$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: lyYFZbhwLzUPgM6IdyF7c5t5LTMC+WGaNu7Bc1Uinck= Subject key identifier: 52:9E:D3:84:FF:2C:F7:89:C5:3E:7A:08:65:32:6F:16:5F:9B:59:32 Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 4754019AD436C03C7EA0610AE047BC09A8C29FF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 01A4 Signing time: Sun 29 Jun 2025 11:11:43 +0000 Manifest this update: Sun 29 Jun 2025 11:06:43 +0000 Manifest next update: Wed 02 Jul 2025 21:46:43 +0000 Files and hashes: 1: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: LUS1aOastG3dbcX5y+SUb8sjbZCCupNUZDZfT1w0LbE=) 2: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: t+BQy4JUViW5bGnyMPshrmJ8tbFXjMhec+0M2rNH2M0=) 3: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) 4: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:54:01:9a:d4:36:c0:3c:7e:a0:61:0a:e0:47:bc:09:a8:c2:9f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Jun 29 11:06:43 2025 GMT Not After : Jul 2 21:46:43 2025 GMT Subject: CN=529ED384FF2CF789C53E7A0865326F165F9B5932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:d9:56:9d:20:76:04:19:29:39:4c:98:40: c6:a3:18:3d:ac:fb:b8:8b:64:48:a0:d0:35:cb:fd: 39:78:68:4f:7a:75:8b:0a:3f:01:70:58:c1:80:f0: b1:08:c3:e3:6f:9d:04:4e:03:3d:43:53:72:f3:02: 59:e2:28:61:4e:e4:0d:7d:27:5d:c9:05:c7:91:d9: b0:c1:a7:d0:7c:34:09:d1:ca:ba:64:3a:c7:6c:df: b5:d0:e5:bd:43:00:22:a7:c4:9b:cc:3b:b1:69:34: 98:fa:21:54:0f:fd:36:3b:9a:8b:4d:9a:2d:3c:79: 78:5e:de:b8:71:f2:51:c7:d1:5e:9d:5b:79:24:32: f0:ea:db:36:68:cc:9c:1d:8e:b5:9d:e6:e0:a0:25: bf:a2:c3:19:b8:4a:e5:a0:3b:ff:0a:f4:26:a3:ed: 31:07:fb:d8:dd:32:28:19:a5:4a:c3:4b:93:7b:78: 7f:1c:a1:69:b3:c3:19:d2:69:93:c0:bd:86:51:ee: b1:c5:59:2e:df:98:4d:79:b3:b6:b1:f0:a0:8d:66: 34:7e:27:07:88:10:05:d0:7f:29:aa:de:f3:21:b8: 38:e4:b5:82:77:c2:08:d5:81:6c:12:12:ad:0d:b9: 91:d5:ae:94:37:b2:93:05:0c:f2:ec:28:ea:60:df: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9E:D3:84:FF:2C:F7:89:C5:3E:7A:08:65:32:6F:16:5F:9B:59:32 X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b5:8b:8f:97:40:d6:50:1d:c4:a8:d6:b9:b9:18:15:87:07: 37:9d:3b:e5:80:10:a3:0c:ce:8c:0e:49:a2:cd:8c:40:68:a9: 49:5c:de:8c:30:84:c8:95:e3:51:11:2f:3f:5b:13:b7:dc:01: df:54:eb:72:2f:8d:5e:67:e9:05:0c:d6:c2:f2:35:b8:b1:31: bf:09:ff:45:b5:67:18:ee:25:36:46:87:87:1c:b4:50:86:44: 6e:51:2c:ef:95:23:e1:37:02:41:55:88:62:e0:6f:50:7f:5e: dc:64:69:fe:d6:15:90:36:1e:c6:7a:a0:08:f4:a2:e1:ce:1d: b5:12:8c:0f:15:ca:24:4b:27:df:36:5a:27:bb:8b:4e:39:b8: e7:39:c7:6d:3b:6d:7a:d7:4d:24:20:8a:99:fa:01:f8:75:bd: a7:dc:3c:20:49:12:70:68:f9:dc:48:0d:88:47:0f:ee:16:24: d1:4a:e8:ed:a1:31:0a:77:83:35:82:17:96:7b:f1:2a:09:f5: c1:cd:e8:3f:d3:1c:7a:18:6d:68:af:8f:b6:da:73:59:b3:cf: fd:ed:ab:84:81:37:d7:5e:d7:59:d2:40:9b:69:d1:b8:3c:13: 2c:ab:69:f4:5a:a8:2a:a9:e3:ac:09:e1:3a:38:3b:db:3c:e8: 17:0f:ec:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1QBmtQ2wDx+oGEK4Ee8CajCn/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTA2MjkxMTA2NDNaFw0yNTA3MDIyMTQ2NDNaMDMxMTAvBgNV BAMTKDUyOUVEMzg0RkYyQ0Y3ODlDNTNFN0EwODY1MzI2RjE2NUY5QjU5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53NlWnSB2BBkpOUyYQMajGD2s +7iLZEig0DXL/Tl4aE96dYsKPwFwWMGA8LEIw+NvnQROAz1DU3LzAlniKGFO5A19 J13JBceR2bDBp9B8NAnRyrpkOsds37XQ5b1DACKnxJvMO7FpNJj6IVQP/TY7motN mi08eXhe3rhx8lHH0V6dW3kkMvDq2zZozJwdjrWd5uCgJb+iwxm4SuWgO/8K9Caj 7TEH+9jdMigZpUrDS5N7eH8coWmzwxnSaZPAvYZR7rHFWS7fmE15s7ax8KCNZjR+ JweIEAXQfymq3vMhuDjktYJ3wgjVgWwSEq0NuZHVrpQ3spMFDPLsKOpg3//5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUp7ThP8s94nFPnoIZTJvFl+bWTIwHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm1i4+XQNZQHcSo1rm5GBWHBzedO+WAEKMM zowOSaLNjEBoqUlc3owwhMiV41ERLz9bE7fcAd9U63IvjV5n6QUM1sLyNbixMb8J /0W1ZxjuJTZGh4cctFCGRG5RLO+VI+E3AkFViGLgb1B/Xtxkaf7WFZA2HsZ6oAj0 ouHOHbUSjA8VyiRLJ982Wie7i045uOc5x207bXrXTSQgipn6Afh1vafcPCBJEnBo +dxIDYhHD+4WJNFK6O2hMQp3gzWCF5Z78SoJ9cHN6D/THHoYbWivj7bac1mzz/3t q4SBN9de11nSQJtp0bg8EyyrafRaqCqp46wJ4To4O9s86BcP7NE= -----END CERTIFICATE-----Generated at Mon Jun 30 07:18:05 2025 by rpki-client