$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: PIWsO2xv9PmXensqV+tXLiPIVdkWrAA3eI7yuxue1N0= Subject key identifier: B4:12:77:D1:94:C5:6B:A9:A5:DA:28:22:3F:C7:AC:B8:9C:3B:48:76 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 1B218369CB05115803D1DAE80E78E0B7D31A6F6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 01EF Signing time: Thu 21 Aug 2025 18:42:23 +0000 Manifest this update: Thu 21 Aug 2025 18:37:23 +0000 Manifest next update: Sun 24 Aug 2025 21:36:23 +0000 Files and hashes: 1: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: v7hlU1PL2jaMIBSFOXnRo29rWrNOAWyzkJaR+JkNtTA=) 2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:21:83:69:cb:05:11:58:03:d1:da:e8:0e:78:e0:b7:d3:1a:6f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Aug 21 18:37:23 2025 GMT Not After : Aug 24 21:36:23 2025 GMT Subject: CN=B41277D194C56BA9A5DA28223FC7ACB89C3B4876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:3d:5a:8c:26:11:0b:30:84:52:5a:4e:1f: 32:ee:a8:3e:01:04:bd:ea:c3:9c:9b:af:c1:58:78: ac:b4:67:38:10:36:e0:b7:5c:ff:38:ce:1c:a8:ff: 9c:c7:fa:d3:76:3e:b3:e4:62:b4:a9:f6:37:ea:10: 91:40:28:af:dd:da:13:ff:31:b1:8f:32:ac:eb:08: 57:0b:25:ac:26:90:f0:9e:08:27:92:d1:c4:f4:0d: 07:e0:6a:d3:e5:55:f4:95:69:5b:4c:61:3d:c3:e6: 3a:9a:8b:4c:df:25:3d:9b:d5:6c:94:d0:a6:ba:bc: ae:39:d9:8e:2f:e6:02:cb:7d:d0:fa:54:ea:3d:dc: f2:a5:6c:73:31:7d:e6:21:fd:5f:7b:99:79:c2:ea: 7f:b9:c7:4a:d6:57:74:78:60:fa:58:4e:96:0a:cb: 07:f6:71:60:aa:ca:3f:d7:65:c8:d9:1b:e0:e1:55: 1e:e5:3c:7b:3e:4f:da:05:36:62:55:38:fb:94:47: 5c:87:9d:89:29:e9:4c:0e:38:76:54:ca:19:a9:b4: 62:f2:41:57:6d:3c:ee:8a:9d:ae:db:7d:71:bc:62: d2:90:80:27:b1:a0:93:dd:03:e3:d5:ec:84:64:f2: f6:3d:e7:29:a4:42:64:e4:cd:54:0b:90:2e:67:98: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:12:77:D1:94:C5:6B:A9:A5:DA:28:22:3F:C7:AC:B8:9C:3B:48:76 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e5:f4:9c:6c:c6:df:c0:7f:e4:5f:69:aa:9d:71:51:0c:04: 9d:8b:d9:25:0e:ba:c8:74:ff:4a:d3:80:61:bd:27:0b:d5:1a: ef:1d:fe:f4:ed:a3:24:71:6f:5d:3d:06:22:8f:94:37:45:3e: 79:09:12:81:3b:bc:af:c1:c8:c4:6d:30:20:cd:fc:d1:70:a2: 98:ab:16:79:20:0d:96:af:5a:dd:12:94:15:75:ee:a4:b6:15: 69:ed:db:03:37:af:04:75:5d:77:cd:05:10:66:ce:d9:be:20: 0f:c4:04:9c:63:83:87:8c:34:3d:3b:ef:9e:b5:35:27:c5:6d: 35:ea:2f:d1:6b:0b:b8:6e:28:ec:98:ca:53:14:6f:08:1a:e6: 76:67:e1:a7:4e:24:38:6c:57:4d:87:ee:2c:e5:a4:34:b6:3d: 78:a4:da:bf:40:e7:51:4a:4d:7f:04:cc:e4:5d:39:06:24:3a: 20:e9:68:2c:4b:b6:7c:dc:95:6f:f7:38:49:82:99:19:4a:f7: 08:14:cf:02:8f:f4:33:89:16:7f:22:b0:71:c7:bd:a7:c4:10: f5:05:9a:34:28:d1:1e:5f:5e:b4:6b:4a:88:a7:ed:87:3b:ee: b4:f1:b1:4d:85:8b:87:9d:6b:b5:3c:aa:fa:59:51:de:68:7d: 00:69:2b:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGyGDacsFEVgD0droDnjgt9Mab2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTA4MjExODM3MjNaFw0yNTA4MjQyMTM2MjNaMDMxMTAvBgNV BAMTKEI0MTI3N0QxOTRDNTZCQTlBNURBMjgyMjNGQzdBQ0I4OUMzQjQ4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtj1ajCYRCzCEUlpOHzLuqD4B BL3qw5ybr8FYeKy0ZzgQNuC3XP84zhyo/5zH+tN2PrPkYrSp9jfqEJFAKK/d2hP/ MbGPMqzrCFcLJawmkPCeCCeS0cT0DQfgatPlVfSVaVtMYT3D5jqai0zfJT2b1WyU 0Ka6vK452Y4v5gLLfdD6VOo93PKlbHMxfeYh/V97mXnC6n+5x0rWV3R4YPpYTpYK ywf2cWCqyj/XZcjZG+DhVR7lPHs+T9oFNmJVOPuUR1yHnYkp6UwOOHZUyhmptGLy QVdtPO6Kna7bfXG8YtKQgCexoJPdA+PV7IRk8vY95ymkQmTkzVQLkC5nmAinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtBJ30ZTFa6ml2igiP8esuJw7SHYwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHl9Jxsxt/Af+RfaaqdcVEMBJ2L2SUOush0 /0rTgGG9JwvVGu8d/vTtoyRxb109BiKPlDdFPnkJEoE7vK/ByMRtMCDN/NFwopir FnkgDZavWt0SlBV17qS2FWnt2wM3rwR1XXfNBRBmztm+IA/EBJxjg4eMND077561 NSfFbTXqL9FrC7huKOyYylMUbwga5nZn4adOJDhsV02H7izlpDS2PXik2r9A51FK TX8EzORdOQYkOiDpaCxLtnzclW/3OEmCmRlK9wgUzwKP9DOJFn8isHHHvafEEPUF mjQo0R5fXrRrSoin7Yc77rTxsU2Fi4eda7U8qvpZUd5ofQBpK2Y= -----END CERTIFICATE-----Generated at Sat Aug 23 12:12:51 2025 by rpki-client