$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: K+PT3/fW5s9LqADW7+TmK0jYgSz7qopt9wgzH3BmHIo= Subject key identifier: B7:18:10:B3:2D:55:DE:0F:98:BF:8F:E1:1F:3D:B6:9B:B6:01:24:90 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 78C9346738F7CF68A0BC3BFAC5950358254656E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 01D8 Signing time: Mon 30 Jun 2025 21:02:20 +0000 Manifest this update: Mon 30 Jun 2025 20:57:20 +0000 Manifest next update: Thu 03 Jul 2025 23:53:20 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0=) 2: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: ltssomB5uO6tJ1YRYphTp76FRN37vZiBtR1K0rpY6Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c9:34:67:38:f7:cf:68:a0:bc:3b:fa:c5:95:03:58:25:46:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Jun 30 20:57:20 2025 GMT Not After : Jul 3 23:53:20 2025 GMT Subject: CN=B71810B32D55DE0F98BF8FE11F3DB69BB6012490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:30:ed:c0:9d:18:3c:13:1d:ba:92:03:e4: e5:37:4c:8d:21:85:60:51:e2:90:4f:32:33:24:32: cc:f3:97:e8:3a:f0:74:f6:e2:b0:c3:5d:01:23:02: 9d:c6:ce:b6:c7:43:84:4b:2a:31:a1:bf:26:f1:48: cf:d2:4f:31:16:42:83:65:3d:e6:14:41:0c:a5:fe: 38:dd:56:15:bf:3e:bb:f1:0a:5f:a8:d3:4a:0d:3c: 06:83:f0:6c:74:22:22:2f:d2:e1:60:33:c7:b2:b5: 6b:94:4a:ed:62:78:72:fb:a0:b0:02:d7:8a:bf:28: 99:c0:f2:94:fc:98:33:f6:f0:73:0a:90:76:f0:7b: ee:7c:8b:e8:72:69:51:fd:72:15:4a:c4:b4:71:72: 57:bb:22:17:10:d3:a4:c0:91:71:14:87:45:07:30: 76:32:6a:21:15:88:cb:fc:fb:9c:78:f0:19:93:2e: f2:b0:3a:83:d3:64:54:55:d8:af:d7:33:a0:e4:91: 60:0f:af:6a:22:84:a2:2c:98:5d:a5:ee:3e:f2:e0: f2:bb:49:ab:63:51:ed:28:96:97:eb:af:9e:b4:7d: 48:89:c8:e7:c9:c5:c7:f2:a7:92:60:f3:88:92:d9: 00:84:ff:6c:46:06:76:2c:35:da:22:5a:b4:33:72: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:18:10:B3:2D:55:DE:0F:98:BF:8F:E1:1F:3D:B6:9B:B6:01:24:90 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4c:5f:c7:02:0f:6f:af:7c:15:26:71:ed:10:bb:76:83:51: de:74:22:77:32:fe:14:f6:90:7e:bc:76:c8:61:d8:6b:dc:63: 73:1f:e6:05:6c:47:71:4a:b6:e3:3e:bb:2b:ad:ba:a0:fa:ee: 13:2a:4a:30:89:42:c4:95:f6:2c:3d:da:cd:96:ca:6b:94:14: 75:76:6d:36:d9:9c:96:ac:dc:12:cb:5d:6c:06:6b:ee:6c:5b: 16:d8:20:b5:d8:ab:21:fe:bd:f4:3f:e0:7d:5b:c9:c5:a4:14: 38:a4:da:ca:11:87:b6:93:eb:20:bd:0e:20:61:e2:39:8e:93: f1:70:de:5c:f2:33:77:59:83:c8:33:55:bc:bb:98:79:04:e2: c9:6b:b2:f9:c0:cc:c5:bf:3d:6a:67:cf:62:a3:4b:d6:f0:fd: 80:89:ec:2c:3a:e9:f7:bb:69:9a:12:aa:f6:31:ad:77:1d:50: e6:51:38:3f:71:0e:6c:35:be:3c:8b:3f:d6:3b:fd:32:34:20: a1:34:54:67:30:cb:12:53:10:f4:6b:f9:6e:a0:21:35:86:88: 3f:b3:9e:a3:b3:c6:b9:a8:a7:85:21:62:3c:0b:0e:23:d2:5d: bc:90:2e:9e:4d:8b:ba:f6:2b:a5:b7:02:cb:41:ac:ea:00:cc: 6d:52:eb:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMk0Zzj3z2igvDv6xZUDWCVGVuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTA2MzAyMDU3MjBaFw0yNTA3MDMyMzUzMjBaMDMxMTAvBgNV BAMTKEI3MTgxMEIzMkQ1NURFMEY5OEJGOEZFMTFGM0RCNjlCQjYwMTI0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cTDtwJ0YPBMdupID5OU3TI0h hWBR4pBPMjMkMszzl+g68HT24rDDXQEjAp3GzrbHQ4RLKjGhvybxSM/STzEWQoNl PeYUQQyl/jjdVhW/PrvxCl+o00oNPAaD8Gx0IiIv0uFgM8eytWuUSu1ieHL7oLAC 14q/KJnA8pT8mDP28HMKkHbwe+58i+hyaVH9chVKxLRxcle7IhcQ06TAkXEUh0UH MHYyaiEViMv8+5x48BmTLvKwOoPTZFRV2K/XM6DkkWAPr2oihKIsmF2l7j7y4PK7 SatjUe0olpfrr560fUiJyOfJxcfyp5Jg84iS2QCE/2xGBnYsNdoiWrQzcrOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtxgQsy1V3g+Yv4/hHz22m7YBJJAwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5MX8cCD2+vfBUmce0Qu3aDUd50Incy/hT2 kH68dshh2GvcY3Mf5gVsR3FKtuM+uyutuqD67hMqSjCJQsSV9iw92s2WymuUFHV2 bTbZnJas3BLLXWwGa+5sWxbYILXYqyH+vfQ/4H1bycWkFDik2soRh7aT6yC9DiBh 4jmOk/Fw3lzyM3dZg8gzVby7mHkE4slrsvnAzMW/PWpnz2KjS9bw/YCJ7Cw66fe7 aZoSqvYxrXcdUOZROD9xDmw1vjyLP9Y7/TI0IKE0VGcwyxJTEPRr+W6gITWGiD+z nqOzxrmop4UhYjwLDiPSXbyQLp5Ni7r2K6W3AstBrOoAzG1S6xs= -----END CERTIFICATE-----Generated at Tue Jul 1 01:57:22 2025 by rpki-client