$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: AObIBBeuESlHrQrLpM7XNAjOyXxQsouRVszq/SneprY= Subject key identifier: 92:51:77:3E:1F:79:AC:8D:1E:E5:B4:53:B0:1A:98:BC:59:79:C8:BE Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 5B5F93911D2CFC097CA1945BE5B180DCCAD6E896 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 01F1 Signing time: Wed 05 Nov 2025 05:33:09 +0000 Manifest this update: Wed 05 Nov 2025 05:28:09 +0000 Manifest next update: Sat 08 Nov 2025 13:58:09 +0000 Files and hashes: 1: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) 2: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: 2iQVibSJqeV3KR3lozVC1HveNVln/GpdGOSHYBpXPYg=) 3: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 13:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5f:93:91:1d:2c:fc:09:7c:a1:94:5b:e5:b1:80:dc:ca:d6:e8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Nov 5 05:28:09 2025 GMT Not After : Nov 8 13:58:09 2025 GMT Subject: CN=9251773E1F79AC8D1EE5B453B01A98BC5979C8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:f5:ad:bb:f0:41:78:2a:da:97:34:f9:62: 73:12:29:9c:ca:23:db:fe:1e:2d:61:a6:d4:5f:b3: 93:7e:0e:5f:4a:cd:72:b2:38:5f:d0:7f:e3:5c:c5: d3:4a:e6:56:fa:97:23:29:54:00:3e:78:07:49:44: 58:32:4a:35:e0:18:51:42:02:0d:6e:7d:45:5c:eb: 94:9f:fb:66:75:36:d5:19:5a:d1:5e:ef:60:87:a6: 77:8c:f8:1a:32:00:38:bb:bc:15:bd:2c:5f:81:3e: f6:4c:ff:3a:97:35:58:76:6a:f8:c5:76:0f:f4:af: fc:eb:7c:4e:88:71:7a:87:3b:41:1b:7b:4f:9d:2f: 8d:c6:d4:ee:65:60:d6:71:de:31:6b:7a:b1:41:10: 62:b3:f4:f5:b1:d1:32:dd:96:e5:74:5e:b7:94:b1: cb:90:f9:37:8b:34:dc:a9:92:d5:d9:5b:3c:bc:37: ae:b3:c8:fd:9b:c8:e9:40:b4:24:19:a6:d2:4b:3c: ab:74:e6:c3:bc:00:48:5c:8e:31:c1:15:1c:90:fc: 06:b0:98:fe:f6:fa:d3:4e:41:d4:a0:bd:5f:f2:91: b9:8f:f1:83:48:f9:d0:ae:09:30:14:13:58:b2:dd: f1:1d:e9:f4:ef:cc:b9:ee:f9:7f:d6:d8:f4:ab:dd: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:51:77:3E:1F:79:AC:8D:1E:E5:B4:53:B0:1A:98:BC:59:79:C8:BE X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:84:95:df:29:51:a1:83:81:1c:4c:0e:99:ad:da:83:3b:5c: 7b:f3:ae:80:41:5f:ad:ed:c3:e2:fd:46:f4:67:b1:b6:c0:65: 97:66:82:cd:a2:c8:a5:56:3c:8f:b3:5f:40:83:41:26:53:a6: be:54:fb:9c:63:fb:04:5a:37:c7:d6:34:ee:52:3b:d4:27:ff: 50:a3:b0:8f:31:e5:b8:7c:d8:05:b8:83:0a:06:0c:48:6c:de: 98:66:90:bd:f8:34:da:67:72:20:bb:62:14:a4:d0:e6:c7:26: cc:ca:8d:d6:74:66:9a:13:b4:25:e9:6e:ff:e7:08:4f:28:ba: 80:04:da:62:40:15:0c:88:e9:58:84:e0:6d:32:e8:1d:32:30: 87:fa:3b:d8:3e:35:66:c9:f4:68:fc:81:19:d5:90:a3:a7:ba: 9a:81:46:cd:02:71:a1:12:70:a4:3f:56:6a:eb:5c:c8:e7:3f: cb:c5:66:ba:86:dc:fc:08:73:b2:25:f1:9b:68:07:4d:e7:80: 43:1e:ad:1b:96:a8:fe:81:f1:e2:c5:23:57:54:2c:90:89:1f: 1b:d3:ba:9c:89:ea:55:d2:af:b0:64:d1:6f:bc:a1:9e:54:ba: bf:49:ce:a6:e2:da:28:2a:59:9a:90:49:dd:c6:72:45:7a:b4: e0:19:0a:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1+TkR0s/Al8oZRb5bGA3MrW6JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTExMDUwNTI4MDlaFw0yNTExMDgxMzU4MDlaMDMxMTAvBgNV BAMTKDkyNTE3NzNFMUY3OUFDOEQxRUU1QjQ1M0IwMUE5OEJDNTk3OUM4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+E/Wtu/BBeCralzT5YnMSKZzK I9v+Hi1hptRfs5N+Dl9KzXKyOF/Qf+NcxdNK5lb6lyMpVAA+eAdJRFgySjXgGFFC Ag1ufUVc65Sf+2Z1NtUZWtFe72CHpneM+BoyADi7vBW9LF+BPvZM/zqXNVh2avjF dg/0r/zrfE6IcXqHO0Ebe0+dL43G1O5lYNZx3jFrerFBEGKz9PWx0TLdluV0XreU scuQ+TeLNNypktXZWzy8N66zyP2byOlAtCQZptJLPKt05sO8AEhcjjHBFRyQ/Aaw mP72+tNOQdSgvV/ykbmP8YNI+dCuCTAUE1iy3fEd6fTvzLnu+X/W2PSr3ZLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklF3Ph95rI0e5bRTsBqYvFl5yL4wHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+Eld8pUaGDgRxMDpmt2oM7XHvzroBBX63t w+L9RvRnsbbAZZdmgs2iyKVWPI+zX0CDQSZTpr5U+5xj+wRaN8fWNO5SO9Qn/1Cj sI8x5bh82AW4gwoGDEhs3phmkL34NNpnciC7YhSk0ObHJszKjdZ0ZpoTtCXpbv/n CE8ouoAE2mJAFQyI6ViE4G0y6B0yMIf6O9g+NWbJ9Gj8gRnVkKOnupqBRs0CcaES cKQ/VmrrXMjnP8vFZrqG3PwIc7Il8ZtoB03ngEMerRuWqP6B8eLFI1dULJCJHxvT upyJ6lXSr7Bk0W+8oZ5Uur9Jzqbi2igqWZqQSd3GckV6tOAZCqM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:51 2025 by rpki-client