iwhfCXe S/7EfbgQQqVHv15K4BH08JiAGU+U4zyhxSSM9FTkOBupH9+mZucq7WGkLB7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcvv//lsAbquBz6545nsRLLCQSO0wHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN5n/eAg4JyrfCUOZCIbl6b1t1kekixcMnt 9dhU0Pi5LxHPl9LohVClgf8OujxZf2QE/SGnfWLCVSJjYDgN0oW06hMzcmCFqNwO hBrfbTFDzex5YYHMQs1evtFaITANmO3yjB55jxpSdx6UXkdM6b1Bad/8XFvHdWFI nXVJlCCHRdltYwfAlkD2PDkT36xi2ijxx2p9LCq42ugumxahO/iY8ccNap7ZXYZG s336F5h+/iJCfdpCt1okeDa4AvW1OBEuUVgMZA1U39cRJiuC3Sm16aU9prdhGHgH JGrDbhCGmnT0WwT1NsNm4EF5aded0sJkqpwTjG+MvU0lurrQ6H4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:02 2025 by rpki-client